Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-7833 State: PUBLISHED Published: 2018-12-17T22:00:00 Last Updated: 2024-08-05T06:37:59.565Z Vendors: Schneider Electric SE Products: Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 Problem Types: Improper Check for Unusual or Exceptional Conditions Description: An Improper Check for Unusual or Exceptional Conditions vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 where an unauthenticated user can send a specially crafted XML data via a POST request to cause the web server to become unavailable Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electri
ver to become unavailable Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-327-01/
CVE ID: CVE-2018-7834 State: PUBLISHED Published: 2019-05-22T19:49:15 Last Updated: 2024-08-05T06:37:59.598Z Vendors: n/a Products: ConneXium Gateway, TSXETG100 - all versions Problem Types: CWE-79 Description: A CWE-79 Cross-Site Scripting vulnerability exists in all versions of the TSXETG100 allowing an attacker to send a specially crafted URL with an embedded script to a user that would then be executed within the context of that user. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-07/
CVE ID: CVE-2018-7835 State: PUBLISHED Published: 2018-12-24T16:00:00 Last Updated: 2024-08-05T06:37:59.606Z Vendors: Schneider Electric SE Products: IIoT Monitor 3.1.38 Problem Types: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in IIoT Monitor 3.1.38 which could allow access to files available to SYSTEM user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106484 - https://www.schneider-electric.com/en/download/document/SEVD-2018-354-03/
CVE ID: CVE-2018-7836 State: PUBLISHED Published: 2018-12-24T16:00:00 Last Updated: 2024-08-05T06:37:59.577Z Vendors: Schneider Electric SE Products: IIoT Monitor 3.1.38 Problem Types: Unrestricted Upload of File with Dangerous Type Description: An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow upload and execution of malicious files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106484 - https://www.schneider-electric.com/en/download/document/SEVD-2018-354-03/
CVE ID: CVE-2018-7837 State: PUBLISHED Published: 2018-12-24T16:00:00 Last Updated: 2024-08-05T06:37:59.531Z Vendors: Schneider Electric SE Products: IIoT Monitor 3.1.38 Problem Types: Improper Restriction of XML External Entity Reference ('XXE') Description: An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow the software to resolve documents outside of the intended sphere of control, causing the software to embed incorrect documents into its output and expose restricted information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10648
ted information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106484 - https://www.schneider-electric.com/en/download/document/SEVD-2018-354-03/
CVE ID: CVE-2018-7838 State: PUBLISHED Published: 2019-07-15T20:49:01 Last Updated: 2024-08-05T06:37:59.463Z Vendors: Modicon Products: Modicon M580 CPU - BMEP582040 all versions before V2.90 and Modicon Ethernet Module BMENOC0301 all versions before V2.16 Problem Types: CWE-119 Description: A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions before V2.16, which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FTP CWD command with a data length greater than 1020 bytes. A power cycle is then needed to reactivate the FTP s
eives a FTP CWD command with a data length greater than 1020 bytes. A power cycle is then needed to reactivate the FTP service. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-03
CVE ID: CVE-2018-7839 State: PUBLISHED Published: 2019-02-06T23:00:00 Last Updated: 2024-08-05T06:37:59.616Z Vendors: Schneider Electric SE Products: IIoT Monitor 3.1.38 Problem Types: Cryptographic Issue Description: A Cryptographic Issue (CWE-310) vulnerability exists in IIoT Monitor 3.1.38 which could allow information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2018-354-03/ - https://ics-cert.us-cert.gov/advisories/ICSA-19-008-02
CVE ID: CVE-2018-7840 State: PUBLISHED Published: 2019-05-22T19:24:55 Last Updated: 2024-08-05T06:37:59.645Z Vendors: VideoXpert Products: VideoXpert OpsCenter versions prior to 3.1 Problem Types: Uncontrolled Search Path Element Description: A Uncontrolled Search Path Element (CWE-427) vulnerability exists in VideoXpert OpsCenter versions prior to 3.1 which could allow an attacker to cause the system to call an incorrect DLL. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-071-01
CVE ID: CVE-2018-7841 State: PUBLISHED Published: 2019-05-22T19:20:54.000Z Last Updated: 2025-10-21T23:45:36.396Z Vendors: U.motion Products: U.motion Builder software version 1.3.4 Problem Types: SQL Injection Description: A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted code execution when an improper set of characters is entered. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/152862/Schneider-Electric-U.Motion-Builder-1.3.4-Command-Injection.html - http://seclists.org/fulldisclosure/2019/May/26 - https://www.schneider-electric.com/ww/en/downloa
mmand-Injection.html - http://seclists.org/fulldisclosure/2019/May/26 - https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-071-02
CVE ID: CVE-2018-7842 State: PUBLISHED Published: 2019-05-22T19:59:46 Last Updated: 2024-08-05T06:37:59.544Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause an elevation of privilege by conducting a brute force attack on Modbus parameters sent to the controller. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vuln
es: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0741
CVE ID: CVE-2018-7843 State: PUBLISHED Published: 2019-05-22T19:58:58 Last Updated: 2024-08-05T06:37:59.598Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading memory blocks with an invalid data size or with an invalid data offset in the controller over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintellige
er: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0738
CVE ID: CVE-2018-7844 State: PUBLISHED Published: 2019-05-22T20:06:09 Last Updated: 2024-08-05T06:37:59.563Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading memory blocks from the controller over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-
der-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0739
CVE ID: CVE-2018-7845 State: PUBLISHED Published: 2019-05-22T20:00:49 Last Updated: 2024-08-05T06:37:59.558Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of unexpected data from the controller when reading specific memory blocks in the controller over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vuln
es: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0745
CVE ID: CVE-2018-7846 State: PUBLISHED Published: 2019-05-22T19:57:42 Last Updated: 2024-08-05T06:37:59.620Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence
References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0735
CVE ID: CVE-2018-7847 State: PUBLISHED Published: 2019-05-22T20:00:04 Last Updated: 2024-08-05T06:37:59.510Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-284: Improper Access Control vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service or potential code execution by overwriting configuration settings of the controller over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulne
s: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0742 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0743
CVE ID: CVE-2018-7848 State: PUBLISHED Published: 2019-05-22T19:59:26 Last Updated: 2024-08-05T06:37:59.566Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause the disclosure of SNMP information when reading files from the controller over Modbus Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0740
CVE ID: CVE-2018-7849 State: PUBLISHED Published: 2019-05-22T19:58:16 Last Updated: 2024-08-05T06:37:59.761Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause a possible Denial of Service due to improper data integrity check when sending files the controller over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability
ps://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0737
CVE ID: CVE-2018-7850 State: PUBLISHED Published: 2019-05-22T20:00:27 Last Updated: 2024-08-05T06:37:59.544Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause invalid information displayed in Unity Pro software. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0743
CVE ID: CVE-2018-7851 State: PUBLISHED Published: 2019-05-22T19:56:24 Last Updated: 2024-08-05T06:37:59.635Z Vendors: n/a Products: Modicon M580 with firmware prior to V2.50 Modicon M340 with firmware prior to V3.01 BMxCRA312xx with firmware prior to V2.40 All firmware versions of Modicon Premium and 140CRA312xxx Problem Types: CWE-119 Description: CWE-119: Buffer errors vulnerability exists in Modicon M580 with firmware prior to V2.50, Modicon M340 with firmware prior to V3.01, BMxCRA312xx with firmware prior to V2.40, All firmware versions of Modicon Premium and 140CRA312xxx when sending a specially crafted Modbus packet, which could cause a denial of service to the device that would force
xxx when sending a specially crafted Modbus packet, which could cause a denial of service to the device that would force a restart to restore availability. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-10/
CVE ID: CVE-2018-7852 State: PUBLISHED Published: 2019-05-22T20:01:12 Last Updated: 2024-08-05T06:37:59.655Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when an invalid private command parameter is sent to the controller over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALO
eider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0763
CVE ID: CVE-2018-7853 State: PUBLISHED Published: 2019-05-22T20:02:11 Last Updated: 2024-08-05T06:37:59.636Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading invalid physical memory blocks in the controller over Modbus Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-
lectric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0764
CVE ID: CVE-2018-7854 State: PUBLISHED Published: 2019-05-22T20:02:52 Last Updated: 2024-08-05T06:37:59.623Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a denial of Service when sending invalid debug parameters to the controller over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0765
CVE ID: CVE-2018-7855 State: PUBLISHED Published: 2019-05-22T20:03:17 Last Updated: 2024-08-05T06:37:59.652Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service when sending invalid breakpoint parameters to the controller over Modbus Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-
lectric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0767 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0766
CVE ID: CVE-2018-7856 State: PUBLISHED Published: 2019-05-22T20:03:45 Last Updated: 2024-08-05T06:37:59.599Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of Service when writing invalid memory blocks to the controller over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-20
r-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0767
CVE ID: CVE-2018-7857 State: PUBLISHED Published: 2019-05-22T20:04:10 Last Updated: 2024-08-05T06:37:59.621Z Vendors: n/a Products: Modicon M580 Modicon M340 Modicon Quantum Modicon Premium Problem Types: Multiple Vulnerabilities Description: A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of Service when writing out of bounds variables to the controller over Modbus. Additional Analyst Notes: - CVE Program Container: References: - https://www.schneider-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-
der-electric.com/en/download/document/SEVD-2019-134-11/ - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0768
CVE ID: CVE-2018-7858 State: PUBLISHED Published: 2018-03-12T21:00:00 Last Updated: 2024-08-05T06:37:59.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds access and QEMU process crash) by leveraging incorrect region calculation when updating VGA display. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2162 - https://bugzilla.redhat.com/show_bug.cgi?id=1553402 - https://access.redhat.com/errata/RHSA-2018:1369 - https://usn.ubuntu.com/3649-1/ - https://ac
/show_bug.cgi?id=1553402 - https://access.redhat.com/errata/RHSA-2018:1369 - https://usn.ubuntu.com/3649-1/ - https://access.redhat.com/errata/RHSA-2018:1416 - http://www.securityfocus.com/bid/103350 - http://www.openwall.com/lists/oss-security/2018/03/09/1 - https://lists.nongnu.org/archive/html/qemu-devel/2018-03/msg02174.html - http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html
CVE ID: CVE-2018-7859 State: PUBLISHED Published: 2019-12-30T19:23:34 Last Updated: 2024-08-05T06:37:59.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: A security vulnerability in D-Link DGS-1510-series switches with firmware 1.20.011, 1.30.007, 1.31.B003 and older that may allow a remote attacker to inject malicious scripts in the device and execute commands via browser that is configuring the unit. Additional Analyst Notes: - CVE Program Container: References: - http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10082
CVE ID: CVE-2018-7861 State: REJECTED Published: 2018-03-09T19:00:00 Last Updated: 2018-03-09T18:57:02 Description: No description available.
CVE ID: CVE-2018-7862 State: REJECTED Published: 2018-03-09T19:00:00 Last Updated: 2018-03-09T18:57:02 Description: No description available.
CVE ID: CVE-2018-7863 State: REJECTED Published: 2018-03-09T19:00:00 Last Updated: 2018-03-09T18:57:02 Description: No description available.
CVE ID: CVE-2018-7864 State: REJECTED Published: 2018-03-09T19:00:00 Last Updated: 2018-03-09T18:57:02 Description: No description available.
CVE ID: CVE-2018-7865 State: REJECTED Published: 2018-03-09T19:00:00 Last Updated: 2018-03-09T18:57:02 Description: No description available.
CVE ID: CVE-2018-7866 State: PUBLISHED Published: 2018-03-08T18:00:00 Last Updated: 2024-08-05T06:37:59.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260 - https://lists.debian.org/debian-lts-announce/2018/05/msg00017.html - https://github.com/libming/libming/issues/118 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/
g/libming/issues/118 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/47KZ5RYWQMBN5DVDITBVRDNDCSFNBJ3V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBFCINUX3XXAPPH77OH6NKACBPFBQXXW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CQNIJH5EQV2D6KEFGY2467ZS4I7TZLXP/
CVE ID: CVE-2018-7867 State: PUBLISHED Published: 2018-03-08T18:00:00 Last Updated: 2024-08-05T06:37:59.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf. A Crafted input will lead to a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892260 - https://lists.debian.org/debian-lts-announce/2018/04/msg00008.html - https://github.com/libming/libming/issues/116