Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-20500 State: PUBLISHED Published: 2019-05-17T15:18:18 Last Updated: 2024-08-05T12:05:16.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: An insecure permissions issue was discovered in GitLab Community and Enterprise Edition 9.4 and later but before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. The runner registration token in the CI/CD settings could not be reset. This was a security risk if one of the maintainers leaves the group and they know the token. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2018/12/31/security-release-gitlab-11-dot-6-dot-1-rel
ut.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/2018/12/31/security-release-gitlab-11-dot-6-dot-1-released/
CVE ID: CVE-2018-20501 State: PUBLISHED Published: 2019-12-30T21:24:28 Last Updated: 2024-08-05T12:05:16.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2018/12/31/security-release-gitlab-11-dot-6-dot-1-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/53543
CVE ID: CVE-2018-20502 State: PUBLISHED Published: 2018-12-26T23:00:00Z Last Updated: 2024-09-17T00:07:21.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.5.1-627. There is an attempt at excessive memory allocation in the AP4_DataBuffer class when called from AP4_HvccAtom::Create in Core/Ap4HvccAtom.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/349
CVE ID: CVE-2018-20503 State: PUBLISHED Published: 2019-05-07T18:25:28 Last Updated: 2024-08-05T12:05:17.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151327/SirsiDynix-e-Library-3.5.x-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/46237/ - https://pentest.com.tr/exploits/Allied-Telesis-8100L-8-Cross-Site-Scripting.html
CVE ID: CVE-2018-20505 State: PUBLISHED Published: 2019-04-03T17:51:41 Last Updated: 2024-08-05T12:05:17.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Jan/62 - http://seclists.org/fulldisclosure/2019/Jan/64 - http://seclists.org/fulldisclosure/2019/Jan/66 - http://seclists.org/fulldisclosure/2019/Jan/67 - http://seclists.org/ful
ttp://seclists.org/fulldisclosure/2019/Jan/66 - http://seclists.org/fulldisclosure/2019/Jan/67 - http://seclists.org/fulldisclosure/2019/Jan/68 - http://seclists.org/fulldisclosure/2019/Jan/69 - http://www.securityfocus.com/bid/106698 - https://seclists.org/bugtraq/2019/Jan/28 - https://seclists.org/bugtraq/2019/Jan/29 - https://seclists.org/bugtraq/2019/Jan/31 - https://seclists.org/bugtraq/2019/Jan/32 - https://seclists.org/bugtraq/2019/Jan/33 - https://seclists.org/bugtraq/2019/Jan/39 - https://support.apple.com/kb/HT209443 - https://support.apple.com/kb/HT209446 - https://support.apple.com/kb/HT209447 - https://support.apple.com/kb/HT209448 - https://support.apple.com/kb/HT209450 - https
://support.apple.com/kb/HT209447 - https://support.apple.com/kb/HT209448 - https://support.apple.com/kb/HT209450 - https://support.apple.com/kb/HT209451 - https://sqlite.org/src/info/1a84668dcfdebaf12415d - https://security.netapp.com/advisory/ntap-20190502-0004/ - https://usn.ubuntu.com/4019-1/
CVE ID: CVE-2018-20506 State: PUBLISHED Published: 2019-04-03T17:50:54 Last Updated: 2024-08-05T12:05:17.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346. Additional Analyst Notes: - CVE Program Container: References: - https://sqlite.org/src/info/940f2adc8541a838
018-20346. Additional Analyst Notes: - CVE Program Container: References: - https://sqlite.org/src/info/940f2adc8541a838 - http://seclists.org/fulldisclosure/2019/Jan/62 - http://seclists.org/fulldisclosure/2019/Jan/64 - http://seclists.org/fulldisclosure/2019/Jan/66 - http://seclists.org/fulldisclosure/2019/Jan/67 - http://seclists.org/fulldisclosure/2019/Jan/68 - http://seclists.org/fulldisclosure/2019/Jan/69 - http://www.securityfocus.com/bid/106698 - https://seclists.org/bugtraq/2019/Jan/28 - https://seclists.org/bugtraq/2019/Jan/29 - https://seclists.org/bugtraq/2019/Jan/31 - https://seclists.org/bugtraq/2019/Jan/32 - https://seclists.org/bugtraq/2019/Jan/33 - https://seclists.org/bugtr
an/31 - https://seclists.org/bugtraq/2019/Jan/32 - https://seclists.org/bugtraq/2019/Jan/33 - https://seclists.org/bugtraq/2019/Jan/39 - https://support.apple.com/kb/HT209443 - https://support.apple.com/kb/HT209446 - https://support.apple.com/kb/HT209447 - https://support.apple.com/kb/HT209448 - https://support.apple.com/kb/HT209450 - https://support.apple.com/kb/HT209451 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00070.html - https://security.netapp.com/advisory/ntap-20190502-0004/ - https://usn.ubuntu.com/4019-1/ - https://usn.ubuntu.com/4019-2/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00037.ht
ttps://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10365
CVE ID: CVE-2018-20507 State: PUBLISHED Published: 2019-12-30T21:24:28 Last Updated: 2024-08-05T12:05:16.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Enterprise Edition 11.2.x through 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2018/12/31/security-release-gitlab-11-dot-6-dot-1-released/
CVE ID: CVE-2018-20508 State: PUBLISHED Published: 2018-12-27T13:00:00Z Last Updated: 2024-09-16T19:35:14.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: CrashFix 1.0.4 has SQL Injection via the User[status] parameter. This is related to actionIndex in UserController.php, and the protected\models\User.php search() function. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/crashfix/tickets/21/
CVE ID: CVE-2018-20509 State: PUBLISHED Published: 2019-04-30T17:06:17 Last Updated: 2024-08-05T12:05:17.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The print_binder_ref_olocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading " ref *desc *node" lines in a debugfs file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yellow-Pay/CVE/blob/master/CVE-2018-20509.md - https://www.mail-archive.com/debian-security-tracker%40lists.debian.org/msg03902.html - https://security.netapp.com/advisory/ntap-20190517-0002/
CVE ID: CVE-2018-20510 State: PUBLISHED Published: 2019-04-30T17:12:38 Last Updated: 2024-08-05T12:05:17.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: The print_binder_transaction_ilocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "*from *code *flags" lines in a debugfs file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yellow-Pay/CVE/blob/master/CVE-2018-20510 - http://www.securityfocus.com/bid/108125
CVE ID: CVE-2018-20511 State: PUBLISHED Published: 2018-12-27T14:00:00 Last Updated: 2024-08-05T12:05:16.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 4.18.11. The ipddp_ioctl function in drivers/net/appletalk/ipddp.c allows local users to obtain sensitive kernel address information by leveraging CAP_NET_ADMIN to read the ipddp_route dev and next fields via an SIOCFINDIPDDPRT ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9824dfae5741275473a23a7ed5756c7b6efacc9d - https://lkml.org/lkml/2018/9/27/480 - https://github.com/t
nux.git/commit/?id=9824dfae5741275473a23a7ed5756c7b6efacc9d - https://lkml.org/lkml/2018/9/27/480 - https://github.com/torvalds/linux/commit/9824dfae5741275473a23a7ed5756c7b6efacc9d - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.11 - http://www.securityfocus.com/bid/106347 - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/
CVE ID: CVE-2018-20512 State: PUBLISHED Published: 2019-01-03T19:00:00 Last Updated: 2024-08-05T12:05:17.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: EPON CPE-WiFi devices 2.0.4-X000 are vulnerable to escalation of privileges by sending cooLogin=1, cooUser=admin, and timestamp=-1 cookies. Additional Analyst Notes: - CVE Program Container: References: - https://www.reddit.com/r/networking/comments/abu4kq/vulnerability_in_cdata_technologies_epon_cpewifi/
CVE ID: CVE-2018-20519 State: PUBLISHED Published: 2018-12-27T15:00:00Z Last Updated: 2024-09-16T19:15:15.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal&a=ajax_save_basic pid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/coolboy0816/audit/issues/2
CVE ID: CVE-2018-20520 State: PUBLISHED Published: 2018-12-27T15:00:00 Last Updated: 2024-08-05T12:05:17.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and CVE-2018-16233. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bg5sbk/MiniCMS/issues/27
CVE ID: CVE-2018-20523 State: PUBLISHED Published: 2019-06-07T15:36:55 Last Updated: 2024-08-05T12:05:17.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other words, a third-party application can read the user's cleartext browser history via an app.provider.query content://com.android.browser.searchhistory/searchhistory request. Additional Analyst Notes: - CVE Program Container: References: - https://sec.xiaomi.com - https://vishwarajbhattrai.wordpress.com/2019/03/22/content-provider-injection-in-xiaomi-stock-browser - http://packetstormsecurit
ishwarajbhattrai.wordpress.com/2019/03/22/content-provider-injection-in-xiaomi-stock-browser - http://packetstormsecurity.com/files/163796/Xiaomi-10.2.4.g-Information-Disclosure.html
CVE ID: CVE-2018-20524 State: PUBLISHED Published: 2018-12-27T17:00:00Z Last Updated: 2024-09-17T03:18:30.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Chat Anywhere extension 2.4.0 for Chrome allows XSS via crafted use of <<a> in a message, because a danmuWrapper DIV element in chatbox-only\danmu.js is outside the scope of a Content Security Policy (CSP). Additional Analyst Notes: - CVE Program Container: References: - https://vul.su.ki/posts/Chat_Anywhere_2.4.0_XSS.md/
CVE ID: CVE-2018-20525 State: PUBLISHED Published: 2019-03-18T15:21:12 Last Updated: 2024-08-05T12:05:17.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151033/Roxy-Fileman-1.4.5-File-Upload-Directory-Traversal.html - https://www.exploit-db.com/exploits/46085/ - http://packetstormsecurity.com/files/166585/Roxy-File-Manager-1.4.5-PHP-File-Upload-Restriction-Bypass.html
CVE ID: CVE-2018-20526 State: PUBLISHED Published: 2019-03-18T15:25:18 Last Updated: 2024-08-05T12:05:17.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151033/Roxy-Fileman-1.4.5-File-Upload-Directory-Traversal.html - https://www.exploit-db.com/exploits/46085/
CVE ID: CVE-2018-20528 State: PUBLISHED Published: 2018-12-27T18:00:00Z Last Updated: 2024-09-17T02:26:46.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter. Additional Analyst Notes: - CVE Program Container: References: - http://hacker.feiyulive.com/wordpress/index.php/116/
CVE ID: CVE-2018-20530 State: PUBLISHED Published: 2018-12-27T18:00:00 Last Updated: 2024-08-05T12:05:17.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896. Additional Analyst Notes: - CVE Program Container: References: - https://suku90.wordpress.com/2018/12/27/php-scripts-mall-website-seller-script-2-0-5-stored-and-reflected-xss/
CVE ID: CVE-2018-20532 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openSUSE/libsolv/pull/291 - https://bugzilla.redhat.com/show_bug.cgi?id=1652605 - https://usn.ubuntu.com/3916-1/ - https://access.redhat.com/errata/RHSA-2019:2290 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00057.html
CVE ID: CVE-2018-20533 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1652599 - https://github.com/openSUSE/libsolv/pull/291 - https://usn.ubuntu.com/3916-1/ - https://access.redhat.com/errata/RHSA-2019:2290 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00057.html
CVE ID: CVE-2018-20534 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1652604 - https://github.com/openSUSE/libsolv/pull/291 - https://usn.ubuntu.com/3916-1/ - https://bugzilla.suse.com/show_bug
604 - https://github.com/openSUSE/libsolv/pull/291 - https://usn.ubuntu.com/3916-1/ - https://bugzilla.suse.com/show_bug.cgi?id=1120631 - https://access.redhat.com/errata/RHSA-2019:2290 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00057.html - https://access.redhat.com/errata/RHSA-2019:3583
CVE ID: CVE-2018-20535 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during a line-number increment attempt. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392530
CVE ID: CVE-2018-20536 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer over-read at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1652610 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3TPVZSUWM5TEAMCBL3Y7QLGQSLCCJFIT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFI3F3PRKPXOITWD47LF6ON4L5MJ
://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFI3F3PRKPXOITWD47LF6ON4L5MJQQYM/
CVE ID: CVE-2018-20537 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a NULL pointer dereference at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1652611 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3TPVZSUWM5TEAMCBL3Y7QLGQSLCCJFIT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFI3F3PRKPXOITWD47LF6ON4L5MJQQY
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFI3F3PRKPXOITWD47LF6ON4L5MJQQYM/
CVE ID: CVE-2018-20538 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during certain finishes tests. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392531
CVE ID: CVE-2018-20539 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Segmentation fault triggered by illegal address access at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1652609 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3TPVZSUWM5TEAMCBL3Y7QLGQSLCCJFIT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y
CBL3Y7QLGQSLCCJFIT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFI3F3PRKPXOITWD47LF6ON4L5MJQQYM/
CVE ID: CVE-2018-20540 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is memory leak at liblas::Open (liblas/liblas.hpp) in libLAS 1.8.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1652612 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3TPVZSUWM5TEAMCBL3Y7QLGQSLCCJFIT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFI3F3PRKPXOITWD47LF6ON4L5MJQQYM/
CVE ID: CVE-2018-20541 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer overflow in libxsmm_sparse_csc_reader at generator_spgemm_csc_reader.c in LIBXSMM 1.10, a different vulnerability than CVE-2018-20542 (which is in a different part of the source code and is seen at different addresses). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hfp/libxsmm/issues/287 - https://bugzilla.redhat.com/show_bug.cgi?id=1652632 - https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d
CVE ID: CVE-2018-20542 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer-overflow at generator_spgemm_csc_reader.c (function libxsmm_sparse_csc_reader) in LIBXSMM 1.10, a different vulnerability than CVE-2018-20541 (which is in a different part of the source code and is seen at a different address). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1652633 - https://github.com/hfp/libxsmm/issues/287 - https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d - https://bugzilla.redhat.com/sh
es/287 - https://github.com/hfp/libxsmm/commit/151481489192e6d1997f8bde52c5c425ea41741d - https://bugzilla.redhat.com/show_bug.cgi?id=1652635
CVE ID: CVE-2018-20543 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an attempted excessive memory allocation at libxsmm_sparse_csc_reader in generator_spgemm_csc_reader.c in LIBXSMM 1.10 that will cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1652634
CVE ID: CVE-2018-20544 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is floating point exception at caca/dither.c (function caca_dither_bitmap) in libcaca 0.99.beta19. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3860-2/ - https://lists.debian.org/debian-lts-announce/2019/01/msg00007.html - https://bugzilla.redhat.com/show_bug.cgi?id=1652627 - https://usn.ubuntu.com/3860-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html
CVE ID: CVE-2018-20545 State: PUBLISHED Published: 2018-12-28T03:00:00 Last Updated: 2024-08-05T12:05:17.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal WRITE memory access at common-image.c (function load_image) in libcaca 0.99.beta19 for 4bpp data. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3860-2/ - https://bugzilla.redhat.com/show_bug.cgi?id=1652621 - https://usn.ubuntu.com/3860-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00033.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ - https://lists.fedo