Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2017-14385 Details

Description

An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21; EMC Data Domain Virtual Edition 2.0 family, all versions; EMC Data Domain Virtual Edition 3.0 family, versions prior to 3.0 SP2 Update 1; and EMC Data Domain Virtual Edition 3.1 family, versions prior to 3.1 Update 2. EMC Data Domain DD OS contains a memory overflow vulnerability in SMBv1 which may potentially be exploited by an unauthenticated remote attacker. An attacker may completely shut down both the SMB service and active directory authentication. This may also allow remote code injection and execution.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://seclists.org/fulldisclosure/2017/Dec/79 CVEMailing ListThird Party Advisory
http://www.securityfocus.com/bid/102289 CVEThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1040027 CVEThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2017/Dec/79 [email protected]Mailing ListThird Party Advisory
http://www.securityfocus.com/bid/102289 [email protected]Third Party AdvisoryVDB Entry

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer[email protected]

Affected Products

ProductVersions
emc data domain
2.0
3.0
3.0 sp2
3.1 update_2

CPE

  • cpe:2.3:o:emc:data_domain:2.0:*:*:*:virtual:*:*:*
  • cpe:2.3:o:emc:data_domain:3.0:*:*:*:virtual:*:*:*
  • cpe:2.3:o:emc:data_domain:3.0:sp2:*:*:virtual:*:*:*
  • cpe:2.3:o:emc:data_domain:3.1:update_2:*:*:virtual:*:*:*

Remediation

  • No remediation found in references.
emc data domain os
>= 5.7, < 5.7.5.6
>= 6.0, < 6.0.2.9
>= 6.1, < 6.1.0.21

CPE

  • cpe:2.3:o:emc:data_domain_os:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2017-14385
NVD Published Date:
Dec 20, 2017
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2017-14385 Details - Not Deferred