CVE-2017-15665 Denial of service in n/a

What is CVE-2017-15665?

CVE-2017-15665 is a high-severity denial of service vulnerability in n/a, published on 10 Jan 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

In Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to control port 8094.

Weakness: CWE-358

Which versions are affected by CVE-2017-15665?

It affects 1 product.

Products include Flexense Diskboss.

How do I fix CVE-2017-15665?

No fix has been published for CVE-2017-15665 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2017-15665 being exploited?

There is no known exploitation of CVE-2017-15665 in the wild and no public exploit code.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in n/a

• CVE-2018-5262 Memory corruption in n/a Critical 9.8
• CVE-2020-36882 Flexsense DiskBoss Application Crash Denial of Service High 8.7
• CVE-2020-36880 Flexsense DiskBoss 'Reports and Data Directory' Buffer Overflow High 8.6
• CVE-2020-36881 Flexsense DiskBoss 'Add Input Directory' Buffer Overflow High 8.6
• CVE-2018-5261 Weak cryptography in n/a High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-28wq-pxv7-mr7m.