Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-12122 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T22:40:57.754Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Sam Lantinga and Mattias Engdegård Products: Simple DirectMedia Layer Problem Types: remote code execution Description: An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2. A specially crafted ILBM image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-41
nerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4177 - https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html - https://www.debian.org/security/2018/dsa-4184 - https://security.gentoo.org/glsa/201903-17 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0488
CVE ID: CVE-2017-12123 State: PUBLISHED Published: 2018-05-14T20:00:00Z Last Updated: 2024-09-16T22:35:55.803Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Talos Products: Moxa Problem Types: Cleartext Transmission of Sensitive Information Description: An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_re
min. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0475
CVE ID: CVE-2017-12124 State: PUBLISHED Published: 2018-05-14T20:00:00Z Last Updated: 2024-09-17T03:52:49.594Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Talos Products: Moxa Problem Types: denial of service Description: An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in the web server crashing. An attacker can send a crafted URI to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0476
CVE ID: CVE-2017-12125 State: PUBLISHED Published: 2018-05-14T20:00:00Z Last Updated: 2024-09-16T19:00:52.724Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Talos Products: Moxa Problem Types: OS command injection Description: An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the CN= parm in the "/goform/net_WebCSRGen" uri to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerabil
erability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0477
CVE ID: CVE-2017-12126 State: PUBLISHED Published: 2018-05-14T20:00:00Z Last Updated: 2024-09-16T16:53:59.341Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Moxa Problem Types: Cross-site request forgery Description: An exploitable cross-site request forgery vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP packet can cause cross-site request forgery. An attacker can create malicious HTML to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0478
CVE ID: CVE-2017-12127 State: PUBLISHED Published: 2018-05-14T20:00:00Z Last Updated: 2024-09-17T02:21:40.475Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Talos Products: Moxa Problem Types: Plaintext storage of password Description: A password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317. An attacker with shell access could extract passwords in clear text from the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0479
CVE ID: CVE-2017-12128 State: PUBLISHED Published: 2018-05-14T20:00:00Z Last Updated: 2024-09-16T20:59:00.866Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Talos Products: Moxa Problem Types: Information disclosure Description: An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted TCP packet can cause information disclosure. An attacker can send a crafted TCP packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0480
CVE ID: CVE-2017-12129 State: PUBLISHED Published: 2018-05-14T20:00:00Z Last Updated: 2024-09-17T02:47:55.223Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Talos Products: Moxa Problem Types: weak cryptography Description: An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. An attacker could intercept weakly encrypted passwords and could brute force them. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0481
CVE ID: CVE-2017-12130 State: PUBLISHED Published: 2018-01-20T00:00:00Z Last Updated: 2024-09-16T22:34:55.599Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Talos Products: Tinysvcmdns Problem Types: denial of service Description: An exploitable NULL pointer dereference vulnerability exists in the tinysvcmdns library version 2017-11-05. A specially crafted packet can make the library dereference a NULL pointer leading to a server crash and denial of service. An attacker needs to send a DNS query to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102795 - https://talosintelligence.c
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102795 - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0486
CVE ID: CVE-2017-12131 State: PUBLISHED Published: 2017-08-01T05:00:00Z Last Updated: 2024-09-16T20:27:49.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial Excerpt Options screens. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kevins1022/cve/blob/master/wordpress-Easy-Testimonials.md
CVE ID: CVE-2017-12132 State: PUBLISHED Published: 2017-08-01T16:00:00 Last Updated: 2024-08-05T18:28:16.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation. Additional Analyst Notes: - CVE Program Container: References: - https://arxiv.org/pdf/1205.4011.pdf - http://www.securityfocus.com/bid/100598 - https://sourceware.org/bugzilla/show_bug.cgi?id=21361 - https://access.redhat.com/errata/RHSA-2018:0805
CVE ID: CVE-2017-12133 State: PUBLISHED Published: 2017-09-07T13:00:00 Last Updated: 2024-08-05T18:28:16.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) before 2.26 allows remote attackers to have unspecified impact via vectors related to error path. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=21115 - https://www.securityfocus.com/bid/100679 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=d42eed4a044e5e10dfb885cf9891c2518a72a491 - https://lists.fedoraproject.org/archives/list/packa
itweb.cgi?p=glibc.git%3Bh=d42eed4a044e5e10dfb885cf9891c2518a72a491 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYZL6PAKI73XYRJYL5VLDGA4FFGWMB7A/ - https://usn.ubuntu.com/4416-1/
CVE ID: CVE-2017-12134 State: PUBLISHED Published: 2017-08-24T14:00:00 Last Updated: 2024-08-05T18:28:16.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block IO merge-ability calculation. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX225941 - http://www.securitytracker.com/id/1039176 - http://xenbits.xen.org/xsa/advisory-229.html - http://www.debian.
TX225941 - http://www.securitytracker.com/id/1039176 - http://xenbits.xen.org/xsa/advisory-229.html - http://www.debian.org/security/2017/dsa-3981 - https://usn.ubuntu.com/3655-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=1477656 - https://security.gentoo.org/glsa/201801-14 - https://usn.ubuntu.com/3655-2/ - http://www.openwall.com/lists/oss-security/2017/08/15/4 - http://www.securityfocus.com/bid/100343
CVE ID: CVE-2017-12135 State: PUBLISHED Published: 2017-08-24T14:00:00 Last Updated: 2024-08-05T18:28:16.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX225941 - http://www.openwall.com/lists/oss-security/2017/08/17/6 - http://www.securityfocus.com/bid/100344 - http://www.debian.org/security/2017/dsa-3969 - https://bugzilla.redhat.com/show_bug.cgi?id=1477655 - http://xenbits.xen.org/xsa/advisory-226.html - h
y/2017/dsa-3969 - https://bugzilla.redhat.com/show_bug.cgi?id=1477655 - http://xenbits.xen.org/xsa/advisory-226.html - http://www.openwall.com/lists/oss-security/2017/08/15/1 - https://security.gentoo.org/glsa/201801-14 - http://www.securitytracker.com/id/1039178 - http://www.openwall.com/lists/oss-security/2020/04/14/4
CVE ID: CVE-2017-12136 State: PUBLISHED Published: 2017-08-24T14:00:00 Last Updated: 2024-08-05T18:28:16.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the host via vectors involving maptrack free list handling. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX225941 - http://xenbits.xen.org/xsa/advisory-228.html - http://www.securityfocus.com/bid/100346 - http://www.debian.org/security/2017/dsa-3969 - http://www.openwall.com/lists/o
http://www.securityfocus.com/bid/100346 - http://www.debian.org/security/2017/dsa-3969 - http://www.openwall.com/lists/oss-security/2017/08/15/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1477651 - https://security.gentoo.org/glsa/201801-14 - http://www.securitytracker.com/id/1039175
CVE ID: CVE-2017-12137 State: PUBLISHED Published: 2017-08-24T14:00:00 Last Updated: 2024-08-05T18:28:16.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX225941 - http://www.openwall.com/lists/oss-security/2017/08/15/2 - http://www.securitytracker.com/id/1039174 - https://bugzilla.redhat.com/show_bug.cgi?id=1477657 - http://www.debian.org/security/2017/dsa-3969 - https://security.gentoo.org/glsa/201801-14 - http://www.securityfocus.com/bid/100342 - http://xenbi
rity/2017/dsa-3969 - https://security.gentoo.org/glsa/201801-14 - http://www.securityfocus.com/bid/100342 - http://xenbits.xen.org/xsa/advisory-227.html
CVE ID: CVE-2017-12138 State: PUBLISHED Published: 2017-08-02T05:00:00 Last Updated: 2024-08-05T18:28:16.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100091 - https://github.com/XOOPS/XoopsCore25/issues/523
CVE ID: CVE-2017-12139 State: PUBLISHED Published: 2017-08-02T05:00:00 Last Updated: 2024-08-05T18:28:16.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/XOOPS/XoopsCore25/issues/524 - http://www.securityfocus.com/bid/100094
CVE ID: CVE-2017-12140 State: PUBLISHED Published: 2017-08-02T05:00:00 Last Updated: 2024-08-05T18:28:16.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - http://www.securityfocus.com/bid/100096 - https://github.com/ImageMagick/ImageMagick/issues/533 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg0000
ists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-12141 State: PUBLISHED Published: 2017-08-02T05:00:00 Last Updated: 2024-08-05T18:28:16.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3667-1/ - https://somevulnsofadlab.blogspot.com/2017/07/ytnefheap-buffer-overflow-in.html - https://github.com/Yeraze/ytnef/issues/50 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654Z
://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-12142 State: PUBLISHED Published: 2017-08-02T05:00:00 Last Updated: 2024-08-05T18:28:16.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yeraze/ytnef/issues/49 - https://somevulnsofadlab.blogspot.com/2017/07/ytnefinvalid-memory-read-in-swapdword.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-12143 State: PUBLISHED Published: 2017-08-02T05:00:00 Last Updated: 2024-08-05T18:28:16.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_info in lqt_quicktime.c, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://somevulnsofadlab.blogspot.com/2017/07/libquicktimeallocation-failed-in.html - https://sourceforge.net/p/libquicktime/mailman/message/35888850/
CVE ID: CVE-2017-12144 State: PUBLISHED Published: 2017-08-02T05:00:00 Last Updated: 2024-08-05T18:28:16.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Yeraze/ytnef/issues/51 - https://somevulnsofadlab.blogspot.com/2017/07/ytnefallocation-failed-in-tneffillmapi.html - http://www.securityfocus.com/bid/100098 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMC
/lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/
CVE ID: CVE-2017-12145 State: PUBLISHED Published: 2017-08-02T05:00:00 Last Updated: 2024-08-05T18:28:16.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_ftyp in ftyp.c, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://somevulnsofadlab.blogspot.com/2017/07/libquicktimeallocation-failed-in_30.html - https://sourceforge.net/p/libquicktime/mailman/message/35888849/
CVE ID: CVE-2017-12146 State: PUBLISHED Published: 2017-09-08T19:00:00 Last Updated: 2024-08-05T18:28:16.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: The driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1 allows local users to gain privileges by leveraging a race condition between a read operation and a store operation that involve different overrides. Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2017-09-01 - https://github.com/torvalds/linux/commit/6265539776a0810b7ce6398c27866ddb9c6bd154 - https://bugzilla.suse.com/show_bug.cgi?id=1057474 - http://www.securityfocus.c
265539776a0810b7ce6398c27866ddb9c6bd154 - https://bugzilla.suse.com/show_bug.cgi?id=1057474 - http://www.securityfocus.com/bid/100651 - http://www.debian.org/security/2017/dsa-3981 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6265539776a0810b7ce6398c27866ddb9c6bd154 - https://bugzilla.redhat.com/show_bug.cgi?id=1489078 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.1
CVE ID: CVE-2017-12148 State: PUBLISHED Published: 2018-07-27T16:00:00 Last Updated: 2024-08-05T18:28:16.619Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Red Hat Products: Ansible Tower Problem Types: CWE-20 Description: A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repository) definition does not have the 'delete before update' flag set, an attacker with commit access to the upstream playbook source repository could create a Trojan playbook that, when executed by Tower, modifies the checked out SCM repository to add git hooks. These git hooks could, in turn, cause arbitrary command and
, modifies the checked out SCM repository to add git hooks. These git hooks could, in turn, cause arbitrary command and code execution as the user Tower runs as. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:3005 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12148
CVE ID: CVE-2017-12149 State: PUBLISHED Published: 2017-10-04T20:00:00.000Z Last Updated: 2025-10-21T23:55:31.822Z Vendors: Red Hat, Inc. Products: jbossas Problem Types: CWE-502 Description: In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1486220 - https://access.redhat.com/errata/RHSA-20
lnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1486220 - https://access.redhat.com/errata/RHSA-2018:1608 - https://github.com/gottburgm/Exploits/tree/master/CVE-2017-12149 - http://www.securityfocus.com/bid/100591 - https://access.redhat.com/errata/RHSA-2018:1607
CVE ID: CVE-2017-12150 State: PUBLISHED Published: 2018-07-26T18:00:00 Last Updated: 2024-08-05T18:28:16.639Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Samba Products: samba Problem Types: CWE-300 Description: It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03775en_us - https://security.netapp.co
/h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03775en_us - https://security.netapp.com/advisory/ntap-20170921-0001/ - https://access.redhat.com/errata/RHSA-2017:2790 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12150 - http://www.securityfocus.com/bid/100918 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us - https://www.samba.org/samba/security/CVE-2017-12150.html - https://www.debian.org/security/2017/dsa-3983 - https://access.redhat.com/errata/RHSA-2017:2858 - http://www.securitytracker.com/id/1039401 - https://access.redhat.com/errata/RHSA-2017:2789 - https://access.redhat.com/errata/RHSA-2017:279
racker.com/id/1039401 - https://access.redhat.com/errata/RHSA-2017:2789 - https://access.redhat.com/errata/RHSA-2017:2791
CVE ID: CVE-2017-12151 State: PUBLISHED Published: 2018-07-27T12:00:00 Last Updated: 2024-08-05T18:28:16.367Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Samba Products: samba Problem Types: CWE-300 Description: A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20170921-00
. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20170921-0001/ - https://access.redhat.com/errata/RHSA-2017:2790 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12151 - http://www.securityfocus.com/bid/100917 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03817en_us - https://www.debian.org/security/2017/dsa-3983 - https://access.redhat.com/errata/RHSA-2017:2858 - http://www.securitytracker.com/id/1039401 - https://www.samba.org/samba/security/CVE-2017-12151.html
CVE ID: CVE-2017-12152 State: REJECTED Published: 2022-08-08T18:52:09 Last Updated: 2022-08-08T18:52:09 Description: No description available.