HP Hpux vulnerabilities

2 CVEs affecting HP Hpux, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3956, published 2014-06-04.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-3956, published 2014-06-04. Low severity, CVSS 1.9. EPSS: 0.6% chance of exploitation in the next 30 days. The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local users to access…
• CVE-2009-1427, published 2009-08-12. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. Unspecified vulnerability in HP-UX B.11.31 allows local users to cause a denial of service (system crash) via unknown vectors related to the ttrace system call.