CVE-2022-42306: Veritas Netbackup

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can send a crafted packet to pbx_exchange during registration and cause a NULL pointer exception, effectively crashing the pbx_exchange process.

Affected products

• Veritas Netbackup: up to and including 8.2

Published 2022-10-03. Last modified 2026-06-17.