Unscored severity · published Apr 8, 2014
CVE-2014-2543
Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous…
–
CVSS
4.1%
EPSS
No
On KEV
Description
Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2, Messaging Appliance before 8.7.1, and Substation ES before 2.8.1 allows remote attackers to execute arbitrary code by leveraging access to a directly connected client and transmitting crafted data.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.1% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Messaging Appliance · Tibco
through 8.7.0 · source: NVD
RE
Rendezvous · Tibco
through 8.4.1; 7.4.11; 7.5.1; 7.5.2; 7.5.3; 7.5.4; +4 more · source: NVD
SE
Substantiation ES · Tibco
through 2.8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2543
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2543
www.securityfocus.com
http://www.securityfocus.com/bid/66744
www.securitytracker.com
http://www.securitytracker.com/id/1030070
Vendor Advisory
http://www.tibco.com/mk/advisory.jsp
Vendor Advisory
http://www.tibco.com/multimedia/rendezvous_advisory_20140408_tcm8-20763.txt
More from Messaging Appliance
–
CVE-2015-4555
Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, and Messaging Appliance…
–
CVE-2014-2542
Cross-site scripting (XSS) vulnerability in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon…
–
CVE-2014-2541
The Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2,…