Hpe Nonstop Debug Utilities
Monthly
An authenticated local user on an HPE NonStop system can trigger a heap buffer overflow in the HPE NonStop Debug Utilities to corrupt a saved resume-execution address, potentially redirecting the flow of the debugged process. The flaw is rated CVSS 3.1 7.1 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) - the attacker needs an existing local foothold with only low privileges, but cannot reach the component remotely, no user interaction is required, and confidentiality is not impacted while integrity and availability are rated High. A vendor security bulletin is published, but no exact fixed version is given in the supplied data, and no public exploit code or CISA KEV entry has been identified at time of analysis; the practical risk is moderate and bounded by the requirement for local access and the platform-specific, diagnostic nature of the utility.
An authenticated local user on an HPE NonStop system can trigger a heap buffer overflow in the HPE NonStop Debug Utilities to corrupt a saved resume-execution address, potentially redirecting the flow of the debugged process. The flaw is rated CVSS 3.1 7.1 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) - the attacker needs an existing local foothold with only low privileges, but cannot reach the component remotely, no user interaction is required, and confidentiality is not impacted while integrity and availability are rated High. A vendor security bulletin is published, but no exact fixed version is given in the supplied data, and no public exploit code or CISA KEV entry has been identified at time of analysis; the practical risk is moderate and bounded by the requirement for local access and the platform-specific, diagnostic nature of the utility.