CVEvulnerability

CVE-2016-9570

7.5 HIGH Published 2018-02-12 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2018-02-12
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses: CWE-125, CWE-476

Description

cb.exe in Carbon Black 5.1.1.60603 allows attackers to cause a denial of service (out-of-bounds read, invalid pointer dereference, and application crash) by leveraging access to the NetMon named pipe.

Affected configurations

• carbonblack carbon black 5.1.1.60603

Weakness · CWE (2)

CWE-125 Out-of-bounds Read weakness
CWE-476 NULL Pointer Dereference weakness

References

https://labs.nettitude.com/blog/carbon-black-security-advisories-cve-2016-9570-cve-2016-9568-and-cve-2016-9569/ Third Party Advisory
https://labs.nettitude.com/blog/carbon-black-security-advisories-cve-2016-9570-cve-2016-9568-and-cve-2016-9569/ Third Party Advisory

CVE-2016-9570

Description

Affected configurations

Related

Weakness · CWE (2)

References