Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-9186 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-17T01:50:37.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:326:17. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE ID: CVE-2017-9187 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-05T16:55:22.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:486:7. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE ID: CVE-2017-9188 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-16T21:08:26.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: libautotrace.a in AutoTrace 0.31.1 has a "left shift ... cannot be represented in type int" issue in input-bmp.c:516:63. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE ID: CVE-2017-9189 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-17T04:09:43.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and application crash), related to the GET_COLOR function in color.c:16:11. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE ID: CVE-2017-9190 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-16T20:32:28.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid free), related to the free_bitmap function in bitmap.c:24:5. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE ID: CVE-2017-9191 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-16T21:58:04.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the rle_fread function in input-tga.c:252:15. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE ID: CVE-2017-9192 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-05T16:55:22.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-tga.c:528:7. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE ID: CVE-2017-9193 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-16T23:06:53.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:538:33. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE ID: CVE-2017-9194 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-17T01:11:40.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:559:29. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE ID: CVE-2017-9195 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-16T18:08:00.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:620:27. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE ID: CVE-2017-9196 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-16T23:06:45.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: libautotrace.a in AutoTrace 0.31.1 has a "negative-size-param" issue in the ReadImage function in input-tga.c:528:7. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE ID: CVE-2017-9197 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-05T17:02:42.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:498:55. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE ID: CVE-2017-9198 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-17T04:14:30.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:508:18. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE ID: CVE-2017-9199 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-16T23:45:36.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:192:19. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE ID: CVE-2017-9200 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-17T01:06:29.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:528:63. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE ID: CVE-2017-9201 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-17T04:28:51.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: imagew-cmd.c:850:46 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted image, related to imagew-api.c. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/ - https://github.com/jsummers/imageworsener/commit/dc49c807926b96e503bd7c0dec35119eecd6c6fe
CVE ID: CVE-2017-9202 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-17T00:10:48.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: imagew-cmd.c:854:45 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted image, related to imagew-api.c. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/ - https://github.com/jsummers/imageworsener/commit/dc49c807926b96e503bd7c0dec35119eecd6c6fe
CVE ID: CVE-2017-9203 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-17T03:19:05.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: imagew-main.c:960:12 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (buffer underflow) via a crafted image, related to imagew-bmp.c. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/ - https://github.com/jsummers/imageworsener/commit/a4f247707f08e322f0b41e82c3e06e224240a654
CVE ID: CVE-2017-9204 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-17T03:49:05.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iw_get_ui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted image, related to imagew-jpeg.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d - https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/
CVE ID: CVE-2017-9205 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-16T23:25:51.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iw_get_ui16be function in imagew-util.c:422:24 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted image, related to imagew-jpeg.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d - https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/
CVE ID: CVE-2017-9206 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-17T02:57:30.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iw_get_ui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image, related to imagew-jpeg.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d - https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/
CVE ID: CVE-2017-9207 State: PUBLISHED Published: 2017-05-23T03:56:00Z Last Updated: 2024-09-16T19:56:15.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iw_get_ui16be function in imagew-util.c:422:24 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image, related to imagew-jpeg.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d - https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/
CVE ID: CVE-2017-9208 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-05T17:02:44.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to releaseResolved functions, aka qpdf-infiniteloop1. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/ - https://usn.ubuntu.com/3638-1/
CVE ID: CVE-2017-9209 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-05T17:02:43.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to QPDFObjectHandle::parseInternal, aka qpdf-infiniteloop2. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/ - https://usn.ubuntu.com/3638-1/
CVE ID: CVE-2017-9210 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-05T17:02:43.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to unparse functions, aka qpdf-infiniteloop3. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/ - https://usn.ubuntu.com/3638-1/
CVE ID: CVE-2017-9211 State: PUBLISHED Published: 2017-05-23T05:14:00Z Last Updated: 2024-09-17T02:53:35.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crypto_skcipher_init_tfm function in crypto/skcipher.c in the Linux kernel through 4.11.2 relies on a setkey function that lacks a key-size check, which allows local users to cause a denial of service (NULL pointer dereference) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/9933e113c2e87a9f46a40fde8dafbf801dca1ab9 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9933e113c2e87a9f46a40fde8dafbf801dca1ab9 - https:
p://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9933e113c2e87a9f46a40fde8dafbf801dca1ab9 - https://patchwork.kernel.org/patch/9718933/
CVE ID: CVE-2017-9212 State: PUBLISHED Published: 2017-05-23T14:00:00Z Last Updated: 2024-09-16T17:37:48.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth stack on the BMW 330i 2011 allows a remote crash of the CD/Multimedia software via %x or %c format string specifiers in a device name. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/__Obzy__/status/864704956116254720
CVE ID: CVE-2017-9214 State: PUBLISHED Published: 2017-05-23T17:00:00 Last Updated: 2024-08-05T17:02:43.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:2698 - https://access.redhat.com/errata/RHSA-2017:2727 - https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332711.html - https://access.redhat.com/errata/RHSA-2017:2692
- https://mail.openvswitch.org/pipermail/ovs-dev/2017-May/332711.html - https://access.redhat.com/errata/RHSA-2017:2692 - https://access.redhat.com/errata/RHSA-2017:2553 - https://access.redhat.com/errata/RHSA-2017:2418 - https://access.redhat.com/errata/RHSA-2017:2648 - https://access.redhat.com/errata/RHSA-2017:2665 - https://lists.debian.org/debian-lts-announce/2021/02/msg00032.html
CVE ID: CVE-2017-9216 State: PUBLISHED Published: 2017-05-24T04:56:00 Last Updated: 2024-09-11T16:29:32.201195 Vendors: n/a Products: n/a Problem Types: n/a Description: libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c. For example, the jbig2dec utility will crash (segmentation fault) when parsing an invalid file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98680 - https://bugs.ghostscript.com/show_bug.cgi?id=697934 - https://lists.debian.org/debian-lts-announce/2021/10/msg00023.html - https://git.ghostscript.com/?p=ghostpdl.git%3B
34 - https://lists.debian.org/debian-lts-announce/2021/10/msg00023.html - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3ebffb1d96ba0cacec23016eccb4047dab365853
CVE ID: CVE-2017-9217 State: PUBLISHED Published: 2017-05-24T04:56:00 Last Updated: 2024-12-13T13:09:19.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/systemd/systemd/pull/5998 - https://launchpad.net/bugs/1621396 - https://github.com/systemd/systemd/commit/a924f43f30f9c4acaf70618dd2a055f8b0f166be - http://www.securityfocus.com/bid/98677
CVE ID: CVE-2017-9218 State: PUBLISHED Published: 2017-06-27T12:00:00 Last Updated: 2024-08-05T17:02:44.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jun/32
CVE ID: CVE-2017-9219 State: PUBLISHED Published: 2017-06-27T12:00:00 Last Updated: 2024-08-05T17:02:43.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jun/32
CVE ID: CVE-2017-9220 State: PUBLISHED Published: 2017-06-27T12:00:00 Last Updated: 2024-08-05T17:02:43.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jun/32
CVE ID: CVE-2017-9221 State: PUBLISHED Published: 2017-06-27T12:00:00 Last Updated: 2024-08-05T17:02:43.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mp4ff_read_mdhd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jun/32
CVE ID: CVE-2017-9222 State: PUBLISHED Published: 2017-06-27T12:00:00 Last Updated: 2024-08-05T17:02:43.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mp4ff_parse_tag function in common/mp4ff/mp4meta.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jun/32
CVE ID: CVE-2017-9223 State: PUBLISHED Published: 2017-06-27T12:00:00 Last Updated: 2024-08-05T17:02:43.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Jun/32
CVE ID: CVE-2017-9224 State: PUBLISHED Published: 2017-05-24T15:00:00 Last Updated: 2024-08-05T17:02:43.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in match_at() during regular expression searching. A logical error involving order of validation and access in match_at() could result in an out-of-bounds read from a stack buffer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kkos/oniguruma/commit/690313a061f7a4fa614ec5cc8368b4f2284e059b - https://access.redhat.com/errata/RHSA-2018
//github.com/kkos/oniguruma/commit/690313a061f7a4fa614ec5cc8368b4f2284e059b - https://access.redhat.com/errata/RHSA-2018:1296 - https://github.com/kkos/oniguruma/issues/57 - http://www.securityfocus.com/bid/101244
CVE ID: CVE-2017-9225 State: PUBLISHED Published: 2017-05-24T15:00:00Z Last Updated: 2024-09-17T03:07:00.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds write in onigenc_unicode_get_case_fold_codes_by_str() occurs during regular expression compilation. Code point 0xFFFFFFFF is not properly handled in unicode_unfold_key(). A malformed regular expression could result in 4 bytes being written off the end of a stack buffer of expand_case_fold_string() during the call to onigenc_unicode_get_case_fold_codes_by_str(), a typical stack buf
buffer of expand_case_fold_string() during the call to onigenc_unicode_get_case_fold_codes_by_str(), a typical stack buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kkos/oniguruma/commit/166a6c3999bf06b4de0ab4ce6b088a468cc4029f - https://github.com/kkos/oniguruma/issues/56
CVE ID: CVE-2017-9226 State: PUBLISHED Published: 2017-05-24T15:00:00 Last Updated: 2024-08-05T17:02:44.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write or read occurs in next_state_val() during regular expression compilation. Octal numbers larger than 0xff are not handled correctly in fetch_token() and fetch_token_in_cc(). A malformed regular expression containing an octal number in the form of '\700' would produce an invalid code point value larger than 0xff in next_state_val(), resulting in an out-of-bounds write memory cor
produce an invalid code point value larger than 0xff in next_state_val(), resulting in an out-of-bounds write memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kkos/oniguruma/issues/55 - https://access.redhat.com/errata/RHSA-2018:1296 - https://github.com/kkos/oniguruma/commit/f015fbdd95f76438cd86366467bb2b39870dd7c6 - https://github.com/kkos/oniguruma/commit/b4bf968ad52afe14e60a2dc8a95d3555c543353a - http://www.securityfocus.com/bid/101244
CVE ID: CVE-2017-9227 State: PUBLISHED Published: 2017-05-24T15:00:00 Last Updated: 2024-08-05T17:02:44.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in mbc_enc_len() during regular expression searching. Invalid handling of reg->dmin in forward_search_range() could result in an invalid pointer dereference, as an out-of-bounds read from a stack buffer. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1296 - http://www.securityfocus.com/bid/100538 - https://git
r: References: - https://access.redhat.com/errata/RHSA-2018:1296 - http://www.securityfocus.com/bid/100538 - https://github.com/kkos/oniguruma/issues/58 - https://github.com/kkos/oniguruma/commit/9690d3ab1f9bcd2db8cbe1fe3ee4a5da606b8814
CVE ID: CVE-2017-9228 State: PUBLISHED Published: 2017-05-24T15:00:00 Last Updated: 2024-08-05T17:02:43.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption. Additional Analyst Notes