NVD Vulnerability Detail

CVE-2017-8895

Summary	In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerability in multiple agents that can lead to a denial of service or remote code execution. An unauthenticated attacker can use this vulnerability to crash the agent or potentially take control of the agent process and then the system it is running on.
Publication Date	May 11, 2017, 6:29 a.m.
Registration Date	Jan. 26, 2021, 1:30 p.m.
Last Update	Nov. 21, 2024, 12:34 p.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://www.securityfocus.com/bid/98386	Third Party Advisory VDB Entry
2	http://www.securityfocus.com/bid/98386	Third Party Advisory VDB Entry
3	http://www.securitytracker.com/id/1038561	Third Party Advisory VDB Entry
4	http://www.securitytracker.com/id/1038561	Third Party Advisory VDB Entry
5	https://www.exploit-db.com/exploits/42282/	Third Party Advisory VDB Entry
6	https://www.exploit-db.com/exploits/42282/	Third Party Advisory VDB Entry
7	https://www.veritas.com/content/support/en_US/security/VTS17-006.html#Issue1	Patch Vendor Advisory
8	https://www.veritas.com/content/support/en_US/security/VTS17-006.html#Issue1	Patch Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-416	解放済みメモリの使用	https://cwe.mitre.org/data/definitions/416.html

JVN Vulnerability Information

Veritas Backup Exec における解放済みメモリの使用に関する脆弱性

Title	Veritas Backup Exec における解放済みメモリの使用に関する脆弱性
Summary	Veritas Backup Exec には、解放済みメモリの使用に関する脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	May 10, 2017, midnight
Registration Date	June 13, 2017, 4:45 p.m.
Last Update	July 11, 2017, 2:56 p.m.

Affected System

日立

JP1/VERITAS Backup Exec 15

JP1/VERITAS Backup Exec 2012

JP1/VERITAS Backup Exec 2014

JP1/VERITAS NetBackup 7.7

JP1/VERITAS NetBackup 8.0

ベリタス

Backup Exec 15 build 14.2.1180.3160 未満の 15

Backup Exec 16 FP1 未満の 16

Backup Exec 2014 build 14.1.1187.1126 未満の 2014

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2017-8895	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8895
National Vulnerability Database (NVD)
2	CVE-2017-8895	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-8895

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-416	https://cwe.mitre.org/data/definitions/416.html

ベンダー情報

No	Name	URL
Hitachi Software Vulnerability Information
1	hitachi-sec-2017-117	http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-117/index.html
Security Response Advisory
2	VTS17-006: Issue #1	https://www.veritas.com/content/support/en_US/security/VTS17-006.html#Issue1
ソフトウェア製品セキュリティ情報
3	hitachi-sec-2017-117	http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2017-117/index.html

Change Log

No	Changed Details	Date of change
0	[2017年06月13日] 掲載 [2017年07月11日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：日立 (hitachi-sec-2017-117) を追加	Feb. 17, 2018, 10:37 a.m.