CVE-2017-15950

7.8 highEPSS 5.5%

High (7.8) in flexense syncbreeze. EPSS 5.5% chance of exploitation in the next 30 days.

Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 5.5% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2017-10-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

flexense:syncbreeze

References

http://packetstormsecurity.com/files/162008/SyncBreeze-10.1.16-Buffer-Overflow.html
http://seclists.org/fulldisclosure/2017/Oct/64
http://packetstormsecurity.com/files/162008/SyncBreeze-10.1.16-Buffer-Overflow.html
http://seclists.org/fulldisclosure/2017/Oct/64

Check your stack JSON