CVEvulnerability
CVE-2014-2543
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-04-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to execute arbitrary code by leveraging access to a directly connected client and transmitting crafted data.
Affected configurations
• tibco rendezvous (<= 8.4.1)
• tibco rendezvous 7.4.11
• tibco rendezvous 7.5.1
• tibco rendezvous 7.5.2
• tibco rendezvous 7.5.3
• tibco rendezvous 7.5.4
• tibco rendezvous 8.2.1
• tibco rendezvous 8.3.0
• tibco rendezvous 8.3.1
• tibco rendezvous 8.10
• tibco substantiation es (<= 2.8.0)
• tibco messaging appliance (<= 8.7.0)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/66744 www.securityfocus.com
- http://www.securitytracker.com/id/1030070 www.securitytracker.com
- http://www.tibco.com/mk/advisory.jsp Vendor Advisory
- http://www.tibco.com/multimedia/rendezvous_advisory_20140408_tcm8-20763.txt Vendor Advisory
- http://www.securityfocus.com/bid/66744 www.securityfocus.com
- http://www.securitytracker.com/id/1030070 www.securitytracker.com
- http://www.tibco.com/mk/advisory.jsp Vendor Advisory
- http://www.tibco.com/multimedia/rendezvous_advisory_20140408_tcm8-20763.txt Vendor Advisory