CVE-2016-9570 Null dereference in n/a
Attackers with local access can crash the Carbon Black agent via the NetMon named pipe, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-9570?
CVE-2016-9570 is a high-severity vulnerability in n/a, published on 12 Feb 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
cb.exe in Carbon Black 5.1.1.60603 allows attackers to cause a denial of service (out-of-bounds read, invalid pointer dereference, and application crash) by leveraging access to the NetMon named pipe.
Which versions are affected by CVE-2016-9570?
It affects 1 product.
Products include Carbonblack Carbon Black.
How do I fix CVE-2016-9570?
No fix has been published for CVE-2016-9570 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-9570 being exploited?
There is no known exploitation of CVE-2016-9570 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-hpjv-w5gq-vh27.