CVE-2016-9569

The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial of service (out-of-bounds read and system crash) via a large counter value in an 0x62430028 IOCTL call.

Score

CVSS 3.0 4.4 Medium

Status

Modified - cve@mitre.org

Published

2018-02-12

Last modified

2024-08-06

Weaknesses

CWE-125

Affected products

• Carbon Black (Carbonblack)

References

• https://labs.nettitude.com/blog/carbon-black-security-advisories-cve-2016-9570-cve-2016-9568-and-cve-2016-9569/