CVE-2015-4049 Memory corruption in n/a
Authenticated users can cause system crashes or data corruption via stack corruption during peak memory usage in Unisys MCP systems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-4049?
CVE-2015-4049 is a medium-severity memory corruption vulnerability in n/a, published on 3 Feb 2017. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service (data corruption or system crash) via vectors related to using program operators during EPSILON (level 5) based codefiles at peak memory usage, which triggers CPM stack corruption.
Weakness: CWE-119
Which versions are affected by CVE-2015-4049?
It affects 1 product.
Products include Unisys Mcp-Firmware.
How do I fix CVE-2015-4049?
No fix has been published for CVE-2015-4049 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2015-4049 being exploited?
There is no known exploitation of CVE-2015-4049 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-7gjq-76c2-rp28.