CVE-2017-15950

Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution

published October 31, 2017

CVSS
—
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05507 · 92.8th percentile
Published
2017-10-31T14:00Z
EPSS history
Timeline
  • 31 OCT 14:00Z
    Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution
    cvelistv5