Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
iting for new vulnerabilities to be discovered, and fixing them as they come up, the CouchDB development team decided to make changes to avoid this entire class of vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://blog.couchdb.org/2018/12/17/cve-2018-17188/ - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03935en_us - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3JOUCX7LHDV4YWZDQNXT5NTKKRANZQW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5FPHVVU5KMRFKQTJPAM3TBGC7LKCWQS/
CVE ID: CVE-2018-17189 State: PUBLISHED Published: 2019-01-30T22:00:00Z Last Updated: 2024-09-17T01:21:57.609Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: mod_http2, DoS via slow request bodies Description: In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections. Additional Analyst Notes: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html - http://www.securityfocus.com/bid/106685 - https://security.netapp
://httpd.apache.org/security/vulnerabilities_24.html - http://www.securityfocus.com/bid/106685 - https://security.netapp.com/advisory/ntap-20190125-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7N3DUEBFVGQWQEME5HTPTTKDHGHBAC6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY7SJQOO3PYFVINZW6H5EK4EZ3HSGZNM/ - https://security.gentoo.org/glsa/201903-21 - https://seclists.org/bugtraq/2019/Apr/5 - https://usn.ubuntu.com/3937-1/ - https://www.debian.org/security/2019/dsa-4422 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.oracle.com/technetw
sa-4422 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03950en_us - https://access.redhat.com/errata/RHSA-2019:3933 - https://access.redhat.com/errata/RHSA-2019:3935 - https://access.redhat.com/errata/RHSA-2019:3932 - https://access.redhat.com/errata/RH
redhat.com/errata/RHSA-2019:3935 - https://access.redhat.com/errata/RHSA-2019:3932 - https://access.redhat.com/errata/RHSA-2019:4126 - https://www.tenable.com/security/tns-2019-09 - https://www.oracle.com/security-alerts/cpujan2020.html - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72e
e4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r15f9aa4427581a1aecb4063f1b4b983511ae1c9935e2a0a6876dad3c%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.h
f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2018-17190 State: PUBLISHED Published: 2018-11-19T14:00:00 Last Updated: 2024-08-05T10:39:59.689Z Vendors: Apache Software Foundation Products: Apache Spark Problem Types: Arbitrary Code Execution Description: In all versions of Apache Spark, its standalone resource manager accepts code to execute on a 'master' host, that then runs that code on 'worker' hosts. The master itself does not, by design, execute user code. A specially-crafted request to the master can, however, cause the master to execute code too. Note that this does not affect standalone clusters with authentication enabled. While the master host typically has less outbound access to other resources than a worker, th
th authentication enabled. While the master host typically has less outbound access to other resources than a worker, the execution of code on the master is nevertheless unexpected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105976 - https://security.gentoo.org/glsa/201903-21 - https://www.oracle.com/security-alerts/cpujul2020.html - https://lists.apache.org/thread.html/341c3187f15cdb0d353261d2bfecf2324d56cb7db1339bfc7b30f6e5%40%3Cdev.spark.apache.org%3E
CVE ID: CVE-2018-17191 State: PUBLISHED Published: 2018-12-31T14:00:00 Last Updated: 2024-08-05T10:39:59.576Z Vendors: Apache Software Foundation Products: Apache NetBeans Problem Types: Containment Error Description: Apache NetBeans (incubating) 9.0 NetBeans Proxy Auto-Configuration (PAC) interpretation is vulnerable for remote command execution (RCE). Using the nashorn script engine the environment of the javascript execution for the Proxy Auto-Configuration leaks privileged objects, that can be used to circumvent the execution limits. If a different script engine was used, no execution limits were in place. Both vectors allow remote code execution. Additional Analyst Notes: - CVE Program
d, no execution limits were in place. Both vectors allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/d1c37966a316a326ab4ff4d4bc056322e8adcbe984e8145c0ecda7fa%40%3Cdev.netbeans.apache.org%3E - http://www.securityfocus.com/bid/106352
CVE ID: CVE-2018-17192 State: PUBLISHED Published: 2018-12-19T14:00:00 Last Updated: 2024-08-05T10:39:59.558Z Vendors: Apache Software Foundation Products: Apache NiFi Problem Types: Clickjacking Description: The X-Frame-Options headers were applied inconsistently on some HTTP responses, resulting in duplicate or missing security headers. Some browsers would interpret these results incorrectly, allowing clickjacking attacks. Mitigation: The fix to consistently apply the security headers was applied on the Apache NiFi 1.8.0 release. Users running a prior 1.x release should upgrade to the appropriate release. Additional Analyst Notes: - CVE Program Container: References: - https://nifi.apache.
pgrade to the appropriate release. Additional Analyst Notes: - CVE Program Container: References: - https://nifi.apache.org/security.html#CVE-2018-17192
CVE ID: CVE-2018-17193 State: PUBLISHED Published: 2018-12-19T14:00:00 Last Updated: 2024-08-05T10:39:59.641Z Vendors: Apache Software Foundation Products: Apache NiFi Problem Types: XSS Description: The message-page.jsp error page used the value of the HTTP request header X-ProxyContextPath without sanitization, resulting in a reflected XSS attack. Mitigation: The fix to correctly parse and sanitize the request attribute value was applied on the Apache NiFi 1.8.0 release. Users running a prior 1.x release should upgrade to the appropriate release. Additional Analyst Notes: - CVE Program Container: References: - https://nifi.apache.org/security.html#CVE-2018-17193
CVE ID: CVE-2018-17194 State: PUBLISHED Published: 2018-12-19T14:00:00 Last Updated: 2024-08-05T10:39:59.603Z Vendors: Apache Software Foundation Products: Apache NiFi Problem Types: Denial of service Description: When a client request to a cluster node was replicated to other nodes in the cluster for verification, the Content-Length was forwarded. On a DELETE request, the body was ignored, but if the initial request had a Content-Length value other than 0, the receiving nodes would wait for the body and eventually timeout. Mitigation: The fix to check DELETE requests and overwrite non-zero Content-Length header values was applied on the Apache NiFi 1.8.0 release. Users running a prior 1.x r
verwrite non-zero Content-Length header values was applied on the Apache NiFi 1.8.0 release. Users running a prior 1.x release should upgrade to the appropriate release. Additional Analyst Notes: - CVE Program Container: References: - https://nifi.apache.org/security.html#CVE-2018-17194
CVE ID: CVE-2018-17195 State: PUBLISHED Published: 2018-12-19T14:00:00 Last Updated: 2024-08-05T10:39:59.593Z Vendors: Apache Software Foundation Products: Apache NiFi Problem Types: Cross Site Request Forgery Description: The template upload API endpoint accepted requests from different domain when sent in conjunction with ARP spoofing + man in the middle (MiTM) attack, resulting in a CSRF attack. The required attack vector is complex, requiring a scenario with client certificate authentication, same subnet access, and injecting malicious code into an unprotected (plaintext HTTP) website which the targeted user later visits, but the possible damage warranted a Severe severity level. Mitigat
t HTTP) website which the targeted user later visits, but the possible damage warranted a Severe severity level. Mitigation: The fix to apply Cross-Origin Resource Sharing (CORS) policy request filtering was applied on the Apache NiFi 1.8.0 release. Users running a prior 1.x release should upgrade to the appropriate release. Additional Analyst Notes: - CVE Program Container: References: - https://nifi.apache.org/security.html#CVE-2018-17195
CVE ID: CVE-2018-17196 State: PUBLISHED Published: 2019-07-11T20:37:56 Last Updated: 2024-08-05T10:39:59.702Z Vendors: Apache Products: Kafka Problem Types: Information Disclosure Description: In Apache Kafka versions between 0.11.0.0 and 2.1.0, it is possible to manually craft a Produce request which bypasses transaction/idempotent ACL validation. Only authenticated clients with Write permission on the respective topics are able to exploit this vulnerability. Users should upgrade to 2.1.1 or later where this vulnerability has been fixed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/109139 - https://lists.apache.org/thread.html/d1581fb6464
gram Container: References: - http://www.securityfocus.com/bid/109139 - https://lists.apache.org/thread.html/d1581fb6464c9bec8a72575c01f5097d68e2fbb230aff24622622a58%40%3Ccommits.kafka.apache.org%3E - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://lists.apache.org/thread.html/rc27d424d0bdeaf31081c3e246db3c66e882243ae3f342dfa845e0261%40%3Ccommits.kafka.apache.
ttps://lists.apache.org/thread.html/rc27d424d0bdeaf31081c3e246db3c66e882243ae3f342dfa845e0261%40%3Ccommits.kafka.apache.org%3E - https://lists.apache.org/thread.html/r8890b8f18f1de821595792b58b968a89692a255bc20d86d395270740%40%3Ccommits.druid.apache.org%3E - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.mail-archive.com/dev%40kafka.apache.org/msg99277.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://lists.apache.org/thread.html/r66de86b9a608c1da70b2d27d765c11ec88edf6e5dd6f379ab33e072a%40%3Cuser.flink.apache.org%3E
CVE ID: CVE-2018-17197 State: PUBLISHED Published: 2018-12-24T14:00:00 Last Updated: 2024-08-05T10:39:59.588Z Vendors: Apache Software Foundation Products: Apache Tika Problem Types: Denial of Service Description: A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106293 - https://lists.apache.org/thread.html/7c021a4ea2037e52e74628e17e8e0e2acab1f447160edc8be0eae6d3%40%3Cdev.tika.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://lists.apache.org/thread.html
3E - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2018-17198 State: PUBLISHED Published: 2019-05-28T17:08:11 Last Updated: 2024-08-05T10:47:03.755Z Vendors: Apache Software Foundation Products: Apache Roller Problem Types: Information Disclosure Description: Server-side Request Forgery (SSRF) and File Enumeration vulnerability in Apache Roller 5.2.1, 5.2.0 and earlier unsupported versions relies on Java SAX Parser to implement its XML-RPC interface and by default that parser supports external entities in XML DOCTYPE, which opens Roller up to SSRF / File Enumeration vulnerability. Note that this vulnerability exists even if Roller XML-RPC interface is disable via the Roller web admin UI. Mitigation: There are a couple of ways you
ists even if Roller XML-RPC interface is disable via the Roller web admin UI. Mitigation: There are a couple of ways you can fix this vulnerability: 1) Upgrade to the latest version of Roller, which is now 5.2.2 2) Or, edit the Roller web.xml file and comment out the XML-RPC Servlet mapping as shown below: <!-- <servlet-mapping> <servlet-name>XmlRpcServlet</servlet-name> <url-pattern>/roller-services/xmlrpc</url-pattern> </servlet-mapping> --> Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/94a36ed9c6241558b1c6181d8dd4ff263be7903abd1d20067d4330d5%40%3Cdev.roller.apache.org%3E - http://www.securityfocus.com/bid/108496
CVE ID: CVE-2018-17199 State: PUBLISHED Published: 2019-01-30T22:00:00Z Last Updated: 2024-09-16T19:35:15.397Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: Infufficient Session Expiration Description: In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/01/msg00024.html - http://www.securityfocus.com/bid/106742 - https://httpd.apache.org/
bian.org/debian-lts-announce/2019/01/msg00024.html - http://www.securityfocus.com/bid/106742 - https://httpd.apache.org/security/vulnerabilities_24.html - https://security.netapp.com/advisory/ntap-20190125-0001/ - https://security.gentoo.org/glsa/201903-21 - https://seclists.org/bugtraq/2019/Apr/5 - https://usn.ubuntu.com/3937-1/ - https://www.debian.org/security/2019/dsa-4422 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.htm
2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03950en_us - https://access.redhat.com/errata/RHSA-2019:3933 - https://access.redhat.com/errata/RHSA-2019:3935 - https://access.redhat.com/errata/RHSA-2019:3932 - https://access.redhat.com/errata/RHSA-2019:4126 - https://www.tenable.com/security/tns-2019-09 - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache
hread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%4
s.httpd.apache.org%3E - https://lists.apache.org/thread.html/r03ee478b3dda3e381fd6189366fa7af97c980d2f602846eef935277d%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd2fb621142e7fa187cfe12d7137bf66e7234abcbbcd800074c84a538%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re473305a65b4db888e3556e4dae10c2a04ee89dcff2e26ecdbd860a9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2018-17200 State: PUBLISHED Published: 2019-09-11T20:22:44 Last Updated: 2024-08-05T10:47:04.053Z Vendors: Apache Products: OFBiz Problem Types: remote code execution Description: The Apache OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests for HTTP services via the /webtools/control/httpService endpoint. This service takes the `serviceContent` parameter in the request and deserializes it using XStream. This `XStream` instance is slightly guarded by disabling the creation of `ProcessBuilder`. However, this can be easily bypassed (and in multiple ways). Mitigation: Upgrade to 16.11.06 or manually apply the following commits on branch 16 r1850017+
d (and in multiple ways). Mitigation: Upgrade to 16.11.06 or manually apply the following commits on branch 16 r1850017+1850019 Additional Analyst Notes: - CVE Program Container: References: - https://s.apache.org/m9boi - https://lists.apache.org/thread.html/r8f01aab5dd92487c191599def3c950c643d7ad297c4db1d6722ea151%40%3Ccommits.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/rf8651e75162819a267384f8a31c20884bc3a9a6707afbf75200cd98d%40%3Ccommits.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/r034123f2767830169fd04c922afb22d2389de6e2faf3a083207202bc%40%3Ccommits.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/rfafb229c0d805c8f2bd232d28cd1297876faf5c953f1d7bcf7
3Ccommits.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/rfafb229c0d805c8f2bd232d28cd1297876faf5c953f1d7bcf76eef4f%40%3Ccommits.ofbiz.apache.org%3E
CVE ID: CVE-2018-17201 State: PUBLISHED Published: 2019-05-06T17:07:11 Last Updated: 2024-08-05T10:47:03.903Z Vendors: n/a Products: Apache Commons Imaging Problem Types: Information Disclosure Description: Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/cd37861963aa6d2694c8947d464c99614d3e1a9db6c1a2a8b7b5840a%40%3Cdev.commons.apache.org%3E
CVE ID: CVE-2018-17202 State: PUBLISHED Published: 2019-05-06T17:14:00 Last Updated: 2024-08-05T10:47:03.771Z Vendors: n/a Products: Apache Commons Imaging Problem Types: Information Disclosure Description: Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubating) was renamed to Apache Commons Imaging. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/69204376d12205b0d2d90e6fcbeebb99b894e6db88c8ff565c4e1efa%40%3Cdev.commons.apache.org%3E
CVE ID: CVE-2018-17203 State: REJECTED Published: 2019-02-06T22:00:00 Last Updated: 2019-02-06T21:57:01 Description: No description available.
CVE ID: CVE-2018-17204 State: PUBLISHED Published: 2018-09-19T16:00:00 Last Updated: 2024-08-05T10:47:03.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting parse_group_prop_ntr_selection_method in lib/ofp-util.c. When decoding a group mod, it validates the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tries to use the type and command earlier, when it might still be invalid. This causes an assertion failure (via OVS_NOT_REACHED). ovs-vswitchd does not enable support for OpenFlow 1.5 by default. Additional Analyst Notes: - CVE Program Container: References
itchd does not enable support for OpenFlow 1.5 by default. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2019:0053 - https://usn.ubuntu.com/3873-1/ - https://access.redhat.com/errata/RHSA-2018:3500 - https://github.com/openvswitch/ovs/commit/4af6da3b275b764b1afe194df6499b33d2bf4cde - https://access.redhat.com/errata/RHSA-2019:0081 - https://lists.debian.org/debian-lts-announce/2021/02/msg00032.html
CVE ID: CVE-2018-17205 State: PUBLISHED Published: 2018-09-19T16:00:00 Last Updated: 2024-08-05T10:47:03.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c. During bundle commit, flows that are added in a bundle are applied to ofproto in order. If a flow cannot be added (e.g., the flow action is a go-to for a group id that does not exist), OvS tries to revert back all previous flows that were successfully applied from the same bundle. This is possible since OvS maintains list of old flows that were replaced by flows from the bundle. While reinserting old flows,
possible since OvS maintains list of old flows that were replaced by flows from the bundle. While reinserting old flows, OvS has an assertion failure due to a check on rule state != RULE_INITIALIZED. This would work for new flows, but for an old flow the rule state is RULE_REMOVED. The assertion failure causes an OvS crash. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2019:0053 - https://usn.ubuntu.com/3873-1/ - https://access.redhat.com/errata/RHSA-2018:3500 - https://github.com/openvswitch/ovs/commit/0befd1f3745055c32940f5faf9559be6a14395e6 - https://access.redhat.com/errata/RHSA-2019:0081
CVE ID: CVE-2018-17206 State: PUBLISHED Published: 2018-09-19T16:00:00 Last Updated: 2024-08-05T10:47:04.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6. The decode_bundle function inside lib/ofp-actions.c is affected by a buffer over-read issue during BUNDLE action decoding. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2019:0053 - https://usn.ubuntu.com/3873-1/ - https://access.redhat.com/errata/RHSA-2018:3500 - https://github.com/openvswitch/ovs/commit/9237a63c47bd314b807cda0bd2216264e82edbe8 - https://access.redhat.com/errata/RHSA-2019:0081 - https://