Hpe Nonstop Hpjmeter
Monthly
Heap- and stack-based buffer overflow in HPE NonStop Hpjmeter, the Java-based performance/profiling analysis client for HPE NonStop systems, can crash the tool when it parses crafted input. Impact is confined to availability (CVSS 3.1 base score 2.0 on the vendor's published vector, assessed as A:L with no confidentiality or integrity effect), and exploitation is gated by high attack complexity and the requirement that a privileged, authenticated user open or process the malicious data - no public exploit has been identified at time of analysis. The published vector nominally claims AV:N, but the behavior described (data/file parsing by a client tool) suggests a local delivery path; this discrepancy is unconfirmed and should be validated against HPE advisory hpesbns05148en_us.
Heap- and stack-based buffer overflow in HPE NonStop Hpjmeter, the Java-based performance/profiling analysis client for HPE NonStop systems, can crash the tool when it parses crafted input. Impact is confined to availability (CVSS 3.1 base score 2.0 on the vendor's published vector, assessed as A:L with no confidentiality or integrity effect), and exploitation is gated by high attack complexity and the requirement that a privileged, authenticated user open or process the malicious data - no public exploit has been identified at time of analysis. The published vector nominally claims AV:N, but the behavior described (data/file parsing by a client tool) suggests a local delivery path; this discrepancy is unconfirmed and should be validated against HPE advisory hpesbns05148en_us.