CVEs-PoC/2017/CVE-2017-2861.md

### [CVE-2017-2861](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2861)
![](https://img.shields.io/static/v1?label=Product&message=Natus&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=Natus%20Xltek%20NeuroWorks%208%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=denial%20of%20service&color=brightgreen)

### Description

An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in Natus Xltek NeuroWorks 8. A specially crafted network packet can cause an out of bounds read resulting in a denial of service. An attacker can send a malicious packet to trigger this vulnerability.

### POC

#### Reference
- https://talosintelligence.com/vulnerability_reports/TALOS-2017-0365

#### Github
No PoCs found on GitHub currently.