What’s Vulnerable › Vulnerabilities

CVE-2017-15950

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-10-31 · updated 2026-06-17
• Weakness: CWE-119

Description

Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode.

Affected products

• SyncBreeze: 10.1.16

References

• http://packetstormsecurity.com/files/162008/SyncBreeze-10.1.16-Buffer-Overflow.html
• http://seclists.org/fulldisclosure/2017/Oct/64
• http://packetstormsecurity.com/files/162008/SyncBreeze-10.1.16-Buffer-Overflow.html
• http://seclists.org/fulldisclosure/2017/Oct/64

Get alerted when CVE-2017-15950 or the next vulnerability affects your stack