CVE-2015-2899

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-10-29 · updated 2026-06-17
Weakness: CWE-119

Description

Heap-based buffer overflow in the QualifierList retrieve_qualifier_list function in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a long list name in a packet on port 8190.

Affected products

Medicomp Medcin Engine: through 2.22.20142.166

References

http://www.kb.cert.org/vuls/id/675052
http://www.securifera.com/advisories/CVE-2015-2898-2901/
http://www.kb.cert.org/vuls/id/675052
http://www.securifera.com/advisories/CVE-2015-2898-2901/

Get alerted when CVE-2015-2899 or the next vulnerability affects your stack