Lucene search

[email protected]CVE-2014-2543

HistoryApr 08, 2014 - 11:47 p.m.

CVE-2014-2543

2014-04-0823:47:28

CWE-119

[email protected]

web.nvd.nist.gov

cve-2014-2543

buffer overflow

tibco rendezvous

rendezvous daemon

rendezvous routing daemon

rendezvous secure daemon

remote code execution

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.034 Low

EPSS

Percentile

91.5%

JSON

Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to execute arbitrary code by leveraging access to a directly connected client and transmitting crafted data.

Affected configurations

NVD

Node

tibcorendezvousRange≤8.4.1

tibcorendezvousMatch7.4.11

tibcorendezvousMatch7.5.1

tibcorendezvousMatch7.5.2

tibcorendezvousMatch7.5.3

tibcorendezvousMatch7.5.4

tibcorendezvousMatch8.2.1

tibcorendezvousMatch8.3.0

tibcorendezvousMatch8.3.1

tibcorendezvousMatch8.10

tibcosubstantiation_esRange≤2.8.0

tibcomessaging_applianceRange≤8.7.0

CPENameOperatorVersion
tibco:rendezvoustibco rendezvousle8.4.1
tibco:rendezvoustibco rendezvouseq7.4.11
tibco:rendezvoustibco rendezvouseq7.5.1
tibco:rendezvoustibco rendezvouseq7.5.2
tibco:rendezvoustibco rendezvouseq7.5.3
tibco:rendezvoustibco rendezvouseq7.5.4
tibco:rendezvoustibco rendezvouseq8.2.1
tibco:rendezvoustibco rendezvouseq8.3.0
tibco:rendezvoustibco rendezvouseq8.3.1
tibco:rendezvoustibco rendezvouseq8.10

CPE	Name	Operator	Version
tibco:rendezvous	tibco rendezvous	le	8.4.1
tibco:rendezvous	tibco rendezvous	eq	7.4.11
tibco:rendezvous	tibco rendezvous	eq	7.5.1
tibco:rendezvous	tibco rendezvous	eq	7.5.2
tibco:rendezvous	tibco rendezvous	eq	7.5.3
tibco:rendezvous	tibco rendezvous	eq	7.5.4
tibco:rendezvous	tibco rendezvous	eq	8.2.1
tibco:rendezvous	tibco rendezvous	eq	8.3.0
tibco:rendezvous	tibco rendezvous	eq	8.3.1
tibco:rendezvous	tibco rendezvous	eq	8.10

Rows per page:

1-10 of 121

References

www.securityfocus.com/bid/66744

www.securitytracker.com/id/1030070

www.tibco.com/mk/advisory.jsp

www.tibco.com/multimedia/rendezvous_advisory_20140408_tcm8-20763.txt

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.034 Low

EPSS

Percentile

91.5%

JSON

Related for CVE-2014-2543

cvelist1 prion1 nvd1