Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-7956 State: PUBLISHED Published: 2018-12-04T18:00:00 Last Updated: 2024-08-05T06:37:59.663Z Vendors: Huawei Technologies Co., Ltd. Products: Huawei VIP App Problem Types: information leakage Description: Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181129-01-huaweivip-en
CVE ID: CVE-2018-7957 State: PUBLISHED Published: 2018-07-31T14:00:00 Last Updated: 2024-08-05T06:37:59.616Z Vendors: Huawei Technologies Co., Ltd. Products: Victoria-AL00 Problem Types: information leakage Description: Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. Because an interface does not verify authorization correctly, attackers can exploit an application with the authorization of phone state to obtain user location additionally. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180704-01-smartphone-en
CVE ID: CVE-2018-7958 State: PUBLISHED Published: 2018-11-27T22:00:00 Last Updated: 2024-08-05T06:37:59.643Z Vendors: Huawei Technologies Co., Ltd. Products: eSpace 7950 Problem Types: anonymous TLS cipher suites supported Description: There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploited to intercept and tamper with the data information. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisorie
tion. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-01-espace-en
CVE ID: CVE-2018-7959 State: PUBLISHED Published: 2018-11-27T22:00:00 Last Updated: 2024-08-05T06:37:59.691Z Vendors: Huawei Technologies Co., Ltd. Products: eSpace 7950 Problem Types: information leakage Description: There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept and decrypt the call information when the user enables SRTP to make a call. Successful exploitation may cause sensitive information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-02-espace-en
CVE ID: CVE-2018-7960 State: PUBLISHED Published: 2018-11-27T22:00:00 Last Updated: 2024-08-05T06:37:59.756Z Vendors: Huawei Technologies Co., Ltd. Products: eSpace 7950 Problem Types: information leakage Description: There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode. Successful exploitation may intercept and tamper with the call information, eventually cause sensitive information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-02-espace-en
CVE ID: CVE-2018-7961 State: PUBLISHED Published: 2018-11-27T22:00:00 Last Updated: 2024-08-05T06:37:59.690Z Vendors: Huawei Technologies Co., Ltd. Products: Emily-AL00A Problem Types: information leakage Description: There is a smart SMS verification code vulnerability in some Huawei smart phones. An attacker should trick a user to access malicious Website or malicious App and register. Due to incorrect processing of the smart SMS verification code, successful exploitation can cause sensitive information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181121-02-smartphone-en
CVE ID: CVE-2018-7963 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7964 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7965 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7966 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7967 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7968 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7969 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7970 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7971 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7972 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7973 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7974 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7975 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7976 State: PUBLISHED Published: 2018-06-01T14:00:00 Last Updated: 2024-08-05T06:37:59.634Z Vendors: Huawei Technologies Co., Ltd. Products: eSpace Desktop Problem Types: XSS Description: There is a stored cross-site scripting (XSS) vulnerability in Huawei eSpace Desktop V300R001C00 and V300R001C50 version. Due to the insufficient validation of the input, an authenticated, remote attacker could exploit this vulnerability to send abnormal messages to the system and perform a XSS attack. A successful exploit could cause the eSpace Desktop to hang up, and the function will restore to normal after restarting the eSpace Desktop. Additional Analyst Notes: - CVE Program Container:
function will restore to normal after restarting the eSpace Desktop. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-xss-en
CVE ID: CVE-2018-7977 State: PUBLISHED Published: 2018-11-27T22:00:00 Last Updated: 2024-08-05T06:37:59.665Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: information leakage Description: There is an information leakage vulnerability on several Huawei products. Due to insufficient communication protection for specific services, a remote, unauthorized attacker can exploit this vulnerability to connect to specific services to obtain additional information. Successful exploitation of this vulnerability can lead to information leakage. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawe
dditional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-01-fusionsphere-en
CVE ID: CVE-2018-7978 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7979 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7980 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7981 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7982 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7983 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7984 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7985 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7986 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2018-7987 State: PUBLISHED Published: 2018-12-04T18:00:00 Last Updated: 2024-08-05T06:37:59.689Z Vendors: Huawei Technologies Co., Ltd. Products: Huawei P20 Problem Types: out-of-bounds write Description: There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00). The software does not handle the response message properly when the user doing certain inquiry operation, an attacker could send crafted message to the device, successful exploit could cause a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181128-02-smartphone-en
CVE ID: CVE-2018-7988 State: PUBLISHED Published: 2018-11-27T22:00:00 Last Updated: 2024-08-05T06:37:59.673Z Vendors: Huawei Technologies Co., Ltd. Products: Huawei nova 2 Plus, Huawei Mate9 Pro Problem Types: FRP bypass Description: There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could allow the attacker bypass the FRP protection. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-s
tional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-01-smartphone-en
CVE ID: CVE-2018-7989 State: PUBLISHED Published: 2018-10-17T15:00:00 Last Updated: 2024-08-05T06:37:59.692Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 10 pro Problem Types: improper authentication Description: Huawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326(C00) have an improper authentication vulnerability. App Lock is a function to prevent unauthorized use of apps on smartphones, an attacker could directly change the lock password after a series of operations. Successful exploit could allow the attacker to use the application which is locked. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advi
is locked. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181010-01-applock-en
CVE ID: CVE-2018-7990 State: PUBLISHED Published: 2018-09-04T16:00:00 Last Updated: 2024-08-05T06:37:59.688Z Vendors: Huawei Technologies Co., Ltd. Products: Mate10 Pro Problem Types: FRP bypass Description: Mate10 Pro Huawei smart phones with the versions before 8.1.0.326(C00) have a FRP bypass vulnerability. During the mobile phone reseting process, an attacker could bypass "Find My Phone" protect after a series of voice and keyboard operations. Successful exploit could allow an attacker to bypass FRP. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180831-01-smartphone-en
CVE ID: CVE-2018-7991 State: PUBLISHED Published: 2018-09-18T13:00:00 Last Updated: 2024-08-05T06:37:59.760Z Vendors: Huawei Technologies Co., Ltd. Products: Mate10 Problem Types: FRP bypass Description: Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110(C00) have a Factory Reset Protection (FRP) bypass vulnerability. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to the computer and then perform some specific operations. Successful exploit could allow the attacker bypass the FRP protection to access the system setting page. Additional Analyst Notes: - CVE Program Container: References: - http://www.huaw
tion to access the system setting page. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180912-01-smartphone-en
CVE ID: CVE-2018-7992 State: PUBLISHED Published: 2018-07-31T14:00:00 Last Updated: 2024-08-05T06:37:59.654Z Vendors: Huawei Technologies Co., Ltd. Products: MediaPad M3; Mate 9 Pro; P10 Plus Problem Types: n/a Description: Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00) has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a malicious application which would send crafted parameters to the driver. Successful exploit could cause a denial of service condition. Additional Analyst Notes: - CVE Program Contai
the driver. Successful exploit could cause a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180725-01-dos-en
CVE ID: CVE-2018-7993 State: PUBLISHED Published: 2018-07-31T14:00:00 Last Updated: 2024-08-05T06:37:59.689Z Vendors: Huawei Technologies Co., Ltd. Products: HUAWEI Mate 10 Problem Types: use after free Description: HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180711-01-smartphone-en
CVE ID: CVE-2018-7994 State: PUBLISHED Published: 2018-07-31T14:00:00 Last Updated: 2024-08-05T06:37:59.640Z Vendors: Huawei Technologies Co., Ltd. Products: NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6600; USG9500 Problem Types: memory leak Description: Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to
ionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to reboot since running out of memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180704-01-firewall-en
CVE ID: CVE-2018-7995 State: PUBLISHED Published: 2018-03-09T15:00:00 Last Updated: 2024-08-05T06:37:59.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the store_int_with_restart() function in arch/x86/kernel/cpu/mcheck/mce.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (panic) by leveraging root access to write to the check_interval file in a /sys/devices/system/machinecheck/machinecheck<cpu number> directory. NOTE: a third party has indicated that this report is not security relevant Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4187 -
t Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3654-1/ - https://bugzilla.suse.com/show_bug.cgi?id=1084755 - https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=b3b7c4795ccab5be71f080774c45bbbcc75c2aaf - https://www.debian.org/security/2018/dsa-4188 - https://lkml.org/lkml/2018/3/2/970 - http://www.securityfocus.com/bid/103356 - https://usn.ubuntu.com/3654-2/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html - https://usn.ubuntu.com/3656-1/
CVE ID: CVE-2018-7996 State: PUBLISHED Published: 2018-03-09T16:00:00Z Last Updated: 2024-09-16T23:36:12.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issues-on-eramba-cf887bc0a069
CVE ID: CVE-2018-7997 State: PUBLISHED Published: 2018-03-09T16:00:00Z Last Updated: 2024-09-16T21:57:17.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CSV file polluted with malicious JavaScript. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/security-issues-on-eramba-cf887bc0a069
CVE ID: CVE-2018-7998 State: PUBLISHED Published: 2018-03-09T19:00:00 Last Updated: 2024-08-05T06:37:59.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libvips before 8.6.3, a NULL function pointer dereference vulnerability was found in the vips_region_generate function in region.c, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted image file. This occurs because of a race condition involving a failed delayed load and other worker threads. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jcupitt/libvips/commit/20d840e6da15c1574b3ed998bc92f91d1e36c2a5 - https://github.com/jcu
eferences: - https://github.com/jcupitt/libvips/commit/20d840e6da15c1574b3ed998bc92f91d1e36c2a5 - https://github.com/jcupitt/libvips/issues/893 - https://lists.debian.org/debian-lts-announce/2018/03/msg00009.html
CVE ID: CVE-2018-7999 State: PUBLISHED Published: 2018-03-09T19:00:00 Last Updated: 2024-08-05T06:37:59.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/silnrsi/graphite/commit/db132b4731a9b4c9534144ba3a18e65b390e9ff6 - https://github.com/silnrsi/graphite/issues/22 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fed
tps://github.com/silnrsi/graphite/issues/22 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LVWOKYZZDEMG6VSG53KAGUOHUIIQ7CND/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5F3CK2IPXFCLQZEBEEXONWIABN2E7H2/
CVE ID: CVE-2018-8000 State: PUBLISHED Published: 2018-03-09T19:00:00 Last Updated: 2024-08-05T06:37:59.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a related issue to CVE-2017-5886. Remote attackers could leverage this vulnerability to cause a denial-of-service or potentially execute arbitrary code via a crafted pdf file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1548918 - https://sourceforge.net/p/podofo/tickets/13/
CVE ID: CVE-2018-8001 State: PUBLISHED Published: 2018-03-09T19:00:00 Last Updated: 2024-08-05T06:37:59.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1549469
CVE ID: CVE-2018-8002 State: PUBLISHED Published: 2018-03-09T19:00:00 Last Updated: 2024-08-05T06:37:59.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1548930 - https://www.exploit-db.com/exploits/44946/
CVE ID: CVE-2018-8003 State: PUBLISHED Published: 2018-05-03T23:00:00Z Last Updated: 2024-09-16T17:48:48.618Z Vendors: Apache Software Foundation Products: Apache Ambari Problem Types: Information Disclosure Description: Apache Ambari, versions 1.4.0 to 2.6.1, is susceptible to a directory traversal attack allowing an unauthenticated user to craft an HTTP request which provides read-only access to any file on the filesystem of the host the Ambari Server runs on that is accessible by the user the Ambari Server is running as. Direct network access to the Ambari Server is required to issue this request, and those Ambari Servers that are protected behind a firewall, or in a restricted network zo
ired to issue this request, and those Ambari Servers that are protected behind a firewall, or in a restricted network zone are at less risk of being affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104161 - https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-CVE-2018-8003
CVE ID: CVE-2018-8004 State: PUBLISHED Published: 2018-08-29T13:00:00Z Last Updated: 2024-09-16T18:29:48.650Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: Information Disclosure Description: There are multiple HTTP smuggling and cache poisoning issues when clients making malicious requests interact with Apache Traffic Server (ATS). This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apache/trafficserver/pull/3201 - https://github.
nalyst Notes: - CVE Program Container: References: - https://github.com/apache/trafficserver/pull/3201 - https://github.com/apache/trafficserver/pull/3251 - https://github.com/apache/trafficserver/pull/3192 - http://www.securityfocus.com/bid/105192 - https://www.debian.org/security/2018/dsa-4282 - https://lists.apache.org/thread.html/7df882eb09029a4460768a61f88a30c9c30c9dc88e9bcc6e19ba24d5%40%3Cusers.trafficserver.apache.org%3E - https://github.com/apache/trafficserver/pull/3231
CVE ID: CVE-2018-8005 State: PUBLISHED Published: 2018-08-29T13:00:00Z Last Updated: 2024-09-16T19:10:15.976Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: Information Disclosure Description: When there are multiple ranges in a range request, Apache Traffic Server (ATS) will read the entire object from cache. This can cause performance problems with large objects in cache. This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x users should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache