Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
//www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2 - https://usn.ubuntu.com/3655-1/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=28f5a8a7c033cbf3e32277f4cc9c6afd74f05300 - https://usn.ubuntu.com/3655-2/ - https://usn.ubuntu.com/3617-2/ - http://www.securityfocus.com/bid/103183 - https://usn.ubuntu.com/3619-1/
CVE ID: CVE-2017-18205 State: PUBLISHED Published: 2018-02-27T22:00:00 Last Updated: 2024-08-05T21:13:49.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/zsh/code/ci/eb783754bdb74377f3cea4ceca9c23a02ea1bf58 - https://usn.ubuntu.com/3593-1/ - https://security.gentoo.org/glsa/201805-10 - https://access.redhat.com/errata/RHSA-2018:3073
CVE ID: CVE-2017-18206 State: PUBLISHED Published: 2018-02-27T22:00:00 Last Updated: 2024-08-05T21:13:49.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: In utils.c in zsh before 5.4, symlink expansion had a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3593-1/ - https://security.gentoo.org/glsa/201805-10 - https://access.redhat.com/errata/RHSA-2018:1932 - https://sourceforge.net/p/zsh/code/ci/c7a9cf465dd620ef48d586026944d9bd7a0d5d6d - https://access.redhat.com/errata/RHSA-2018:3073 - https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html
CVE ID: CVE-2017-18207 State: PUBLISHED Published: 2018-03-01T05:00:00 Last Updated: 2024-08-05T21:13:49.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications "need to be prepared to handle a wide variety of exceptions. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.python.org/issue32056 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg
ner: References: - https://bugs.python.org/issue32056 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
CVE ID: CVE-2017-18208 State: PUBLISHED Published: 2018-03-01T05:00:00 Last Updated: 2024-08-05T21:13:49.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3083 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91 - https://usn.ubuntu.com/3619-2/ - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4 - h
5d4e29ba21a8c0a1a91 - https://usn.ubuntu.com/3619-2/ - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4 - https://access.redhat.com/errata/RHSA-2018:2948 - https://usn.ubuntu.com/3653-2/ - https://usn.ubuntu.com/3655-1/ - https://usn.ubuntu.com/3655-2/ - https://usn.ubuntu.com/3653-1/ - https://usn.ubuntu.com/3657-1/ - https://access.redhat.com/errata/RHSA-2018:3096 - https://github.com/torvalds/linux/commit/6ea8d958a2c95a1d514015d4e29ba21a8c0a1a91 - https://usn.ubuntu.com/3619-1/ - https://access.redhat.com/errata/RHSA-2019:3967 - https://access.redhat.com/errata/RHSA-2019:4058 - https://access.redhat.com/errata/RHSA-2019:4057
CVE ID: CVE-2017-18209 State: PUBLISHED Published: 2018-03-01T20:00:00 Last Updated: 2024-08-05T21:13:49.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulnerability occurs because a memory allocation result is not checked, related to GetOpenCLCacheDirectory. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - http://www.securityfocus.com/bid/103218 - https://github.com/ImageMagick/ImageMagick/issues/790 - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-18210 State: PUBLISHED Published: 2018-03-01T20:00:00 Last Updated: 2024-08-05T21:13:49.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/791 - http://www.securityfocus.com/bid/103212
CVE ID: CVE-2017-18211 State: PUBLISHED Published: 2018-03-01T20:00:00 Last Updated: 2024-08-05T21:13:49.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/opencl.c because a program-lookup result is not checked, related to CacheOpenCLKernel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/792 - http://www.securityfocus.com/bid/103220 - https://usn.ubuntu.com/3681-1/ - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-18212 State: PUBLISHED Published: 2018-03-01T21:00:00 Last Updated: 2024-08-05T21:13:49.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_hex function in lit/lit-char-helpers.c via a RegExp("[\x0"); payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/2140
CVE ID: CVE-2017-18213 State: PUBLISHED Published: 2018-03-04T02:00:00Z Last Updated: 2024-09-16T20:43:35.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Exponent CMS before 2.4.1 Patch #6, certain admin users can elevate their privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.exponentcms.org/news/patch-6-released-for-v2-4-1-to-fix-a-few-big-issues - https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.1patch6
CVE ID: CVE-2017-18214 State: PUBLISHED Published: 2018-03-04T21:00:00 Last Updated: 2024-08-05T21:13:49.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moment/moment/issues/4163 - https://nodesecurity.io/advisories/532 - https://www.tenable.com/security/tns-2019-02
CVE ID: CVE-2017-18215 State: PUBLISHED Published: 2018-03-05T18:00:00Z Last Updated: 2024-09-16T19:04:05.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: xvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields, leading to crashes or potentially code execution, because it uses an incorrect length value. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/attachment.cgi?id=728337 - https://lists.opensuse.org/opensuse-updates/2018-02/msg00088.html - https://bugzilla.suse.com/show_bug.cgi?id=1043479
CVE ID: CVE-2017-18216 State: PUBLISHED Published: 2018-03-05T18:00:00 Last Updated: 2024-08-05T21:13:49.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service (NULL pointer dereference and BUG) because a required mutex is not used. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=853bc26a7ea39e354b9f8889ae7ad1492ffa28d2 - https://usn.ubuntu.com/3776-1/ - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3776-2/ - http://www.securityfocus.com/bid/103278 - https://git
bian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3776-2/ - http://www.securityfocus.com/bid/103278 - https://github.com/torvalds/linux/commit/853bc26a7ea39e354b9f8889ae7ad1492ffa28d2 - https://www.debian.org/security/2018/dsa-4188 - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html - https://usn.ubuntu.com/3798-1/ - https://usn.ubuntu.com/3798-2/
CVE ID: CVE-2017-18217 State: PUBLISHED Published: 2018-03-05T20:00:00 Last Updated: 2024-08-05T21:13:49.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in InvoicePlane before 1.5.5. It was observed that the Email address and Web address parameters are vulnerable to Cross Site Scripting, related to application/modules/clients/views/view.php, application/modules/invoices/views/view.php, and application/modules/quotes/views/view.php. Additional Analyst Notes: - CVE Program Container: References: - http://blog.isecurion.com/2018/04/23/invoice-plane-v1-5-cross-site-scripting-vulnerability/ - https://github.com/InvoicePlane/InvoicePlane/pull/542 - https://g
voice-plane-v1-5-cross-site-scripting-vulnerability/ - https://github.com/InvoicePlane/InvoicePlane/pull/542 - https://github.com/InvoicePlane/InvoicePlane/pull/551
CVE ID: CVE-2017-18218 State: PUBLISHED Published: 2018-03-05T20:00:00 Last Updated: 2024-08-05T21:13:49.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: In drivers/net/ethernet/hisilicon/hns/hns_enet.c in the Linux kernel before 4.13, local users can cause a denial of service (use-after-free and BUG) or possibly have unspecified other impact by leveraging differences in skb handling between hns_nic_net_xmit_hw and hns_nic_net_xmit. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=27463ad99f738ed93c7c8b3e2e5bc8c4853a2ff2 - http://www.securityfocus.com/bid/103277 - https://www.debian.org/s
commit/?id=27463ad99f738ed93c7c8b3e2e5bc8c4853a2ff2 - http://www.securityfocus.com/bid/103277 - https://www.debian.org/security/2018/dsa-4188 - https://github.com/torvalds/linux/commit/27463ad99f738ed93c7c8b3e2e5bc8c4853a2ff2
CVE ID: CVE-2017-18219 State: PUBLISHED Published: 2018-03-05T22:00:00 Last Updated: 2024-08-05T21:13:49.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large png_pixels array allocation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103258 - https://sourceforge.net/p/graphicsmagick/bugs/459/ - https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html - https://www.debian.or
/p/graphicsmagick/bugs/459/ - https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/cadd4b0522fa - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4266-1/
CVE ID: CVE-2017-18220 State: PUBLISHED Published: 2018-03-05T22:00:00 Last Updated: 2024-08-05T21:13:49.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service (magick/blob.c CloseBlob use-after-free) or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/graphicsmagick/bugs/438/ - https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/98721124e51f -
ebian.org/debian-lts-announce/2018/03/msg00025.html - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/98721124e51f - https://www.debian.org/security/2018/dsa-4321 - http://www.securityfocus.com/bid/103276 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/
CVE ID: CVE-2017-18221 State: PUBLISHED Published: 2018-03-07T08:00:00 Last Updated: 2024-08-05T21:13:49.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __munlock_pagevec function in mm/mlock.c in the Linux kernel before 4.11.4 allows local users to cause a denial of service (NR_MLOCK accounting corruption) via crafted use of mlockall and munlockall system calls. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/70feee0e1ef331b22cc51f383d532a0d043fbdcc - https://usn.ubuntu.com/3655-1/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=70feee0e1ef331b22cc51f383d532a0d043fbdcc - https://www.ker
ernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=70feee0e1ef331b22cc51f383d532a0d043fbdcc - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.4 - https://usn.ubuntu.com/3655-2/ - http://www.securityfocus.com/bid/103321
CVE ID: CVE-2017-18222 State: PUBLISHED Published: 2018-03-08T14:00:00 Last Updated: 2024-08-05T21:13:49.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 4.12, Hisilicon Network Subsystem (HNS) does not consider the ETH_SS_PRIV_FLAGS case when retrieving sset_count data, which allows local users to cause a denial of service (buffer overflow and memory corruption) or possibly have unspecified other impact, as demonstrated by incompatibility between hns_get_sset_count and ethtool_get_strings. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3654-1/ - http://www.securityfocus.com/bid/103349 - https://www.debian.org
ntainer: References: - https://usn.ubuntu.com/3654-1/ - http://www.securityfocus.com/bid/103349 - https://www.debian.org/security/2018/dsa-4188 - https://github.com/torvalds/linux/commit/412b65d15a7f8a93794653968308fc100f2aa87c - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=412b65d15a7f8a93794653968308fc100f2aa87c - https://usn.ubuntu.com/3654-2/ - https://usn.ubuntu.com/3656-1/
CVE ID: CVE-2017-18223 State: PUBLISHED Published: 2018-03-10T22:00:00 Last Updated: 2024-08-05T21:13:49.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: BMC Remedy AR System before 9.1 SP3, when Remedy AR Authentication is enabled, allows attackers to obtain administrative access. Additional Analyst Notes: - CVE Program Container: References: - https://communities.bmc.com/thread/165887
CVE ID: CVE-2017-18224 State: PUBLISHED Published: 2018-03-12T03:00:00 Last Updated: 2024-08-05T21:13:49.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 4.15, fs/ocfs2/aops.c omits use of a semaphore and consequently has a race condition for access to the extent tree during read operations in DIRECT mode, which allows local users to cause a denial of service (BUG) by modifying a certain e_cpos field. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3e4c56d41eef5595035872a2ec5a483f42e8917f - https://github.com/torvalds/linux/commit/3e4c56d41eef5595035872a2ec5a48
t/?id=3e4c56d41eef5595035872a2ec5a483f42e8917f - https://github.com/torvalds/linux/commit/3e4c56d41eef5595035872a2ec5a483f42e8917f - https://www.debian.org/security/2018/dsa-4188 - http://www.securityfocus.com/bid/103353
CVE ID: CVE-2017-18225 State: PUBLISHED Published: 2018-03-12T04:00:00 Last Updated: 2024-08-05T21:13:49.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gentoo net-im/jabberd2 package through 2.6.1 installs jabberd, jabberd2-c2s, jabberd2-router, jabberd2-s2s, and jabberd2-sm in /usr/bin owned by the jabber account, which might allow local users to gain privileges by leveraging access to this account and then waiting for root to execute one of these programs. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.gentoo.org/629412
CVE ID: CVE-2017-18226 State: PUBLISHED Published: 2018-03-12T04:00:00 Last Updated: 2024-08-05T21:13:49.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script executes a "kill -TERM `cat /var/run/jabber/filename.pid`" command. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.gentoo.org/631068
CVE ID: CVE-2017-18227 State: PUBLISHED Published: 2018-03-12T04:00:00 Last Updated: 2024-08-05T21:13:49.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: TitanHQ WebTitan Gateway has incorrect certificate validation for the TLS interception feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.ndss-symposium.org/ndss2017/ndss-2017-programme/security-impact-https-interception/ - http://dx.doi.org/10.14722/ndss.2017.23456 - https://jhalderm.com/pub/papers/interception-ndss17.pdf
CVE ID: CVE-2017-18228 State: PUBLISHED Published: 2018-03-12T23:00:00Z Last Updated: 2024-09-16T22:30:36.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remedy Mid Tier in BMC Remedy AR System 9.1 allows XSS via the ATTKey parameter in an arsys/servlet/AttachServlet request. Additional Analyst Notes: - CVE Program Container: References: - https://communities.bmc.com/thread/164169
CVE ID: CVE-2017-18229 State: PUBLISHED Published: 2018-03-14T02:00:00 Last Updated: 2024-08-05T21:13:49.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile allocations. Additional Analyst Notes: - CVE Program Container: References: - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/752c0b41fa32 - https://sourceforge.net/p/graphicsmagick/bugs/461/ - https://lists.debian.org/debian-lts-annou
Magick/rev/752c0b41fa32 - https://sourceforge.net/p/graphicsmagick/bugs/461/ - https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - https://usn.ubuntu.com/4266-1/
CVE ID: CVE-2017-18230 State: PUBLISHED Published: 2018-03-14T02:00:00 Last Updated: 2024-08-05T21:13:49.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html - https://www.debian.org/security/2018/dsa-4321 - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/53a4d841e90f - https://lists.debian.org/debian-lts-announce/2018/08/msg00
://hg.graphicsmagick.org/hg/GraphicsMagick/rev/53a4d841e90f - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - https://sourceforge.net/p/graphicsmagick/bugs/473/ - https://usn.ubuntu.com/4266-1/
CVE ID: CVE-2017-18231 State: PUBLISHED Published: 2018-03-14T02:00:00 Last Updated: 2024-08-05T21:13:49.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/ea074081678b - https://sourceforge.net/p/graphicsmagick/bugs/475/ - https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html - https://www.debian.org/security/2018/dsa-4321 - https://
://lists.debian.org/debian-lts-announce/2018/03/msg00025.html - https://www.debian.org/security/2018/dsa-4321 - https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html - https://usn.ubuntu.com/4266-1/
CVE ID: CVE-2017-18232 State: PUBLISHED Published: 2018-03-15T04:00:00 Last Updated: 2024-08-05T21:13:49.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of service (deadlock) by triggering certain error-handling code. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3083 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0558f33c06bb910e2879e355192227a8e8f0219d - https://www.debian.org/security/2018/dsa-4187 - http://www.securityfocus.com
=0558f33c06bb910e2879e355192227a8e8f0219d - https://www.debian.org/security/2018/dsa-4187 - http://www.securityfocus.com/bid/103423 - https://github.com/torvalds/linux/commit/0558f33c06bb910e2879e355192227a8e8f0219d - https://access.redhat.com/errata/RHSA-2018:3096 - https://usn.ubuntu.com/4163-1/ - https://usn.ubuntu.com/4163-2/
CVE ID: CVE-2017-18233 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T21:13:49.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp allows remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a .avi file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html - https://cgit.freedesktop.org/exempi/commit/?id=65a8492832b7335ffabd01f5f64d89dec757c260 - https://usn.ubuntu.com/3668-1/ - https://bugs.freedesktop.org/show_bug.cgi?
d=65a8492832b7335ffabd01f5f64d89dec757c260 - https://usn.ubuntu.com/3668-1/ - https://bugs.freedesktop.org/show_bug.cgi?id=102151 - https://access.redhat.com/errata/RHSA-2019:2048
CVE ID: CVE-2017-18234 State: PUBLISHED Published: 2018-03-15T19:00:00 Last Updated: 2024-08-05T21:13:49.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service (invalid memcpy with resultant use-after-free) or possibly have unspecified other impact via a .pdf file containing JPEG data, related to XMPFiles/source/FormatSupport/ReconcileTIFF.cpp, XMPFiles/source/FormatSupport/TIFF_MemoryReader.cpp, and XMPFiles/source/FormatSupport/TIFF_Support.hpp. Additional Analyst Notes: - CVE Program Container: References: - https://cgit.freedesktop.org/exempi/commit/?id=c26d5beb60a5a85f76259f5
yst Notes: - CVE Program Container: References: - https://cgit.freedesktop.org/exempi/commit/?id=c26d5beb60a5a85f76259f50ed3e08c8169b0a0c - https://lists.debian.org/debian-lts-announce/2018/03/msg00013.html - https://usn.ubuntu.com/3668-1/ - https://bugs.freedesktop.org/show_bug.cgi?id=100397 - https://access.redhat.com/errata/RHSA-2019:2048