Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
nces: - https://docs.google.com/document/d/1MBEoJSMvkjp5Kua0bRD_kiDBisL0fOCwTL9uMWj4lGA/edit?usp=sharing - http://www.securityfocus.com/bid/109320
CVE ID: CVE-2019-1010245 State: PUBLISHED Published: 2019-07-19T14:23:36 Last Updated: 2024-08-05T03:07:18.492Z Vendors: The Linux Foundation Products: ONOS SDN Controller Problem Types: Improper Input Validation Description: The Linux Foundation ONOS SDN Controller 1.15 and earlier versions is affected by: Improper Input Validation. The impact is: A remote attacker can execute arbitrary commands on the controller. The component is: apps/yang/src/main/java/org/onosproject/yang/impl/YangLiveCompilerManager.java. The attack vector is: network connectivity. The fixed version is: 1.15. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1OkMtrMgjjINs
s: 1.15. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1OkMtrMgjjINsDUQwxpGxjbATB6hiwqyv - https://gerrit.onosproject.org/#/c/20767/
CVE ID: CVE-2019-1010246 State: PUBLISHED Published: 2019-07-18T18:04:34 Last Updated: 2024-08-05T03:07:18.487Z Vendors: MailCleaner Products: MailCleaner Problem Types: Unauthenticated MySQL database password information disclosure Description: MailCleaner before c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 is affected by: Unauthenticated MySQL database password information disclosure. The impact is: MySQL database content disclosure (e.g. username, password). The component is: The API call in the function allowAction() in NewslettersController.php. The attack vector is: HTTP Get request. The fixed version is: c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9. Additional Analyst Notes: - CVE Program Con
Get request. The fixed version is: c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MailCleaner/MailCleaner/commit/c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9
CVE ID: CVE-2019-1010247 State: PUBLISHED Published: 2019-07-19T14:13:56 Last Updated: 2024-08-05T03:07:18.449Z Vendors: ZmartZone IAM Products: mod_auth_openidc Problem Types: Cross Site Scripting (XSS) Description: ZmartZone IAM mod_auth_openidc 2.3.10.1 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Redirecting the user to a phishing page or interacting with the application on behalf of the user. The component is: File: src/mod_auth_openidc.c, Line: 3109. The fixed version is: 2.3.10.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.3.10.2 - https://github.com/zmartzone/mod_auth_openidc
: - https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.3.10.2 - https://github.com/zmartzone/mod_auth_openidc/commit/132a4111bf3791e76437619a66336dce2ce4c79b - https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2019-001_mod_auth_openidc_reflected_xss.txt - https://lists.debian.org/debian-lts-announce/2019/08/msg00029.html - https://lists.debian.org/debian-lts-announce/2020/07/msg00028.html
CVE ID: CVE-2019-1010248 State: PUBLISHED Published: 2019-07-18T17:59:39 Last Updated: 2024-08-05T03:07:18.599Z Vendors: Synetics GmbH Products: I-doit Problem Types: SQL Injection Description: Synetics GmbH I-doit 1.12 and earlier is affected by: SQL Injection. The impact is: Unauthenticated mysql database access. The component is: Web login form. The attack vector is: An attacker can exploit the vulnerability by sending a malicious HTTP POST request. The fixed version is: 1.12.1. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/i-doit/files/i-doit/1.12.1/CHANGELOG/download
CVE ID: CVE-2019-1010249 State: PUBLISHED Published: 2019-07-18T17:53:37 Last Updated: 2024-08-05T03:07:18.432Z Vendors: The Linux Foundation Products: ONOS Problem Types: Integer Overflow Description: The Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: createFlow() and createFlows() functions in FlowWebResource.java (RESTful service). The attack vector is: network management and connectivity. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1LxmTXZS-FRJQHAzO2JPgDx5SbLNEJHuJ - https://driv
- CVE Program Container: References: - https://drive.google.com/open?id=1LxmTXZS-FRJQHAzO2JPgDx5SbLNEJHuJ - https://drive.google.com/open?id=1HtdRdf88Nv3RNeQJM9fQ6egY5X-tuewD
CVE ID: CVE-2019-1010250 State: PUBLISHED Published: 2019-07-18T17:51:49 Last Updated: 2024-08-05T03:07:18.519Z Vendors: The Linux Foundation Products: ONOS Problem Types: Poor Input-validation Description: The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: createFlow() and createFlows() functions in FlowWebResource.java (RESTful service). The attack vector is: network management and connectivity. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1HtdRdf88Nv3RNeQJM9fQ6egY5X-tuewD - ht
st Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1HtdRdf88Nv3RNeQJM9fQ6egY5X-tuewD - https://drive.google.com/open?id=17RsaP67w6M2xquQjFf2vXhX3dlVKMdC1
CVE ID: CVE-2019-1010251 State: PUBLISHED Published: 2019-07-18T17:48:48 Last Updated: 2024-08-05T03:07:18.385Z Vendors: Open Information Security Foundation Products: Suricata Problem Types: Denial of Service - DNS detection bypass Description: Open Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of Service - DNS detection bypass. The impact is: An attacker can evade a signature detection with a specialy formed network packet. The component is: app-layer-detect-proto.c, decode.c, decode-teredo.c and decode-ipv6.c (https://github.com/OISF/suricata/pull/3590/commits/11f3659f64a4e42e90cb3c09fcef66894205aefe, https://github.com/OISF/suricata/pull/3590/comm
ISF/suricata/pull/3590/commits/11f3659f64a4e42e90cb3c09fcef66894205aefe, https://github.com/OISF/suricata/pull/3590/commits/8357ef3f8ffc7d99ef6571350724160de356158b). The attack vector is: An attacker can trigger the vulnerability by sending a specifically crafted network request. The fixed version is: 4.1.2. Additional Analyst Notes: - CVE Program Container: References: - https://redmine.openinfosecfoundation.org/issues/2736 - https://github.com/OISF/suricata/pull/3590/commits/11f3659f64a4e42e90cb3c09fcef66894205aefe - https://github.com/OISF/suricata/pull/3590/commits/8357ef3f8ffc7d99ef6571350724160de356158b
CVE ID: CVE-2019-1010252 State: PUBLISHED Published: 2019-07-18T17:43:41 Last Updated: 2024-08-05T03:07:18.387Z Vendors: The Linux Foundation Products: ONOS Problem Types: Poor Input-validation Description: The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: applyFlowRules() and apply() functions in FlowRuleManager.java. The attack vector is: network management and connectivity. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/open?id=1HtdRdf88Nv3RNeQJM9fQ6egY5X-tuewD - https://drive.google.c
ram Container: References: - https://drive.google.com/open?id=1HtdRdf88Nv3RNeQJM9fQ6egY5X-tuewD - https://drive.google.com/open?id=1ce1uqcJYI-sEENGbPmmw-uJTwCXTUyJn
CVE ID: CVE-2019-1010257 State: PUBLISHED Published: 2019-03-27T18:07:57 Last Updated: 2024-08-05T03:07:18.514Z Vendors: article2pdf Products: article2pdf Wordpress plug-in Problem Types: Information Disclosure / Data Modification Description: An Information Disclosure / Data Modification issue exists in article2pdf_getfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. A URL can be constructed which allows overriding the PDF file's path leading to any PDF whose path is known and which is readable to the web server can be downloaded. The file will be deleted after download if the web server has permission to do so. For PHP versions before 5.3, any file can be read by null te
d after download if the web server has permission to do so. For PHP versions before 5.3, any file can be read by null terminating the string left of the file extension. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/support/topic/pdf-download-path-improperly-sanitised/ - https://seclists.org/bugtraq/2019/Mar/49 - https://packetstormsecurity.com/files/152236/WordPress-article2pdf-0.24-DoS-File-Deletion-Disclosure.html - https://wpvulndb.com/vulnerabilities/9246
CVE ID: CVE-2019-1010258 State: PUBLISHED Published: 2019-05-15T17:24:40 Last Updated: 2024-08-05T03:07:18.493Z Vendors: nanosvg library Products: nanosvg Problem Types: Buffer Overflow Description: nanosvg library nanosvg after commit c1f6e209c16b18b46aa9f45d7e619acf42c29726 is affected by: Buffer Overflow. The impact is: Memory corruption leading to at least DoS. More severe impact vectors need more investigation. The component is: it's part of a svg processing library. function nsvg__parseColorRGB in src/nanosvg.h / line 1227. The attack vector is: It depends library usage. If input is passed from the network, then network connectivity is enough. Most likely an attack will require opening
ge. If input is passed from the network, then network connectivity is enough. Most likely an attack will require opening a specially crafted .svg file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/memononen/nanosvg/issues/136 - https://0day.work/cve-2019-1000032-memory-corruption-in-nanosvg/ - https://github.com/memononen/nanosvg/
CVE ID: CVE-2019-1010259 State: PUBLISHED Published: 2019-07-18T16:33:35 Last Updated: 2024-08-05T03:07:18.507Z Vendors: SaltStack Products: Salt Problem Types: SQL Injection Description: SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.user_chpass function from the MySQL module for Salt. The attack vector is: specially crafted password string. The fixed version is: 2018.3.4. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saltstack/salt/blob/f22de0887cd7167887f113bf394244b74fb36b6b/salt/modules/mysql.py#
er: References: - https://github.com/saltstack/salt/blob/f22de0887cd7167887f113bf394244b74fb36b6b/salt/modules/mysql.py#L1534 - https://github.com/ShantonRU/salt/commit/a46c86a987c78e74e87969d8d3b27094e6544b7a - https://github.com/saltstack/salt/pull/51462
CVE ID: CVE-2019-1010260 State: PUBLISHED Published: 2019-04-02T14:03:49 Last Updated: 2024-08-05T03:07:18.513Z Vendors: ktlint Products: ktlint Problem Types: Other Description: Using ktlint to download and execute custom rulesets can result in arbitrary code execution as the served jars can be compromised by a MITM. This attack is exploitable via Man in the Middle of the HTTP connection to the artifact servers. This vulnerability appears to have been fixed in 0.30.0 and later; after commit 5e547b287d6c260d328a2cb658dbe6b7a7ff2261. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shyiko/ktlint/pull/332
CVE ID: CVE-2019-1010261 State: PUBLISHED Published: 2019-07-18T16:30:02 Last Updated: 2024-08-05T03:07:18.495Z Vendors: Gitea Products: Gitea Problem Types: Cross Site Scripting (XSS) Description: Gitea 1.7.0 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically crafted URL. The fixed version is: 1.7.1 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/go-gitea/gitea/pull/5905
CVE ID: CVE-2019-1010262 State: REJECTED Published: 2019-07-18T16:27:14 Last Updated: 2019-07-21T01:54:39 Description: No description available.
CVE ID: CVE-2019-1010263 State: PUBLISHED Published: 2019-07-17T20:32:15 Last Updated: 2024-08-05T03:07:18.361Z Vendors: Perl Crypt::JWT Products: Perl Crypt::JWT Problem Types: Incorrect Access Control Description: Perl Crypt::JWT prior to 0.023 is affected by: Incorrect Access Control. The impact is: allow attackers to bypass authentication by providing a token by crafting with hmac(). The component is: JWT.pm, line 614. The attack vector is: network connectivity. The fixed version is: after commit b98a59b42ded9f9e51b2560410106207c2152d6c. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2018/09/07/1 - https://github.com/DCIT/perl
Program Container: References: - https://www.openwall.com/lists/oss-security/2018/09/07/1 - https://github.com/DCIT/perl-Crypt-JWT/commit/b98a59b42ded9f9e51b2560410106207c2152d6c
CVE ID: CVE-2019-1010266 State: PUBLISHED Published: 2019-07-17T20:25:30 Last Updated: 2024-08-05T03:07:18.476Z Vendors: lodash Products: lodash Problem Types: CWE-400 Description: lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is: 4.17.11. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-LODASH-73639 - https://github.com/lodash/lodash/issues/3359 - https://github.com/lodash/lodash/wiki/Changelog - https://s
ODASH-73639 - https://github.com/lodash/lodash/issues/3359 - https://github.com/lodash/lodash/wiki/Changelog - https://security.netapp.com/advisory/ntap-20190919-0004/
CVE ID: CVE-2019-1010268 State: PUBLISHED Published: 2019-07-18T16:05:12 Last Updated: 2024-08-05T03:07:18.577Z Vendors: Ladon Products: Ladon Problem Types: XML External Entity (XXE) Description: Ladon since 0.6.1 (since ebef0aae48af78c159b6fce81bc6f5e7e0ddb059) is affected by: XML External Entity (XXE). The impact is: Information Disclosure, reading files and reaching internal network endpoints. The component is: SOAP request handlers. For instance: https://bitbucket.org/jakobsg/ladon/src/42944fc012a3a48214791c120ee5619434505067/src/ladon/interfaces/soap.py#lines-688. The attack vector is: Send a specially crafted SOAP call. Additional Analyst Notes: - CVE Program Container: References: -
attack vector is: Send a specially crafted SOAP call. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43113 - https://bitbucket.org/jakobsg/ladon/src/42944fc012a3a48214791c120ee5619434505067/src/ladon/interfaces/soap.py#lines-688
CVE ID: CVE-2019-1010275 State: PUBLISHED Published: 2019-07-17T20:14:50 Last Updated: 2024-08-05T03:07:18.493Z Vendors: helm Products: helm Problem Types: CWE-295 Description: helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation. The impact is: Unauthorized clients could connect to the server because self-signed client certs were aloowed. The component is: helm (many files updated, see https://github.com/helm/helm/pull/3152/files/1096813bf9a425e2aa4ac755b6c991b626dfab50). The attack vector is: A malicious client could connect to the server over the network. The fixed version is: 2.7.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/
twork. The fixed version is: 2.7.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/helm/helm/releases/tag/v2.7.2 - https://github.com/helm/helm/pull/3152 - https://github.com/helm/helm/pull/3152/files/1096813bf9a425e2aa4ac755b6c991b626dfab50
CVE ID: CVE-2019-1010279 State: PUBLISHED Published: 2019-07-18T18:07:29 Last Updated: 2024-08-05T03:07:18.512Z Vendors: Open Information Security Foundation Products: Suricata Problem Types: Denial of Service - TCP/HTTP detection bypass Description: Open Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of Service - TCP/HTTP detection bypass. The impact is: An attacker can evade a signature detection with a specialy formed sequence of network packets. The component is: detect.c (https://github.com/OISF/suricata/pull/3625/commits/d8634daf74c882356659addb65fb142b738a186b). The attack vector is: An attacker can trigger the vulnerability by a specifically cr
f74c882356659addb65fb142b738a186b). The attack vector is: An attacker can trigger the vulnerability by a specifically crafted network TCP session. The fixed version is: 4.1.3. Additional Analyst Notes: - CVE Program Container: References: - https://redmine.openinfosecfoundation.org/issues/2770 - https://github.com/OISF/suricata/pull/3625 - https://github.com/OISF/suricata/pull/3625/commits/d8634daf74c882356659addb65fb142b738a186b
CVE ID: CVE-2019-1010283 State: PUBLISHED Published: 2019-07-17T20:04:58 Last Updated: 2024-08-05T03:07:18.517Z Vendors: Univention Corporate Server Products: univention-directory-notifier Problem Types: CWE-213 Description: Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure. The impact is: Loss of Confidentiality. The component is: function data_on_connection() in src/callback.c. The attack vector is: network connectivity. The fixed version is: 12.0.1-4 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/univention/univention-corporate-server/commit/a28053045bd2e7
: - CVE Program Container: References: - https://github.com/univention/univention-corporate-server/commit/a28053045bd2e778c50ed1acaf4e52e1e34f6e34 - https://forge.univention.org/bugzilla/show_bug.cgi?id=48427
CVE ID: CVE-2019-1010287 State: PUBLISHED Published: 2019-07-17T20:02:05 Last Updated: 2024-08-05T03:07:18.471Z Vendors: Timesheet Next Gen Products: Timesheet Next Gen Problem Types: Cross Site Scripting (XSS) Description: Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via a "redirect" parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may click the malicious url. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/tsheetx/discussion/779083/thread/7fcb52f696/ - https://source
Program Container: References: - https://sourceforge.net/p/tsheetx/discussion/779083/thread/7fcb52f696/ - https://sourceforge.net/p/tsheetx/code/497/tree/branches/legacy/login.php#l40
CVE ID: CVE-2019-1010290 State: PUBLISHED Published: 2019-07-16T13:50:17 Last Updated: 2024-08-05T03:07:18.490Z Vendors: Babel: Multilingual site Products: Babel Problem Types: Open Redirection Description: Babel: Multilingual site Babel All is affected by: Open Redirection. The impact is: Redirection to any URL, which is supplied to redirect.php in a "newurl" parameter. The component is: redirect.php. The attack vector is: The victim must open a link created by an attacker. Attacker may use any legitimate site using Babel to redirect user to a URL of his/her choosing. Additional Analyst Notes: - CVE Program Container: References: - https://untrustednetwork.net/en/2019/02/20/open-redirection
tional Analyst Notes: - CVE Program Container: References: - https://untrustednetwork.net/en/2019/02/20/open-redirection-vulnerability-in-babel/ - http://dev.cmsmadesimple.org/project/files/729
CVE ID: CVE-2019-1010292 State: PUBLISHED Published: 2019-07-16T13:18:45 Last Updated: 2024-08-05T03:07:18.392Z Vendors: Linaro/OP-TEE Products: OP-TEE Problem Types: Boundary checks Description: Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory which the TA can access. The component is: optee_os. The fixed version is: v3.4.0. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OP-TEE/optee_os/commit/e3adcf566cb278444830e7badfdcc3983e334fd1
CVE ID: CVE-2019-1010293 State: PUBLISHED Published: 2019-07-15T17:29:05 Last Updated: 2024-08-05T03:07:18.479Z Vendors: Linaro/OP-TEE Products: OP-TEE Problem Types: Boundary crossing Description: Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing. The impact is: Memory corruption of the TEE itself. The component is: optee_os. The fixed version is: 3.4.0 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OP-TEE/optee_os/commit/95f36d661f2b75887772ea28baaad904bde96970
CVE ID: CVE-2019-1010294 State: PUBLISHED Published: 2019-07-15T17:27:22 Last Updated: 2024-08-05T03:07:18.494Z Vendors: Linaro/OP-TEE Products: OP-TEE Problem Types: Rounding error Description: Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error. The impact is: Potentially leaking code and/or data from previous Trusted Application. The component is: optee_os. The fixed version is: 3.4.0 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OP-TEE/optee_os/commit/7e768f8a473409215fe3fff8f6e31f8a3a0103c6
CVE ID: CVE-2019-1010295 State: PUBLISHED Published: 2019-07-15T17:25:31 Last Updated: 2024-08-05T03:07:18.481Z Vendors: Linaro/OP-TEE Products: OP-TEE Problem Types: Buffer Overflow Description: Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Memory corruption and disclosure of memory content. The component is: optee_os. The fixed version is: 3.4.0 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OP-TEE/optee_os/commit/d5c5b0b77b2b589666024d219a8007b3f5b6faeb
CVE ID: CVE-2019-1010296 State: PUBLISHED Published: 2019-07-15T17:24:16 Last Updated: 2024-08-05T03:07:18.477Z Vendors: Linaro/OP-TEE Products: OP-TEE Problem Types: Buffer Overflow Description: Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in context of TEE core (kernel). The component is: optee_os. The fixed version is: 3.4.0 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OP-TEE/optee_os/commit/b60e1cee406a1ff521145ab9534370dfb85dd592
CVE ID: CVE-2019-1010297 State: PUBLISHED Published: 2019-07-15T17:22:50 Last Updated: 2024-08-05T03:07:18.365Z Vendors: Linaro/OP-TEE Products: OP-TEE Problem Types: Buffer Overflow Description: Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Execution of code in TEE core (kernel) context. The component is: optee_os. The fixed version is: 3.4.0 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OP-TEE/optee_os/commit/a637243270fc1faae16de059091795c32d86e65e
CVE ID: CVE-2019-1010298 State: PUBLISHED Published: 2019-07-15T17:20:21 Last Updated: 2024-08-05T03:07:18.493Z Vendors: Linaro/OP-TEE Products: OP-TEE Problem Types: Buffer Overflow Description: Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in the context of TEE core (kernel). The component is: optee_os. The fixed version is: 3.4.0 and later. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OP-TEE/optee_os/commit/70697bf3c5dc3d201341b01a1a8e5bc6d2fb48f8
CVE ID: CVE-2019-1010299 State: PUBLISHED Published: 2019-07-15T17:18:46 Last Updated: 2024-08-05T03:07:18.461Z Vendors: The Rust Programming Language Products: Standard Library Problem Types: CWE-200 Description: The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vec_deque::Iter. The attack vector is: The program needs to invoke debug printing for iterator over an empty VecDeque. The fixed version is: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f8990