CVEvulnerability
CVE-2016-1340
8.4 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-04-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.4 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain privileges via crafted libclimeta.so filename arguments, aka Bug ID CSCux68837.
Affected configurations
• cisco unified computing system platform emulator 2.5\(2\)ts4
• cisco unified computing system platform emulator 3.0\(2c\)a
• cisco unified computing system platform emulator 3.0\(2c\)ts9
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160414-ucspe2 Vendor Advisory
- http://www.securitytracker.com/id/1035582 Third Party Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160414-ucspe2 Vendor Advisory
- http://www.securitytracker.com/id/1035582 Third Party Advisory