CVE-2017-11757

Critical

Published: 31/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2017-11757 involves a heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13, allowing remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. The issue occurs after the server-client encryption key exchange.

Risk Assessment

Attackers can exploit this vulnerability to execute remote code, potentially leading to system takeover and data leakage.

Recommendation

It is recommended to update to the latest version of the software to mitigate this vulnerability and to monitor network traffic on TCP port 1583.

Original NVD description (English source)

Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to execute arbitrary code via crafted traffic to TCP port 1583. The overflow occurs after Server-Client encryption-key exchange. The issue results from an integer underflow that leads to a zero-byte allocation. The _srvLnaConnectMP1 function is affected.