Lucene search

[email protected]CVE-2015-4555

HistoryAug 30, 2015 - 2:59 p.m.

CVE-2015-4555

2015-08-3014:59:02

[email protected]

web.nvd.nist.gov

cve-2015-4555

buffer overflow

tibco rendezvous

rendezvous network server

substation es

messaging appliance

denial of service

arbitrary code execution

8.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.035 Low

EPSS

Percentile

91.5%

JSON

Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, and Messaging Appliance before 8.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the Rendezvous Daemon (rvd), Routing Daemon (rvrd), Secure Daemon (rvsd), Secure Routing Daemon (rvsrd), Gateway Daemon (rvgd), Daemon Adapter (rvda), Cache (rvcache), Agent (rva), and Relay Agent (rvrad) components.

Affected configurations

NVD

Node

tibcomessaging_applianceRange≤8.7.1

tibcorendezvousRange≤8.4.3

tibcorendezvous_network_serverRange≤1.1.0

tibcosubstation_esRange≤2.8.1

CPENameOperatorVersion
tibco:messaging_appliancetibco messaging appliancele8.7.1
tibco:rendezvoustibco rendezvousle8.4.3
tibco:rendezvous_network_servertibco rendezvous network serverle1.1.0
tibco:substation_estibco substation esle2.8.1

CPE	Name	Operator	Version
tibco:messaging_appliance	tibco messaging appliance	le	8.7.1
tibco:rendezvous	tibco rendezvous	le	8.4.3
tibco:rendezvous_network_server	tibco rendezvous network server	le	1.1.0
tibco:substation_es	tibco substation es	le	2.8.1

References

www.securitytracker.com/id/1033677

www.tibco.com/assets/blt18493dc775c50c09/2015-002-advisory.txt

www.tibco.com/mk/advisory.jsp

8.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.035 Low

EPSS

Percentile

91.5%

JSON

Related for CVE-2015-4555

prion1 cvelist1 nvd1