CVE-2017-11757

CVE-2017-11757 describes a heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13. The issue occurs in the _srvLnaConnectMP1 function and is triggered by crafted traffic to TCP port 1583 after the Server-Client encryption-key exchange. The underlying cause is an integer underflow ...