CVE-2022-42299: 
Veritas NetBackup Client vulnerability analysis and mitigation

A denial of service vulnerability (CVE-2022-42299) was discovered in Veritas NetBackup through version 10.0.0.1 and related Veritas products. The vulnerability specifically affects the NetBackup Primary server through its DiscoveryService service (Veritas Advisory, CVE Mitre).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L), indicating a medium severity level. The vulnerability exists in the DiscoveryService service of the NetBackup Primary server, which can be exploited through a denial of service attack (Veritas Advisory).

If successfully exploited, this vulnerability could allow an attacker to cause a denial of service condition in the NetBackup Primary server's DiscoveryService service (Veritas Advisory).

Veritas recommends upgrading NetBackup Primary Servers, Media Servers, and Clients to version 8.3.0.2, 9.0.0.1, 9.1.0.1, or 10.0.0.1 and applying the appropriate hotfix. For NetBackup Appliance, users should upgrade to any Maintenance Release (MR) of 3.3.0.2, 4.0.0.1, 4.1.0.1, or 5.0.0.1 MR1 and apply the appropriate hotfix. Flex Appliance users should apply the NetBackup Hotfix corresponding to their NetBackup Container version. Flex Scale users should contact Veritas Technical Support referencing Knowledge Article ID 100053006 (Veritas Advisory).