Hpe Nonstop Tsqlfil
Monthly
Address space corruption in HPE NonStop TSQLFIL is reachable by a low-privileged local user on the NonStop host who invokes a specific affected API, which mishandles input and drives undefined behavior in the process memory space. The assessed vector (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H, score 5.3) shows no confidentiality loss but high availability impact, so the realistic outcome is integrity damage and/or abnormal termination of the affected TSQLFIL process rather than data theft. Exploitation is constrained by local authenticated access and by high attack complexity requiring preconditions outside the attacker's control, and no public exploit has been identified at time of analysis; there is no confirmed active exploitation (CISA KEV).
Address space corruption in HPE NonStop TSQLFIL is reachable by a low-privileged local user on the NonStop host who invokes a specific affected API, which mishandles input and drives undefined behavior in the process memory space. The assessed vector (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H, score 5.3) shows no confidentiality loss but high availability impact, so the realistic outcome is integrity damage and/or abnormal termination of the affected TSQLFIL process rather than data theft. Exploitation is constrained by local authenticated access and by high attack complexity requiring preconditions outside the attacker's control, and no public exploit has been identified at time of analysis; there is no confirmed active exploitation (CISA KEV).