Vulnerabilities > CVE-2022-42299 - Unspecified vulnerability in Veritas Netbackup

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

veritas

NVD

Published: 2022-10-03

Updated: 2022-10-04

Summary

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a denial of service attack through the DiscoveryService service.

Vulnerable Configurations

Part	Description	Count
Application	Veritas Veritas Netbackup - Veritas Netbackup 4.5.0 Veritas Netbackup 5.0.0 Veritas Netbackup 5.1.0 Veritas Netbackup 7.0 Veritas Netbackup 7.0.1 Veritas Netbackup 7.1.0.1 Veritas Netbackup 7.1.0.2 Veritas Netbackup 7.1.0.3 Veritas Netbackup 7.1.0.4 Veritas Netbackup 7.5.0.1 Veritas Netbackup 7.5.0.3 Veritas Netbackup 7.5.0.4 Veritas Netbackup 7.5.0.5 Veritas Netbackup 7.5.0.6 Veritas Netbackup 7.5.0.7 Veritas Netbackup 7.6.0.2 Veritas Netbackup 7.6.0.3 Veritas Netbackup 7.6.0.4 Veritas Netbackup 7.6.1.1 Veritas Netbackup 7.6.1.2 Veritas Netbackup 7.7.1 Veritas Netbackup 8.0 Veritas Netbackup 8.1.1 Veritas Netbackup 8.1.2 Veritas Netbackup 8.2 Veritas Netbackup 8.3 Veritas Netbackup 8.3.0.0 Veritas Netbackup 8.3.0.1 Veritas Netbackup 8.3.0.2 Veritas Netbackup 9.0 Veritas Netbackup 9.0.0.1 Veritas Netbackup 9.1 Veritas Netbackup 9.1.0.0 Veritas Netbackup 9.1.0.1 Veritas Netbackup 10.0 Veritas Netbackup 10.0.0.1	50

References

https://www.veritas.com/content/support/en_US/security/VTS22-012#M3