Hpe Nonstop Tmf Auditread2
Monthly
Denial of service in the HPE NonStop TMF Auditread2 audit-trail utility arises from a stack-based buffer overflow (CWE-121) that can be triggered when the utility processes specially crafted input, crashing the process and disrupting availability of the TMF audit-read function. Exploitation is not remote: the assessed vector (AV:L/AC:H/PR:L/UI:N) requires local, authenticated access to the NonStop host plus the ability to execute or feed crafted data to Auditread2, and the high attack complexity means reliable triggering is not trivial. Vendor scoring is 6.4, while our independent assessment rates the impact as availability-only (A:H), so realistic risk is confined to insiders or post-compromise actors on specialized NonStop deployments; no public exploit code has been identified and there is no confirmed active exploitation (CISA KEV) at time of analysis.
Denial of service in the HPE NonStop TMF Auditread2 audit-trail utility arises from a stack-based buffer overflow (CWE-121) that can be triggered when the utility processes specially crafted input, crashing the process and disrupting availability of the TMF audit-read function. Exploitation is not remote: the assessed vector (AV:L/AC:H/PR:L/UI:N) requires local, authenticated access to the NonStop host plus the ability to execute or feed crafted data to Auditread2, and the high attack complexity means reliable triggering is not trivial. Vendor scoring is 6.4, while our independent assessment rates the impact as availability-only (A:H), so realistic risk is confined to insiders or post-compromise actors on specialized NonStop deployments; no public exploit code has been identified and there is no confirmed active exploitation (CISA KEV) at time of analysis.