CVE-2017-8895

9.8 criticalEPSS 71%

In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerability in multiple agents that can lead to a denial of service or remote code execution. An unauthenticated attacker can use this vulnerability to crash the agent or potentially take control of the agent process and then the system it is running on.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 71% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2017-05-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

veritas:backup_exec

References

http://www.securityfocus.com/bid/98386
http://www.securitytracker.com/id/1038561
https://www.exploit-db.com/exploits/42282/
https://www.veritas.com/content/support/en_US/security/VTS17-006.html#Issue1
http://www.securityfocus.com/bid/98386

Check your stack JSON