Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
oofing attacks due to user confusion. This vulnerability affects Firefox < 57. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2017-24/ - http://www.securityfocus.com/bid/101832 - https://bugzilla.mozilla.org/show_bug.cgi?id=1399540 - http://www.securitytracker.com/id/1039803
CVE ID: CVE-2017-7839 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T16:19:27.701Z Vendors: Mozilla Products: Firefox Problem Types: Control characters before javascript: URLs defeats self-XSS prevention mechanism Description: Control characters prepended before "javascript:" URLs pasted in the addressbar can cause the leading characters to be ignored and the pasted JavaScript to be executed instead of being blocked. This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks where users are convinced to copy and paste text into the addressbar. This vulnerability affects Firefox < 57. Additional Analyst Notes: - CVE Program Container: R
text into the addressbar. This vulnerability affects Firefox < 57. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1402896 - https://www.mozilla.org/security/advisories/mfsa2017-24/ - http://www.securityfocus.com/bid/101832 - http://www.securitytracker.com/id/1039803
CVE ID: CVE-2017-7840 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T16:19:28.484Z Vendors: Mozilla Products: Firefox Problem Types: Exported bookmarks do not strip script elements from user-supplied tags Description: JavaScript can be injected into an exported bookmarks file by placing JavaScript code into user-supplied tags in saved bookmarks. If the resulting exported HTML file is later opened in a browser this JavaScript will be executed. This could be used in social engineering and self-cross-site-scripting (self-XSS) attacks if users were convinced to add malicious tags to bookmarks, export them, and then open the resulting file. This vulnerability affects Fir
vinced to add malicious tags to bookmarks, export them, and then open the resulting file. This vulnerability affects Firefox < 57. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1366420 - https://www.mozilla.org/security/advisories/mfsa2017-24/ - http://www.securityfocus.com/bid/101832 - http://www.securitytracker.com/id/1039803
CVE ID: CVE-2017-7842 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T16:19:29.119Z Vendors: Mozilla Products: Firefox Problem Types: Referrer Policy is not always respected for <link> elements Description: If a document's Referrer Policy attribute is set to "no-referrer" sometimes two network requests are made for "<link>" elements instead of one. One of these requests includes the referrer instead of respecting the set policy to not include a referrer on requests. This vulnerability affects Firefox < 57. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2017-24/ - http://www.securityfocus.com/bid/101832
tainer: References: - https://www.mozilla.org/security/advisories/mfsa2017-24/ - http://www.securityfocus.com/bid/101832 - http://www.securitytracker.com/id/1039803 - https://bugzilla.mozilla.org/show_bug.cgi?id=1397064
CVE ID: CVE-2017-7843 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T16:19:28.564Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Web worker in Private Browsing mode can write IndexedDB data Description: When Private Browsing mode is used, it is possible for a web worker to write persistent data to IndexedDB and fingerprint a user uniquely. IndexedDB should not be available in Private Browsing mode and this stored data will persist across multiple private browsing mode sessions because it is not cleared when exiting. This vulnerability affects Firefox ESR < 52.5.2 and Firefox < 57.0.1. Additional Analyst Notes: - CVE Program Container: References: -
ity affects Firefox ESR < 52.5.2 and Firefox < 57.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:3382 - https://lists.debian.org/debian-lts-announce/2017/12/msg00003.html - https://www.mozilla.org/security/advisories/mfsa2017-28/ - http://www.securitytracker.com/id/1039954 - https://www.mozilla.org/security/advisories/mfsa2017-27/ - https://www.debian.org/security/2017/dsa-4062 - https://bugzilla.mozilla.org/show_bug.cgi?id=1410106 - http://www.securityfocus.com/bid/102039 - http://www.securityfocus.com/bid/102112
CVE ID: CVE-2017-7844 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T16:19:29.400Z Vendors: Mozilla Products: Firefox Problem Types: Visited history information leak through SVG image Description: A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determine which pages a user has in their history. This can allow a malicious website to query user history. Note: This issue only affects Firefox 57. Earlier releases are not affected. This vulnerability affects Firefox < 57.0.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039954 - http
7.0.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039954 - https://www.mozilla.org/security/advisories/mfsa2017-27/ - http://www.securityfocus.com/bid/102039 - https://bugzilla.mozilla.org/show_bug.cgi?id=1420001
CVE ID: CVE-2017-7845 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T16:19:28.566Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Buffer overflow when drawing and validating elements with ANGLE library using Direct 3D 9 Description: A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Thunderbird < 52.5.2,
cts Windows operating systems. Other operating systems are unaffected. This vulnerability affects Thunderbird < 52.5.2, Firefox ESR < 52.5.2, and Firefox < 57.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2017-28/ - https://www.mozilla.org/security/advisories/mfsa2017-29/ - http://www.securitytracker.com/id/1040123 - https://www.mozilla.org/security/advisories/mfsa2017-30/ - http://www.securityfocus.com/bid/102115 - https://bugzilla.mozilla.org/show_bug.cgi?id=1402372
CVE ID: CVE-2017-7846 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T16:19:29.313Z Vendors: Mozilla Products: Thunderbird Problem Types: JavaScript Execution via RSS in mailbox:// origin Description: It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. via "View -> Feed article -> Website" or in the standard format of "View -> Feed article -> default format". This vulnerability affects Thunderbird < 52.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1411716 - http://www.securityfocus
ian-lts-announce/2017/12/msg00026.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1411716 - http://www.securityfocus.com/bid/102258 - http://www.securitytracker.com/id/1040123 - https://www.mozilla.org/security/advisories/mfsa2017-30/ - https://www.debian.org/security/2017/dsa-4075 - https://access.redhat.com/errata/RHSA-2018:0061
CVE ID: CVE-2017-7847 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T16:19:28.357Z Vendors: Mozilla Products: Thunderbird Problem Types: Local path string can be leaked from RSS feed Description: Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name. This vulnerability affects Thunderbird < 52.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1411708 - http://www.securityfocus.com/bid/102258 - http://www.securitytracker.com/id/1040123 - https://www.mozilla.org/security/advisories/mfsa2017-30/ -
.com/bid/102258 - http://www.securitytracker.com/id/1040123 - https://www.mozilla.org/security/advisories/mfsa2017-30/ - https://www.debian.org/security/2017/dsa-4075 - https://access.redhat.com/errata/RHSA-2018:0061
CVE ID: CVE-2017-7848 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T16:19:28.340Z Vendors: Mozilla Products: Thunderbird Problem Types: RSS Feed vulnerable to new line Injection Description: RSS fields can inject new lines into the created email structure, modifying the message body. This vulnerability affects Thunderbird < 52.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/12/msg00026.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1411699 - http://www.securityfocus.com/bid/102258 - http://www.securitytracker.com/id/1040123 - https://www.mozilla.org/security/advisories/mfsa2017-30/ - https
id/102258 - http://www.securitytracker.com/id/1040123 - https://www.mozilla.org/security/advisories/mfsa2017-30/ - https://www.debian.org/security/2017/dsa-4075 - https://access.redhat.com/errata/RHSA-2018:0061
CVE ID: CVE-2017-7849 State: PUBLISHED Published: 2017-04-19T14:00:00 Last Updated: 2024-08-05T16:19:28.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local denial of service condition due to insecure permissions when running in Agent Mode. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2017-10 - http://www.securityfocus.com/bid/97951
CVE ID: CVE-2017-7850 State: PUBLISHED Published: 2017-04-19T14:00:00 Last Updated: 2024-08-05T16:19:28.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local privilege escalation issue due to insecure permissions when running in Agent Mode. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2017-10 - http://www.securityfocus.com/bid/97952
CVE ID: CVE-2017-7851 State: PUBLISHED Published: 2017-11-15T08:00:00 Last Updated: 2024-08-05T16:19:28.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DCS-936L devices with firmware before 1.05.07 have an inadequate CSRF protection mechanism that requires the device's IP address to be a substring of the HTTP Referer header. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp2.dlink.com/PRODUCTS/DCS-936L/REVA/BETA/DCS-936L_REVA_RELEASE_NOTES_v1.05.07_EN.pdf - https://www.qualys.com/2017/03/26/qsa-2017-03-26/qsa-2017-03-26.pdf
CVE ID: CVE-2017-7852 State: PUBLISHED Published: 2017-04-24T10:00:00 Last Updated: 2024-08-05T16:19:28.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. This is because of the 'allow-access-from domain' child element set to *, thus accepting requests from any domain. If a victim logged into the camera's web console visits a malicious site hosting a malicious Flash file from another Browser tab, the malicious Flash file then can send requests to the victim's DCS series Camera without knowing the credentia
ser tab, the malicious Flash file then can send requests to the victim's DCS series Camera without knowing the credentials. An attacker can host a malicious Flash file that can retrieve Live Feeds or information from the victim's DCS series Camera, add new admin users, or make other changes to the device. Known affected devices are DCS-933L with firmware before 1.13.05, DCS-5030L, DCS-5020L, DCS-2530L, DCS-2630L, DCS-930L, DCS-932L, and DCS-932LB1. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualys.com/2017/02/22/qsa-2017-02-22/qsa-2017-02-22.pdf
CVE ID: CVE-2017-7853 State: PUBLISHED Published: 2017-04-13T15:00:00 Last Updated: 2024-08-05T16:19:29.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3879 - http://www.securityfocus.com/bid/97644 - https://savannah.gnu.org/support/index.php?109265
CVE ID: CVE-2017-7854 State: PUBLISHED Published: 2017-04-13T16:00:00 Last Updated: 2024-08-05T16:19:28.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: The consume_init_expr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/commit/d2632f6483a3ceb5d8e0a5fb11142c51c43978b4 - https://github.com/radare/radare2/issues/7265 - http://www.securityfocus.com/bid/97648
CVE ID: CVE-2017-7855 State: PUBLISHED Published: 2017-08-31T21:00:00 Last Updated: 2024-08-05T16:19:28.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in the "language" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://technical.nttsecurity.com/post/102eegq/cookies-are-delicious
CVE ID: CVE-2017-7856 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-05T16:19:28.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow in the SVMConverter::ImplConvertFromSVM1 function in vcl/source/gdi/svmconverter.cxx. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=817 - https://github.com/LibreOffice/core/commit/28e61b634353110445e334ccaa415d7fb6629d62 - http://www.libreoffice.org/about-us/security/advisories/cve-2017-7856/ - http://www.securityfocus.com/bid/97667
CVE ID: CVE-2017-7857 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-05T16:19:28.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType 2 before 2017-03-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the TT_Get_MM_Var function in truetype/ttgxvar.c and the sfnt_init_face function in sfnt/sfobjs.c. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201706-14 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7bbb91fbf47fc0775cc9705673caf0c47a81f94b - http://www.securityfocus.com/bid/97680 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=759 - https:
c47a81f94b - http://www.securityfocus.com/bid/97680 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=759 - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2017-7858 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-05T16:19:29.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType 2 before 2017-03-07 has an out-of-bounds write related to the TT_Get_MM_Var function in truetype/ttgxvar.c and the sfnt_init_face function in sfnt/sfobjs.c. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201706-14 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=738 - http://www.securityfocus.com/bid/97682 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=779309744222a736eba0f1731e8162fce6288d4e - https://www.oracle.com/security-alerts/cpuapr
eetype/freetype2.git/commit/?id=779309744222a736eba0f1731e8162fce6288d4e - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2017-7859 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-05T16:19:28.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow related to the ff_h264_slice_context_init function in libavcodec/h264dec.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=713 - http://www.securityfocus.com/bid/97663
CVE ID: CVE-2017-7860 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-05T16:19:29.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the parse_unix function in core/ext/client_channel/parse_address.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=661 - http://www.securityfocus.com/bid/97695 - https://github.com/grpc/grpc/pull/9833
CVE ID: CVE-2017-7861 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-05T16:19:28.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google gRPC before 2017-02-22 has an out-of-bounds write related to the gpr_free function in core/lib/support/alloc.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97694 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=655 - https://github.com/grpc/grpc/pull/9833
CVE ID: CVE-2017-7862 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-05T16:19:29.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame function in libavcodec/pictordec.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/8c2ea3030af7b40a3c4275696fb5c76cdb80950a - https://security.gentoo.org/glsa/201811-19 - http://www.securityfocus.com/bid/97676 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=559 - http://www.debian.org/security/2017/dsa-4012
CVE ID: CVE-2017-7863 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-05T16:19:29.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_common function in libavcodec/pngdec.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=546 - http://www.securityfocus.com/bid/97675 - https://github.com/FFmpeg/FFmpeg/commit/e477f09d0b3619f3d29173b2cd593e17e2d1978e - https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html
CVE ID: CVE-2017-7864 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-05T16:19:28.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tt_size_reset function in truetype/ttobjs.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97673 - https://security.gentoo.org/glsa/201706-14 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=e6699596af5c5d6f0ae0ea06e19df87dce088df8 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=509 - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2017-7865 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-05T16:19:28.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode_block_opcode_0xA function in libavcodec/interplayvideo.c and the avcodec_align_dimensions2 function in libavcodec/utils.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html - https://github.com/FFmpeg/FFmpeg/commit/2080bc33717955a0e4268e738acf8c1eeddbf8cb - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=452 - http://www.
ommit/2080bc33717955a0e4268e738acf8c1eeddbf8cb - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=452 - http://www.securityfocus.com/bid/97685
CVE ID: CVE-2017-7866 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-05T16:19:29.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decode_zbuf function in libavcodec/pngdec.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97664 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=444 - https://github.com/FFmpeg/FFmpeg/commit/e371f031b942d73e02c090170975561fabd5c264
CVE ID: CVE-2017-7867 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-05T16:19:29.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_setNativeIndex* function. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.icu-project.org/trac/changeset/39671 - http://www.debian.org/security/2017/dsa-3830 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=213 - https://security.gentoo.org/glsa/201710-03 - http://www.securityfocus.com
chromium.org/p/oss-fuzz/issues/detail?id=213 - https://security.gentoo.org/glsa/201710-03 - http://www.securityfocus.com/bid/97672 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
CVE ID: CVE-2017-7868 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-05T16:19:28.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_moveIndex32* function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97674 - http://bugs.icu-project.org/trac/changeset/39671 - http://www.debian.org/security/2017/dsa-3830 - https://security.gentoo.org/glsa/201710-03 - https://bugs.chromium.org/p/oss-fuzz/issues/detail
security/2017/dsa-3830 - https://security.gentoo.org/glsa/201710-03 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
CVE ID: CVE-2017-7869 State: PUBLISHED Published: 2017-04-14T04:30:00 Last Updated: 2024-08-05T16:19:29.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=420 - https://gitlab.com/gnutls/gnutls/commit/51464af713d71802e3c6d5ac15f1a95132a354fe - https://access.redhat.com/errata/RHSA-2017:2292 - https:/
nutls/gnutls/commit/51464af713d71802e3c6d5ac15f1a95132a354fe - https://access.redhat.com/errata/RHSA-2017:2292 - https://www.gnutls.org/security.html - http://www.securityfocus.com/bid/97040