1. Home
  2. CVE Database
  3. CVE-2016-3628
HIGH · 8.8

CVE-2016-3628

Buffer overflow in tibemsd in the server in TIBCO Enterprise Message Service (EMS) before 8.3.0 and EMS Appliance before 2.4.0 allows remote authenticated users to cause a denial of service or possibl...

Vulnerability Description

Buffer overflow in tibemsd in the server in TIBCO Enterprise Message Service (EMS) before 8.3.0 and EMS Appliance before 2.4.0 allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via crafted inbound data.

CVSS Score

8.8

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
TibcoEnterprise Message Service Appliance-
TibcoEnterprise Message Service Appliance Firmware<= 2.3.1
TibcoEnterprise Message Service<= 8.2.2

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2016-3628?

CVE-2016-3628 is a vulnerability with a CVSS score of 8.8 (HIGH). Buffer overflow in tibemsd in the server in TIBCO Enterprise Message Service (EMS) before 8.3.0 and EMS Appliance before 2.4.0 allows remote authenticated users to cause a denial of service or possibl...

How severe is CVE-2016-3628?

CVE-2016-3628 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-3628?

Check the references section above for vendor advisories and patch information. Affected products include: Tibco Enterprise Message Service Appliance, Tibco Enterprise Message Service Appliance Firmware, Tibco Enterprise Message Service.