Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-14596 State: PUBLISHED Published: 2018-07-25T04:00:00 Last Updated: 2024-08-05T09:29:51.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: wancms 1.0 through 5.0 allows remote attackers to cause a denial of service (resource consumption) via a checkcode (aka verification code) URI in which the values of font_size, width, and height are large numbers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HUILYUH/wancms/blob/master/README.md
CVE ID: CVE-2018-14597 State: PUBLISHED Published: 2018-10-17T21:00:00 Last Updated: 2024-08-05T09:29:51.676Z Vendors: CA Technologies Products: CA Identity Governance Problem Types: CWE-203 Description: CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that may allow remote attackers to enumerate account names. Additional Analyst Notes: - CVE Program Container: References: - https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20181017-01-security-notice-for-ca-identity-governance.html - http://www.securityfocus.com/bid/105688
CVE ID: CVE-2018-14598 State: PUBLISHED Published: 2018-08-24T19:00:00 Last Updated: 2024-08-05T09:29:51.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault). Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3758-2/ - https://bugzilla.suse.com/show_bug.cgi?id=1102073 - https://security.gentoo.org/glsa/201811-01 - http://www.securityfocus.com/bid/105177 - https://cgit.freedesktop.org/xorg/lib
s://security.gentoo.org/glsa/201811-01 - http://www.securityfocus.com/bid/105177 - https://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=e83722768fd5c467ef61fa159e8c6278770b45c2 - http://www.openwall.com/lists/oss-security/2018/08/21/6 - http://www.securitytracker.com/id/1041543 - https://lists.debian.org/debian-lts-announce/2018/08/msg00030.html - https://lists.x.org/archives/xorg-announce/2018-August/002916.html - https://usn.ubuntu.com/3758-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGARUV66TS5OOSLR5A76BUB7SDV6GO4F/ - https://access.redhat.com/errata/RHSA-2019:2079
CVE ID: CVE-2018-14599 State: PUBLISHED Published: 2018-08-24T19:00:00 Last Updated: 2024-08-05T09:29:51.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3758-2/ - https://bugzilla.suse.com/show_bug.cgi?id=1102062 - https://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=b469da1430cdcee06e31c6251b83aede072a1ff0 - https://security.gentoo.org/glsa/201811-01 - http://www.securit
11/commit/?id=b469da1430cdcee06e31c6251b83aede072a1ff0 - https://security.gentoo.org/glsa/201811-01 - http://www.securityfocus.com/bid/105177 - http://www.openwall.com/lists/oss-security/2018/08/21/6 - http://www.securitytracker.com/id/1041543 - https://lists.debian.org/debian-lts-announce/2018/08/msg00030.html - https://lists.x.org/archives/xorg-announce/2018-August/002916.html - https://usn.ubuntu.com/3758-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGARUV66TS5OOSLR5A76BUB7SDV6GO4F/ - https://access.redhat.com/errata/RHSA-2019:2079
CVE ID: CVE-2018-14600 State: PUBLISHED Published: 2018-08-24T19:00:00 Last Updated: 2024-08-05T09:29:51.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3758-2/ - https://security.gentoo.org/glsa/201811-01 - http://www.securityfocus.com/bid/105177 - https://bugzilla.suse.com/show_bug.cgi?id=1102068 - http://www.openwall.com/lists/oss-security/2018/08/
com/bid/105177 - https://bugzilla.suse.com/show_bug.cgi?id=1102068 - http://www.openwall.com/lists/oss-security/2018/08/21/6 - http://www.securitytracker.com/id/1041543 - https://cgit.freedesktop.org/xorg/lib/libX11/commit/?id=dbf72805fd9d7b1846fe9a11b46f3994bfc27fea - https://lists.debian.org/debian-lts-announce/2018/08/msg00030.html - https://lists.x.org/archives/xorg-announce/2018-August/002916.html - https://usn.ubuntu.com/3758-1/ - https://access.redhat.com/errata/RHSA-2019:2079
CVE ID: CVE-2018-14601 State: PUBLISHED Published: 2018-07-27T02:00:00 Last Updated: 2024-08-05T09:29:51.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2. A Denial of Service can occur because Markdown rendering times are slow. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/49409
CVE ID: CVE-2018-14602 State: PUBLISHED Published: 2018-07-27T02:00:00 Last Updated: 2024-08-05T09:29:51.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. Information Disclosure can occur because the Prometheus metrics feature discloses private project pathnames. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/ - https://gitlab.com/gitlab-com/infrastructure/issues/4423
CVE ID: CVE-2018-14603 State: PUBLISHED Published: 2018-07-27T02:00:00 Last Updated: 2024-08-05T09:29:51.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. CSRF can occur in the Test feature of the System Hooks component. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/
CVE ID: CVE-2018-14604 State: PUBLISHED Published: 2018-07-27T02:00:00 Last Updated: 2024-08-05T09:29:51.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur in the tooltip of the job inside the CI/CD pipeline. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/
CVE ID: CVE-2018-14605 State: PUBLISHED Published: 2018-07-27T02:00:00 Last Updated: 2024-08-05T09:29:51.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur in the branch name during a Web IDE file commit. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ce/issues/47793 - https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/
CVE ID: CVE-2018-14606 State: PUBLISHED Published: 2018-07-27T02:00:00 Last Updated: 2024-08-05T09:29:51.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur via a Milestone name during a promotion. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ce/issues/48617 - https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/
CVE ID: CVE-2018-14607 State: PUBLISHED Published: 2018-07-26T22:00:00 Last Updated: 2024-08-05T09:29:51.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thomson Reuters UltraTax CS 2017 on Windows, in a client/server configuration, transfers customer records and bank account numbers in cleartext over SMBv2, which allows attackers to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks via unspecified vectors. The customer record transferred in cleartext contains: Client ID, Full Name, Spouse's Full Name, Social Security Number, Spouse's Social Security Number, Occupation, Spouse's Occupation, Daytime Phone, Home Phone, Tax P
cial Security Number, Spouse's Social Security Number, Occupation, Spouse's Occupation, Daytime Phone, Home Phone, Tax Preparer, Federal and State Taxes to File, Bank Name, Bank Account Number, and possibly other sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://corporateblue.com/ultratax-cs-data-exposure-vulnerability/ - https://www.themikewylie.com/ultratax-cs-data-exposure-vulnerability-cve-2018-14608-cve-2018-14607/
CVE ID: CVE-2018-14608 State: PUBLISHED Published: 2018-07-26T22:00:00 Last Updated: 2024-08-05T09:29:51.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thomson Reuters UltraTax CS 2017 on Windows has a password protection option; however, the level of protection might be inconsistent with some customers' expectations because the data is directly accessible in cleartext. Specifically, it stores customer data in unique directories (%install_path%\WinCSI\UT17DATA\client_ID\file_name.XX17) that can be bypassed without authentication by examining the strings of the .XX17 file. The strings stored in the .XX17 file contain each customer's: Full Name, Spouse's Name, Social Security
the .XX17 file. The strings stored in the .XX17 file contain each customer's: Full Name, Spouse's Name, Social Security Number, Date of Birth, Occupation, Home Address, Daytime Phone Number, Home Phone Number, Spouse's Address, Spouse's Daytime Phone Number, Spouse's Social Security Number, Spouse's Home Phone Number, Spouse's Occupation, Spouse's Date of Birth, and Spouse's Filing Status. Additional Analyst Notes: - CVE Program Container: References: - https://corporateblue.com/ultratax-cs-data-exposure-vulnerability/ - https://www.themikewylie.com/ultratax-cs-data-exposure-vulnerability-cve-2018-14608-cve-2018-14607/
CVE ID: CVE-2018-14609 State: PUBLISHED Published: 2018-07-27T04:00:00 Last Updated: 2024-08-05T09:29:51.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in __del_reloc_root() in fs/btrfs/relocation.c when mounting a crafted btrfs image, related to removing reloc rb_trees when reloc control has not been initialized. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3821-1/ - http://www.securityfocus.com/bid/104917 - https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html - https://patchwork.kernel.org/patch/10500521/ - https://us
//lists.debian.org/debian-lts-announce/2018/10/msg00003.html - https://patchwork.kernel.org/patch/10500521/ - https://usn.ubuntu.com/3821-2/ - https://www.debian.org/security/2018/dsa-4308 - https://bugzilla.kernel.org/show_bug.cgi?id=199833 - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/
CVE ID: CVE-2018-14610 State: PUBLISHED Published: 2018-07-27T04:00:00 Last Updated: 2024-08-05T09:29:51.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in write_extent_buffer() when mounting and operating a crafted btrfs image, because of a lack of verification that each block group has a corresponding chunk at mount time, within btrfs_read_block_groups in fs/btrfs/extent-tree.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104917 - https://bugzilla.kernel.org/show_bug.cgi?id=199837 - https://lists.debian.org/debian-lts-announce/2019
.com/bid/104917 - https://bugzilla.kernel.org/show_bug.cgi?id=199837 - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://patchwork.kernel.org/patch/10503415/ - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
CVE ID: CVE-2018-14611 State: PUBLISHED Published: 2018-07-27T04:00:00 Last Updated: 2024-08-05T09:29:51.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in try_merge_free_space() when mounting a crafted btrfs image, because of a lack of chunk type flag checks in btrfs_check_chunk_valid in fs/btrfs/volumes.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104917 - https://bugzilla.kernel.org/show_bug.cgi?id=199839 - https://patchwork.kernel.org/patch/10503099/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://usn
/patchwork.kernel.org/patch/10503099/ - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
CVE ID: CVE-2018-14612 State: PUBLISHED Published: 2018-07-27T04:00:00 Last Updated: 2024-08-05T09:29:51.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image, because of a lack of chunk block group mapping validation in btrfs_read_block_groups in fs/btrfs/extent-tree.c, and a lack of empty-tree checks in check_leaf in fs/btrfs/tree-checker.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104917 - https://patchwork.kernel.org/patch/10503403/ - https://patchwork.kernel.org/pat
ttp://www.securityfocus.com/bid/104917 - https://patchwork.kernel.org/patch/10503403/ - https://patchwork.kernel.org/patch/10503413/ - https://bugzilla.kernel.org/show_bug.cgi?id=199847 - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
CVE ID: CVE-2018-14613 State: PUBLISHED Published: 2018-07-27T04:00:00 Last Updated: 2024-08-05T09:29:51.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in io_ctl_map_page() when mounting and operating a crafted btrfs image, because of a lack of block group item validation in check_leaf_item in fs/btrfs/tree-checker.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104917 - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.c
-announce/2019/03/msg00017.html - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://patchwork.kernel.org/patch/10503147/ - https://bugzilla.kernel.org/show_bug.cgi?id=199849
CVE ID: CVE-2018-14614 State: PUBLISHED Published: 2018-07-27T04:00:00 Last Updated: 2024-08-05T09:29:51.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 4.17.10. There is an out-of-bounds access in __remove_dirty_segment() in fs/f2fs/segment.c when mounting an f2fs image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104917 - https://bugzilla.kernel.org/show_bug.cgi?id=200419 - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/
CVE ID: CVE-2018-14615 State: PUBLISHED Published: 2018-07-27T04:00:00 Last Updated: 2024-08-05T09:29:51.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 4.17.10. There is a buffer overflow in truncate_inline_inode() in fs/f2fs/inline.c when umounting an f2fs image, because a length value may be negative. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104917 - https://bugzilla.kernel.org/show_bug.cgi?id=200421 - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/
CVE ID: CVE-2018-14616 State: PUBLISHED Published: 2018-07-27T04:00:00 Last Updated: 2024-08-05T09:29:51.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference in fscrypt_do_page_crypto() in fs/crypto/crypto.c when operating on a file in a corrupted f2fs image. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.kernel.org/show_bug.cgi?id=200465 - http://www.securityfocus.com/bid/104917 - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.com/4094-1/ - http
/msg00017.html - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/
CVE ID: CVE-2018-14617 State: PUBLISHED Published: 2018-07-27T04:00:00 Last Updated: 2024-08-05T09:29:51.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3821-1/ - http://www.securityfocus.com/bid/104917 - https://www.spinics.net/lists/linux-fsdevel/msg130021.html - https://lists.debia
tp://www.securityfocus.com/bid/104917 - https://www.spinics.net/lists/linux-fsdevel/msg130021.html - https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html - https://usn.ubuntu.com/3821-2/ - https://bugzilla.kernel.org/show_bug.cgi?id=200297 - https://www.debian.org/security/2018/dsa-4308 - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/
CVE ID: CVE-2018-14618 State: PUBLISHED Published: 2018-09-05T19:00:00 Last Updated: 2024-08-05T09:29:51.906Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: [UNKNOWN] Products: curl Problem Types: CWE-131, CWE-122 Description: curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit size_t, the math to c
over the password and generate output into the allocated storage buffer. On systems with a 32 bit size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31 bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is almost identical to CVE-2017-8816.) Additional Analyst Notes: - CVE Program Container: References: - https://curl.haxx.se/docs/CVE-2018-14618.html - https://security.gentoo.org/glsa/201903-03 - https://usn.ubuntu.com/3765-1/ - https://access.redhat.com/errata/RHSA-2018:3558 - https://psi
ntoo.org/glsa/201903-03 - https://usn.ubuntu.com/3765-1/ - https://access.redhat.com/errata/RHSA-2018:3558 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0014 - https://www.debian.org/security/2018/dsa-4286 - http://www.securitytracker.com/id/1041605 - https://usn.ubuntu.com/3765-2/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14618 - https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf - https://access.redhat.com/errata/RHSA-2019:1880
CVE ID: CVE-2018-14619 State: PUBLISHED Published: 2018-08-30T12:00:00 Last Updated: 2024-08-05T09:29:51.723Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: [UNKNOWN] Products: kernel Problem Types: CWE-416 Description: A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.o
m or possibly escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b32a7dc8aef1882fbf983eb354837488cc9d54dc - https://access.redhat.com/errata/RHSA-2018:2948 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0013 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14619 - http://www.securityfocus.com/bid/105200
CVE ID: CVE-2018-14620 State: PUBLISHED Published: 2018-09-10T19:00:00 Last Updated: 2024-08-05T09:29:51.955Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Red Hat Products: openstack-rabbitmq-container Problem Types: CWE-494 Description: The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially allow an attacker to serve malicious code to the image builder and install in the resultant container image. Version of openstack-rabbitmq-container and openstack-containers as shipped with Red Hat Openstack 12, 13, 14 are believed to be vulnerable. Additional Analyst Notes:
enstack-containers as shipped with Red Hat Openstack 12, 13, 14 are believed to be vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2729 - https://access.redhat.com/errata/RHSA-2018:2721 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14620
CVE ID: CVE-2018-14621 State: PUBLISHED Published: 2018-08-30T13:00:00 Last Updated: 2024-08-05T09:29:51.860Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: [UNKNOWN] Products: libtirpc Problem Types: CWE-835 Description: An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to using poll rather than select, exhaustion of file descriptors would cause the server to enter an infinite loop, consuming a large amount of CPU time and denying service to other clients until restarted. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14621 - http://git.linux-n