What’s Vulnerable › Vulnerabilities

CVE-2015-5401

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-05-23 · updated 2026-06-17
• Weakness: CWE-20

Description

Teradata Gateway before 15.00.03.02-1 and 15.10.x before 15.10.00.01-1 and TD Express before 15.00.02.08_Sles10 and 15.00.02.08_Sles11 allow remote attackers to cause a denial of service (database crash) via a malformed CONFIG REQUEST message.

Affected products

• Teradata Express: 15.00.00, 15.10.00
• Teradata Gateway: through 15.00.02.08

References

• http://www.fortiguard.com/advisory/FG-VD-15-038/
• http://www.securitytracker.com/id/1033005
• https://blog.fortinet.com/2015/07/23/teradata-vulnerability-announced-big-potential-headaches-for-big-data-solution
• http://www.fortiguard.com/advisory/FG-VD-15-038/
• http://www.securitytracker.com/id/1033005
• https://blog.fortinet.com/2015/07/23/teradata-vulnerability-announced-big-potential-headaches-for-big-data-solution

Get alerted when CVE-2015-5401 or the next vulnerability affects your stack