Description
A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption.
Published: 2026-10-15
Score: 5.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Memory Corruption
Action: Patch ASAP
AI Analysis

Impact

A buffer overflow in HPE NonStop RDMA SERVICES NSK permits writing beyond the bounds of a memory buffer, resulting in corruption. This flaw can undermine system integrity, potentially leading to process crashes, denial of service, or even remote code execution depending on how the corrupted memory is exploited. The vulnerability is classified as CWE-787, indicating improper bounds checking of buffer writes.

Affected Systems

The vulnerability impacts the HPE NonStop RDMA SERVICES NSK service. Specific firmware or software release numbers are not provided, meaning that any deployment of this service may be vulnerable until a vendor remedial update is released.

Risk and Exploitability

The calculated CVSS score of 5.8 reflects moderate severity, while the EPSS score of less than 1% indicates a very low probability of exploitation in the wild. The issue is not listed in the CISA Known Exploited Vulnerabilities catalog, and no public exploitation reports are available. The most likely attack vector, inferred from the RDMA nature of the service, is a remote, network-based attack that would require an attacker to craft malicious RDMA packets targeting the vulnerable service. Given the low EPSS, widespread exploitation has not yet been observed, but the memory corruption risk still warrants prompt attention.

Generated by OpenCVE AI on October 16, 2026 at 20:54 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the vendor's official patch or firmware update for HPE NonStop RDMA SERVICES NSK as soon as it becomes available.
  • Disable RDMA services or restrict them to trusted internal networks if the functionality is not essential, using firewall rules or ACLs.
  • Monitor system logs and RDMA traffic for abnormal patterns that may indicate attempted exploitation.

Generated by OpenCVE AI on October 16, 2026 at 20:54 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 19 Oct 2026 13:30:00 +0000

Type Values Removed Values Added
First Time appeared Hpe
Hpe nonstop Rdma Services Nsk
Vendors & Products Hpe
Hpe nonstop Rdma Services Nsk

Thu, 15 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 15 Oct 2026 15:00:00 +0000

Type Values Removed Values Added
Description A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption.
Title HPE NonStop RDMA SERVICES NSK - Out-of-bounds memory write vulnerability
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 5.8, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H'}


Subscriptions

Hpe Nonstop Rdma Services Nsk
cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-10-15T18:03:22.464Z

Reserved: 2026-08-25T14:47:15.582Z

Link: CVE-2026-79841

cve-icon Vulnrichment

Updated: 2026-10-15T18:03:11.293Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-15T15:17:37.923

Modified: 2026-10-15T19:17:44.330

Link: CVE-2026-79841

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-19T13:06:43Z

Weaknesses