PatchTheCVEcarbon black vulnerabilities and fixes
Recent CVEs affecting carbon black, with upgrade or downgrade steps. 3 tracked.
Also searched as: carbonblack.
carbon black has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-02-19. Highest priority: CVE-2016-9568 (score 64/100).
- CVE-2016-9570 HIGH 7.5 DOWNGRADE cb.exe in Carbon Black 5.1.1.60603 allows attackers to cause a denial of service (out-of-bounds read, invalid
- CVE-2016-9569 MEDIUM 4.4 DOWNGRADE The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial
- CVE-2016-9568 CRITICAL 9.8 DOWNGRADE A security design issue can allow an unprivileged user to interact with the Carbon Black Sensor and perform un
FAQ
How do I fix carbon black vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is carbon black being exploited right now?
None of the tracked carbon black CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which carbon black CVE should I patch first?
CVE-2016-9568 currently ranks highest (64/100): A security design issue can allow an unprivileged user to interact with the Carbon Black Sensor and perform un.