Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-18019 State: PUBLISHED Published: 2018-01-04T04:00:00 Last Updated: 2024-08-05T21:06:50.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the user-controlled input can be used to compare an arbitrary memory address with a fixed value, which in turn can be used to read the contents of arbitrary memory. Similarly, the product crashes upon a \\.\K7Sentry DeviceIoControl call with an invalid kernel pointer. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.securiteam.com/index.php/archives/3435
CVE ID: CVE-2017-18020 State: PUBLISHED Published: 2018-01-04T06:00:00 Last Updated: 2024-08-05T21:06:50.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers can execute arbitrary code in the bootloader because S Boot omits a size check during a copy of ramfs data to memory. The Samsung ID is SVE-2017-10598. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2017-18021 State: PUBLISHED Published: 2018-01-05T19:00:00Z Last Updated: 2024-09-17T02:02:39.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/IJHack/QtPass/releases/tag/v1.2.1 - https://qtpass.org/ - https://github.com/IJHack/QtPass/issues/338 - https://lists.zx2c4.com/pipermail/password-store/2018-January/003165.html
CVE ID: CVE-2017-18022 State: PUBLISHED Published: 2018-01-05T19:00:00 Last Updated: 2024-08-05T21:06:50.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102437 - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/904
CVE ID: CVE-2017-18023 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-05T21:06:50.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Office Tracker 11.2.5 has XSS via the logincount parameter to the /otweb/OTPClientLogin URI. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/145775/Office-Tracker-11.2.5-Cross-Site-Scripting.html
CVE ID: CVE-2017-18024 State: PUBLISHED Published: 2018-01-10T18:00:00 Last Updated: 2024-08-05T21:06:50.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/145776/AvantFAX-3.3.3-Cross-Site-Scripting.html
CVE ID: CVE-2017-18025 State: PUBLISHED Published: 2018-01-09T03:00:00Z Last Updated: 2024-09-16T17:53:51.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/drknow.cgi in Innotube ITGuard-Manager 0.0.0.1 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the username field, as demonstrated by a username beginning with "admin|" to use the '|' metacharacter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43343/
CVE ID: CVE-2017-18026 State: PUBLISHED Published: 2018-01-10T09:00:00 Last Updated: 2024-08-05T21:06:50.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary commands (through the Mercurial adapter) via vectors involving a branch whose name begins with a --config= or --debugger= substring, a related issue to CVE-2017-17536. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/issues/27516 - https://github.com/redmine/redmine/commit/58ed8655136ff2fe5ff7796
: References: - https://www.redmine.org/issues/27516 - https://github.com/redmine/redmine/commit/58ed8655136ff2fe5ff7796859bf6a399c76c678 - https://www.debian.org/security/2018/dsa-4191 - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://github.com/redmine/redmine/commit/ca87bf766cdc70179cb2dce03015d78ec9c13ebd - https://github.com/redmine/redmine/commit/9d797400eaec5f9fa7ba9507c82d9c18cb91d02e
CVE ID: CVE-2017-18027 State: PUBLISHED Published: 2018-01-12T20:00:00 Last Updated: 2024-08-05T21:06:50.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102527 - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/734
CVE ID: CVE-2017-18028 State: PUBLISHED Published: 2018-01-12T20:00:00 Last Updated: 2024-08-05T21:06:50.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allow remote attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/736
CVE ID: CVE-2017-18029 State: PUBLISHED Published: 2018-01-12T20:00:00 Last Updated: 2024-08-05T21:06:50.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102519 - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/691
CVE ID: CVE-2017-18030 State: PUBLISHED Published: 2018-01-23T18:00:00 Last Updated: 2024-08-05T21:06:50.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://www.openwall.com/lists/oss-security/2018/01/15/3 - http://www.securityfocus.com/bid/102520 - https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f153b563f8cf121ae
18/01/15/3 - http://www.securityfocus.com/bid/102520 - https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f153b563f8cf121aebf5a2fff5f0110faf58ccb3
CVE ID: CVE-2017-18032 State: PUBLISHED Published: 2018-01-16T09:00:00 Last Updated: 2024-08-05T21:06:50.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The download-manager plugin before 2.9.52 for WordPress has XSS via the id parameter in a wpdm_generate_password action to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/download-manager/#developers - https://security.dxw.com/advisories/xss-download-manager/
CVE ID: CVE-2017-18033 State: PUBLISHED Published: 2018-01-18T14:00:00Z Last Updated: 2024-09-17T03:53:11.949Z Vendors: Atlassian Products: Jira Problem Types: Cross-Site Request Forgery (CSRF) Description: The Jira-importers-plugin in Atlassian Jira before version 7.6.1 allows remote attackers to create new projects and abort an executing external system import via various Cross-site request forgery (CSRF) vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102744 - https://jira.atlassian.com/browse/JRASERVER-66643
CVE ID: CVE-2017-18034 State: PUBLISHED Published: 2018-02-02T14:00:00Z Last Updated: 2024-09-16T17:38:29.337Z Vendors: Atlassian Products: Fisheye and Crucible Problem Types: Cross Site Scripting (XSS) Description: The source browse resource in Atlassian Fisheye and Crucible before version 4.5.1 and 4.6.0 allows allows remote attackers that have write access to an indexed repository to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in via a specially crafted repository branch name when trying to display deleted files of the branch. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/FE-6994 - https://jira.atl
ional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/FE-6994 - https://jira.atlassian.com/browse/CRUC-8161
CVE ID: CVE-2017-18035 State: PUBLISHED Published: 2018-02-02T14:00:00Z Last Updated: 2024-09-16T23:30:24.222Z Vendors: Atlassian Products: Fisheye and Crucible Problem Types: CWE-284 Description: The /rest/review-coverage-chart/1.0/data/<repository_name>/.json resource in Atlassian Fisheye and Crucible before version 4.5.1 and 4.6.0 was missing a permissions check, this allows remote attackers who do not have access to a particular repository to determine its existence and access review coverage statistics for it. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/FE-6996 - https://jira.atlassian.com/browse/CRUC-8163
CVE ID: CVE-2017-18036 State: PUBLISHED Published: 2018-02-02T14:00:00Z Last Updated: 2024-09-16T19:04:43.701Z Vendors: Atlassian Products: Bitbucket Server Problem Types: CWE-918 Description: The Github repository importer in Atlassian Bitbucket Server before version 5.3.0 allows remote attackers to determine if a service they could not otherwise reach has open ports via a Server Side Request Forgery (SSRF) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/BSERV-10591 - http://www.securityfocus.com/bid/102932
CVE ID: CVE-2017-18037 State: PUBLISHED Published: 2018-02-02T14:00:00Z Last Updated: 2024-09-16T20:27:24.181Z Vendors: Atlassian Products: Bitbucket Server Problem Types: Path Traversal Description: The git repository tag rest resource in Atlassian Bitbucket Server from version 3.7.0 before 4.14.11 (the fixed version for 4.14.x), from version 5.0.0 before 5.0.9 (the fixed version for 5.0.x), from version 5.1.0 before 5.1.8 (the fixed version for 5.1.x), from version 5.2.0 before 5.2.6 (the fixed version for 5.2.x), from version 5.3.0 before 5.3.4 (the fixed version for 5.3.x), from version 5.4.0 before 5.4.2 (the fixed version for 5.4.x), from version 5.5.0 before 5.5.1 (the fixed version f
.x), from version 5.4.0 before 5.4.2 (the fixed version for 5.4.x), from version 5.5.0 before 5.5.1 (the fixed version for 5.5.x) and before 5.6.0 allows remote attackers to read arbitrary files via a path traversal vulnerability through the name of a git tag. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/BSERV-10595
CVE ID: CVE-2017-18038 State: PUBLISHED Published: 2018-02-02T14:00:00Z Last Updated: 2024-09-17T04:04:47.652Z Vendors: Atlassian Products: Bitbucket Server Problem Types: Path Traversal Description: The repository settings resource in Atlassian Bitbucket Server before version 5.6.0 allows remote attackers to read the first line of arbitrary files via a path traversal vulnerability through the default branch name. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/BSERV-10592
CVE ID: CVE-2017-18039 State: PUBLISHED Published: 2018-02-02T14:00:00Z Last Updated: 2024-09-16T19:10:00.691Z Vendors: Atlassian Products: Jira Problem Types: Cross Site Scripting (XSS) Description: The IncomingMailServers resource in Atlassian Jira from version 6.2.1 before version 7.4.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the messagesThreshold parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103086 - https://jira.atlassian.com/browse/JRASERVER-66719
CVE ID: CVE-2017-18040 State: PUBLISHED Published: 2018-02-02T14:00:00Z Last Updated: 2024-09-16T20:16:51.105Z Vendors: Atlassian Products: Bamboo Problem Types: Cross Site Scripting (XSS) Description: The viewDeploymentVersionCommits resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a release. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/BAM-19661 - http://www.securityfocus.com/bid/103070
CVE ID: CVE-2017-18041 State: PUBLISHED Published: 2018-02-02T14:00:00Z Last Updated: 2024-09-16T19:04:12.784Z Vendors: Atlassian Products: Bamboo Problem Types: Cross Site Scripting (XSS) Description: The viewDeploymentVersionJiraIssuesDialog resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a release. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103071 - https://jira.atlassian.com/browse/BAM-19662
CVE ID: CVE-2017-18042 State: PUBLISHED Published: 2018-02-02T14:00:00Z Last Updated: 2024-09-17T00:32:15.539Z Vendors: Atlassian Products: Bamboo Problem Types: Cross-Site Request Forgery (CSRF) Description: The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user data including passwords via a Cross-site request forgery (CSRF) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103110 - https://jira.atlassian.com/browse/BAM-19663
CVE ID: CVE-2017-18043 State: PUBLISHED Published: 2018-01-31T20:00:00 Last Updated: 2024-08-05T21:06:50.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu process crash). Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://www.debian.org/security/2018/dsa-4213 - http://www.openwall.com/lists/oss-security/2018/01/19/1 - https://usn.ubuntu.com/3575-1/ - https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=2098b073f398cd628c09c5a78537a6854 - http://www.securityfocus.com/bid/10275
tps://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=2098b073f398cd628c09c5a78537a6854 - http://www.securityfocus.com/bid/102759
CVE ID: CVE-2017-18044 State: PUBLISHED Published: 2018-01-19T17:00:00 Last Updated: 2024-08-05T21:06:50.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6. A certain message parsing function inside the Commvault service does not properly validate the input of an incoming string before passing it to CreateProcess. As a result, a specially crafted message can inject commands that will be executed on the target operating system. Exploitation of this vulnerability does not require authentication and can lead to SYSTEM level privilege on any system running the cvd daemon. This is
ity does not require authentication and can lead to SYSTEM level privilege on any system running the cvd daemon. This is a different vulnerability than CVE-2017-3195. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rapid7/metasploit-framework/pull/9389 - https://github.com/rapid7/metasploit-framework/pull/9340 - https://www.securifera.com/advisories/sec-2017-0001/
CVE ID: CVE-2017-18045 State: PUBLISHED Published: 2018-01-21T07:00:00Z Last Updated: 2024-09-16T20:21:16.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: JBMC DirectAdmin before 1.52, when the email_ftp_password_change setting is nonzero, allows remote attackers to obtain access or cause a denial of service (segfault) via an unspecified request. Additional Analyst Notes: - CVE Program Container: References: - https://www.directadmin.com/features.php?id=2036
CVE ID: CVE-2017-18046 State: PUBLISHED Published: 2018-01-21T22:00:00 Last Updated: 2024-08-05T21:06:50.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attackers to execute arbitrary code via a long POST request to the login_action function in /cgi-bin/login_action.cgi (aka cgipage.cgi). Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/ankit_anubhav/status/982261670394249216 - https://blogs.securiteam.com/index.php/archives/3552 - https://pastebin.com/Yxd9S46A
CVE ID: CVE-2017-18047 State: PUBLISHED Published: 2018-01-22T04:00:00 Last Updated: 2024-08-05T21:06:50.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow in the FTP client in LabF nfsAxe 3.7 allows remote FTP servers to execute arbitrary code via a long reply. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43236/ - https://www.exploit-db.com/exploits/43518/ - https://www.exploit-db.com/exploits/42011/
CVE ID: CVE-2017-18048 State: PUBLISHED Published: 2018-01-23T06:00:00 Last Updated: 2024-08-05T21:06:50.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monstra-cms/monstra/issues/426 - https://www.exploit-db.com/exploits/43348/ - https://securityprince.blogspot.in/2017/12/monstra-cms-304-arbitrary-file-upload.html - https://blogs.securiteam.com/index.php/archives/3559
CVE ID: CVE-2017-18049 State: PUBLISHED Published: 2018-01-23T06:00:00 Last Updated: 2024-08-05T21:06:50.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software (including Microsoft Excel). For example, the CSV data may contain untrusted user input from the "First Name" field of a user's /myprofile page. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43396/ - https://www.silverstripe.org/download/secu
Program Container: References: - https://www.exploit-db.com/exploits/43396/ - https://www.silverstripe.org/download/security-releases/ss-2017-007
CVE ID: CVE-2017-18050 State: PUBLISHED Published: 2018-03-16T22:00:00Z Last Updated: 2024-09-16T22:09:39.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for vdev_map in wma_tbttoffset_update_event_handler(), which is received from firmware, leads to potential buffer overwrite and out of bounds memory read. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=63b57442d65dfdb4b4634ff32059b1bca8c72fb7 - https://source.android.com/secur
r/qcom-opensource/wlan/qcacld-3.0/commit/?id=63b57442d65dfdb4b4634ff32059b1bca8c72fb7 - https://source.android.com/security/bulletin/pixel/2018-03-01
CVE ID: CVE-2017-18051 State: PUBLISHED Published: 2018-03-16T22:00:00Z Last Updated: 2024-09-16T23:20:41.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for event->vdev_id in wma_rcpi_event_handler(), which is received from firmware, leads to potential out of bounds memory read. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-03-01 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=38fba6a9f6ca3c7bf0c4c1bd84fa2b89fbcaeb9
odeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=38fba6a9f6ca3c7bf0c4c1bd84fa2b89fbcaeb93
CVE ID: CVE-2017-18052 State: PUBLISHED Published: 2018-03-16T22:00:00Z Last Updated: 2024-09-17T02:42:57.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for cmpl_params->num_reports, param_buf->desc_ids and param_buf->status in wma_mgmt_tx_bundle_completion_handler(), which is received from firmware, leads to potential out of bounds memory read. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/pixel/2018-03-01 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensourc
ce.android.com/security/bulletin/pixel/2018-03-01 - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=c04c4870bd86a5f878553d7acf207388f3d6c3bd
CVE ID: CVE-2017-18053 State: PUBLISHED Published: 2018-03-16T22:00:00Z Last Updated: 2024-09-16T23:05:46.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for fix_param->vdev_id in wma_p2p_lo_event_handler(), which is received from firmware, leads to potential out of bounds memory read. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=da1c6e996ac7635c202296e31118f088f9427947 - https://source.android.com/security/bulletin/pixel/201
/qcacld-3.0/commit/?id=da1c6e996ac7635c202296e31118f088f9427947 - https://source.android.com/security/bulletin/pixel/2018-03-01
CVE ID: CVE-2017-18054 State: PUBLISHED Published: 2018-03-16T22:00:00Z Last Updated: 2024-09-16T16:32:54.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for num_vdev_mac_entries in wma_pdev_hw_mode_transition_evt_handler(), which is received from firmware, leads to potential buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=6eefc756612e39fab49ff719b3dc9b94def53396 - https://source.android.com/security/bulletin/pi
ce/wlan/qcacld-3.0/commit/?id=6eefc756612e39fab49ff719b3dc9b94def53396 - https://source.android.com/security/bulletin/pixel/2018-03-01
CVE ID: CVE-2017-18055 State: PUBLISHED Published: 2018-03-16T22:00:00Z Last Updated: 2024-09-17T02:37:31.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation for wmi_event->num_vdev_mac_entries in wma_pdev_set_hw_mode_resp_evt_handler(), which is received from firmware, leads to potential buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=50a0554d12cff58b3ffbd51d3194304244b87023 - https://source.android.com/security/bu