Buffer overflow in Netskope
CVE-2019-10882
The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from a stack based buffer overflow in "doHandshakefromServer" function. Local users can use this vulnerability to trigger a crash of the service and potentially cause additional impact on the system.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.004 (34.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 34th percentile — 34.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000
Affected products
- Netskope
- Netskope Client — versions Netskope client 57.2.0.219, Netskope client 60.2.0.214, 54
Weakness classification (CWE)
References
- support.netskope.com/hc/article_attachments/360033003553/Sprint_62_Release_Note… (Vendor Advisory, Permissions Required, Release Notes)
- support.netskope.com/hc/en-us/articles/360014589894-Netskope-Client (Vendor Advisory, Permissions Required)
- airbus-seclab.github.io/advisories/netskope.html (Third Party Advisory)
Frequently asked questions
- What is CVE-2019-10882?
- CVE-2019-10882 is a high-severity vulnerability in Netskope, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 7.8/10. Published 2019-09-26.
- How severe is CVE-2019-10882?
- High severity. CVSS v3 base score is 7.8 out of 10.