CVE-2017-9003

{"id": "CVE-2017-9003", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-08-06T20:29:01.383", "references": [{"url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-006.txt", "tags": ["Vendor Advisory"], "source": "security-alert@hpe.com"}, {"url": "http://www.securitytracker.com/id/1039580", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security-alert@hpe.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort, it is possible these vulnerabilities could lead to the ability to execute arbitrary code - remote code execution has not yet been confirmed."}, {"lang": "es", "value": "Est\u00e1n presentes m\u00faltiples errores de corrupci\u00f3n de memoria en ArubaOS, que podr\u00edan permitir que un usuario no autenticado provoque el cierre inesperado de los procesos de ArubaOS. Con el suficiente tiempo y esfuerzo, es posible que estas vulnerabilidades conduzcan a la capacidad de ejecutar c\u00f3digo arbitrario; la ejecuci\u00f3n remota de c\u00f3digo no se ha confirmado todav\u00eda."}], "lastModified": "2018-10-18T13:32:33.957", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hp:arubaos:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8AF0A755-F7BC-4EF5-AFB8-124614B1F172"}], "operator": "OR"}]}], "sourceIdentifier": "security-alert@hpe.com"}