What is CVE-2015-3317?

CVE-2015-3317 is a vulnerability in Ca Client Automation, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2015-06-17.

Is CVE-2015-3317 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Ca Client Automation

CVE-2015-3317

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly perform bounds checking, which allows local users to gain privileges via unspecified vectors.

Vulnerability class: Buffer Overflow

Published 2015-06-17 · last modified 2026-06-17.

CVSS v2 metric

CVSS v2 base score 4.6 (Medium). Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.004 (30.9th percentile), scored 2026-10-29.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 31st percentile — 30.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000

Affected products

Ca Client Automation — versions r12.5, r12.8, r12.9
Ca Network And Systems Management — versions r11.2
Ca Nsm Job Management Option — versions r11.0, r11.1, r11.2
Ca Universal Job Management Agent
Ca Virtual Assurance For Infrastructure Managers — versions 12.6, 12.7, 12.8
Ca Workload Automation Ae — versions r11, r11.3, r11.3.5
HP Hp-Ux
IBM Aix
Linux Kernel
Oracle Solaris

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

thdusdl1219/CVE-Study

References

www.securitytracker.com/id/1032513 (vdb-entry)
www.securityfocus.com/bid/75033 (vdb-entry)
www.securitytracker.com/id/1032512 (vdb-entry)
www.ca.com/us/support/ca-support-online/product-content/recommended-reading/sec… (Vendor Advisory)

Frequently asked questions

What is CVE-2015-3317?: CVE-2015-3317 is a vulnerability in Ca Client Automation, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2015-06-17.
Is CVE-2015-3317 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.