CVEvulnerability

CVE-2015-4049

6.8 MEDIUM Published 2017-02-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-02-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.8 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS 2.0 ([email protected])
5.6 MEDIUM — AV:N/AC:H/Au:S/C:N/I:P/A:C
Weaknesses
CWE-119

Description

Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service (data corruption or system crash) via vectors related to using program operators during EPSILON (level 5) based codefiles at peak memory usage, which triggers CPM stack corruption.

Affected configurations

• unisys mcp-firmware 40.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References