CVE-2015-2894 Other in n/a

What is CVE-2015-2894?

CVE-2015-2894 is a medium-severity vulnerability in n/a, published on 31 Dec 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Format string vulnerability in the up.time client in Idera Uptime Infrastructure Monitor 6.0 and 7.2 allows remote attackers to cause a denial of service (application crash) via format string specifiers.

Weakness: CWE-134

Which versions are affected by CVE-2015-2894?

It affects 1 product.

Products include Idera Uptime Infrastructure Monitor.

How do I fix CVE-2015-2894?

No fix has been published for CVE-2015-2894 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-2894 being exploited?

There is no known exploitation of CVE-2015-2894 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2015-9263 File upload in n/a Critical 9.8
• CVE-2017-11470 SQL injection in n/a Critical 9.8
• CVE-2017-11471 SQL injection in n/a Critical 9.8
• CVE-2017-11469 Path traversal in n/a High 7.5
• CVE-2015-8268 Information disclosure in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-76g8-vf43-pmgg.