title: Netskope client buffer overflow vulnerability
description: The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from a stack based buffer overflow in "doHandshakefromServer" function. Local users can use this vulnerability to trigger a crash of the service and potentially cause additional impact on the system.
problem types: CWE-120 Buffer Overflow
affected:
{
platforms: x86
product: Netskope client
vendor: Netskope
versions:
status: unaffected, version: Netskope client 57.2.0.219
status: unaffected, version: Netskope client 60.2.0.214
changes: [at: 62, status: unaffected], lessThan: Netskope client*, status: affected, version: 54, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.0
]
solutions: Remediations were applied in R62 onwards and retrospectively applied in golden releases R60.2.0.214 and R57.2.0.219.  Link to latest support golden releases - https://support.netskope.com/hc/en-us/articles/360014589894-Netskope-Client.