Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-11091 State: PUBLISHED Published: 2017-11-16T22:00:00Z Last Updated: 2024-09-16T17:38:17.227Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Display Description: In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function mdss_rotator_ioctl in the driver /dev/mdss_rotator, a Use-After-Free condition can potentially occur due to a fence being installed too early. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01
CVE ID: CVE-2017-11092 State: PUBLISHED Published: 2017-11-16T22:00:00Z Last Updated: 2024-09-17T01:16:56.029Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Use After Free in Graphics Description: In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the KGSL driver function kgsl_ioctl_gpu_command, a Use After Free condition can potentially occur. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101774 - https://source.android.com/security/bulletin/2017-11-01
CVE ID: CVE-2017-11093 State: PUBLISHED Published: 2017-11-16T22:00:00Z Last Updated: 2024-09-16T16:54:15.844Z Vendors: Qualcomm, Inc. Products: Android for MSM, Firefox OS for MSM, QRD Android Problem Types: Buffer Over-read in Display Description: In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer Over-read in Display due to the lack of an upper-bound validation when reading "num_of_cea_blocks" from the untrusted source (EDID), kernel memory can be exposed. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2017-11-01
CVE ID: CVE-2017-11096 State: PUBLISHED Published: 2017-07-07T18:00:00Z Last Updated: 2024-09-16T17:33:30.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_DeleteFilter() function in lib/modules/swffilter.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/25
CVE ID: CVE-2017-11097 State: PUBLISHED Published: 2017-07-07T18:00:00Z Last Updated: 2024-09-16T23:50:43.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dict_lookup() function in lib/q.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/24
CVE ID: CVE-2017-11098 State: PUBLISHED Published: 2017-07-07T18:00:00Z Last Updated: 2024-09-16T16:28:08.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: When SWFTools 0.9.2 processes a crafted file in png2swf, it can lead to a Segmentation Violation in the png_load() function in lib/png.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/32
CVE ID: CVE-2017-11099 State: PUBLISHED Published: 2017-07-07T18:00:00Z Last Updated: 2024-09-17T01:16:59.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wav_convert2mono() function in lib/wav.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/31
CVE ID: CVE-2017-11100 State: PUBLISHED Published: 2017-07-07T18:00:00Z Last Updated: 2024-09-17T01:31:49.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swf_FoldSprite() function in lib/rxfswf.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/27
CVE ID: CVE-2017-11101 State: PUBLISHED Published: 2017-07-07T18:00:00Z Last Updated: 2024-09-16T18:09:08.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_Relocate() function in lib/modules/swftools.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/26
CVE ID: CVE-2017-11102 State: PUBLISHED Published: 2017-07-07T18:00:00 Last Updated: 2024-08-05T17:57:57.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (application crash) during JNG reading via a zero-length color_image data structure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99498 - http://hg.code.sf.net/p/graphicsmagick/code/rev/dea93a690fc1 - http://hg.code.sf.net/p/graphicsmagick/code/rev/d445af60a8d5 - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announc
gick/code/rev/d445af60a8d5 - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - https://usn.ubuntu.com/4206-1/
CVE ID: CVE-2017-11103 State: PUBLISHED Published: 2017-07-13T13:00:00 Last Updated: 2024-08-05T17:57:57.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other produc
n opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3912 - https://support.apple.com/HT208144 - https://www.orpheus-lyre.info/ - https://www.freebsd.org/security/advisories/FreeBSD-SA-17:05.heimdal.asc - http://www.securityfocus.com/bid/99551 - http://www.securitytracker.com/id/1039427 - https://www.samba.org/samba/security/CVE-2017-11103.html - http
/bid/99551 - http://www.securitytracker.com/id/1039427 - https://www.samba.org/samba/security/CVE-2017-11103.html - http://www.securitytracker.com/id/1038876 - https://support.apple.com/HT208112 - https://github.com/heimdal/heimdal/releases/tag/heimdal-7.4.0 - http://www.h5l.org/advisories.html?show=2017-07-11
CVE ID: CVE-2017-11104 State: PUBLISHED Published: 2017-07-08T10:00:00 Last Updated: 2024-08-05T17:57:57.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSIG validity period check. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3910 - http://www.securityfocus.com/bid/99598 - https://bugs.debian.org/865678 - http://www.synacktiv.ninja/ressources/Knot_DNS_TSIG_Sig
w.securityfocus.com/bid/99598 - https://bugs.debian.org/865678 - http://www.synacktiv.ninja/ressources/Knot_DNS_TSIG_Signature_Forgery.pdf - https://lists.nic.cz/pipermail/knot-dns-users/2017-June/001144.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00078.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00076.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00089.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00049.html
CVE ID: CVE-2017-11105 State: PUBLISHED Published: 2017-08-03T08:00:00 Last Updated: 2024-08-05T17:57:57.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OnePlus 2 Primary Bootloader (PBL) does not validate the SBL1 partition before executing it, although it contains a certificate. This allows attackers with write access to that partition to disable signature validation. Additional Analyst Notes: - CVE Program Container: References: - https://alephsecurity.com/vulns/aleph-2017026
CVE ID: CVE-2017-11107 State: PUBLISHED Published: 2017-07-08T12:00:00 Last Updated: 2024-08-05T17:57:57.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the form, element, rdn, or container parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/leenooks/phpLDAPadmin/issues/50 - https://lists.debian.org/debian-lts-announce/2018/10/msg00023.html - https://bugs.launchpad.net/ubuntu/+source/phpldapadmin/+bug/1701731
CVE ID: CVE-2017-11108 State: PUBLISHED Published: 2017-07-08T17:00:00 Last Updated: 2024-08-05T17:57:57.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://bugzilla.redhat.com/show_bug.cgi?id=1468504 - https://access.redhat.c
://www.debian.org/security/2017/dsa-3971 - https://bugzilla.redhat.com/show_bug.cgi?id=1468504 - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-11109 State: PUBLISHED Published: 2017-07-08T17:00:00 Last Updated: 2024-08-05T17:57:57.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a crafted source (aka -S) file. NOTE: there might be a limited number of scenarios in which this has security relevance. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1468492 - https://lists.debian.org/debian-lts-announce/2019/08/msg00003.html - https://usn.ubuntu.com/4309-1/
CVE ID: CVE-2017-11110 State: PUBLISHED Published: 2017-07-08T17:00:00 Last Updated: 2024-08-05T17:57:57.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1468471
CVE ID: CVE-2017-11111 State: PUBLISHED Published: 2017-07-08T17:00:00 Last Updated: 2024-08-05T17:57:57.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392415 - https://usn.ubuntu.com/3694-1/ - https://security.gentoo.org/glsa/201903-19
CVE ID: CVE-2017-11112 State: PUBLISHED Published: 2017-07-08T17:00:00 Last Updated: 2024-08-05T17:57:57.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201804-13 - https://bugzilla.redhat.com/show_bug.cgi?id=1464686
CVE ID: CVE-2017-11113 State: PUBLISHED Published: 2017-07-08T17:00:00 Last Updated: 2024-08-05T17:57:57.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201804-13 - https://bugzilla.redhat.com/show_bug.cgi?id=1464691
CVE ID: CVE-2017-11114 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T17:57:57.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a crafted HTML file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/76
CVE ID: CVE-2017-11115 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T17:57:57.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted jpg file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/openexif/bugs/18/ - http://seclists.org/fulldisclosure/2017/Jul/77
CVE ID: CVE-2017-11116 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T17:57:58.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted jpg file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/openexif/bugs/18/ - http://seclists.org/fulldisclosure/2017/Jul/77
CVE ID: CVE-2017-11117 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T17:57:58.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted jpg file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/openexif/bugs/18/ - http://seclists.org/fulldisclosure/2017/Jul/77
CVE ID: CVE-2017-11118 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T17:57:57.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted jpg file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/openexif/bugs/18/ - http://seclists.org/fulldisclosure/2017/Jul/77
CVE ID: CVE-2017-11119 State: PUBLISHED Published: 2017-07-31T13:00:00 Last Updated: 2024-08-05T17:57:58.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chk_mem_access function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted nsf file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/78
CVE ID: CVE-2017-11120 State: PUBLISHED Published: 2017-09-27T17:00:00 Last Updated: 2024-08-05T17:57:58.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka B-V2017061204. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144328/Broadcom-802.11k-Neighbor-Report-Response-Out-Of-Bounds-Write.html - http://www.securityfocus.com/bid/100984 - https://source.android.com/security/bulletin/2017-09-01 - https://lists.apple.com/archives/security-a
s.com/bid/100984 - https://source.android.com/security/bulletin/2017-09-01 - https://lists.apple.com/archives/security-announce/2017/Sep/msg00009.html - https://www.exploit-db.com/exploits/42784/ - https://lists.apple.com/archives/security-announce/2017/Sep/msg00007.html - https://bugs.chromium.org/p/project-zero/issues/detail?id=1289 - https://support.apple.com/en-us/HT208113 - https://support.apple.com/en-us/HT208112 - https://support.apple.com/HT208113 - https://support.apple.com/HT208112
CVE ID: CVE-2017-11121 State: PUBLISHED Published: 2017-09-27T17:00:00 Last Updated: 2024-08-05T17:57:57.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, properly crafted malicious over-the-air Fast Transition frames can potentially trigger internal Wi-Fi firmware heap and/or stack overflows, leading to denial of service or other effects, aka B-V2017061205. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100984 - https://source.android.com/security/bulletin/2017-09-01 - https://lists.apple.com/archives/security-announce/2017/Sep/msg00009.html - https://lists.a
curity/bulletin/2017-09-01 - https://lists.apple.com/archives/security-announce/2017/Sep/msg00009.html - https://lists.apple.com/archives/security-announce/2017/Sep/msg00007.html - http://packetstormsecurity.com/files/144329/Broadcom-802.11r-FT-Reassociation-Response-Overflows.html - https://support.apple.com/en-us/HT208113 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1291 - https://support.apple.com/en-us/HT208112 - https://support.apple.com/HT208113 - https://support.apple.com/HT208112
CVE ID: CVE-2017-11122 State: PUBLISHED Published: 2017-10-04T00:00:00 Last Updated: 2024-08-05T17:57:57.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56, an attacker can trigger an information leak due to insufficient length validation, related to ICMPv6 router advertisement offloading. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/144461/Broadcom-ICMPv6-Information-Leak.html - https://support.apple.com/en-us/HT208113 - https://support.apple.com/en-us/HT208112 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1300 - https://support.apple.com/HT208113 - https:/
HT208112 - https://bugs.chromium.org/p/project-zero/issues/detail?id=1300 - https://support.apple.com/HT208113 - https://support.apple.com/HT208112
CVE ID: CVE-2017-11124 State: PUBLISHED Published: 2017-07-10T03:00:00 Last Updated: 2024-08-05T17:57:57.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/06/28/xar-null-pointer-dereference-in-xar_unserialize-archive-c/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2S2KRIILUKBJHXDNYJQQX74TFUQRG5ND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YV6RF6VWM7AFYFTTS7VY5TNH26QUEEFC/
CVE ID: CVE-2017-11125 State: PUBLISHED Published: 2017-07-10T03:00:00 Last Updated: 2024-08-05T17:57:57.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/06/28/xar-null-pointer-dereference-in-xar_get_path-util-c/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2S2KRIILUKBJHXDNYJQQX74TFUQRG5ND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YV6RF6VWM7AFYFTTS7VY5TNH26QUEEFC/
CVE ID: CVE-2017-11126 State: PUBLISHED Published: 2017-07-10T03:00:00 Last Updated: 2024-08-05T17:57:58.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the "block_type != 2" case, a similar issue to CVE-2017-9870. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/07/03/mpg123-global-buffer-overflow-in-iii_i_stereo-layer3-c/ - http://openwall.com/lists/oss-security/2017/07/10/4
CVE ID: CVE-2017-11127 State: PUBLISHED Published: 2017-07-17T19:00:00 Last Updated: 2024-08-05T17:57:57.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header. Additional Analyst Notes: - CVE Program Container: References: - https://websecnerd.blogspot.in/2017/07/bolt-cms-3.html
CVE ID: CVE-2017-11128 State: PUBLISHED Published: 2017-07-17T19:00:00 Last Updated: 2024-08-05T17:57:57.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry. Additional Analyst Notes: - CVE Program Container: References: - https://websecnerd.blogspot.in/2017/07/bolt-cms-3.html
CVE ID: CVE-2017-11129 State: PUBLISHED Published: 2017-08-01T14:00:00 Last Updated: 2024-08-05T17:57:57.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The keystore is locked with a hard-coded password. Therefore, everyone with access to the keystore can read the content out, for example the private key of the user. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/90
CVE ID: CVE-2017-11130 State: PUBLISHED Published: 2017-08-01T14:00:00 Last Updated: 2024-08-05T17:57:57.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The product's protocol only tries to ensure confidentiality. In the whole protocol, no integrity or authenticity checks are done. Therefore man-in-the-middle attackers can conduct replay attacks. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/90
CVE ID: CVE-2017-11131 State: PUBLISHED Published: 2017-08-01T14:00:00 Last Updated: 2024-08-05T17:57:57.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. For authentication, the user password is hashed directly with SHA-512 without a salt or another key-derivation mechanism to enable a secure secret for authentication. Moreover, only the first 32 bytes of the hash are used. This allows for easy dictionary and rainbow-table attacks if an attacker has access to the password hash. Additional Analyst Notes: - CVE Program Container: References: - ht
acks if an attacker has access to the password hash. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/90