Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-6852 State: PUBLISHED Published: 2019-11-20T22:01:49 Last Updated: 2024-08-04T20:31:04.426Z Vendors: Schneider Electric Products: Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions) Problem Types: CWE-200 Description: A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions), which could cause the disclosure of FTP hardcoded credential
modules - see security notification for specific versions), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-281-02/
CVE ID: CVE-2019-6853 State: PUBLISHED Published: 2019-11-20T22:01:18 Last Updated: 2024-08-04T20:31:04.456Z Vendors: Schneider Electric Products: Andover Continuum models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and 9702 Problem Types: CWE-79 Description: A CWE-79: Failure to Preserve Web Page Structure vulnerability exists in Andover Continuum (models 9680, 5740 and 5720, bCX4040, bCX9640, 9900, 9940, 9924 and 9702) , which could enable a successful Cross-site Scripting (XSS attack) when using the products web server. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-316-01/
CVE ID: CVE-2019-6854 State: PUBLISHED Published: 2020-01-06T22:56:53 Last Updated: 2024-08-04T20:31:04.395Z Vendors: n/a Products: EcoStruxure Geo SCADA Expert (ClearSCADA) with initial releases before 1 January 2019 (see notification for more details) Problem Types: CWE-287 Description: A CWE-287: Improper Authentication vulnerability exists in a folder within EcoStruxure Geo SCADA Expert (ClearSCADA) -with initial releases before 1 January 2019- which could cause a low privilege user to delete or modify database, setting or certificate files. Those users must have access to the file system of that operating system to exploit this vulnerability. Affected versions in current support include
to the file system of that operating system to exploit this vulnerability. Affected versions in current support includes ClearSCADA 2017 R3, ClearSCADA 2017 R2, and ClearSCADA 2017. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-344-05/
CVE ID: CVE-2019-6855 State: PUBLISHED Published: 2020-01-06T22:56:58 Last Updated: 2024-08-04T20:31:04.396Z Vendors: n/a Products: EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10) Problem Types: CWE-863 Description: Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10), which could cause a bypass of the authentication process between EcoStruxure Control Expert and the M340 and M580 con
), which could cause a bypass of the authentication process between EcoStruxure Control Expert and the M340 and M580 controllers. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-344-02/
CVE ID: CVE-2019-6856 State: PUBLISHED Published: 2020-01-06T22:57:02 Last Updated: 2024-08-04T20:31:04.415Z Vendors: Schneider Electric SE Products: Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) Problem Types: CWE-754 Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when writing specific physical memory blocks using Modbus TCP. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/docu
sing Modbus TCP. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-344-01 - https://www.us-cert.gov/ics/advisories/icsa-20-016-01
CVE ID: CVE-2019-6857 State: PUBLISHED Published: 2020-01-06T22:57:05 Last Updated: 2024-08-04T20:31:04.438Z Vendors: Schneider Electric SE Products: Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) Problem Types: CWE-754 Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/down
blocks using Modbus TCP. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-344-01 - https://www.us-cert.gov/ics/advisories/icsa-20-016-01
CVE ID: CVE-2019-6858 State: PUBLISHED Published: 2020-01-22T13:59:17 Last Updated: 2024-08-04T20:31:04.361Z Vendors: n/a Products: MSX Configurator (Software Version prior to V1.0.8.1) Problem Types: CWE-427 Description: A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator (Software Version prior to V1.0.8.1), which could cause privilege escalation when injecting a malicious DLL. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-014-01
CVE ID: CVE-2019-6859 State: PUBLISHED Published: 2020-04-22T18:14:28 Last Updated: 2024-08-04T20:31:04.463Z Vendors: n/a Products: Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications) Problem Types: CWE-798 Description: A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network. Additional Analyst Notes: - CVE Program Container: References
g the Web server of the controller on an unsecure network. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2019-316-02
CVE ID: CVE-2019-6956 State: PUBLISHED Published: 2019-01-25T16:00:00 Last Updated: 2024-08-04T20:31:04.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. It is a buffer over-read in ps_mix_phase in libfaad/ps_dec.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/blob/master/faad/global-buffer-overflow%40ps_mix_phase.md - https://sourceforge.net/p/faac/bugs/240/ - https://lists.debian.org/debian-lts-announce/2019/08/msg00033.html - https://security.gentoo.org/glsa/202006-17 - https://lists.debian.org/debian-lts-announce/2021/10/msg00020.html - https:/
ttps://security.gentoo.org/glsa/202006-17 - https://lists.debian.org/debian-lts-announce/2021/10/msg00020.html - https://www.debian.org/security/2022/dsa-5109
CVE ID: CVE-2019-6957 State: PUBLISHED Published: 2019-05-29T18:55:20.387906Z Last Updated: 2024-09-16T16:38:39.411Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Video Recording Manager (VRM), Video Streaming Gateway (VSG), Configuration Manager, Building Integration System (BIS) with Video Engine, Access Professional Edition (APE), Access Easy Controller (AEC), Bosch Video Client (BVC) and Video SDK (VSDK). The vulnerability potentially allows the unau
cess Easy Controller (AEC), Bosch Video Client (BVC) and Video SDK (VSDK). The vulnerability potentially allows the unauthorized execution of code in the system via the network interface. Additional Analyst Notes: - CVE Program Container: References: - https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0403bt-cve-2019-6957_security_advisory_software_buffer_overflow.pdf
CVE ID: CVE-2019-6958 State: PUBLISHED Published: 2019-05-29T18:47:37.354175Z Last Updated: 2024-09-17T00:46:00.474Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Configuration Manager, Building Integration System (BIS) with Video Engine, Access Professional Edition (APE), Access Easy Controller (AEC), Bosch Video Client (BVC) and Video SDK (VSDK). The RCP+ network port allows access without authentication. Adding authentication feature to the respective
SDK (VSDK). The RCP+ network port allows access without authentication. Adding authentication feature to the respective library fixes the issue. The issue is classified as "CWE-284: Improper Access Control." This vulnerability, for example, allows a potential attacker to delete video or read video data. Additional Analyst Notes: - CVE Program Container: References: - https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0404bt-cve-2019-6958_security_advisory_improper_access_control.pdf
CVE ID: CVE-2019-6960 State: PUBLISHED Published: 2019-09-09T19:52:48 Last Updated: 2024-08-04T20:31:04.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Access Control. Access to the internal wiki is permitted when an external wiki service is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/54357
CVE ID: CVE-2019-6961 State: PUBLISHED Published: 2019-06-20T13:43:44 Last Updated: 2024-08-04T20:31:04.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to control DDNS, QoS, RIP, and other privileged configurations (intended only for the network operator) by sending an HTTP POST to the PHP backend, because the page filtering for non-superuser (in header.php) is done only for GET requests and not for direct AJAX calls. Additional Analyst Notes: - CVE Program Container: References: - https://dojo.bullguard.com/dojo-by-bullguard/blog/the-gateway-is-wide-open
CVE ID: CVE-2019-6962 State: PUBLISHED Published: 2019-06-20T13:45:51 Last Updated: 2024-08-04T20:31:04.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: A shell injection issue in cosa_wifi_apis.c in the RDK RDKB-20181217-1 CcspWifiAgent module allows attackers with login credentials to execute arbitrary shell commands under the CcspWifiSsp process (running as root) if the platform was compiled with the ENABLE_FEATURE_MESHWIFI macro. The attack is conducted by changing the Wi-Fi network password to include crafted escape characters. This is related to the WebUI module. Additional Analyst Notes: - CVE Program Container: References: - https://dojo.bullguard.com/dojo-by-bullguard
UI module. Additional Analyst Notes: - CVE Program Container: References: - https://dojo.bullguard.com/dojo-by-bullguard/blog/the-gateway-is-wide-open
CVE ID: CVE-2019-6963 State: PUBLISHED Published: 2019-06-20T13:47:40 Last Updated: 2024-08-04T20:31:04.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve remote code execution by crafting a long buffer in the "Comment" field of an IP reservation form in the admin panel. This is related to the CcspCommonLibrary module. Additional Analyst Notes: - CVE Program Container: References: - https://dojo.bullguard.com/dojo-by-bullguard/blog/the-gateway-is-wide-open
CVE ID: CVE-2019-6964 State: PUBLISHED Published: 2019-06-20T13:50:35 Last Updated: 2024-08-04T20:31:04.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read in Service_SetParamStringValue in cosa_x_cisco_com_ddns_dml.c of the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve information disclosure and code execution by crafting an AJAX call responsible for DDNS configuration with an exactly 64-byte username, password, or domain, for which the buffer size is insufficient for the final '\0' character. This is related to the CcspCommonLibrary and WebUI modules. Additional Analyst Notes: - CVE Program Container: Re
acter. This is related to the CcspCommonLibrary and WebUI modules. Additional Analyst Notes: - CVE Program Container: References: - https://dojo.bullguard.com/dojo-by-bullguard/blog/the-gateway-is-wide-open
CVE ID: CVE-2019-6965 State: PUBLISHED Published: 2019-06-18T12:25:45 Last Updated: 2024-08-04T20:31:04.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.i-doit.org
CVE ID: CVE-2019-6966 State: PUBLISHED Published: 2019-01-25T23:00:00 Last Updated: 2024-08-04T20:31:04.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.5.1-628. The AP4_ElstAtom class in Core/Ap4ElstAtom.cpp has an attempted excessive memory allocation related to AP4_Array<AP4_ElstEntry>::EnsureCapacity in Core/Ap4Array.h, as demonstrated by mp42hls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/361
CVE ID: CVE-2019-6967 State: PUBLISHED Published: 2019-03-17T18:02:36 Last Updated: 2024-08-04T20:31:04.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://alicangonullu.biz/konu/3 - https://www.exploit-db.com/exploits/46253/ - http://packetstormsecurity.com/files/151372/AirTies-Air5341-Modem-1.0.0.12-Cross-Site-Request-Forgery.html - https://twitter.com/alicangonullu
CVE ID: CVE-2019-6968 State: PUBLISHED Published: 2019-08-02T20:50:46 Last Updated: 2024-08-04T20:31:04.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface of the D-Link DVA-5592 20180823 is vulnerable to XSS because HTML form parameters are directly reflected. Additional Analyst Notes: - CVE Program Container: References: - https://rhaidiz.net/2019/02/27/dribble-router-vulns-dlink-alcatel-cve-2019-6969-cve-2019-6968-cve-2019-7163/
CVE ID: CVE-2019-6969 State: PUBLISHED Published: 2019-08-02T20:53:05 Last Updated: 2024-08-04T20:31:04.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface of the D-Link DVA-5592 20180823 is vulnerable to an authentication bypass that allows an unauthenticated user to have access to sensitive information such as the Wi-Fi password and the phone number (if VoIP is in use). Additional Analyst Notes: - CVE Program Container: References: - https://rhaidiz.net/2019/02/27/dribble-router-vulns-dlink-alcatel-cve-2019-6969-cve-2019-6968-cve-2019-7163/
CVE ID: CVE-2019-6970 State: PUBLISHED Published: 2019-03-18T20:28:37.000Z Last Updated: 2025-05-30T16:01:17.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 3.5.x before 3.5.4 allows SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.excellium-services.com/cert-xlm-advisory/cve-2019-6970/ - https://www.excellium-services.com/cert-xlm-advisory - https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-6970
CVE ID: CVE-2019-6971 State: PUBLISHED Published: 2019-06-19T14:05:03 Last Updated: 2024-08-04T20:38:32.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on TP-Link TL-WR1043ND V2 devices. An attacker can send a cookie in an HTTP authentication packet to the router management web interface, and fully control the router without knowledge of the credentials. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MalFuzzer/Vulnerability-Research/blob/master/TL-WR1043ND%20V2%20-%20TP-LINK/TL-WR1043ND_PoC.pdf - https://twitter.com/MalFuzzer/status/1141269335685652480?s=19
CVE ID: CVE-2019-6972 State: PUBLISHED Published: 2019-06-19T14:06:34 Last Updated: 2024-08-04T20:38:32.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded and cracked by brute-force, WordList, or Rainbow Table attacks. Specifically, credentials in the "Authorization" cookie are encoded with URL encoding and base64, leading to easy decoding. Also, the username is cleartext, and the password is hashed with the MD5 algorithm (after decoding of the URL encoded string with base64). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MalFuzzer/Vulnerability-
th base64). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MalFuzzer/Vulnerability-Research/blob/master/TL-WR1043ND%20V2%20-%20TP-LINK/TL-WR1043ND_PoC.pdf - https://twitter.com/MalFuzzer/status/1141269335685652480?s=19
CVE ID: CVE-2019-6973 State: PUBLISHED Published: 2019-03-17T18:12:13 Last Updated: 2024-08-04T20:38:32.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46261/ - http://packetstormsecurity.com/files/151377/Sricam-gSOAP-2.8-Denial-Of-Service.html - https://github.com/bitfu/sricam-gsoap2.8-dos-exploit
CVE ID: CVE-2019-6974 State: PUBLISHED Published: 2019-02-15T15:00:00 Last Updated: 2024-08-04T20:38:32.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=1765 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.99 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.21 - https://www.exploit-db.com/exploits/46388/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.
angeLog-4.19.21 - https://www.exploit-db.com/exploits/46388/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.8 - https://github.com/torvalds/linux/commit/cfa39381173d5f969daf43582c95ad679189cbc9 - http://www.securityfocus.com/bid/107127 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.156 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cfa39381173d5f969daf43582c95ad679189cbc9 - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.com/3930-1/ - https://usn.ubuntu.com/3931-
/usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.com/3930-1/ - https://usn.ubuntu.com/3931-1/ - https://usn.ubuntu.com/3933-2/ - https://usn.ubuntu.com/3931-2/ - https://usn.ubuntu.com/3930-2/ - https://usn.ubuntu.com/3933-1/ - https://support.f5.com/csp/article/K11186236 - https://access.redhat.com/errata/RHSA-2019:0833 - https://access.redhat.com/errata/RHSA-2019:0818 - https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html - https://access.redhat.com/errata/RHBA-2019:0959 - https://access.redhat.com/errata/RHSA-2019:2809 - https://support.f5.com/csp/article/K11186236?utm_source=f5support&amp%3Butm_medium=RSS - https://access.redhat.com/errata/RHSA-
/support.f5.com/csp/article/K11186236?utm_source=f5support&amp%3Butm_medium=RSS - https://access.redhat.com/errata/RHSA-2019:3967 - https://access.redhat.com/errata/RHSA-2020:0103
CVE ID: CVE-2019-6975 State: PUBLISHED Published: 2019-02-11T13:00:00 Last Updated: 2024-08-04T20:38:32.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() function. Additional Analyst Notes: - CVE Program Container: References: - https://www.djangoproject.com/weblog/2019/feb/11/security-releases/ - https://docs.djangoproject.com/en/dev/releases/security/ - http://www.securityfocus.com/bid/106964 - https://usn.ubuntu.com/3890-1/ - https://www.openwall.com/lists/oss-security/2019/02/11/1 -
curityfocus.com/bid/106964 - https://usn.ubuntu.com/3890-1/ - https://www.openwall.com/lists/oss-security/2019/02/11/1 - https://groups.google.com/forum/#%21topic/django-announce/WTwEAprR0IQ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVXDOVCXLD74SHR2BENGCE2OOYYYWJHZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66WMXHGBXD7GSM3PEXVCMCAGLMQYHZCU/ - https://www.debian.org/security/2019/dsa-4476 - https://seclists.org/bugtraq/2019/Jul/10
CVE ID: CVE-2019-6976 State: PUBLISHED Published: 2019-01-26T23:00:00 Last Updated: 2024-08-04T20:38:32.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libvips/libvips/commit/00622428bda8d7521db8d74260b519fa41d69d0a - https://github.com/libvips/libvips/releases/tag/v8.7.4 - https://blog.silentsignal.eu/2019/04/18/drop-by-drop-bleedi
a - https://github.com/libvips/libvips/releases/tag/v8.7.4 - https://blog.silentsignal.eu/2019/04/18/drop-by-drop-bleeding-through-libvips/
CVE ID: CVE-2019-6977 State: PUBLISHED Published: 2019-01-27T02:00:00 Last Updated: 2024-08-04T20:38:32.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106731 - https://security.netapp.com/advisory/ntap-20190315-0003/ - http://php.net/