TI-2016-07792 Aliases CVE-2016-9569 GHSA-6xx4-rhcp-hfhm

The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin…

LOW 20CWE-125Published 2018-02-12 · Updated 2024-08-06

Key facts

Attack vector: Local
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-125 and the CVSS impact.

Summary

The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial of service (out-of-bounds read and system crash) via a large counter value in an 0x62430028 IOCTL call.

Why it matters now

EPSS 0.00268 18th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:carbonblack:carbon_black:5.1.1.60603:::::::*	5.1.1.60603	Vulnerable	Carbonblack

cpe:2.3:a:carbonblack:carbon_black:5.1.1.60603:*:*:*:*:*:*:* Versions 5.1.1.60603 Vulnerable ·Carbonblack

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2016-9569
2026-10-03 Alias added: GHSA-6xx4-rhcp-hfhm

References

Advisory 1

https://labs.nettitude.com/blog/carbon-black-security-advisories-cve-2016-9570-cve-2016-9568-and-cve-2016-9569/

TI-2016-07791 A security design issue can allow an unprivileged user to interact with the Carbon Black… CVSS 3.0CRITICAL 9.8
TI-2016-07793 cb.exe in Carbon Black 5.1.1.60603 allows attackers to cause a denial of service… CVSS 3.0HIGH 7.5
TI-2014-01259 Multiple cross-site request forgery (CSRF) vulnerabilities in Carbon Black before 4.1.0… CVSS 2.0MEDIUM 6.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences