Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
als. Also, since the device's server sets the Access-Control-Allow-Origin header to "*", an attacker can easily interact with the JSON payload returned by the device and steal sensitive information about the device. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Starry_sec_issues.pdf - http://packetstormsecurity.com/files/153240/Starry-Router-Camera-PIN-Brute-Force-CORS-Incorrect.html
CVE ID: CVE-2017-13719 State: PUBLISHED Published: 2019-07-03T19:40:57 Last Updated: 2024-08-05T19:05:19.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of the camera by using HTTP APIs, instead of the web management interface that is provided by the application. This HTTP API receives the credentials as base64 encoded in the Authorization HTTP header. However, a missing length check in the code allows an attacker to send a string of 1024 characters in the password field, and allows an attacker to exploit a memory corruption issue. This can a
string of 1024 characters in the password field, and allows an attacker to exploit a memory corruption issue. This can allow an attacker to circumvent the account protection mechanism and brute force the credentials. If the firmware version Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 is dissected using the binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that has many of the binaries in the /usr folder. The binary "sonia" is the one that has the vulnerable function that performs the credential check in the binary for the HTTP API specification. If we open this binary in IDA Pro we will notice that this follows an ARM l
n the binary for the HTTP API specification. If we open this binary in IDA Pro we will notice that this follows an ARM little-endian format. The function at address 00415364 in IDA Pro starts the HTTP authentication process. This function calls another function at sub_ 0042CCA0 at address 0041549C. This function performs a strchr operation after base64 decoding the credentials, and stores the result on the stack, which results in a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Jun/8 - http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html - https://github.co
acketstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html - https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf
CVE ID: CVE-2017-13720 State: PUBLISHED Published: 2017-10-11T17:00:00 Last Updated: 2024-08-05T19:05:20.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash (denial of service). This occurs because '\0' characters are incorrectly skipped in situations involving ? characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3995 - https://bugzilla.redhat.com/show_bug.cgi?id=150069
ntainer: References: - http://www.debian.org/security/2017/dsa-3995 - https://bugzilla.redhat.com/show_bug.cgi?id=1500690 - https://bugzilla.suse.com/show_bug.cgi?id=1054285 - https://www.x.org/releases/individual/lib/libXfont2-2.0.2.tar.bz2 - https://security.gentoo.org/glsa/201711-08 - https://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=d1e670a4a8704b8708e493ab6155589bcd570608
CVE ID: CVE-2017-13721 State: PUBLISHED Published: 2017-10-09T14:00:00 Last Updated: 2024-08-05T19:05:20.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients in the same session. Additional Analyst Notes: - CVE Program Container: References: - https://cgit.freedesktop.org/xorg/xserver/commit/?id=b95f25af141d33a65f6f821ea9c003f66a01e1f1 - https://security.gentoo.org/glsa/201710-30 - http://www.openwall.com/lists/oss-security/2017/10/04/10 - http://www.sec
- https://security.gentoo.org/glsa/201710-30 - http://www.openwall.com/lists/oss-security/2017/10/04/10 - http://www.securityfocus.com/bid/101238 - http://www.debian.org/security/2017/dsa-4000 - https://lists.x.org/archives/xorg-announce/2017-October/002808.html
CVE ID: CVE-2017-13722 State: PUBLISHED Published: 2017-10-11T17:00:00 Last Updated: 2024-08-05T19:05:20.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary check (for PCF files) could be used by local attackers authenticated to an Xserver for a buffer over-read, for information disclosure or a crash of the X server. Additional Analyst Notes: - CVE Program Container: References: - https://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=672bb944311392e2415b39c0d63b1e1902905bcd - http://www.debian.org/security/2017/dsa-3995 - https://www.x.org/releases/individua
44311392e2415b39c0d63b1e1902905bcd - http://www.debian.org/security/2017/dsa-3995 - https://www.x.org/releases/individual/lib/libXfont2-2.0.2.tar.bz2 - https://security.gentoo.org/glsa/201711-08 - https://bugzilla.redhat.com/show_bug.cgi?id=1500693 - https://bugzilla.suse.com/show_bug.cgi?id=1049692
CVE ID: CVE-2017-13723 State: PUBLISHED Published: 2017-10-09T14:00:00 Last Updated: 2024-08-05T19:05:19.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101253 - https://cgit.freedesktop.org/xorg/xserver/commit/?id=94f11ca5cf011ef123bd222cabeaef6f424d76ac - https://lists.debian.org/debian-lts-announce
ktop.org/xorg/xserver/commit/?id=94f11ca5cf011ef123bd222cabeaef6f424d76ac - https://lists.debian.org/debian-lts-announce/2017/11/msg00032.html - https://security.gentoo.org/glsa/201710-30 - http://www.openwall.com/lists/oss-security/2017/10/04/10 - http://www.debian.org/security/2017/dsa-4000 - https://lists.x.org/archives/xorg-announce/2017-October/002808.html
CVE ID: CVE-2017-13724 State: PUBLISHED Published: 2017-09-13T08:00:00 Last Updated: 2024-08-05T19:05:19.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings" page. Additional Analyst Notes: - CVE Program Container: References: - https://iscouncil.blogspot.com/2017/08/multiple-vulnerabilities-in-axesstel.html
CVE ID: CVE-2017-13725 State: PUBLISHED Published: 2017-09-14T06:00:00 Last Updated: 2024-08-05T19:05:20.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print(). Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201709-23 - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3971 - https://github.com/the-tcpdump-group/tcpdump/commit/c7c515ee03c285cc51376328de4ae9d549e501a5 - http://www.securitytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/3c4d7c0ee30a30e5abff3d6d9586a3753101faf5
itytracker.com/id/1039307 - https://github.com/the-tcpdump-group/tcpdump/commit/3c4d7c0ee30a30e5abff3d6d9586a3753101faf5 - http://www.tcpdump.org/tcpdump-changes.txt - https://access.redhat.com/errata/RHEA-2018:0705
CVE ID: CVE-2017-13726 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:19.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100524 - https://usn.ubuntu.com/3602-1/ - https://www.debian.org/security/2018/dsa-4100 - http://bugzilla.maptools.org/show_bug.cgi?id=2727
CVE ID: CVE-2017-13727 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100524 - https://usn.ubuntu.com/3602-1/ - http://bugzilla.maptools.org/show_bug.cgi?id=2728 - https://www.debian.org/security/2018/dsa-4100
CVE ID: CVE-2017-13728 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201804-13 - https://bugzilla.redhat.com/show_bug.cgi?id=1484274 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a2
6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-13729 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:19.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201804-13 - https://bugzilla.redhat.com/show_bug.cgi?id=1484276 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e6
Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-13730 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:19.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201804-13 - https://bugzilla.redhat.com/show_bug.cgi?id=1484284 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db
3651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-13731 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201804-13 - https://bugzilla.redhat.com/show_bug.cgi?id=1484285 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5
651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-13732 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201804-13 - https://bugzilla.redhat.com/show_bug.cgi?id=1484287 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e
4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-13733 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1484290 - https://security.gentoo.org/glsa/201804-13 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33
40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-13734 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:19.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201804-13 - https://bugzilla.redhat.com/show_bug.cgi?id=1484291
CVE ID: CVE-2017-13735 State: PUBLISHED Published: 2017-08-29T06:00:00Z Last Updated: 2024-09-16T23:42:15.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1483988
CVE ID: CVE-2017-13736 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:19.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: There are lots of memory leaks in the GMCommand function in magick/command.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100513 - https://bugzilla.redhat.com/show_bug.cgi?id=1484192 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproje
e/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/
CVE ID: CVE-2017-13737 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:19.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1484196 - http://openwall.com/lists/oss-security/2017/08/29/4 - http://www.securityfocus.com/bid/100518 - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/3db9449e3d6a/ - https://www.debian.org/security/2018/dsa-4321 - https://bugs.debian.org/878511 - https://lists.debia
rev/3db9449e3d6a/ - https://www.debian.org/security/2018/dsa-4321 - https://bugs.debian.org/878511 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4222-1/
CVE ID: CVE-2017-13738 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access in the _lou_getALine function in compileTranslationTable.c:346 in Liblouis 3.2.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100607 - https://bugzilla.redhat.com/show_bug.cgi?id=1484297 - https://access.redhat.com/errata/RHSA-2017:3111
CVE ID: CVE-2017-13739 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:19.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write in Liblouis 3.2.0, triggered in the function resolveSubtable() in compileTranslationTable.c. It will lead to denial of service or remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100607 - https://bugzilla.redhat.com/show_bug.cgi?id=1484299
CVE ID: CVE-2017-13740 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTable.c, that will lead to denial of service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100607 - https://bugzilla.redhat.com/show_bug.cgi?id=1484306 - https://access.redhat.com/errata/RHSA-2017:3111
CVE ID: CVE-2017-13741 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c in Liblouis 3.2.0 that will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100607 - https://access.redhat.com/errata/RHSA-2017:3111 - https://bugzilla.redhat.com/show_bug.cgi?id=1484332
CVE ID: CVE-2017-13742 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationTable.c, that will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1484334 - http://www.securityfocus.com/bid/100607 - https://access.redhat.com/errata/RHSA-2017:3111
CVE ID: CVE-2017-13743 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in utils.c, that will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100607 - https://access.redhat.com/errata/RHSA-2017:3111 - https://bugzilla.redhat.com/show_bug.cgi?id=1484335
CVE ID: CVE-2017-13744 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an illegal address access in the function _lou_getALine() in compileTranslationTable.c:343 in Liblouis 3.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1484338 - http://www.securityfocus.com/bid/100607 - https://access.redhat.com/errata/RHSA-2017:3111
CVE ID: CVE-2017-13745 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:19.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote denial of service attack by triggering an unexpected jpc_ppmstabtostreams return value, a different vulnerability than CVE-2018-9154. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://bugzilla.redhat.com/show_bug.cgi?id=1485274 - http://www.securityfocus.com/bid/100514 - https://security.gent
- https://bugzilla.redhat.com/show_bug.cgi?id=1485274 - http://www.securityfocus.com/bid/100514 - https://security.gentoo.org/glsa/201908-03 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/
CVE ID: CVE-2017-13746 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100514 - https://bugzilla.redhat.com/show_bug.cgi?id=1485286 - https://security.gentoo.org/glsa/201908-03 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproje
es/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ALB4SXHURLVWKAOKYRNJXPABW3M22M/
CVE ID: CVE-2017-13747 State: PUBLISHED Published: 2017-08-29T06:00:00 Last Updated: 2024-08-05T19:05:20.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead to a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100514 - https://bugzilla.redhat.com/show_bug.cgi?id=1485282 - https://security.gentoo.org/glsa/201908-03 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPOVZTSIQPW2H4AFLMI3LHJEZGBVEQET/ - https://lists.fedoraproject.org/arc