Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-5781 State: PUBLISHED Published: 2018-03-14T16:00:00 Last Updated: 2024-08-05T05:40:51.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vendrecording.php page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-1
CVE Program Container: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0004
CVE ID: CVE-2018-5782 State: PUBLISHED Published: 2018-03-14T16:00:00 Last Updated: 2024-08-05T05:47:55.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vsethost.php page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-000
rogram Container: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0004 - https://www.exploit-db.com/exploits/46174/ - https://github.com/twosevenzero/shoretel-mitel-rce
CVE ID: CVE-2018-5783 State: PUBLISHED Published: 2018-01-19T08:00:00 Last Updated: 2024-08-05T05:47:55.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1536179 - https://sourceforge.net/p/podofo/tickets/27/
CVE ID: CVE-2018-5784 State: PUBLISHED Published: 2018-01-19T08:00:00 Last Updated: 2024-08-05T05:47:54.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated against the actual number of directory entries. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3606-1/ - https://usn.ubuntu.com/3602-1/ - https://lists.debian.org/debian-lts-announce/2018/05/msg0002
//usn.ubuntu.com/3606-1/ - https://usn.ubuntu.com/3602-1/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00022.html - https://www.debian.org/security/2018/dsa-4349 - http://bugzilla.maptools.org/show_bug.cgi?id=2772 - https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html - https://gitlab.com/libtiff/libtiff/commit/473851d211cf8805a161820337ca74cc9615d6ef
CVE ID: CVE-2018-5785 State: PUBLISHED Published: 2018-01-19T08:00:00 Last Updated: 2024-08-05T05:47:55.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder function (openjp2/j2k.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uclouvain/openjpeg/issues/1057 - https://www.debian.org/security/2019/dsa-4405 - https://usn.ubuntu.com/4109-1/
CVE ID: CVE-2018-5786 State: PUBLISHED Published: 2018-01-19T08:00:00 Last Updated: 2024-08-05T05:47:55.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Long Range Zip (aka lrzip) 0.631, there is an infinite loop and application hang in the get_fileinfo function (lrzip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ckolivas/lrzip/issues/91 - https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html - https://lists.debian.org/debian-lts-announce/2022/04/msg00012.html - https://www.debian.org/security/2022/dsa-5145
CVE ID: CVE-2018-5787 State: PUBLISHED Published: 2018-02-05T04:00:00 Last Updated: 2024-08-05T05:47:55.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated Stack Overflow in the RIM (Radio Interface Module) process running on the WiNG Access Point via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE ID: CVE-2018-5788 State: PUBLISHED Published: 2018-02-05T04:00:00 Last Updated: 2024-08-05T05:47:55.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated Denial of Service in the RIM (Radio Interface Module) process running on the WiNG Access Point via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE ID: CVE-2018-5789 State: PUBLISHED Published: 2018-02-05T04:00:00 Last Updated: 2024-08-05T05:47:55.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated XML Entity Expansion Denial of Service on the WiNG Access Point / Controller via crafted XML entities to the Web User Interface. Additional Analyst Notes: - CVE Program Container: References: - https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE ID: CVE-2018-5790 State: PUBLISHED Published: 2018-02-05T04:00:00 Last Updated: 2024-08-05T05:47:55.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is Remote, Unauthenticated "Global" Denial of Service in the RIM (Radio Interface Module) over the MINT (Media Independent Tunnel) Protocol on the WiNG Access Point via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE ID: CVE-2018-5791 State: PUBLISHED Published: 2018-02-05T04:00:00 Last Updated: 2024-08-05T05:47:55.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated Heap Overflow in the HSD Process over the MINT (Media Independent Tunnel) Protocol on the WiNG Access Point via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE ID: CVE-2018-5792 State: PUBLISHED Published: 2018-02-05T04:00:00 Last Updated: 2024-08-05T05:47:55.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated Heap Overflow in the HSD Process over the MINT (Media Independent Tunnel) Protocol on the WiNG Access Point via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE ID: CVE-2018-5793 State: PUBLISHED Published: 2018-02-05T04:00:00 Last Updated: 2024-08-05T05:47:54.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated Heap Overflow in the HSD Process over the MINT (Media Independent Tunnel) Protocol on the WiNG Access Point via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE ID: CVE-2018-5794 State: PUBLISHED Published: 2018-02-05T04:00:00 Last Updated: 2024-08-05T05:47:55.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is No Authentication for the AeroScout Service via a crafted UDP packet. Additional Analyst Notes: - CVE Program Container: References: - https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE ID: CVE-2018-5795 State: PUBLISHED Published: 2018-02-05T04:00:00 Last Updated: 2024-08-05T05:47:55.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is Arbitrary File Write from the WebGUI on the WiNG Access Point / Controller. Additional Analyst Notes: - CVE Program Container: References: - https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE ID: CVE-2018-5796 State: PUBLISHED Published: 2018-02-05T04:00:00 Last Updated: 2024-08-05T05:47:55.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Hidden Root Shell by entering the administrator password in conjunction with the 'service start-shell' CLI command. Additional Analyst Notes: - CVE Program Container: References: - https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE ID: CVE-2018-5797 State: PUBLISHED Published: 2018-02-05T04:00:00 Last Updated: 2024-08-05T05:47:54.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is an Smint_encrypt Hardcoded AES Key that can be used for packet decryption (obtaining cleartext credentials) by an attacker who has access to a wired port. Additional Analyst Notes: - CVE Program Container: References: - https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003
CVE ID: CVE-2018-5798 State: PUBLISHED Published: 2019-06-07T14:57:04 Last Updated: 2024-08-05T05:47:55.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: This CVE relates to an unspecified cross site scripting vulnerability in Cloudera Manager. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudera.com - https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html
CVE ID: CVE-2018-5799 State: PUBLISHED Published: 2018-03-30T13:00:00 Last Updated: 2024-08-05T05:47:55.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zoho ManageEngine ServiceDesk Plus before 9403, an XSS issue allows an attacker to run arbitrary JavaScript via a /api/request/?OPERATION_NAME= URI, aka SD-69139. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Mar/58 - https://www.manageengine.com/products/service-desk/readme.html
CVE ID: CVE-2018-5800 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T05:47:54.579Z Vendors: n/a Products: LibRaw Problem Types: DoS (Denial of Service) through heap-based buffer overflow Description: An off-by-one error within the "LibRaw::kodak_ycbcr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.7 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-1/ - https://secuniaresearch.flexerasoftware.com/advisories
://secuniaresearch.flexerasoftware.com/secunia_research/2018-1/ - https://secuniaresearch.flexerasoftware.com/advisories/79000/ - http://www.securityfocus.com/bid/104663 - https://access.redhat.com/errata/RHSA-2018:3065 - https://usn.ubuntu.com/3615-1/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00036.html - https://github.com/LibRaw/LibRaw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4
CVE ID: CVE-2018-5801 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T05:47:55.835Z Vendors: n/a Products: LibRaw Problem Types: DoS (Denial of Service) through NULL pointer dereference Description: An error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-1/ - https://secuniaresearch.flexerasoftware.com/advisories/79000/ - https://github.com/LibRaw/LibRaw/commit/0df5490b985c419
https://secuniaresearch.flexerasoftware.com/advisories/79000/ - https://github.com/LibRaw/LibRaw/commit/0df5490b985c419de008d32168650bff17128914 - https://access.redhat.com/errata/RHSA-2018:3065 - https://usn.ubuntu.com/3615-1/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00036.html
CVE ID: CVE-2018-5802 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T05:47:55.933Z Vendors: n/a Products: LibRaw Problem Types: DoS (Denial of Service) through out-of-bounds read memory access Description: An error within the "kodak_radc_load_raw()" function (internal/dcraw_common.cpp) related to the "buf" variable in LibRaw versions prior to 0.18.7 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-1/ - https://secuniaresearch.flexera
r/Changelog.txt - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-1/ - https://secuniaresearch.flexerasoftware.com/advisories/79000/ - https://access.redhat.com/errata/RHSA-2018:3065 - https://usn.ubuntu.com/3615-1/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00036.html - https://github.com/LibRaw/LibRaw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4
CVE ID: CVE-2018-5803 State: PUBLISHED Published: 2018-06-12T16:00:00 Last Updated: 2024-08-05T05:47:55.973Z Vendors: Linux Foundation Products: Linux Kernel Problem Types: Denial of Service Description: In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash. Additional Analyst Notes: - CVE Program Container: References: - https://secuniaresearch.flexerasoftware.com/advisories/81331/ - https://access.redhat.com/errata/RHSA-2018:3083 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25 - https://www.d
access.redhat.com/errata/RHSA-2018:3083 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25 - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3654-1/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.51 - https://access.redhat.com/errata/RHSA-2018:1854 - https://usn.ubuntu.com/3697-1/ - https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.102 - https://www.debian.org/security/2018/dsa-4188 - https://www.spinics.net/lists/netdev/msg482523.html - https://access.redhat.com/errata/RHSA-2018:2948 - https://usn.ubuntu.com/3697-2/ - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?id=07f2c7ab6f8d0a7e7c5764c4e6cc9c52
2/ - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?id=07f2c7ab6f8d0a7e7c5764c4e6cc9c52951b9d9c - https://www.spinics.net/lists/linux-sctp/msg07036.html - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.87 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8 - https://usn.ubuntu.com/3654-2/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.121 - https://usn.ubuntu.com/3698-1/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html - https://usn.ubuntu.com/3656-1/ - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-2/ - https://access.redhat.com/errata/RHSA-2018:3096 - https://usn.ubuntu.com/3698-2/
software.com/secunia_research/2018-2/ - https://access.redhat.com/errata/RHSA-2018:3096 - https://usn.ubuntu.com/3698-2/ - https://access.redhat.com/errata/RHSA-2019:0641
CVE ID: CVE-2018-5804 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T05:47:55.829Z Vendors: n/a Products: LibRaw Problem Types: DoS (Denial of Service) through division by zero Description: A type confusion error within the "identify()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a division by zero. Additional Analyst Notes: - CVE Program Container: References: - https://secuniaresearch.flexerasoftware.com/advisories/81000/ - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://github.com/LibRaw/LibRaw/commit/9f26ce37f5be86ea11bfc6831366558650b1f6ff - https://secuniaresearch.flexerasoftware.com/
/github.com/LibRaw/LibRaw/commit/9f26ce37f5be86ea11bfc6831366558650b1f6ff - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-3/
CVE ID: CVE-2018-5805 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T05:47:54.563Z Vendors: n/a Products: LibRaw Problem Types: DoS (Denial of Service) through stack-based buffer overflow Description: A boundary error within the "quicktake_100_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to cause a stack-based buffer overflow and subsequently cause a crash. Additional Analyst Notes: - CVE Program Container: References: - https://secuniaresearch.flexerasoftware.com/advisories/81000/ - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://access.redhat.com/errata/RHSA-2018:3065 - https://github.com
ithub.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://access.redhat.com/errata/RHSA-2018:3065 - https://github.com/LibRaw/LibRaw/commit/9f26ce37f5be86ea11bfc6831366558650b1f6ff - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-3/
CVE ID: CVE-2018-5806 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T05:47:54.588Z Vendors: n/a Products: LibRaw Problem Types: DoS (Denial of Service) through NULL pointer dereference Description: An error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.8 can be exploited to trigger a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://secuniaresearch.flexerasoftware.com/advisories/81000/ - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://access.redhat.com/errata/RHSA-2018:3065 - https://github.com/LibRaw/LibRaw/commit/9f26ce37f5be86ea11bfc68313
t - https://access.redhat.com/errata/RHSA-2018:3065 - https://github.com/LibRaw/LibRaw/commit/9f26ce37f5be86ea11bfc6831366558650b1f6ff - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-3/
CVE ID: CVE-2018-5807 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T05:47:55.522Z Vendors: n/a Products: LibRaw Problem Types: DoS (Denial of Service) through out-of-bounds read memory access Description: An error within the "samsung_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause an out-of-bounds read memory access and subsequently cause a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-10/ - https://secuniaresearch.flexerasoftware.com/advisories/81800/ -
research.flexerasoftware.com/secunia_research/2018-10/ - https://secuniaresearch.flexerasoftware.com/advisories/81800/ - https://github.com/LibRaw/LibRaw/commit/fd6330292501983ac75fe4162275794b18445bd9 - https://usn.ubuntu.com/3838-1/
CVE ID: CVE-2018-5808 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T05:47:54.565Z Vendors: n/a Products: LibRaw Problem Types: Arbitrary code execution through stack-based buffer overflow Description: An error within the "find_green()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a stack-based buffer overflow and subsequently execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://secuniaresearch.flexerasoftware.com/advisories/81800/ - https://github.com/LibRaw/LibRaw/commit/fd6330292501983ac75fe4162275794b18445b
h.flexerasoftware.com/advisories/81800/ - https://github.com/LibRaw/LibRaw/commit/fd6330292501983ac75fe4162275794b18445bd9 - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-9/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00036.html
CVE ID: CVE-2018-5809 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T05:47:55.894Z Vendors: n/a Products: LibRaw Problem Types: Arbitrary code execution through stack-based buffer overflow Description: An error within the "LibRaw::parse_exif()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a stack-based buffer overflow and subsequently execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://secuniaresearch.flexerasoftware.com/advisories/81800/ - https://github.com/LibRaw/LibRaw/commit/fd6330292501983ac75fe416227579
aresearch.flexerasoftware.com/advisories/81800/ - https://github.com/LibRaw/LibRaw/commit/fd6330292501983ac75fe4162275794b18445bd9 - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-9/
CVE ID: CVE-2018-5810 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T05:47:55.407Z Vendors: n/a Products: LibRaw Problem Types: DoS (Denial of Service) through heap-based buffer overflow Description: An error within the "rollei_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.9 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://secuniaresearch.flexerasoftware.com/secunia_research/2018-10/ - https://secuniaresearch.flexerasoftware.com/advisories/81800/ - https://githu
rasoftware.com/secunia_research/2018-10/ - https://secuniaresearch.flexerasoftware.com/advisories/81800/ - https://github.com/LibRaw/LibRaw/commit/fd6330292501983ac75fe4162275794b18445bd9 - https://usn.ubuntu.com/3838-1/