Unscored severity · published Aug 30, 2015
CVE-2015-4555
Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, and Messaging Appliance…
–
CVSS
4.6%
EPSS
No
On KEV
Description
Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, and Messaging Appliance before 8.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the Rendezvous Daemon (rvd), Routing Daemon (rvrd), Secure Daemon (rvsd), Secure Routing Daemon (rvsrd), Gateway Daemon (rvgd), Daemon Adapter (rvda), Cache (rvcache), Agent (rva), and Relay Agent (rvrad) components.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.6% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Messaging Appliance · Tibco
through 8.7.1 · source: NVD
RE
Rendezvous · Tibco
through 8.4.3 · source: NVD
RN
Rendezvous Network Server · Tibco
through 1.1.0 · source: NVD
SE
Substation ES · Tibco
through 2.8.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-4555
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-4555
Third Party Advisory
http://www.securitytracker.com/id/1033677
Vendor Advisory
http://www.tibco.com/assets/blt18493dc775c50c09/2015-002-advisory.txt
Vendor Advisory
http://www.tibco.com/mk/advisory.jsp
More from Messaging Appliance
–
CVE-2014-2543
Buffer overflow in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous…
–
CVE-2014-2542
Cross-site scripting (XSS) vulnerability in the Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon…
–
CVE-2014-2541
The Rendezvous Daemon (rvd), Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), and Rendezvous Secure Routing Daemon (rvsrd) in TIBCO Rendezvous before 8.4.2,…