Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-14127 State: PUBLISHED Published: 2017-09-04T20:00:00 Last Updated: 2024-08-05T19:20:39.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI_Fw_v7 devices allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the pingAddr parameter to mnt_ping.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://jordyf.me/2017/09/02/technicolor-pwn.html
CVE ID: CVE-2017-14128 State: PUBLISHED Published: 2017-09-04T20:00:00 Last Updated: 2024-08-05T19:20:40.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (read_1_byte heap-based buffer over-read and application crash) via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100623 - https://security.gentoo.org/glsa/201801-01 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=7e8b60085eb3e6f2c41bc0c00c0d759fa7f72780
g/glsa/201801-01 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=7e8b60085eb3e6f2c41bc0c00c0d759fa7f72780 - https://sourceware.org/bugzilla/show_bug.cgi?id=22059
CVE ID: CVE-2017-14129 State: PUBLISHED Published: 2017-09-04T20:00:00 Last Updated: 2024-08-05T19:20:40.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (parse_comp_unit heap-based buffer over-read and application crash) via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=e4f2723003859dc6b33ca0dadbc4a7659ebf1643 - https://sourceware.org/bugzilla/show_bug.cgi?id=22047 - https://security.gentoo.org/
003859dc6b33ca0dadbc4a7659ebf1643 - https://sourceware.org/bugzilla/show_bug.cgi?id=22047 - https://security.gentoo.org/glsa/201801-01 - http://www.securityfocus.com/bid/100624
CVE ID: CVE-2017-14130 State: PUBLISHED Published: 2017-09-04T20:00:00 Last Updated: 2024-08-05T19:20:41.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (_bfd_elf_attr_strdup heap-based buffer over-read and application crash) via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201801-01 - http://www.securityfocus.com/bid/100625 - https://sourceware.org/bugzilla/show_bug.cgi?id=22058 - https://sourceware.org/g
tp://www.securityfocus.com/bid/100625 - https://sourceware.org/bugzilla/show_bug.cgi?id=22058 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=2a143b99fc4a5094a9cf128f3184d8e6818c8229
CVE ID: CVE-2017-14132 State: PUBLISHED Published: 2017-09-04T20:00:00 Last Updated: 2024-08-05T19:20:41.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp
of service (heap-based buffer over-read and application crash) via a crafted image, related to the jas_image_ishomosamp function in libjasper/base/jas_image.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/11/msg00023.html - https://github.com/mdadams/jasper/issues/147 - https://security.gentoo.org/glsa/201908-03 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraprojec
s/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/
CVE ID: CVE-2017-14134 State: PUBLISHED Published: 2017-12-16T19:00:00 Last Updated: 2024-08-05T19:20:40.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected XSS Vulnerability affects the forgotten password page of Maplesoft Maple T.A. 2016.0.6 (Customer Hosted) via the emailAddress parameter to passwordreset/PasswordReset.do, aka Open Bug Bounty ID OBB-286688. Additional Analyst Notes: - CVE Program Container: References: - https://www.openbugbounty.org/reports/286688/
CVE ID: CVE-2017-14135 State: PUBLISHED Published: 2017-09-04T23:00:00 Last Updated: 2024-08-05T19:20:41.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI. Additional Analyst Notes: - CVE Program Container: References: - https://the-infosec.com/2017/07/05/from-shodan-to-rce-opendreambox-2-0-0-code-execution/
CVE ID: CVE-2017-14136 State: PUBLISHED Published: 2017-09-04T23:00:00 Last Updated: 2024-08-05T19:20:40.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12597. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html - https://security.gentoo.org/glsa/201712-02 - https://github.com/xiaoqx/pocs/blob/master/opencv.md - https://github.com/opencv/opencv/pull/9448
.org/glsa/201712-02 - https://github.com/xiaoqx/pocs/blob/master/opencv.md - https://github.com/opencv/opencv/pull/9448 - https://github.com/opencv/opencv/issues/9443
CVE ID: CVE-2017-14137 State: PUBLISHED Published: 2017-09-04T23:00:00 Last Updated: 2024-08-05T19:20:40.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201711-07 - https://github.com/ImageMagick/ImageMagick/issues/641
CVE ID: CVE-2017-14138 State: PUBLISHED Published: 2017-09-04T23:00:00 Last Updated: 2024-08-05T19:20:39.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201711-07 - https://github.com/ImageMagick/ImageMagick/issues/639
CVE ID: CVE-2017-14139 State: PUBLISHED Published: 2017-09-04T23:00:00 Last Updated: 2024-08-05T19:20:40.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201711-07 - https://github.com/ImageMagick/ImageMagick/issues/578
CVE ID: CVE-2017-14140 State: PUBLISHED Published: 2017-09-05T06:00:00 Last Updated: 2024-08-05T19:20:40.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the target process, enabling a local attacker to learn the memory layout of a setuid executable despite ASLR. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.9 - https://usn.ubuntu.com/3583-2/ - https://access.redhat.com/errata/RHSA-2018:1062 - https://source.android.com/security/bulletin/pixel/2018-01-01 - http://www.debian.org/security/201
rata/RHSA-2018:1062 - https://source.android.com/security/bulletin/pixel/2018-01-01 - http://www.debian.org/security/2017/dsa-3981 - https://usn.ubuntu.com/3583-1/ - https://access.redhat.com/errata/RHSA-2018:0676 - https://github.com/torvalds/linux/commit/197e7e521384a23b9e585178f3f11c9fa08274b9 - http://www.securityfocus.com/bid/100876 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=197e7e521384a23b9e585178f3f11c9fa08274b9
CVE ID: CVE-2017-14141 State: PUBLISHED Published: 2017-09-19T15:00:00 Last Updated: 2024-08-05T19:20:41.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wiki_decode Developer System Helper function in the admin panel in Kaltura before 13.2.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kaltura/server/commit/6a6d14328b7a1493e8c47f9565461e5f88be20c9#diff-0770640cc76112cbf77bebc604852682 - https://telekomsecurity.github.io/assets/advisories/20170912_kaltura-advisory.txt - http://www.securityfocus.com/bid/100976
CVE ID: CVE-2017-14142 State: PUBLISHED Published: 2017-09-19T15:00:00 Last Updated: 2024-08-05T19:20:41.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Kaltura before 13.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) partnerId or (2) playerVersion parameter to server/admin_console/web/tools/bigRedButton.php; the (3) partnerId, (4) playerVersion, (5) secret, (6) entryId, (7) adminUiConfId, or (8) uiConfId parameter to server/admin_console/web/tools/bigRedButtonPtsPoc.php; the (9) streamUsername, (10) streamPassword, (11) streamRemoteId, (12) streamRemoteBackupId, or (13) entryId parameter to
he (9) streamUsername, (10) streamPassword, (11) streamRemoteId, (12) streamRemoteBackupId, or (13) entryId parameter to server/admin_console/web/tools/AkamaiBroadcaster.php; the (14) entryId parameter to server/admin_console/web/tools/XmlJWPlayer.php; or the (15) partnerId or (16) playerVersion parameter to server/alpha/web/lib/bigRedButtonPtsPocHlsjs.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kaltura/server/pull/6003/commits/7e00a578d6ba748f6d3bdc255a40a4a0a594e6f9 - https://telekomsecurity.github.io/assets/advisories/20170912_kaltura-advisory.txt - http://www.securityfocus.com/bid/100976 - https://github.com/kaltura/server/pull/6003/commits/a6
_kaltura-advisory.txt - http://www.securityfocus.com/bid/100976 - https://github.com/kaltura/server/pull/6003/commits/a63362aa87d668d5ebf4a89cdd5bb8b815ac7f70
CVE ID: CVE-2017-14143 State: PUBLISHED Published: 2017-09-19T15:00:00 Last Updated: 2024-08-05T19:20:41.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, which allows remote attackers to bypass an intended protection mechanism and consequently conduct PHP object injection attacks and execute arbitrary PHP code via a crafted userzone cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kaltura/server/commit/6a6d14328b7a1493e8c47f9565461e5f88be20c9#diff-0770640cc76112cbf77bebc604852682 - https://www.exploit-db.com/exploits/4
t/6a6d14328b7a1493e8c47f9565461e5f88be20c9#diff-0770640cc76112cbf77bebc604852682 - https://www.exploit-db.com/exploits/43028/ - https://www.exploit-db.com/exploits/43876/ - https://telekomsecurity.github.io/assets/advisories/20170912_kaltura-advisory.txt - http://www.securityfocus.com/bid/100976
CVE ID: CVE-2017-14145 State: PUBLISHED Published: 2017-09-05T07:00:00Z Last Updated: 2024-09-16T19:31:30.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the admin/login/getWarningInfo/id/ PATH_INFO, related to the selectWarning function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/M4ple/vulnerability/blob/master/helpdezk_sql/helpdezk_sql_injection.md
CVE ID: CVE-2017-14146 State: PUBLISHED Published: 2017-09-05T07:00:00Z Last Updated: 2024-09-16T18:23:41.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it in the helpdezk\app\uploads\helpdezk\attachments\ directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/M4ple/vulnerability/blob/master/helpdezk_file_upload/helpdezk_file_upload.md
CVE ID: CVE-2017-14147 State: PUBLISHED Published: 2017-09-07T14:00:00 Last Updated: 2024-08-05T19:20:40.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://[Default-Router-IP]/restoreinfo.cgi & execute it. Due to improper authentication on this page, the software accepts the request hence allowing attacker to reset the router to its default configurations which later could allow attacker to login to router by using default username/password. Additional Analyst Notes: - CVE Progr
later could allow attacker to login to router by using default username/password. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42649/ - http://packetstormsecurity.com/files/144022/FiberHome-Unauthenticated-ADSL-Router-Factory-Reset.html - https://beefaaubee09.github.io/fiberhome-adsls-dos/
CVE ID: CVE-2017-14149 State: PUBLISHED Published: 2017-09-05T07:00:00Z Last Updated: 2024-09-16T18:55:35.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a "POST / HTTP/1.1" request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shadow4u/goaheaddebug/blob/master/README.md
CVE ID: CVE-2017-14151 State: PUBLISHED Published: 2017-09-05T16:00:00 Last Updated: 2024-08-05T19:20:40.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_mqc_flush in lib/openjp2/mqc.c and opj_t1_encode_cblk in lib/openjp2/t1.c) or possibly remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uclouvain/openjpeg/issues/982 - http://www.debian.org/security/2017/dsa-4013 - http://ww
eferences: - https://github.com/uclouvain/openjpeg/issues/982 - http://www.debian.org/security/2017/dsa-4013 - http://www.securityfocus.com/bid/100633 - https://github.com/uclouvain/openjpeg/commit/afb308b9ccbe129608c9205cf3bb39bbefad90b9 - https://blogs.gentoo.org/ago/2017/08/16/openjpeg-heap-based-buffer-overflow-in-opj_mqc_flush-mqc-c/
CVE ID: CVE-2017-14152 State: PUBLISHED Published: 2017-09-05T16:00:00 Last Updated: 2024-08-05T19:20:41.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c and opj_j2k_write_sot in lib/openjp2/j2k.c) or possibly remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-4013 - https://github.com/uclouvain/openjpeg/commit/4241ae6fbbf1de
References: - http://www.debian.org/security/2017/dsa-4013 - https://github.com/uclouvain/openjpeg/commit/4241ae6fbbf1de9658764a80944dc8108f2b4154 - https://github.com/uclouvain/openjpeg/issues/985 - https://blogs.gentoo.org/ago/2017/08/16/openjpeg-heap-based-buffer-overflow-in-opj_write_bytes_le-cio-c/
CVE ID: CVE-2017-14153 State: PUBLISHED Published: 2017-09-11T17:00:00 Last Updated: 2024-08-05T19:20:40.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x953824b7 by the windrvr1240 kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in a kernel pool overflow. An attacker can leverage this vulnerability to execute arbitrary code under th
ich can result in a kernel pool overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of kernel. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/42624/ - http://packetstormsecurity.com/files/144046/Jungo-DriverWizard-WinDrive-Overflow.html
CVE ID: CVE-2017-14156 State: PUBLISHED Published: 2017-09-05T17:00:00 Last Updated: 2024-08-05T19:20:41.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_base.c in the Linux kernel through 4.12.10 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading locations associated with padding bytes. Additional Analyst Notes: - CVE Program Container: References: - https://marc.info/?l=linux-kernel&m=150453196710422&w=2 - https://usn.ubuntu.com/3583-2/ - http://www.debian.org/security/2017/dsa-3981 - https://github.com/torvalds/linux/pull/441 - ht
/usn.ubuntu.com/3583-2/ - http://www.debian.org/security/2017/dsa-3981 - https://github.com/torvalds/linux/pull/441 - https://usn.ubuntu.com/3583-1/ - http://www.securityfocus.com/bid/100634 - https://marc.info/?l=linux-kernel&m=150401461613306&w=2
CVE ID: CVE-2017-14158 State: PUBLISHED Published: 2017-09-05T17:00:00 Last Updated: 2024-08-05T19:20:41.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by interaction between dataReceived (in core/downloader/handlers/http11.py) and S3FilesStore. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/scrapy/scrapy/issues/482 - http://blog.csdn.net/wangtua/art
s: - CVE Program Container: References: - https://github.com/scrapy/scrapy/issues/482 - http://blog.csdn.net/wangtua/article/details/75228728
CVE ID: CVE-2017-14159 State: PUBLISHED Published: 2017-09-05T18:00:00 Last Updated: 2024-08-05T19:20:41.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command, as demonstrated by openldap-initscript. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpuapr2022.html - http://www.openldap.org/its/index.cgi?findid=8703
CVE ID: CVE-2017-14160 State: PUBLISHED Published: 2017-09-21T14:00:00 Last Updated: 2024-08-05T19:20:40.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101045 - http://openwall.com/lists/oss-security/2017/09/21/2 - https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html - https://security.gentoo.org/glsa/202003-36 - https://lists.debian.o
bian.org/debian-lts-announce/2019/11/msg00031.html - https://security.gentoo.org/glsa/202003-36 - https://lists.debian.org/debian-lts-announce/2021/11/msg00023.html
CVE ID: CVE-2017-14163 State: PUBLISHED Published: 2017-10-31T18:00:00 Last Updated: 2024-08-05T19:20:41.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mahara before 15.04.14, 16.x before 16.04.8, 16.10.x before 16.10.5, and 17.x before 17.04.3. When one closes the browser without logging out of Mahara, the value in the usr_session table is not removed. If someone were to open a browser, visit the Mahara site, and adjust the 'mahara' cookie to the old value, they can get access to the user's account. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mahara/+bug/1701978
CVE ID: CVE-2017-14164 State: PUBLISHED Published: 2017-09-06T18:00:00 Last Updated: 2024-08-05T19:20:41.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: A size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service (heap-based buffer overflow affecting opj_write_bytes_LE in lib/openjp2/cio.c) or possibly remote code execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-14152. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201710-26 - https://blogs.gentoo.org/ago/2017/
: - CVE Program Container: References: - https://security.gentoo.org/glsa/201710-26 - https://blogs.gentoo.org/ago/2017/09/06/heap-based-buffer-overflow-in-opj_write_bytes_le-cio-c-incomplete-fix-for-cve-2017-14152/ - http://www.securityfocus.com/bid/100677 - https://github.com/uclouvain/openjpeg/commit/dcac91b8c72f743bda7dbfa9032356bc8110098a - https://github.com/uclouvain/openjpeg/issues/991
CVE ID: CVE-2017-14165 State: PUBLISHED Published: 2017-09-06T18:00:00 Last Updated: 2024-08-05T19:20:40.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a length field in a header. This may lead to remote denial of service in the MagickMalloc function in magick/memory.c. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/09/06/graphicsmagick-memory-allocation-failure-in-magickmalloc-memory-c-2/ - http://www.securityfocus.com/bid/100678 - http://hg.code.sf.net/p/graphicsmagick/code/rev/49
-magickmalloc-memory-c-2/ - http://www.securityfocus.com/bid/100678 - http://hg.code.sf.net/p/graphicsmagick/code/rev/493da54370aa - https://usn.ubuntu.com/4232-1/