Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1087 State: PUBLISHED Published: 2018-05-15T16:00:00 Last Updated: 2024-08-05T03:51:48.239Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: kernel Products: KVM Problem Types: CWE-250 Description: kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, the processor did not deliver interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. A
er interrupts and exceptions, rather they are delivered once the first instruction after the stack switch is executed. An unprivileged KVM guest user could use this flaw to crash the guest or, potentially, escalate their privileges in the guest. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1347 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1087 - http://www.securitytracker.com/id/1040862 - https://access.redhat.com/errata/RHSA-2018:1348 - https://www.debian.org/security/2018/dsa-4196 - https://access.redhat.com/errata/RHSA-2018:1355 - https://access.redhat.com/errata/RHSA-2018:1345 - https://access.redhat.com/security/vu
dhat.com/errata/RHSA-2018:1355 - https://access.redhat.com/errata/RHSA-2018:1345 - https://access.redhat.com/security/vulnerabilities/pop_ss - https://access.redhat.com/errata/RHSA-2018:1318 - https://access.redhat.com/errata/RHSA-2018:1524 - http://www.openwall.com/lists/oss-security/2018/05/08/5 - http://www.securityfocus.com/bid/104127 - https://usn.ubuntu.com/3641-2/ - https://usn.ubuntu.com/3641-1/
CVE ID: CVE-2018-1088 State: PUBLISHED Published: 2018-04-18T16:00:00Z Last Updated: 2024-08-05T03:51:48.797Z Vendors: Red Hat, Inc. Products: glusterfs Problem Types: CWE-266 Description: A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1137 - https://access.redhat.com/errata/RHSA-2018:1275 - https://access.redhat.com/errata/RHSA-2018:1524 - https://bugzilla.redhat.com/show_bug.cgi?id=1558721 - h
SA-2018:1275 - https://access.redhat.com/errata/RHSA-2018:1524 - https://bugzilla.redhat.com/show_bug.cgi?id=1558721 - https://access.redhat.com/errata/RHSA-2018:1136 - https://security.gentoo.org/glsa/201904-06 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html - https://lists.debian.org/debian-lts-announce/2021/11/msg00000.html
CVE ID: CVE-2018-1089 State: PUBLISHED Published: 2018-05-09T15:00:00 Last Updated: 2024-08-05T03:51:48.500Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: unspecified Products: 389-ds-base Problem Types: CWE-122 Description: 389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needing escapes, possibly leading to buffer overflows. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104137 -
l of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104137 - https://access.redhat.com/errata/RHSA-2018:1364 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1089 - https://access.redhat.com/errata/RHSA-2018:1380 - https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html
CVE ID: CVE-2018-1090 State: PUBLISHED Published: 2018-06-18T14:00:00 Last Updated: 2024-08-05T03:51:49.104Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: [UNKNOWN] Products: pulp Problem Types: CWE-200 Description: In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with read access on the distributor/importer. An attacker with API access can then view these secrets. Additional Analyst Notes: - CVE Program Container: References: - https://pulp.plan.io/issues/3521 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1090 - https://access.redhat.com/errata/RHSA-2018:2927
CVE ID: CVE-2018-1091 State: PUBLISHED Published: 2018-03-27T21:00:00 Last Updated: 2024-08-05T03:51:48.251Z Vendors: n/a Products: Linux kernel v4.13 and newer Problem Types: CWE-391 Description: In the flush_tmregs_to_thread function in arch/powerpc/kernel/ptrace.c in the Linux kernel before 4.13.5, a guest kernel crash can be triggered from unprivileged userspace during a core dump on a POWER host due to a missing processor feature check and an erroneous use of transactional memory (TM) instructions in the core dump path, leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1558149 - https://www.kernel
t Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1558149 - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5 - https://marc.info/?l=linuxppc-embedded&m=150535531910494&w=2 - https://access.redhat.com/security/cve/cve-2018-1091 - https://access.redhat.com/errata/RHSA-2018:1318 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c1fa0768a8713b135848f78fd43ffc208d8ded70 - https://github.com/torvalds/linux/commit/c1fa0768a8713b135848f78fd43ffc208d8ded70 - http://openwall.com/lists/oss-security/2018/03/27/4
CVE ID: CVE-2018-1092 State: PUBLISHED Published: 2018-04-02T03:00:00 Last Updated: 2024-08-05T03:51:48.417Z Vendors: n/a Products: Linux kernel through version 4.15 Problem Types: NULL pointer dereference Description: The ext4_iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case of a root directory with a zero i_links_count, which allows attackers to cause a denial of service (ext4_process_freed_data NULL pointer dereference and OOPS) via a crafted ext4 image. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3676-1/ - https://usn.ubuntu.com/3678-2/ - https://access.redhat.com/errata/RHSA-2018:3083 - http://openwall.c
buntu.com/3676-1/ - https://usn.ubuntu.com/3678-2/ - https://access.redhat.com/errata/RHSA-2018:3083 - http://openwall.com/lists/oss-security/2018/03/29/1 - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3678-1/ - https://usn.ubuntu.com/3677-1/ - https://www.debian.org/security/2018/dsa-4188 - https://usn.ubuntu.com/3754-1/ - https://bugzilla.kernel.org/show_bug.cgi?id=199179 - https://access.redhat.com/errata/RHSA-2018:2948 - https://usn.ubuntu.com/3678-3/ - https://usn.ubuntu.com/3677-2/ - https://bugzilla.redhat.com/show_bug.cgi?id=1560777 - https://usn.ubuntu.com/3676-2/ - https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=8e4b5eae5decd9dfe5
://usn.ubuntu.com/3676-2/ - https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=8e4b5eae5decd9dfe5a4ee369c22028f90ab4c44 - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html - https://access.redhat.com/errata/RHSA-2018:3096 - https://usn.ubuntu.com/3678-4/ - https://bugzilla.kernel.org/show_bug.cgi?id=199275
CVE ID: CVE-2018-1093 State: PUBLISHED Published: 2018-04-02T03:00:00 Last Updated: 2024-08-05T03:51:49.081Z Vendors: n/a Products: Linux kernel through version 4.15 Problem Types: out-of-bounds read Description: The ext4_valid_block_bitmap function in fs/ext4/balloc.c in the Linux kernel through 4.15.15 allows attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image because balloc.c and ialloc.c do not validate bitmap block numbers. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3752-2/ - https://usn.ubuntu.com/3676-1/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html - http://openwall.c
https://usn.ubuntu.com/3676-1/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html - http://openwall.com/lists/oss-security/2018/03/29/1 - https://usn.ubuntu.com/3752-3/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html - https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html - https://bugzilla.kernel.org/show_bug.cgi?id=199181 - https://www.debian.org/security/2018/dsa-4188 - https://usn.ubuntu.com/3754-1/ - https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=7dac4a1726a9c64a517d595c40e95e2d0d135f6f - https://bugzilla.redhat.com/show_bug.cgi?id=1560782 - https://usn.ubuntu.com/3676-2/ - https://usn.ubuntu.com/3752-1/
CVE ID: CVE-2018-1094 State: PUBLISHED Published: 2018-04-02T03:00:00 Last Updated: 2024-08-05T03:51:48.938Z Vendors: n/a Products: Linux kernel through version 4.15 Problem Types: NULL pointer dereference Description: The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not always initialize the crc32c checksum driver, which allows attackers to cause a denial of service (ext4_xattr_inode_hash NULL pointer dereference and system crash) via a crafted ext4 image. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1560788 - https://access.redhat.com/errata/RHSA-2018:3083 - https://git.kernel.org/pub/sc
lla.redhat.com/show_bug.cgi?id=1560788 - https://access.redhat.com/errata/RHSA-2018:3083 - https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=18db4b4e6fc31eda838dd1c1296d67dbcb3dc957 - http://openwall.com/lists/oss-security/2018/03/29/1 - https://usn.ubuntu.com/3695-1/ - https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=a45403b51582a87872927a3e0fc0a389c26867f1 - https://usn.ubuntu.com/3695-2/ - https://bugzilla.kernel.org/show_bug.cgi?id=199183 - https://access.redhat.com/errata/RHSA-2018:2948 - https://access.redhat.com/errata/RHSA-2018:3096
CVE ID: CVE-2018-1095 State: PUBLISHED Published: 2018-04-02T03:00:00 Last Updated: 2024-08-05T03:51:48.616Z Vendors: n/a Products: Linux kernel through version 4.15 Problem Types: NULL pointer dereference Description: The ext4_xattr_check_entries function in fs/ext4/xattr.c in the Linux kernel through 4.15.15 does not properly validate xattr sizes, which causes misinterpretation of a size as an error code, and consequently allows attackers to cause a denial of service (get_acl NULL pointer dereference and system crash) via a crafted ext4 image. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=ce3fd194f
CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=ce3fd194fcc6fbdc00ce095a852f22df97baa401 - http://openwall.com/lists/oss-security/2018/03/29/1 - https://usn.ubuntu.com/3695-1/ - https://usn.ubuntu.com/3695-2/ - https://access.redhat.com/errata/RHSA-2018:2948 - https://bugzilla.kernel.org/show_bug.cgi?id=199185 - https://bugzilla.redhat.com/show_bug.cgi?id=1560793
CVE ID: CVE-2018-1096 State: PUBLISHED Published: 2018-04-05T21:00:00Z Last Updated: 2024-09-16T17:02:50.444Z Vendors: Foreman Project Products: Foreman Problem Types: CWE-89 Description: An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2927 - https://bugzilla.redhat.com/show_bug.cgi?id=1561061 - http://projects.theforeman.org/issues/23028
CVE ID: CVE-2018-1097 State: PUBLISHED Published: 2018-04-04T21:00:00Z Last Updated: 2024-08-05T03:51:48.439Z Vendors: Foreman Project Products: foreman Problem Types: CWE-200 Description: A flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for powering oVirt/RHV hosts on and off to discover the username and password used to connect to the compute resource. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/theforeman/foreman/pull/5369 - https://bugzilla.redhat.com/show_bug.cgi?id=1561723 - https://access.redhat.com/errata/RHSA-2018:2927 - https://projects.theforeman.org/issues/22546
CVE ID: CVE-2018-1098 State: PUBLISHED Published: 2018-04-03T16:00:00Z Last Updated: 2024-08-05T03:51:48.502Z Vendors: Red Hat, Inc. Products: etcd Problem Types: CWE-352 Description: A cross-site request forgery flaw was found in etcd 3.3.1 and earlier. An attacker can set up a website that tries to send a POST request to the etcd server and modify a key. Adding a key is done with PUT so it is theoretically safe (can't PUT from an HTML form or such) but POST allows creating in-order keys that an attacker can send. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1552714 - https://github.com/coreos/etcd/issues/9353 - https://lists.f
es: - https://bugzilla.redhat.com/show_bug.cgi?id=1552714 - https://github.com/coreos/etcd/issues/9353 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPGYHMSKDPW5GAMI7BEP3XQRVRLLBJKS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JX7QTIT465BQGRGNCE74RATRQLKT2QE4/
CVE ID: CVE-2018-1099 State: PUBLISHED Published: 2018-04-03T16:00:00Z Last Updated: 2024-09-17T00:36:24.817Z Vendors: Red Hat, Inc. Products: etcd Problem Types: CWE-20 Description: DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1552717 - https://github.com/coreos/etcd/issues/9353 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPGYHMSKDPW5GAMI7BEP3XQRVRLLBJKS/ - https://lists.
.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPGYHMSKDPW5GAMI7BEP3XQRVRLLBJKS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JX7QTIT465BQGRGNCE74RATRQLKT2QE4/
CVE ID: CVE-2018-1100 State: PUBLISHED Published: 2018-04-11T19:00:00Z Last Updated: 2024-08-05T03:51:48.499Z Vendors: zsh Products: zsh Problem Types: CWE-120 Description: zsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c:checkmailpath function. A local attacker could exploit this to execute arbitrary code in the context of another user. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/zsh/code/ci/31f72205630687c1cef89347863aab355296a27f/ - https://usn.ubuntu.com/3764-1/ - https://security.gentoo.org/glsa/201805-10 - https://access.redhat.com/errata/RHSA-2018:1932 - https://bugzilla.redhat.com/show_bug.cgi?id=15
oo.org/glsa/201805-10 - https://access.redhat.com/errata/RHSA-2018:1932 - https://bugzilla.redhat.com/show_bug.cgi?id=1563395 - https://access.redhat.com/errata/RHSA-2018:3073 - https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html
CVE ID: CVE-2018-1101 State: PUBLISHED Published: 2018-05-02T18:00:00Z Last Updated: 2024-09-17T01:45:32.582Z Vendors: Red Hat, Inc. Products: Ansible Tower Problem Types: CWE-266 Description: Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization administrators access to the entire system. Additional Analyst Notes: - CVE Program Container: References: - https://www.ansible.com/security - https://bugzilla.redhat.com/show_bug.cgi?id=1563492 - https://access.redhat.co
ces: - https://www.ansible.com/security - https://bugzilla.redhat.com/show_bug.cgi?id=1563492 - https://access.redhat.com/errata/RHSA-2018:1972 - https://access.redhat.com/security/cve/cve-2018-1101 - https://access.redhat.com/errata/RHSA-2018:1328
CVE ID: CVE-2018-1102 State: PUBLISHED Published: 2018-04-30T19:00:00Z Last Updated: 2024-08-05T03:51:49.044Z Vendors: Red Hat, Inc. Products: atomic-openshift Problem Types: CWE-20 Description: A flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An improper path validation of tar files in ExtractTarStreamFromTarReader in tar/tar.go leads to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1235 - https://access.redhat.com/errata/RHSA-2018:1241 - https://access.redhat.com/errata/RHSA-2018:1233 - https://access.redhat.com/errata/RHSA-2019:0036 - https://access.redhat.com/errata/R
.redhat.com/errata/RHSA-2018:1233 - https://access.redhat.com/errata/RHSA-2019:0036 - https://access.redhat.com/errata/RHSA-2018:1237 - https://access.redhat.com/errata/RHSA-2018:1227 - https://access.redhat.com/errata/RHSA-2018:1243 - https://access.redhat.com/errata/RHSA-2018:1231 - https://bugzilla.redhat.com/show_bug.cgi?id=1562246 - https://access.redhat.com/errata/RHSA-2018:1229 - https://access.redhat.com/errata/RHSA-2018:1239
CVE ID: CVE-2018-1103 State: PUBLISHED Published: 2018-06-12T15:00:00 Last Updated: 2024-08-05T03:51:48.543Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N) Vendors: Openshift Enterprise Products: unsanitized paths in tar.go Problem Types: CWE-22 Description: Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory of the command. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1103
CVE ID: CVE-2018-1104 State: PUBLISHED Published: 2018-05-02T19:00:00Z Last Updated: 2024-09-16T19:09:02.633Z Vendors: Red Hat, Inc. Products: Ansible Tower Problem Types: CWE-20 Description: Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on the Tower server. Additional Analyst Notes: - CVE Program Container: References: - https://www.ansible.com/security - https://bugzilla.redhat.com/show_bug.cgi?id=1565862 - https://access.redhat.com/errata/RHSA-2018:1972 - https://access.redhat.com/errata/RHSA-2018:1328 - https://access.redhat.com/security/cve/cve-2018-1104
CVE ID: CVE-2018-1105 State: REJECTED Published: 2021-10-28T13:14:39 Last Updated: 2021-10-28T13:14:39 Description: No description available.
CVE ID: CVE-2018-1106 State: PUBLISHED Published: 2018-04-23T20:00:00Z Last Updated: 2024-09-16T16:18:44.131Z Vendors: Red Hat, Inc. Products: PackageKit Problem Types: CWE-287 Description: An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3634-1/ - https://www.debian.org/security/2018/dsa-4207 - http://www.openwall.com/lists/oss-security/2018/04/23/3 - https://access.redhat.com/errata/RHSA-2018:1224
018/dsa-4207 - http://www.openwall.com/lists/oss-security/2018/04/23/3 - https://access.redhat.com/errata/RHSA-2018:1224 - https://bugzilla.redhat.com/show_bug.cgi?id=1565992
CVE ID: CVE-2018-1107 State: PUBLISHED Published: 2021-03-30T01:48:27 Last Updated: 2024-08-05T03:51:48.538Z Vendors: n/a Products: nodejs-is-my-json-valid Problem Types: CWE-400 Description: It was discovered that the is-my-json-valid JavaScript library used an inefficient regular expression to validate JSON fields defined to have email format. A specially crafted JSON file could cause it to consume an excessive amount of CPU time when validated. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1546357 - https://snyk.io/vuln/npm:is-my-json-valid:20180214
CVE ID: CVE-2018-1108 State: PUBLISHED Published: 2018-05-21T21:00:00 Last Updated: 2024-08-05T03:51:48.721Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: kernel Products: drivers Problem Types: CWE-330 Description: kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3752-2/ - https://usn.ubuntu.com/3752-3/ - https://usn.ubuntu.com/3718-2/ - http://www.securityfocus.com/bid/104055
com/3752-2/ - https://usn.ubuntu.com/3752-3/ - https://usn.ubuntu.com/3718-2/ - http://www.securityfocus.com/bid/104055 - https://www.debian.org/security/2018/dsa-4188 - https://usn.ubuntu.com/3718-1/ - https://usn.ubuntu.com/3752-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1108 - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
CVE ID: CVE-2018-1109 State: PUBLISHED Published: 2021-03-30T01:52:55 Last Updated: 2024-08-05T03:51:48.469Z Vendors: n/a Products: nodejs-braces Problem Types: CWE-185 Description: A vulnerability was found in Braces versions prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1547272 - https://snyk.io/vuln/npm:braces:20180219
CVE ID: CVE-2018-1110 State: PUBLISHED Published: 2021-03-30T01:55:31 Last Updated: 2024-08-05T03:51:48.661Z Vendors: n/a Products: knot-resolver Problem Types: CWE-20 Description: A flaw was found in knot-resolver before version 2.3.0. Malformed DNS messages may cause denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1944328 - https://www.knot-resolver.cz/2018-04-23-knot-resolver-2.3.0.html
CVE ID: CVE-2018-1111 State: PUBLISHED Published: 2018-05-17T16:00:00 Last Updated: 2024-08-05T03:51:48.789Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat, Fedora Products: dhcp Problem Types: CWE-77 Description: DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP pr
ds with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1111 - https://www.tenable.com/security/tns-2018-10 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IDJA4QRR74TMXW34Q3DYYFPVBYRTJBI7/ - https://access.redhat.com/security/vulnerabilities/3442151 - http://www.securityfocus.com/bid/104195 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMTTB54QNTPD2SK6UL32EVQHMZP6BUUD/ - http://www.securitytracker.com/