Hpe Nonstop Posix User Threads
Monthly
Arbitrary code execution is possible in HPE NonStop Posix User Threads for an authenticated local user with low-level privileges who supplies crafted input to the pthread functionality, due to a heap-based buffer overflow (CWE-122). The flaw requires pre-existing local access (AV:L), no user interaction (UI:N), and no non-default configuration indicated by the available data; there is no public exploit identified at time of analysis. The vendor advisory is at https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US, and the independent assessment rates confidentiality, integrity, and availability impact as High despite the vendor's 6.6 Medium base score with Low/Low/High impact.
Arbitrary code execution is possible in HPE NonStop Posix User Threads for an authenticated local user with low-level privileges who supplies crafted input to the pthread functionality, due to a heap-based buffer overflow (CWE-122). The flaw requires pre-existing local access (AV:L), no user interaction (UI:N), and no non-default configuration indicated by the available data; there is no public exploit identified at time of analysis. The vendor advisory is at https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US, and the independent assessment rates confidentiality, integrity, and availability impact as High despite the vendor's 6.6 Medium base score with Low/Low/High impact.