Medium severity6.3NVD Advisory· Published Jul 28, 2022· Updated Jun 17, 2026
CVE-2022-36998
CVE-2022-36998
Description
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client could remotely trigger a stack-based buffer overflow on the NetBackup Primary server, resulting in a denial of service.
Affected products
37cpe:2.3:a:veritas:flex_appliance:1.2:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:veritas:flex_appliance:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:flex_appliance:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:flex_appliance:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:flex_appliance:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:flex_appliance:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:flex_appliance:2.1:*:*:*:*:*:*:*
cpe:2.3:a:veritas:flex_scale:1.3.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:veritas:flex_scale:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:flex_scale:2.1:*:*:*:*:*:*:*
cpe:2.3:a:veritas:netbackup:8.1.1:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:veritas:netbackup:8.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:netbackup:8.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:netbackup:8.2:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:netbackup:8.3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:netbackup:8.3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:netbackup:8.3:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:netbackup:9.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:netbackup:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:netbackup:9.1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:netbackup:9.1:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1
cpe:2.3:a:veritas:netbackup_appliance:3.1.1:*:*:*:*:*:*:*+ 16 more
- cpe:2.3:a:veritas:netbackup_appliance:3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:netbackup_appliance:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:netbackup_appliance:3.2:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:netbackup_appliance:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:veritas:netbackup_appliance:4.1:*:*:*:*:*:*:*
- cpe:2.3:h:veritas:netbackup_appliance:3.2:maintenance_release1:*:*:*:*:*:*
- cpe:2.3:h:veritas:netbackup_appliance:3.2:maintenance_release2:*:*:*:*:*:*
- cpe:2.3:h:veritas:netbackup_appliance:3.2:maintenance_release3:*:*:*:*:*:*
- cpe:2.3:h:veritas:netbackup_appliance:3.3.0.1:maintenance_release1:*:*:*:*:*:*
- cpe:2.3:h:veritas:netbackup_appliance:3.3.0.1:maintenance_release2:*:*:*:*:*:*
- cpe:2.3:h:veritas:netbackup_appliance:3.3.0.2:maintenance_release1:*:*:*:*:*:*
- cpe:2.3:h:veritas:netbackup_appliance:3.3.0.2:maintenance_release2:*:*:*:*:*:*
- cpe:2.3:h:veritas:netbackup_appliance:4.0.0.1:maintenance_release1:*:*:*:*:*:*
- cpe:2.3:h:veritas:netbackup_appliance:4.0.0.1:maintenance_release2:*:*:*:*:*:*
- cpe:2.3:h:veritas:netbackup_appliance:4.0.0.1:maintenance_release3:*:*:*:*:*:*
- cpe:2.3:h:veritas:netbackup_appliance:4.1.0.1:maintenance_release1:*:*:*:*:*:*
- cpe:2.3:h:veritas:netbackup_appliance:4.1.0.1:maintenance_release2:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.veritas.com/content/support/en_US/security/VTS22-004nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.