CVE-2015-2899

Medium

Description

Heap-based buffer overflow in the QualifierList retrieve_qualifier_list function in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a long list name in a packet on port 8190.

SeverityMedium
CVSS6.8
Exploit probability—
ProductMedicomp Medcin Engine
PublishedOct 29, 2015
First seenOct 29, 2015

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
medicomp medcin_enginev ≤ 2.22.20142.166—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.