Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-12416 State: PUBLISHED Published: 2017-09-07T13:00:00 Last Updated: 2024-08-05T18:36:56.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to improper request parameter validation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039255 - http://www.securityfocus.com/bid/100619 - https://security.paloaltonetworks.com/CVE-20
.securitytracker.com/id/1039255 - http://www.securityfocus.com/bid/100619 - https://security.paloaltonetworks.com/CVE-2017-12416
CVE ID: CVE-2017-12418 State: PUBLISHED Published: 2017-08-04T00:00:00 Last Updated: 2024-08-05T18:36:56.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/643 - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07
CVE ID: CVE-2017-12419 State: PUBLISHED Published: 2017-08-05T15:00:00 Last Updated: 2024-08-05T18:36:56.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: If, after successful installation of MantisBT through 2.5.2 on MySQL/MariaDB, the administrator does not remove the 'admin' directory (as recommended in the "Post-installation and upgrade tasks" section of the MantisBT Admin Guide), and the MySQL client has a local_infile setting enabled (in php.ini mysqli.allow_local_infile, or the MySQL client config file, depending on the PHP setup), an attacker may take advantage of MySQL's "connect file read" feature to remotely access files on the MantisBT server. Additional Analyst Not
advantage of MySQL's "connect file read" feature to remotely access files on the MantisBT server. Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/bugs/view.php?id=23173 - http://www.securityfocus.com/bid/100142 - http://openwall.com/lists/oss-security/2017/08/04/6
CVE ID: CVE-2017-12420 State: PUBLISHED Published: 2017-08-18T17:00:00 Last Updated: 2024-08-05T18:36:56.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allows remote authenticated users to cause a denial of service or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/NTAP-20170814-0001 - http://www.securityfocus.com/bid/100429
CVE ID: CVE-2017-12421 State: PUBLISHED Published: 2017-09-01T21:00:00 Last Updated: 2024-08-05T18:36:56.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute arbitrary code on the storage controller via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/NTAP-20170831-0002
CVE ID: CVE-2017-12422 State: PUBLISHED Published: 2017-08-29T15:00:00 Last Updated: 2024-08-05T18:36:56.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10.4.0.2 allow remote authenticated users to delete arbitrary objects via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100535 - https://kb.netapp.com/support/s/article/NTAP-20170825-0001
CVE ID: CVE-2017-12423 State: PUBLISHED Published: 2017-09-01T21:00:00 Last Updated: 2024-08-05T18:36:56.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines (SVMs) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/NTAP-20170831-0002
CVE ID: CVE-2017-12424 State: PUBLISHED Published: 2017-08-04T09:00:00 Last Updated: 2024-08-05T18:36:56.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed input may lead to crashes (with a buffer overflow or other memory corruption) or other unspecified behaviors. This crosses a privilege boundary in, for example, certain web-hosting environments in which a Control Panel allows an unprivileged user account to create subaccounts. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=
nts. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=756630 - https://security.gentoo.org/glsa/201710-16 - https://github.com/shadow-maint/shadow/commit/954e3d2e7113e9ac06632aee3c69b8d818cc8952 - https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1266675 - https://lists.debian.org/debian-lts-announce/2021/03/msg00020.html
CVE ID: CVE-2017-12425 State: PUBLISHED Published: 2017-08-04T09:00:00 Last Updated: 2024-08-05T18:36:56.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2. A wrong if statement in the varnishd source code means that particular invalid requests from the client can trigger an assert, related to an Integer Overflow. This causes the varnishd worker process to abort and restart, losing the cached contents in the process. An attacker can therefore crash the varnishd worker process on demand and effectively keep it from serving content - a Denial-of-Service attack. Th
rash the varnishd worker process on demand and effectively keep it from serving content - a Denial-of-Service attack. The specific source-code filename containing the incorrect statement varies across releases. Additional Analyst Notes: - CVE Program Container: References: - https://www.varnish-cache.org/security/VSV00001.html#vsv00001 - https://lists.debian.org/debian-security-announce/2017/msg00186.html - http://www.debian.org/security/2017/dsa-3924 - https://bugzilla.suse.com/show_bug.cgi?id=1051917 - https://bugzilla.redhat.com/show_bug.cgi?id=1477222 - https://github.com/varnishcache/varnish-cache/issues/2379
CVE ID: CVE-2017-12426 State: PUBLISHED Published: 2017-08-14T21:00:00 Last Updated: 2024-08-05T18:36:56.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.x before 9.3.10, and 9.4.x before 9.4.4 might allow remote attackers to execute arbitrary code via a crafted SSH URL in a project import. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2017/08/10/gitlab-9-dot-4-dot-4-released/ - https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1466490.html
CVE ID: CVE-2017-12427 State: PUBLISHED Published: 2017-08-04T09:00:00 Last Updated: 2024-08-05T18:36:56.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ProcessMSLScript function in coders/msl.c in ImageMagick before 6.9.9-5 and 7.x before 7.0.6-5 allows remote attackers to cause a denial of service (memory leak) via a crafted file, related to the WriteMSLImage function. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201711-07 - https://github.com/ImageMagick/ImageMagick/issues/636 - https://github.com/ImageMagick/ImageMagick/commit/e793eb203e5e0f91f5037aed6585e81b1e27395b
CVE ID: CVE-2017-12428 State: PUBLISHED Published: 2017-08-04T10:00:00 Last Updated: 2024-08-05T18:36:56.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service in CloneDrawInfo in draw.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/544 - http://www.securityfocus.com/bid/100145 - https://www.debian.org/security/2017/dsa-4019
CVE ID: CVE-2017-12429 State: PUBLISHED Published: 2017-08-04T10:00:00 Last Updated: 2024-08-05T18:36:56.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/545 - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-12430 State: PUBLISHED Published: 2017-08-04T10:00:00 Last Updated: 2024-08-05T18:36:56.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - http://www.securityfocus.com/bid/100157 - https://github.com/ImageMagick/ImageMagick/issues/546 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-12431 State: PUBLISHED Published: 2017-08-04T10:00:00 Last Updated: 2024-08-05T18:36:56.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-1, a use-after-free vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/555 - https://www.debian.org/security/2017/dsa-4040 - https://usn.ubuntu.com/3681-1/ - https://www.debian.org/security/2017/dsa-4019
CVE ID: CVE-2017-12432 State: PUBLISHED Published: 2017-08-04T10:00:00 Last Updated: 2024-08-05T18:36:56.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/536 - https://usn.ubuntu.com/3681-1/ - https://www.debian.org/security/2017/dsa-4019 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
CVE ID: CVE-2017-12433 State: PUBLISHED Published: 2017-08-04T10:00:00 Last Updated: 2024-08-05T18:36:56.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadPESImage in coders/pes.c, which allows attackers to cause a denial of service, related to ResizeMagickMemory in memory.c. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/548
CVE ID: CVE-2017-12434 State: PUBLISHED Published: 2017-08-04T10:00:00 Last Updated: 2024-08-05T18:36:56.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service (assertion failure) in DestroyImageInfo in image.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/547 - https://www.debian.org/security/2017/dsa-4019
CVE ID: CVE-2017-12435 State: PUBLISHED Published: 2017-08-04T10:00:00 Last Updated: 2024-08-05T18:36:56.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/543 - https://usn.ubuntu.com/3681-1/ - http://www.securityfocus.com/bid/100152 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-12439 State: PUBLISHED Published: 2017-08-05T15:00:00 Last Updated: 2024-08-05T18:36:56.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: SocuSoft Flash Slideshow Maker Professional through v5.20, when the advanced configuration is used, has an xml_path HTTP parameter that trusts user-supplied input, in conjunction with an unsafe XML configuration file. This has resultant content forgery, cross site scripting, and unvalidated redirection issues. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/143542/Flash-Slideshow-Maker-Professional-XSS-Content-Forgery-Redirect.html
CVE ID: CVE-2017-12440 State: PUBLISHED Published: 2017-08-18T14:00:00 Last Updated: 2024-08-05T18:36:56.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee. Additional Analyst Notes: -
alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ossn/+bug/1649333 - https://review.openstack.org/#/c/493826/ - https://review.openstack.org/#/c/493823/ - http://www.securityfocus.com/bid/100455 - http://www.debian.org/security/2017/dsa-3953 - https://access.redhat.com/errata/RHSA-2017:3227 - https://access.redhat.com/errata/RHSA-2018:0315 - https://review.openstack.org/#/c/493824/
CVE ID: CVE-2017-12441 State: PUBLISHED Published: 2017-08-17T16:00:00 Last Updated: 2024-08-05T18:36:56.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The row_is_empty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a crafted djvu file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100419 - http://seclists.org/fulldisclosure/2017/Aug/15
CVE ID: CVE-2017-12442 State: PUBLISHED Published: 2017-08-17T16:00:00 Last Updated: 2024-08-05T18:36:56.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The row_is_empty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a crafted djvu file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Aug/15 - http://www.securityfocus.com/bid/100421
CVE ID: CVE-2017-12443 State: PUBLISHED Published: 2017-08-17T16:00:00 Last Updated: 2024-08-05T18:36:56.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mdjvu_bitmap_pack_row function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a crafted djvu file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Aug/15 - http://www.securityfocus.com/bid/100422
CVE ID: CVE-2017-12444 State: PUBLISHED Published: 2017-08-17T16:00:00 Last Updated: 2024-08-05T18:36:56.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mdjvu_bitmap_get_bounding_box function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a crafted djvu file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100416 - http://seclists.org/fulldisclosure/2017/Aug/15
CVE ID: CVE-2017-12445 State: PUBLISHED Published: 2017-08-17T16:00:00 Last Updated: 2024-08-05T18:36:56.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JB2BitmapCoder::code_row_by_refinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a crafted djvu file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Aug/15 - http://www.securityfocus.com/bid/100423
CVE ID: CVE-2017-12447 State: PUBLISHED Published: 2019-03-07T22:00:00 Last Updated: 2024-08-05T18:36:56.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=785979 - https://github.com/hackerlib/hackerlib-vul/tree/master/gnome - https://usn.ubuntu.com/3912-1/
CVE ID: CVE-2017-12448 State: PUBLISHED Published: 2017-08-04T15:00:00Z Last Updated: 2024-09-17T00:20:52.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and possibly achieve code execution via a crafted nested archive file. This issue occurs because incorrect functions are called during an attempt to release memory. The issue can be addressed by better input validation in the bfd_generic_archive_p function in bfd/archive.c. Additional Analyst Notes: - CVE Program Container
put validation in the bfd_generic_archive_p function in bfd/archive.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21787
CVE ID: CVE-2017-12449 State: PUBLISHED Published: 2017-08-04T15:00:00Z Last Updated: 2024-09-17T00:26:45.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21840
CVE ID: CVE-2017-12450 State: PUBLISHED Published: 2017-08-04T15:00:00Z Last Updated: 2024-09-16T23:10:27.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted vms alpha file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21813
CVE ID: CVE-2017-12451 State: PUBLISHED Published: 2017-08-04T15:00:00Z Last Updated: 2024-09-16T19:36:39.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds stack read via a crafted COFF image file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21786
CVE ID: CVE-2017-12452 State: PUBLISHED Published: 2017-08-04T15:00:00Z Last Updated: 2024-09-16T23:00:58.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted mach-o file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21813
CVE ID: CVE-2017-12453 State: PUBLISHED Published: 2017-08-04T15:00:00Z Last Updated: 2024-09-16T22:30:51.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21813
CVE ID: CVE-2017-12454 State: PUBLISHED Published: 2017-08-04T15:00:00Z Last Updated: 2024-09-16T16:28:22.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21813
CVE ID: CVE-2017-12455 State: PUBLISHED Published: 2017-08-04T15:00:00Z Last Updated: 2024-09-16T16:49:15.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: The evax_bfd_print_emh function in vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21840
CVE ID: CVE-2017-12456 State: PUBLISHED Published: 2017-08-04T15:00:00 Last Updated: 2024-08-05T18:36:56.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201801-01 - https://sourceware.org/bugzilla/show_bug.cgi?id=21813
CVE ID: CVE-2017-12457 State: PUBLISHED Published: 2017-08-04T15:00:00Z Last Updated: 2024-09-16T22:02:30.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bfd_make_section_with_flags function in section.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a NULL dereference via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21840
CVE ID: CVE-2017-12458 State: PUBLISHED Published: 2017-08-04T15:00:00Z Last Updated: 2024-09-17T01:27:04.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted nlm file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21840