CVE-2015-8522

critical
Published 2016-04-05 · Modified 2026-05-06
CVSS v3
9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VIR risk
9.8

Description

Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a crafted command, a different vulnerability than CVE-2015-8519, CVE-2015-8520, and CVE-2015-8521.

Predictions

Exploit likelihood
97%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact

VendorProductVersionsFixed
ibm ibmtivoli_storage_manager_fastback5.5.0
ibm ibmtivoli_storage_manager_fastback6.1.0
ibm ibmtivoli_storage_manager_fastback6.1.0.1
ibm ibmtivoli_storage_manager_fastback6.1.1
ibm ibmtivoli_storage_manager_fastback6.1.1.0
ibm ibmtivoli_storage_manager_fastback6.1.2
ibm ibmtivoli_storage_manager_fastback6.1.2.0
ibm ibmtivoli_storage_manager_fastback6.1.3
ibm ibmtivoli_storage_manager_fastback6.1.3.0
ibm ibmtivoli_storage_manager_fastback6.1.4
ibm ibmtivoli_storage_manager_fastback6.1.4.0
ibm ibmtivoli_storage_manager_fastback6.1.5
ibm ibmtivoli_storage_manager_fastback6.1.5.0
ibm ibmtivoli_storage_manager_fastback6.1.5.2
ibm ibmtivoli_storage_manager_fastback6.1.6
ibm ibmtivoli_storage_manager_fastback6.1.6.0
ibm ibmtivoli_storage_manager_fastback6.1.6.1
ibm ibmtivoli_storage_manager_fastback6.1.6.2
ibm ibmtivoli_storage_manager_fastback6.1.7
ibm ibmtivoli_storage_manager_fastback6.1.7.0
ibm ibmtivoli_storage_manager_fastback6.1.7.1
ibm ibmtivoli_storage_manager_fastback6.1.7.2
ibm ibmtivoli_storage_manager_fastback6.1.8
ibm ibmtivoli_storage_manager_fastback6.1.8.0
ibm ibmtivoli_storage_manager_fastback6.1.9
ibm ibmtivoli_storage_manager_fastback6.1.9.0
ibm ibmtivoli_storage_manager_fastback6.1.9.1
ibm ibmtivoli_storage_manager_fastback6.1.10
ibm ibmtivoli_storage_manager_fastback6.1.10.0
ibm ibmtivoli_storage_manager_fastback6.1.10.1
ibm ibmtivoli_storage_manager_fastback6.1.11
ibm ibmtivoli_storage_manager_fastback6.1.11.0
ibm ibmtivoli_storage_manager_fastback6.1.11.1
ibm ibmtivoli_storage_manager_fastback6.1.12
ibm ibmtivoli_storage_manager_fastback6.1.12.1

References

CWEs

CWE-119

💬 Discuss CVE-2015-8522 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.