CVEvulnerability
CVE-2017-9003
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-08-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-119
Description
Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort, it is possible these vulnerabilities could lead to the ability to execute arbitrary code - remote code execution has not yet been confirmed.
Affected configurations
• hpe arubaos
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-006.txt Vendor Advisory
- http://www.securitytracker.com/id/1039580 Third Party Advisory, VDB Entry
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-006.txt Vendor Advisory
- http://www.securitytracker.com/id/1039580 Third Party Advisory, VDB Entry