CVE-2016-6082 - IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free race condition

Back Back to CVE browser

CRITICAL

IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free race condition

Published Feb 1, 2017

10.0

CRITICAL

CVSS 3.0

EPSS 4.71%

Description

IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free race condition. An attacker could exploit this vulnerability to execute arbitrary code on the system.

Affected products

Vendor IBM Corporation Product BigFix Platform Default
unknown
Affected
- 9.0
- 9.1
- 9.2
- 9.5

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
IBM Corporation	BigFix Platform	unknown	Affected 9.0 9.1 9.2 9.5

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (3)

http://www.ibm.com/support/docview.wss?uid=swg21996375
x_refsource_CONFIRMPatchVendor Advisory
http://www.securityfocus.com/bid/95297
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-7016
Advisory

Link	Providers	Tags
http://www.ibm.com/support/docview.wss?uid=swg21996375		x_refsource_CONFIRMPatchVendor Advisory
http://www.securityfocus.com/bid/95297		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-7016		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Feb 1, 2017

Updated Aug 6, 2024

Reserved Jun 29, 2016

Link CVE-2016-6082

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2016-6082

Red Hat

No data

ENISA EUVD

Assigner ibm

Published Feb 1, 2017

Updated Aug 6, 2024

Link EUVD-2016-7016

GitHub

No data