Hpe Nonstop Sql Mx Run Time Statistics
Monthly
Memory corruption and null pointer dereference in the HPE NonStop SQL/MX Run-Time Statistics component let an attacker who already holds low-level authenticated access to a NonStop system (PR:L) crash the affected process, producing a denial of service, with a secondary possibility of limited information disclosure (C:L, I:L). The high attack-complexity rating (AC:H) reflects that a single deterministic request is not enough - the attacker must craft malformed input that satisfies specific state or timing conditions before the flaw triggers. This is a moderate-severity (CVSS 6.4) input-validation defect (CWE-20) reported by HPE itself; no public exploit code and no confirmed active exploitation were identified at time of analysis, and exposure is limited to NonStop environments that actually run the SQL/MX Run-Time Statistics feature.
Memory corruption and null pointer dereference in the HPE NonStop SQL/MX Run-Time Statistics component let an attacker who already holds low-level authenticated access to a NonStop system (PR:L) crash the affected process, producing a denial of service, with a secondary possibility of limited information disclosure (C:L, I:L). The high attack-complexity rating (AC:H) reflects that a single deterministic request is not enough - the attacker must craft malformed input that satisfies specific state or timing conditions before the flaw triggers. This is a moderate-severity (CVSS 6.4) input-validation defect (CWE-20) reported by HPE itself; no public exploit code and no confirmed active exploitation were identified at time of analysis, and exposure is limited to NonStop environments that actually run the SQL/MX Run-Time Statistics feature.