{"id":"CVE-2017-9003","aliases":["EUVD-2017-17943","GHSA-gmwg-2c9p-97x5"],"status":"published","title":"Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user...","description":"Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort, it is possible these vulnerabilities could lead to the ability to execute arbitrary code - remote code execution has not yet been confirmed.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03537,"percentile":0.89354,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2018-08-06T20:00:00Z","modified":"2026-06-17T01:27:20Z","products":[{"vendor":"arubanetworks","product":"arubaos"},{"vendor":"hewlett packard enterprise","product":"arubaos"},{"vendor":"hpe","product":"arubaos"}],"references":[{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-006.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1039580","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9003"},{"url":"https://github.com/advisories/GHSA-gmwg-2c9p-97x5"}],"sources":{"cve":[{"id":"CVE-2017-9003","description":"Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort, it is possible these vulnerabilities could lead to the ability to execute arbitrary code - remote code execution has not yet been confirmed.","status":"published","published":"2018-08-06T20:00:00Z","modified":"2024-08-05T16:55:22.207Z","updated_at":"2026-11-02T14:33:13.96587Z"}],"euvd":[{"id":"EUVD-2017-17943","description":"Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort, it is possible these vulnerabilities could lead to the ability to execute arbitrary code - remote code execution has not yet been confirmed.","status":"published","published":"2018-08-06T20:00:00Z","modified":"2024-08-05T16:55:22Z","updated_at":"2026-11-03T02:23:29.187521Z"}],"ghsa":[{"id":"GHSA-gmwg-2c9p-97x5","title":"Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user...","description":"Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort, it is possible these vulnerabilities could lead to the ability to execute arbitrary code - remote code execution has not yet been confirmed.","status":"published","published":"2022-05-14T02:20:32Z","modified":"2023-02-02T05:05:25Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:52:06.598736Z"}],"nvd":[{"id":"CVE-2017-9003","description":"Multiple memory corruption flaws are present in ArubaOS which could allow an unauthenticated user to crash ArubaOS processes. With sufficient time and effort, it is possible these vulnerabilities could lead to the ability to execute arbitrary code - remote code execution has not yet been confirmed.","status":"published","published":"2018-08-06T20:29:01.383Z","modified":"2026-06-17T01:27:20.313Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:04:18.679411Z"}]}}