Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-18815 State: PUBLISHED Published: 2019-11-07T16:08:24 Last Updated: 2024-08-05T02:02:39.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: PopojiCMS 2.0.1 allows refer= Open Redirection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PopojiCMS/PopojiCMS/issues/22
CVE ID: CVE-2019-18816 State: PUBLISHED Published: 2019-11-07T16:08:17 Last Updated: 2024-08-05T02:02:40.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: po-admin/route.php?mod=post&act=edit in PopojiCMS 2.0.1 allows post[1][content]= stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PopojiCMS/PopojiCMS/issues/21
CVE ID: CVE-2019-18817 State: PUBLISHED Published: 2019-11-12T14:01:26 Last Updated: 2024-08-05T02:02:39.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Istio 1.3.x before 1.3.5 allows Denial of Service because continue_on_listener_filters_timeout is set to True, a related issue to CVE-2019-18836. Additional Analyst Notes: - CVE Program Container: References: - https://istio.io/news/2019/announcing-1.3.5/ - https://github.com/istio/istio/issues/18229
CVE ID: CVE-2019-18818 State: PUBLISHED Published: 2019-11-07T21:02:58 Last Updated: 2024-08-05T02:02:39.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strapi/strapi/pull/4443 - https://github.com/strapi/strapi/releases/tag/v3.0.0-beta.17.5 - https://www.npmjs.com/advisories/1311 - http://packetstormsecurity.com/files/163950/Strapi-CMS-3.0.0-beta.17.4-Remote-Code-Execution.html - http://packetstormsecurity.com/files/163939/
ty.com/files/163950/Strapi-CMS-3.0.0-beta.17.4-Remote-Code-Execution.html - http://packetstormsecurity.com/files/163939/Strapi-3.0.0-beta-Authentication-Bypass.html - http://packetstormsecurity.com/files/165896/Strapi-CMS-3.0.0-beta.17.4-Privilege-Escalation.html
CVE ID: CVE-2019-18819 State: PUBLISHED Published: 2019-11-07T20:43:21 Last Updated: 2024-08-05T02:02:39.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiVectorRender!StrokeText_Blend+0x00000000000003a7. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/11/crashing-eximioussoft-logo-designer.html
CVE ID: CVE-2019-18820 State: PUBLISHED Published: 2019-11-07T20:43:02 Last Updated: 2024-08-05T02:02:39.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eximious Logo Designer 3.82 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a78. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/11/crashing-eximioussoft-logo-designer.html
CVE ID: CVE-2019-18821 State: PUBLISHED Published: 2019-11-07T20:43:11 Last Updated: 2024-08-05T02:02:39.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eximious Logo Designer 3.82 has a User Mode Write AV starting at ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2019/11/crashing-eximioussoft-logo-designer.html
CVE ID: CVE-2019-18822 State: PUBLISHED Published: 2020-04-14T17:18:09 Last Updated: 2024-08-05T02:02:39.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: A privilege escalation vulnerability in ZOOM Call Recording 6.3.1 allows its user account (i.e., the account under which the program runs - by default, the callrec account) to elevate privileges to root by abusing the callrec-rs@.service. The callrec-rs@.service starts the /opt/callrec/bin/rs binary with root privileges, and this binary is owned by callrec. It can be replaced by a Trojan horse. Additional Analyst Notes: - CVE Program Container: References: - https://www.zoomint.com/solutions/call-recording - https://github.co
alyst Notes: - CVE Program Container: References: - https://www.zoomint.com/solutions/call-recording - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-18822-PrivEscal-ZoomCallRecording
CVE ID: CVE-2019-18823 State: PUBLISHED Published: 2020-04-27T14:07:26 Last Updated: 2024-08-05T02:02:39.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect Access Control. It is possible to use a different authentication method to submit a job than the administrator has specified. If the administrator has configured the READ or WRITE methods to include CLAIMTOBE, then it is possible to impersonate another user to the condor_schedd. (For example to submit or remove jobs) Additional Analyst Notes: - CVE Program Container: References: - https://research.cs.wisc.edu/htcondor/new.html - https:
Additional Analyst Notes: - CVE Program Container: References: - https://research.cs.wisc.edu/htcondor/new.html - https://research.cs.wisc.edu/htcondor/ - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0003.html - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0002.html - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0001.html - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0004.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3EOTJJOSMYKXIYXWSG3H4KN332EDSEB6/ - https://lists.fedoraproject.org/archives/list/package-an
s.fedoraproject.org/message/3EOTJJOSMYKXIYXWSG3H4KN332EDSEB6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5YCZXYS67MLJSHR4OLSWVHBE6PZJSB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMPZ7XPOPA4JGAQAUJ4K7JV653DSCIDK/ - https://lists.debian.org/debian-lts-announce/2021/08/msg00000.html - https://www.debian.org/security/2022/dsa-5144
CVE ID: CVE-2019-18824 State: PUBLISHED Published: 2019-12-17T13:47:47 Last Updated: 2024-08-05T02:02:39.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The ClickShare Button does not verify the integrity of the mutable content on the UBIFS partition before being used. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/clickshare/firmware-update - https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/ - https://www.barco.com/en/clickshare/support/software/R33050070?majorVersion=01&minorVersion=10&patchVersion
lickshare/ - https://www.barco.com/en/clickshare/support/software/R33050070?majorVersion=01&minorVersion=10&patchVersion=00&buildVersion=013 - https://www.barco.com/en/clickshare/support/software/R33050069?majorVersion=01&minorVersion=10&patchVersion=00&buildVersion=013
CVE ID: CVE-2019-18825 State: PUBLISHED Published: 2019-12-17T13:49:22 Last Updated: 2024-08-05T02:02:39.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco ClickShare Huddle CS-100 devices before 1.9.0 and CSE-200 devices before 1.9.0 have incorrect Credentials Management. The ClickShare Base Unit implements encryption at rest using encryption keys which are shared across all ClickShare Base Units of models CS-100 & CSE-200. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/clickshare/firmware-update - https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/
CVE ID: CVE-2019-18826 State: PUBLISHED Published: 2019-12-16T16:13:09 Last Updated: 2024-08-05T02:02:39.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust. The embedded 'dongle_bridge' program used to expose the functionalities of the ClickShare Button to a USB host, does not properly validate the whole certificate chain. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/clickshare/firmware-update
CVE ID: CVE-2019-18827 State: PUBLISHED Published: 2019-12-16T16:15:00 Last Updated: 2024-08-05T02:02:39.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Barco ClickShare Button R9861500D01 devices (before firmware version 1.9.0) JTAG access is disabled after ROM code execution. This means that JTAG access is possible when the system is running code from ROM before handing control over to embedded firmware. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/clickshare/firmware-update - https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/ - https://www.barco.com/en/support/software/R33050069?majorVersion=01
ries/multiple-vulnerabilities-in-barco-clickshare/ - https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 - https://www.barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 - https://www.barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 - https://www.barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
CVE ID: CVE-2019-18828 State: PUBLISHED Published: 2019-12-16T16:17:12 Last Updated: 2024-08-05T02:02:39.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account (present for access via debug interfaces, which are by default not enabled on production devices) of the embedded Linux on the ClickShare Button is using a weak password. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/clickshare/firmware-update - https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/ - https://www.barco.com/en/support/softwa
s://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/ - https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 - https://www.barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 - https://www.barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 - https://www.barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
CVE ID: CVE-2019-18829 State: PUBLISHED Published: 2019-12-17T13:50:54 Last Updated: 2024-08-05T02:02:39.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco ClickShare Button R9861500D01 devices before 1.10.0.13 have Missing Support for Integrity Check. The Barco signed 'Clickshare_For_Windows.exe' binary on the ClickShare Button (R9861500D01) loads a number of DLL files dynamically without verifying their integrity. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/clickshare/firmware-update - https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/ - https://www.barco.com/en/clickshare/support/software/R330
com/advisories/multiple-vulnerabilities-in-barco-clickshare/ - https://www.barco.com/en/clickshare/support/software/R33050070?majorVersion=01&minorVersion=10&patchVersion=00&buildVersion=013 - https://www.barco.com/en/clickshare/support/software/R33050069?majorVersion=01&minorVersion=10&patchVersion=00&buildVersion=013
CVE ID: CVE-2019-18830 State: PUBLISHED Published: 2019-12-16T16:19:45 Last Updated: 2024-08-05T02:02:39.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'dongle_bridge' program used to expose the functionalities of the ClickShare Button to a USB host, is vulnerable to OS command injection vulnerabilities. These vulnerabilities could lead to code execution on the ClickShare Button with the privileges of the user 'nobody'. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/clickshare/firmware-update - https://labs.f-secure.com/advisories/multi
ontainer: References: - https://www.barco.com/en/clickshare/firmware-update - https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/ - https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 - https://www.barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 - https://www.barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 - https://www.barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
CVE ID: CVE-2019-18831 State: PUBLISHED Published: 2019-12-16T16:21:08 Last Updated: 2024-08-05T02:02:39.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information Exposure. The encrypted ClickShare Button firmware contains the private key of a test device-certificate. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/clickshare/firmware-update - https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/ - https://www.barco.com/en/support/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 - https://www.barco.com/en/su
upport/software/R33050069?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 - https://www.barco.com/en/support/software/R33050125?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 - https://www.barco.com/en/support/software/R33050095?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007 - https://www.barco.com/en/support/software/R33050070?majorVersion=01&minorVersion=09&patchVersion=01&buildVersion=007
CVE ID: CVE-2019-18832 State: PUBLISHED Published: 2019-12-17T13:51:58 Last Updated: 2024-08-05T02:02:39.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management. The ClickShare Button implements encryption at rest which uses a one-time programmable (OTP) AES encryption key. This key is shared across all ClickShare Buttons of model R9861500D01. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/clickshare/firmware-update - https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/
CVE ID: CVE-2019-18833 State: PUBLISHED Published: 2019-12-17T13:53:06 Last Updated: 2024-08-05T02:02:39.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information exposure (issue 2 of 2).. The encryption key of the media content which is shared between a ClickShare Button and a ClickShare Base Unit is randomly generated for each new session and communicated over a TLS connection. An attacker who is able to perform a Man-in-the-Middle attack between the TLS connection, is able to obtain the encryption key. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/clickshare/firmwar
yption key. Additional Analyst Notes: - CVE Program Container: References: - https://www.barco.com/en/clickshare/firmware-update - https://labs.f-secure.com/advisories/multiple-vulnerabilities-in-barco-clickshare/
CVE ID: CVE-2019-18834 State: PUBLISHED Published: 2020-07-23T19:42:47 Last Updated: 2024-08-05T02:02:39.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent XSS in the WooCommerce Subscriptions plugin before 2.6.3 for WordPress allows remote attackers to execute arbitrary JavaScript because Billing Details are mishandled in WCS_Admin_Post_Types in class-wcs-admin-post-types.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.precursorsecurity.com/blog - https://woocommerce.com/products/woocommerce-subscriptions/ - https://www.precursorsecurity.com/blog/woocommerce-subscriptions-persistent-xss-cve-2019-18834
CVE ID: CVE-2019-18835 State: PUBLISHED Published: 2019-11-07T23:12:07 Last Updated: 2024-08-05T02:02:39.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Matrix Synapse before 1.5.0 mishandles signature checking on some federation APIs. Events sent over /send_join, /send_leave, and /invite may not be correctly signed, or may not come from the expected servers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrix-org/synapse/pull/6262 - https://github.com/matrix-org/synapse/releases/tag/v1.5.0
CVE ID: CVE-2019-18836 State: PUBLISHED Published: 2019-11-11T00:17:35 Last Updated: 2024-08-05T02:02:39.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy loop when continue_on_listener_filters_timeout is used." Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21forum/envoy-users - https://blog.envoyproxy.io - https://github.com/envoyproxy/envoy/security/advisories/GHSA-3xvf-4396-cj46 - https://github.com/istio/istio/issues/18229
CVE ID: CVE-2019-18837 State: PUBLISHED Published: 2019-11-13T20:01:16 Last Updated: 2024-08-05T02:02:39.524Z Vendors: crun Products: crun Problem Types: Directory Traversal Description: An issue was discovered in crun before 0.10.5. With a crafted image, it doesn't correctly check whether a target is a symlink, resulting in access to files outside of the container. This occurs in libcrun/linux.c and libcrun/chroot_realpath.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/containers/crun/pull/173 - https://github.com/containers/crun/releases/tag/0.10.5 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITB2
eases/tag/0.10.5 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITB2UNEGHXZUR3ATYHWPSK5LJB36N7AP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DTA5SJUAKQUK6HRY2CZVJUIZP5BO3EOG/
CVE ID: CVE-2019-18838 State: PUBLISHED Published: 2019-12-13T12:22:33 Last Updated: 2024-08-05T02:02:39.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host header, it sends an internally generated "Invalid request" response. This internally generated response is dispatched through the configured encoder filter chain before being sent to the client. An encoder filter that invokes route manager APIs that access a request's Host header causes a NULL pointer dereference, resulting in abnormal termination of the Envoy process. Additional Analyst Notes: - CVE Program Container: References:
, resulting in abnormal termination of the Envoy process. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/envoyproxy/envoy/commits/master - https://groups.google.com/forum/#%21forum/envoy-users - https://blog.envoyproxy.io - https://github.com/envoyproxy/envoy/security/advisories/GHSA-f2rv-4w6x-rwhc
CVE ID: CVE-2019-18839 State: PUBLISHED Published: 2019-11-13T14:41:56 Last Updated: 2024-08-05T02:02:39.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to fully compromise the system using a POST request. When the admin visits the user information, the payload will execute. This will allow for PHP files to be written to the web root, and for code to execute on the remote server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fuzzlove/FUDforum-XSS-RCE - https://packetstormsecurity.com/files/15526
gram Container: References: - https://github.com/fuzzlove/FUDforum-XSS-RCE - https://packetstormsecurity.com/files/155261/FUDForum-3.0.9-Code-Execution-Cross-Site-Scripting.html
CVE ID: CVE-2019-18840 State: PUBLISHED Published: 2019-11-09T12:58:52 Last Updated: 2024-08-05T02:02:39.610Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer overflow inside the DecodedCert structure in GetName in wolfcrypt/src/asn.c because the domain name location index is mishandled. Because a pointer is overwritten, there is an invalid free. Additional Analyst Notes: - CVE Program Container: References: - https://github.c
overwritten, there is an invalid free. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/issues/2555
CVE ID: CVE-2019-18841 State: PUBLISHED Published: 2019-11-11T00:05:37 Last Updated: 2024-08-05T02:02:39.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution. Additional Analyst Notes: - CVE Program Container: References: - https://rubygems.org/gems/chartkick/ - https://github.com/ankane/chartkick/commits/master - https://chartkick.com - https://github.com/ankane/chartkick/blob/master/CHANGELOG.md - https://github.com/ankane/chartkick/commit/b810936bbf687bc74c5b6dba72d2397a399885fa - https://github.com/ankane/chartkick.js/issues/117
CVE ID: CVE-2019-18842 State: PUBLISHED Published: 2020-01-06T20:18:49 Last Updated: 2024-08-05T02:02:39.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the configuration web interface of the Jinan USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module with web version 1.2.2 allows attackers to leak credentials of the Wi-Fi access point the module is logged into, and the web interface login credentials, by opening a Wi-Fi access point nearby with a malicious SSID. Additional Analyst Notes: - CVE Program Container: References: - https://www.tildeho.me/theres-javascript-in-my-power-plug/
CVE ID: CVE-2019-18844 State: PUBLISHED Published: 2019-11-13T19:12:37 Last Updated: 2024-08-05T02:02:39.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci_core.h (instead of other mechanisms for propagating error information or diagnostic information), which might allow attackers to cause a denial of service (assertion failure) within pci core. This is fixed in 1.2. 6199e653418e is a mitigation for pre-1.1 versions, whereas 2b3dedfb9ba1 is a mitigation for 1.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shuox/
9ba1 is a mitigation for 1.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shuox/acrn-hypervisor/commit/97b153237c256c586e528eac7fc2f51aedb2b2fc - https://github.com/projectacrn/acrn-hypervisor/issues/3252 - https://github.com/projectacrn/acrn-hypervisor/commit/2b3dedfb9ba13f15887f22b935d373f36c9a59fa - https://github.com/projectacrn/acrn-hypervisor/compare/acrn-2019w25.4-140000p...acrn-2019w25.5-140000p - https://github.com/projectacrn/acrn-hypervisor/commit/6199e653418eda58cd698d8769820904453e2535