AlienVault Unified Security Management Heap Based Buffer Overflow Vulnerability

Bugtraq ID:	99897
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 21 2017 12:00AM
Updated:	Jul 21 2017 12:00AM
Credit:	62600BCA031B9EB5CB4A74ADDDD6771E
Vulnerable:	AlienVault Unified Security Management 0
Not Vulnerable:

AlienVault Unified Security Management Heap Based Buffer Overflow Vulnerability

AlienVault Unified Security Management is prone to a heap-based buffer-overflow vulnerability because it fails to properly bounds check user-supplied data before copying it into an insufficiently sized buffer.

Attackers can exploit this issue to execute arbitrary code within the context of affected application or cause denial-of-service condition.

AlienVault Unified Security Management Heap Based Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

AlienVault Unified Security Management Heap Based Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

AlienVault Unified Security Management Heap Based Buffer Overflow Vulnerability

References:

• Alienvault Homepage (Alienvault)
  
• Security Advisory - AlienVault v5.3.5 addresses 18 vulnerabilities (alienvault)
  
• ZDI-17-492: AlienVault Unified Security Management nfcapd Process_ipfix_template (ZDI)