CVE-2016-9569

Name: CVE-2016-9569
Creator: NVD / NIST
Published: 2018-02-12T18:29:00.217+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.27%

Last modified Jun 17, 2026

CVE-2016-9569 is a vulnerability of currently unknown severity. The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial of service (out-of-bounds read and system crash) via a large counter value in an 0x62430028 IOCTL call.. EPSS estimates a 0.27% chance of exploitation in the next 30 days.

Description

The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial of service (out-of-bounds read and system crash) via a large counter value in an 0x62430028 IOCTL call.

Metrics

EPSS Probability

0.27%

18.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-125

Affected Software

Vendor	Product	Versions
Carbonblack	Carbon Black	5.1.1.60603

References

https://labs.nettitude.com/blog/carbon-black-security-advisories-cve-2016-9570-cve-2016-9568-and-cve-2016-9569/Third Party Advisory
https://labs.nettitude.com/blog/carbon-black-security-advisories-cve-2016-9570-cve-2016-9568-and-cve-2016-9569/Third Party Advisory

Timeline

Published: Feb 12, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2016-9569?

How severe is CVE-2016-9569?

Severity scoring for CVE-2016-9569 is pending analysis. The EPSS model estimates a 0.27% probability of exploitation in the next 30 days.

How do I fix CVE-2016-9569?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-9569?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST