CVE-2019-10882

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from a stack based buffer overflow in "doHandshakefromServer" function. Local users can use this vulnerability to trigger a crash of the service and potentially cause additional impact on the system.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120 CWE-787

Affected software

Vendor	Product	Versions
Netskope	Netskope client	>= 54, < Netskope client*

References

https://airbus-seclab.github.io/advisories/netskope.htmlThird Party Advisory
https://support.netskope.com/hc/article_attachments/360033003553/Sprint_62_Release_Notes.pdfPermissions Required, Release Notes, Vendor Advisory
https://support.netskope.com/hc/en-us/articles/360014589894-Netskope-ClientPermissions Required, Vendor Advisory
https://airbus-seclab.github.io/advisories/netskope.htmlThird Party Advisory
https://support.netskope.com/hc/article_attachments/360033003553/Sprint_62_Release_Notes.pdfPermissions Required, Release Notes, Vendor Advisory
https://support.netskope.com/hc/en-us/articles/360014589894-Netskope-ClientPermissions Required, Vendor Advisory

Timeline

Published: Sep 26, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-108839.8Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection.CVE-2019-108848.8Uniqkey Password Manager 1.14 contains a vulnerability because it fails to recognize the difference between domains and sub-domains. The vul CVE-2019-108857.8An issue was discovered in Ivanti Workspace Control before 10.3.90.0. Local authenticated users with low privileges in a Workspace Control m CVE-2019-108865.9An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV an CVE-2019-108876.1A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.82.130611 allows remot CVE-2019-108888.8A CSRF Issue that can add an admin user was discovered in UKcms v1.1.10 via admin.php/admin/role/add.html.CVE-2019-10897.8An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exp CVE-2019-108919.8An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnap_main, which calls system() without checking CVE-2019-108929.8An issue was discovered in D-Link DIR-806 devices. There is a stack-based buffer overflow in function hnap_main at /htdocs/cgibin. The funct CVE-2019-108934.8CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent X CVE-2019-108947.5In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This was addressed in epan/dissectors/packet-gss CVE-2019-108957.5In Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash. This was addressed in wiretap/netscaler.c by