« Back to list

CVE-2016-6082

Status: ModifiedCritical (10)—

IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free race condition. An attacker could exploit this vulnerability to execute arbitrary code on the system.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

IBM — Bigfix Platform

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2016-6082",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 10,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "IBM Corporation",
          "product": "BigFix Platform",
          "versions": [
            {
              "status": "affected",
              "version": "9.0"
            },
            {
              "status": "affected",
              "version": "9.1"
            },
            {
              "status": "affected",
              "version": "9.2"
            },
            {
              "status": "affected",
              "version": "9.5"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-02-01T20:59:02.237",
  "references": [
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21996375",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/95297",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21996375",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/95297",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free race condition. An attacker could exploit this vulnerability to execute arbitrary code on the system."
    },
    {
      "lang": "es",
      "value": "IBM BigFix Platform podría permitir a un atacante remoto ejecutar código arbitrario en el sistema, provocado por una condición de carrera de uso después de liberación de memoria. Un atacante podría explotar esta vulnerabilidad para ejecutar código arbitario en el sistema."
    }
  ],
  "lastModified": "2026-06-17T00:50:26.283",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:bigfix_platform:9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "66D8FA27-E35E-41E8-A5C8-14761E47CE10"
            },
            {
              "criteria": "cpe:2.3:a:ibm:bigfix_platform:9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21AD0AAF-1D86-44B4-92DB-3E4A3C38DE87"
            },
            {
              "criteria": "cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDF3A293-36B6-41F3-87CE-EC2D89F212B1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:bigfix_platform:9.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9E59DD27-6637-4D89-867B-650AAD2F14B2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}