Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-5948 State: PUBLISHED Published: 2017-05-11T18:00:00 Last Updated: 2024-08-05T15:18:49.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. OxygenOS and HydrogenOS are vulnerable to downgrade attacks. This is due to a lenient 'updater-script' in OTAs that does not check that the current version is lower than or equal to the given image's. Downgrades can occur even on locked bootloaders and without triggering a factory reset, allowing for exploitation of now-patched vulnerabilities with access to user data. This vulnerability can be exploited by a Man-in-the-Middle (MiTM) attacker targeting the update
ith access to user data. This vulnerability can be exploited by a Man-in-the-Middle (MiTM) attacker targeting the update process. This is possible because the update transaction does not occur over TLS (CVE-2016-10370). In addition, a physical attacker can reboot the phone into recovery, and then use 'adb sideload' to push the OTA (on OnePlus 3/3T 'Secure Start-up' must be off). Additional Analyst Notes: - CVE Program Container: References: - https://alephsecurity.com/vulns/aleph-2017008
CVE ID: CVE-2017-5949 State: PUBLISHED Published: 2017-04-03T05:44:00 Last Updated: 2024-08-05T15:18:49.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote attackers to cause a denial of service (heap-based out-of-bounds write and application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers access to red-zone memory locations, related to jit/ThunkGenerators.cpp, llint/LowLevelInterpreter32_64.asm, and llint/LowLevelInterpreter64.asm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97298 - https:
64.asm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97298 - https://trac.webkit.org/changeset/211479 - https://bugs.webkit.org/show_bug.cgi?id=167239
CVE ID: CVE-2017-5950 State: PUBLISHED Published: 2017-04-03T05:44:00.000Z Last Updated: 2025-11-03T21:44:04.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97307 - https://github.com/jbeder/yaml-cpp/issues/459
CVE ID: CVE-2017-5951 State: PUBLISHED Published: 2017-04-03T05:44:00 Last Updated: 2024-08-05T15:18:49.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3838 - https://bugs.ghostscript.com/show_bug.cgi?id=697548 - http://www.securityfocus.com/bid/98665 - https://security.gentoo.org/glsa/201708-06
CVE ID: CVE-2017-5953 State: PUBLISHED Published: 2017-02-10T06:51:00 Last Updated: 2024-08-05T15:18:49.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201706-26 - http://www.securityfocus.com/bid/96217 - http://www.debian.org/security/2017/dsa-3786 - https://github.com/vim/vim/commit/399c297aa93afe2c0a39e2a1b3f972aebba44c9d - https://groups.google.com/forum/#%21topic/vim_dev/t-
ithub.com/vim/vim/commit/399c297aa93afe2c0a39e2a1b3f972aebba44c9d - https://groups.google.com/forum/#%21topic/vim_dev/t-3RSdEnrHY - https://usn.ubuntu.com/4016-1/ - https://usn.ubuntu.com/4309-1/
CVE ID: CVE-2017-5954 State: PUBLISHED Published: 2017-02-10T06:51:00 Last Updated: 2024-08-05T15:18:48.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the serialize-to-js package 0.5.0 for Node.js. Untrusted data passed into the deserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE). Additional Analyst Notes: - CVE Program Container: References: - https://opsecx.com/index.php/2017/02/08/exploiting-node-js-deserialization-bug-for-remote-code-execution/ - https://github.com/commenthol/serialize-to-js/issues/1 - http://www.securityfocus.com/bid/9
for-remote-code-execution/ - https://github.com/commenthol/serialize-to-js/issues/1 - http://www.securityfocus.com/bid/96223
CVE ID: CVE-2017-5956 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-05T15:18:49.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors involving vertext_buffer_index. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201707-06 - https://lists.freedesktop.org/archives/virglrenderer-devel/2017-February/000145.html - http://www.securityfocus.com/bid/96187 - https://cgit.freedesktop.org/virglrenderer/commit/?id=a5ac49940c40ae415eac0cf912eac
://www.securityfocus.com/bid/96187 - https://cgit.freedesktop.org/virglrenderer/commit/?id=a5ac49940c40ae415eac0cf912eac7070b4ba95d - http://www.openwall.com/lists/oss-security/2017/02/13/2
CVE ID: CVE-2017-5957 State: PUBLISHED Published: 2017-03-14T14:00:00 Last Updated: 2024-08-05T15:18:49.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator (QEMU), allows a local guest users to cause a denial of service (application crash) via the "nr_cbufs" argument. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201707-06 - https://cgit.freedesktop.org/virglrenderer/commit/?id=926b9b3460a48f6454d8bbe9e44313d86a65447f - http://www.securityfocu
https://cgit.freedesktop.org/virglrenderer/commit/?id=926b9b3460a48f6454d8bbe9e44313d86a65447f - http://www.securityfocus.com/bid/96215 - http://www.openwall.com/lists/oss-security/2017/02/13/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1421126
CVE ID: CVE-2017-5959 State: PUBLISHED Published: 2017-02-21T07:46:00 Last Updated: 2024-08-05T15:18:49.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/semplon/GeniXCMS/issues/70 - https://github.com/semplon/GeniXCMS/releases/tag/v1.0.2
CVE ID: CVE-2017-5960 State: PUBLISHED Published: 2017-02-12T04:43:00 Last Updated: 2024-08-05T15:18:49.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the "phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PhalconEye/phalconeye/issues/133 - http://www.securityfocus.com/bid/96201
CVE ID: CVE-2017-5961 State: PUBLISHED Published: 2017-02-12T04:43:00 Last Updated: 2024-08-05T15:18:48.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ionize through 1.0.8. The vulnerability exists due to insufficient filtration of user-supplied data in the "path" HTTP GET parameter passed to the "ionize-master/themes/admin/javascript/tinymce/jscripts/tiny_mce/plugins/codemirror/dialog.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ionize/ionize/issues/393 - http://www.securityfocus.com/bid/9
- CVE Program Container: References: - https://github.com/ionize/ionize/issues/393 - http://www.securityfocus.com/bid/96196
CVE ID: CVE-2017-5962 State: PUBLISHED Published: 2017-02-12T04:43:00 Last Updated: 2024-08-05T15:18:49.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in contexts_wurfl (for TYPO3) before 0.4.2. The vulnerability exists due to insufficient filtration of user-supplied data in the "force_ua" HTTP GET parameter passed to the "/contexts_wurfl/Library/wurfl-dbapi-1.4.4.0/check_wurfl.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96158 - https://forge.typo3.org/issues/79326
CVE ID: CVE-2017-5963 State: PUBLISHED Published: 2017-02-12T04:43:00 Last Updated: 2024-08-05T15:18:49.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in caddy (for TYPO3) before 7.2.10. The vulnerability exists due to insufficient filtration of user-supplied data in the "paymillToken" HTTP POST parameter passed to the "caddy/Resources/Public/JavaScript/e-payment/paymill/api/php/payment.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://forge.typo3.org/issues/79325 - http://www.securityfocus.com/bid/96198
CVE ID: CVE-2017-5964 State: PUBLISHED Published: 2017-02-12T04:43:00 Last Updated: 2024-08-05T15:18:49.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Emoncms through 9.8.0. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the "emoncms-master/Modules/vis/visualisations/compare.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/emoncms/emoncms/issues/636 - http://www.securityfocus.com/bid/96202
CVE ID: CVE-2017-5965 State: PUBLISHED Published: 2017-05-23T05:14:00 Last Updated: 2024-08-05T15:18:49.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive in which a .asp file has a ..\ in its pathname, visiting sitecore/shell/applications/install/dialogs/Upload%20Package/UploadPackage2.aspx to upload this archive and extract its contents, and visiting a URI under sitecore/ to execute the .asp file. Additional Analyst Notes: - CVE Program Container: References: - http://research.aurainfosec.io/disclosures/2017-05-18-sitecore/
CVE ID: CVE-2017-5966 State: PUBLISHED Published: 2017-05-23T05:14:00 Last Updated: 2024-08-05T15:18:49.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to read arbitrary files via an absolute path traversal attack on sitecore/shell/download.aspx with the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://research.aurainfosec.io/disclosures/2017-05-18-sitecore/
CVE ID: CVE-2017-5967 State: PUBLISHED Published: 2017-02-14T06:30:00 Last Updated: 2024-08-05T15:18:49.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: The time subsystem in the Linux kernel through 4.9.9, when CONFIG_TIMER_STATS is enabled, allows local users to discover real PID values (as distinguished from PID values inside a PID namespace) by reading the /proc/timer_list file, related to the print_timer function in kernel/time/timer_list.c and the __timer_stats_timer_set_start_info function in kernel/time/timer.c. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/tip/tip.git/commit/?id=dfb4357da6ddbdf57d583ba6436
Container: References: - http://git.kernel.org/cgit/linux/kernel/git/tip/tip.git/commit/?id=dfb4357da6ddbdf57d583ba64361c9d792b0e0b1 - http://www.securityfocus.com/bid/96271 - https://bugzilla.kernel.org/show_bug.cgi?id=193921
CVE ID: CVE-2017-5969 State: PUBLISHED Published: 2017-04-11T16:00:00 Last Updated: 2024-08-05T15:18:49.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML parser. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=778519 - http://www.openwall.com/lists/oss-security/2017/02/13/1 - http://www.openwall.com/lists/oss-security/2016/1
?id=778519 - http://www.openwall.com/lists/oss-security/2017/02/13/1 - http://www.openwall.com/lists/oss-security/2016/11/05/3 - https://security.gentoo.org/glsa/201711-01 - http://www.securityfocus.com/bid/96188 - https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html
CVE ID: CVE-2017-5970 State: PUBLISHED Published: 2017-02-14T06:30:00 Last Updated: 2024-08-05T15:18:48.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service (system crash) via (1) an application that makes crafted system calls or possibly (2) IPv4 traffic with invalid IP options. Additional Analyst Notes: - CVE Program Container: References: - https://patchwork.ozlabs.org/patch/724136/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=34b2cef20f19c87999fff3da4071e66937db9644 - http://www.openwall.com/lists/oss-securit
l/git/torvalds/linux.git/commit/?id=34b2cef20f19c87999fff3da4071e66937db9644 - http://www.openwall.com/lists/oss-security/2017/02/12/3 - https://source.android.com/security/bulletin/2017-07-01 - https://access.redhat.com/errata/RHSA-2017:2669 - http://www.securityfocus.com/bid/96233 - https://access.redhat.com/errata/RHSA-2017:2077 - https://bugzilla.redhat.com/show_bug.cgi?id=1421638 - https://access.redhat.com/errata/RHSA-2017:1842 - https://github.com/torvalds/linux/commit/34b2cef20f19c87999fff3da4071e66937db9644 - http://www.debian.org/security/2017/dsa-3791
CVE ID: CVE-2017-5971 State: PUBLISHED Published: 2018-01-08T05:00:00 Last Updated: 2024-08-05T15:18:49.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in NewsBee CMS allow remote attackers to execute arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41261/
CVE ID: CVE-2017-5972 State: PUBLISHED Published: 2017-02-14T06:30:00 Last Updated: 2024-08-05T15:18:49.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many TCP SYN packets, as demonstrated by an attack against the kernel-3.10.0 package in CentOS Linux 7. NOTE: third parties have been unable to discern any relationship between the GitHub Engineering finding and the Trigemini.c attack code. Additional Analyst Notes: - CVE Program Container: Reference
GitHub Engineering finding and the Trigemini.c attack code. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2017/q1/573 - https://www.exploit-db.com/exploits/41350/ - https://bugzilla.redhat.com/show_bug.cgi?id=1422081 - https://cxsecurity.com/issue/WLB-2017020112 - https://security-tracker.debian.org/tracker/CVE-2017-5972 - https://githubengineering.com/syn-flood-mitigation-with-synsanity/ - http://www.securityfocus.com/bid/96231 - https://packetstormsecurity.com/files/141083/CentOS7-Kernel-Denial-Of-Service.html - https://access.redhat.com/security/cve/cve-2017-5972
CVE ID: CVE-2017-5973 State: PUBLISHED Published: 2017-03-27T15:00:00 Last Updated: 2024-08-05T15:18:49.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01101.html - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://bugzilla.redhat.com/show_bug.cgi?id=1421626 - https://access.redhat.com/e
n-lts-announce/2018/09/msg00007.html - https://bugzilla.redhat.com/show_bug.cgi?id=1421626 - https://access.redhat.com/errata/RHSA-2017:2392 - https://security.gentoo.org/glsa/201704-01 - http://www.openwall.com/lists/oss-security/2017/02/13/11 - http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=f89b60f6e5fee3923bedf80e82b4e5efc1bb156b - http://www.securityfocus.com/bid/96220 - https://access.redhat.com/errata/RHSA-2017:2408
CVE ID: CVE-2017-5974 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:18:49.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-__zzip_get32-fetch-c/ - http://www.openwall.com/lists/oss-security/2017/02/14/3 - http://www.securityfocus.com/bid/96268 - http://www.debian.org/security/2017/dsa-3
com/lists/oss-security/2017/02/14/3 - http://www.securityfocus.com/bid/96268 - http://www.debian.org/security/2017/dsa-3878
CVE ID: CVE-2017-5975 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:18:49.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-__zzip_get64-fetch-c/ - http://www.openwall.com/lists/oss-security/2017/02/14/3 - http://www.securityfocus.com/bid/96268 - http://www.debian.org/security/2017/dsa-3
CVE ID: CVE-2017-5976 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:18:49.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/14/3 - http://www.securityfocus.com/bid/96268 - https://blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-zzip_mem_entry_extra_block-memdisk-c/ - http://ww
/blogs.gentoo.org/ago/2017/02/09/zziplib-heap-based-buffer-overflow-in-zzip_mem_entry_extra_block-memdisk-c/ - http://www.debian.org/security/2017/dsa-3878
CVE ID: CVE-2017-5977 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:18:49.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted ZIP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/14/3 - http://www.securityfocus.com/bid/96268 - https://blogs.gentoo.org/ago/2017/02/09/zziplib-invalid-memory-read-in-zzip_mem_entry_extra_block-memdisk-c/
CVE ID: CVE-2017-5978 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:18:49.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96268 - https://blogs.gentoo.org/ago/2017/02/09/zziplib-out-of-bounds-read-in-zzip_mem_entry_new-memdisk-c/ - http://www.debian.org/security/2017/dsa-3878
CVE ID: CVE-2017-5979 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:18:49.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/02/09/zziplib-null-pointer-dereference-in-prescan_entry-fseeko-c/ - http://www.securityfocus.com/bid/96268 - http://www.debian.org/security/2017/dsa-3878
CVE ID: CVE-2017-5980 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:18:49.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/02/09/zziplib-null-pointer-dereference-in-zzip_mem_entry_new-memdisk-c/ - http://www.securityfocus.com/bid/96268 - http://www.debian.org/security/2017/dsa-3878
CVE ID: CVE-2017-5981 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:18:49.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96268 - https://blogs.gentoo.org/ago/2017/02/09/zziplib-assertion-failure-in-seeko-c/ - http://www.debian.org/security/2017/dsa-3878
CVE ID: CVE-2017-5982 State: PUBLISHED Published: 2017-02-28T00:00:00 Last Updated: 2024-08-05T15:18:49.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash) in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41312/ - http://packetstormsecurity.com/files/141043/Kodi-17.1-Arbitrary-File-Disclosure.html - http://seclists.org/fulldisclosure/2017/Feb/27 - http://www.securityfocus.com/bid/96481 -
bitrary-File-Disclosure.html - http://seclists.org/fulldisclosure/2017/Feb/27 - http://www.securityfocus.com/bid/96481 - https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html