Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
initialized until it's used as an index, resulting in an out-of-bounds write memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kkos/oniguruma/commit/3b63d12038c8d8fc278e81c942fa9bec7c704c8b - https://access.redhat.com/errata/RHSA-2018:1296 - https://github.com/kkos/oniguruma/issues/60
CVE ID: CVE-2017-9229 State: PUBLISHED Published: 2017-05-24T15:00:00 Last Updated: 2024-08-05T17:02:44.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in left_adjust_char_head() during regular expression compilation. Invalid handling of reg->dmax in forward_search_range() could result in an invalid pointer dereference, normally as an immediate denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kkos/oniguruma/commit/b690371bbf97794b4a1d3f295d4fb9a8b05d402d - https://access.r
iner: References: - https://github.com/kkos/oniguruma/commit/b690371bbf97794b4a1d3f295d4fb9a8b05d402d - https://access.redhat.com/errata/RHSA-2018:1296 - https://github.com/kkos/oniguruma/issues/59
CVE ID: CVE-2017-9230 State: PUBLISHED Published: 2017-05-24T16:00:00 Last Updated: 2024-08-05T17:02:43.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initial 64-byte chunks followed by the same 16-byte chunk, multiple candidate root values ending with the same 4 bytes, and calculations involving sqrt numbers. This violates the security assumptions of (1) the choice of input, outside of the dedicated nonce area, fed into the Proof-of-Work function should not change its difficulty to evaluate and (2) every Proof-of-Work function execution shoul
Proof-of-Work function should not change its difficulty to evaluate and (2) every Proof-of-Work function execution should be independent. NOTE: a number of persons feel that this methodology is a benign mining optimization, not a vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://arxiv.org/ftp/arxiv/papers/1604/1604.00575.pdf - https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-April/013996.html - https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-May/014351.html - http://www.securityfocus.com/bid/98657 - https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-May/014352.html - https://lists.linuxfoundation
bid/98657 - https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-May/014352.html - https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2017-May/014349.html - http://www.mit.edu/~jlrubin//public/pdfs/Asicboost.pdf
CVE ID: CVE-2017-9231 State: PUBLISHED Published: 2017-06-16T22:00:00 Last Updated: 2024-08-05T17:02:43.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3 allows attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98995 - https://support.citrix.com/article/CTX220138 - http://www.securitytracker.com/id/1038704
CVE ID: CVE-2017-9232 State: PUBLISHED Published: 2017-05-28T00:00:00 Last Updated: 2024-08-05T17:02:44.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/juju/+bug/1682411 - https://www.exploit-db.com/exploits/44023/ - http://www.securityfocus.com/bid/98737
CVE ID: CVE-2017-9233 State: PUBLISHED Published: 2017-07-25T20:00:00 Last Updated: 2024-08-05T17:02:43.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208144 - https://libexpat.github.io/doc/cve-2017-9233/ - https://github.com/libexpat/libexpat/blob/master/expat/Changes - http://www.securitytracker.com/id/1039427 - https://support.apple.com/HT208113 - https://support.apple.c
expat/Changes - http://www.securitytracker.com/id/1039427 - https://support.apple.com/HT208113 - https://support.apple.com/HT208112 - https://support.apple.com/HT208115 - http://www.debian.org/security/2017/dsa-3898 - http://www.securityfocus.com/bid/99276 - http://www.openwall.com/lists/oss-security/2017/06/17/7 - https://support.f5.com/csp/article/K03244804 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-9239 State: PUBLISHED Published: 2017-05-26T10:00:00 Last Updated: 2024-08-05T17:02:44.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentation fault. To exploit this vulnerability, someone must open a crafted tiff file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3852-1/ - http://dev.exiv2.org/issues/1295 - http://www.securityfocus.com/bid/98720 - https://github.com/lolo-pop/p
.com/3852-1/ - http://dev.exiv2.org/issues/1295 - http://www.securityfocus.com/bid/98720 - https://github.com/lolo-pop/poc/tree/master/Segmentation%20fault%20in%20convert-test%28exiv2%29 - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html
CVE ID: CVE-2017-9242 State: PUBLISHED Published: 2017-05-27T00:00:00 Last Updated: 2024-08-05T17:02:43.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too late in checking whether an overwrite of an skb data structure may occur, which allows local users to cause a denial of service (system crash) via crafted system calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98731 - https://patchwork.ozlabs.org/patch/764880/ - https://github.com/torvalds/linux/commit/232cd35d0804cc241eb887bb8d4d9b3b9881c64a - http://git.kernel.org/cgit/lin
80/ - https://github.com/torvalds/linux/commit/232cd35d0804cc241eb887bb8d4d9b3b9881c64a - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=232cd35d0804cc241eb887bb8d4d9b3b9881c64a - https://access.redhat.com/errata/RHSA-2017:2077 - http://www.debian.org/security/2017/dsa-3886 - https://access.redhat.com/errata/RHSA-2017:1842
CVE ID: CVE-2017-9243 State: PUBLISHED Published: 2017-05-28T18:00:00 Last Updated: 2024-08-05T17:02:43.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aries QWR-1104 Wireless-N Router with Firmware Version WRC.253.2.0913 has XSS on the Wireless Site Survey page, exploitable with the name of an access point. Additional Analyst Notes: - CVE Program Container: References: - http://touhidshaikh.com/blog/poc/qwr-1104-wireless-n-router-xss/ - https://www.exploit-db.com/exploits/42075/
CVE ID: CVE-2017-9244 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-05T17:02:44.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Trello app before 4.0.8 for iOS might allow remote attackers to inject arbitrary web script or HTML by uploading and attaching a crafted photo to a Card. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/227853
CVE ID: CVE-2017-9245 State: PUBLISHED Published: 2017-07-19T03:00:00 Last Updated: 2024-08-05T17:02:44.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL. Additional Analyst Notes: - CVE Program Container: References: - https://wwws.nightwatchcybersecurity.com/2017/07/18/advisory-googles-android-news-and-weather-app-doesnt-always-use-ssl-cve-2017-9245/ - http://seclists.org/fulldisclosure/2017/Jul/36 - http://www.securityfocus.com/bid/99892
CVE ID: CVE-2017-9246 State: PUBLISHED Published: 2017-06-13T18:00:00 Last Updated: 2024-08-05T17:02:43.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during use of the Slow Queries feature, as demonstrated by a mishandled quote in a VALUES clause of an INSERT statement, after bypassing a SET SHOWPLAN_ALL ON protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://blog.seanmcelroy.com/2017/05/26/sql-injection-with-new-relic-patched/
CVE ID: CVE-2017-9247 State: PUBLISHED Published: 2017-08-02T19:00:00 Last Updated: 2024-08-05T17:02:43.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package (MBDP) with build ID < 4657 allows local users to launch processes with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://source.sierrawireless.com/resources/airprime/software/cve-2017-9247-unquoted-service-path-vulnerabilities/ - http://support.lenovo.com/us/en/product_security/LEN-12739
CVE ID: CVE-2017-9248 State: PUBLISHED Published: 2017-07-03T19:00:00.000Z Last Updated: 2025-10-21T23:55:39.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leading to a MachineKey leak, arbitrary file uploads or downloads, XSS, or ASP.NET ViewState compromise. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.telerik.com/support/kb/aspnet
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.telerik.com/support/kb/aspnet-ajax/details/cryptographic-weakness - https://www.exploit-db.com/exploits/43873/ - http://www.telerik.com/blogs/security-alert-for-telerik-ui-for-asp.net-ajax-and-progress-sitefinity - http://www.securityfocus.com/bid/99965
CVE ID: CVE-2017-9249 State: PUBLISHED Published: 2017-05-28T20:00:00 Last Updated: 2024-08-05T17:02:43.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Allen Disk 1.6 allows remote authenticated users to inject arbitrary web script or HTML persistently by uploading a crafted HTML file. The attack vector is the content of this file, and the filename must be specified in the PATH_INFO to readfile.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/s3131212/allendisk/issues/21 - http://www.securityfocus.com/bid/98743
CVE ID: CVE-2017-9250 State: PUBLISHED Published: 2017-05-28T20:00:00 Last Updated: 2024-08-05T17:02:43.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via malformed JavaScript source code, related to the jmem_heap_free_block function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zherczeg/jerryscript/commit/03a8c630f015f63268639d3ed3bf82cff6fa77d8 - https://github.com/jerryscript-project/j
thub.com/zherczeg/jerryscript/commit/03a8c630f015f63268639d3ed3bf82cff6fa77d8 - https://github.com/jerryscript-project/jerryscript/issues/1821 - https://github.com/jerryscript-project/jerryscript/commit/e58f2880df608652aff7fd35c45b242467ec0e79 - http://www.securitytracker.com/id/1038413
CVE ID: CVE-2017-9251 State: PUBLISHED Published: 2017-05-28T20:00:00 Last Updated: 2024-08-05T17:02:43.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the sitename parameter to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://sebao.me/index.php/post/13.html
CVE ID: CVE-2017-9252 State: PUBLISHED Published: 2017-05-28T20:00:00 Last Updated: 2024-08-05T17:02:44.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the search page via the text-search parameter to index.php in a route=search action. Additional Analyst Notes: - CVE Program Container: References: - http://www.sebao.me/index.php/post/14.html
CVE ID: CVE-2017-9253 State: PUBLISHED Published: 2017-06-27T12:00:00 Last Updated: 2024-08-05T17:02:44.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jun/32
CVE ID: CVE-2017-9254 State: PUBLISHED Published: 2017-06-27T12:00:00 Last Updated: 2024-08-05T17:02:43.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jun/32
CVE ID: CVE-2017-9255 State: PUBLISHED Published: 2017-06-27T12:00:00 Last Updated: 2024-08-05T17:02:43.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jun/32
CVE ID: CVE-2017-9256 State: PUBLISHED Published: 2017-06-27T12:00:00 Last Updated: 2024-08-05T17:02:44.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jun/32
CVE ID: CVE-2017-9257 State: PUBLISHED Published: 2017-06-27T12:00:00 Last Updated: 2024-08-05T17:02:43.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jun/32
CVE ID: CVE-2017-9258 State: PUBLISHED Published: 2017-07-27T06:00:00 Last Updated: 2024-08-05T17:02:43.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted wav file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/62 - https://www.exploit-db.com/exploits/42389/
CVE ID: CVE-2017-9259 State: PUBLISHED Published: 2017-07-27T06:00:00 Last Updated: 2024-08-05T17:02:43.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted wav file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100095 - http://seclists.org/fulldisclosure/2017/Jul/62 - https://www.exploit-db.com/exploits/42389/
CVE ID: CVE-2017-9260 State: PUBLISHED Published: 2017-07-27T06:00:00 Last Updated: 2024-08-05T17:02:44.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted wav file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jul/62 - https://www.exploit-db.com/exploits/42389/
CVE ID: CVE-2017-9261 State: PUBLISHED Published: 2017-05-29T03:52:00 Last Updated: 2024-08-05T17:02:43.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98730 - https://github.com/ImageMagick/ImageMagick/issues/476
CVE ID: CVE-2017-9262 State: PUBLISHED Published: 2017-05-29T03:52:00 Last Updated: 2024-08-05T17:02:44.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/475 - http://www.securityfocus.com/bid/98735
CVE ID: CVE-2017-9263 State: PUBLISHED Published: 2017-05-29T03:52:00 Last Updated: 2024-08-05T17:02:44.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:2698 - https://access.redhat.com/errata/RHSA-2017:2727 - https://access.redhat.com/errata/RHSA-2017:2692 - https://access.redhat.com/
//access.redhat.com/errata/RHSA-2017:2727 - https://access.redhat.com/errata/RHSA-2017:2692 - https://access.redhat.com/errata/RHSA-2017:2553 - https://access.redhat.com/errata/RHSA-2017:2418 - https://access.redhat.com/errata/RHSA-2017:2648 - https://access.redhat.com/errata/RHSA-2017:2665 - https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332966.html
CVE ID: CVE-2017-9264 State: PUBLISHED Published: 2017-05-29T03:52:00 Last Updated: 2024-08-05T17:02:44.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:2727 - https://access.redhat.com/errata/RHSA-2017:2418 - https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329323.html - https://access.redhat.com/erra
/RHSA-2017:2418 - https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329323.html - https://access.redhat.com/errata/RHSA-2017:2648
CVE ID: CVE-2017-9265 State: PUBLISHED Published: 2017-05-29T03:52:00 Last Updated: 2024-08-05T17:02:43.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:2698 - https://access.redhat.com/errata/RHSA-2017:2727 - https://access.redhat.com/errata/RHSA-2017:2692 - https://access.redhat.com/errata/RHSA-2017:2553 - https://access.redhat.com/errata/RHSA-2017:2418 - https://access.redhat
ttps://access.redhat.com/errata/RHSA-2017:2553 - https://access.redhat.com/errata/RHSA-2017:2418 - https://access.redhat.com/errata/RHSA-2017:2648 - https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332965.html - https://access.redhat.com/errata/RHSA-2017:2665
CVE ID: CVE-2017-9267 State: PUBLISHED Published: 2018-03-02T20:00:00Z Last Updated: 2024-09-16T17:52:55.859Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Novell Products: eDirectory Problem Types: CWE-757 Description: In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ciphers to be used during SSL BIND operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7016794
CVE ID: CVE-2017-9268 State: PUBLISHED Published: 2018-03-01T19:00:00Z Last Updated: 2024-09-17T00:50:30.039Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: SUSE Products: open build service Problem Types: incorrect permission checking lead to authenticated users to cause rebuilds or allowing wiping binaries in other projects., CWE-285 Description: In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service (resource consumption). Additional Analyst Notes: - CVE Program Co
did not have permissions leading to denial of service (resource consumption). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1045519 - https://github.com/openSUSE/open-build-service/pull/3267
CVE ID: CVE-2017-9269 State: PUBLISHED Published: 2018-03-01T19:00:00Z Last Updated: 2024-09-17T00:36:56.264Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: SUSE Products: libzypp Problem Types: Malicious mirrors could downgrade repositories from trusted signed repositories to unsigned malicious repositories., CWE-757 Description: In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious repository mirrors to silently downgrade to unsigned repositories with potential malicious content. Additional Analyst Notes: - CVE Program Container: References: - https://lists.opensuse.org/opensuse-security-announce/2
Additional Analyst Notes: - CVE Program Container: References: - https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00002.html - https://bugzilla.suse.com/show_bug.cgi?id=1045735 - https://www.suse.com/de-de/security/cve/CVE-2017-9269/