argus vulnerabilities and fixes

Recent CVEs affecting argus, with upgrade or downgrade steps. 7 tracked.

argus has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-09-17. Highest priority: CVE-2016-8389 (score 53/100).

• CVE-2017-2777 HIGH 8.8 DOWNGRADE An exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus Version 6.6.05
• CVE-2016-8715 HIGH 7.8 DOWNGRADE An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.
• CVE-2016-8389 HIGH 7.8 DOWNGRADE An exploitable integer-overflow vulnerability exists within Iceni Argus
• CVE-2016-8388 HIGH 7.8 DOWNGRADE An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus
• CVE-2016-8387 HIGH 7.8 DOWNGRADE An exploitable heap-based buffer overflow exists in Iceni Argus
• CVE-2016-8386 HIGH 7.8 DOWNGRADE An exploitable heap-based buffer overflow exists in Iceni Argus
• CVE-2016-8385 HIGH 7.8 DOWNGRADE An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Ice

FAQ

How do I fix argus vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is argus being exploited right now?

None of the tracked argus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which argus CVE should I patch first?

CVE-2016-8389 currently ranks highest (53/100): An exploitable integer-overflow vulnerability exists within Iceni Argus.

RSS feed for argus · ← Back to latest CVEs