Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ential to result in passwords and other sensitive information being sent in cleartext without the user being aware. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gnachman/iterm2/issues/6050 - https://gitlab.com/gnachman/iterm2/issues/5303 - https://github.com/gnachman/iTerm2/commit/33ccaf61e34ef32ffc9d6b2be5dd218f6bb55f51 - https://gitlab.com/gnachman/iterm2/wikis/dnslookupissue - https://github.com/gnachman/iTerm2/commit/e4eb1063529deb575b75b396138d41554428d522 - https://gitlab.com/gnachman/iterm2/issues/6068 - https://gitlab.com/gnachman/iterm2/issues/3688 - https://news.ycombinator.com/item?id=15286956
CVE ID: CVE-2015-9232 State: PUBLISHED Published: 2017-09-20T22:00:00Z Last Updated: 2024-09-16T18:34:39.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Good for Enterprise application 3.0.0.415 for Android does not use signature protection for its Authentication Delegation API intent. Also, the Good Dynamic application activation process does not attempt to detect malicious activation attempts involving modified names beginning with a com.good.gdgma substring. Consequently, an attacker could obtain access to intranet data. This issue is only relevant in cases where the user has already downloaded a malicious Android application. Additional Analyst Notes: - CVE Program Co
cases where the user has already downloaded a malicious Android application. Additional Analyst Notes: - CVE Program Container: References: - https://community.blackberry.com/community/blogs/blog/2015/10/02/what-you-need-to-know-modzero-insecure-application-coupling - https://www.modzero.ch/advisories/MZ-15-03-GOOD-Auth-Delegation.txt - http://www.securityfocus.com/archive/1/536543
CVE ID: CVE-2015-9233 State: PUBLISHED Published: 2017-09-29T21:00:00Z Last Updated: 2024-09-16T23:41:32.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to cp_contactformpp.php and cp_contactformpp_admin_int_list.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2015/q3/88 - http://seclists.org/fulldisclosure/2015/Jul/49 - https://wordpress.org/plugins/cp-contact-form-with-paypal/#developers
CVE ID: CVE-2015-9234 State: PUBLISHED Published: 2017-09-29T21:00:00Z Last Updated: 2024-09-16T23:56:25.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has SQL injection via the cp_contactformpp_id parameter to cp_contactformpp.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2015/q3/88 - http://seclists.org/fulldisclosure/2015/Jul/49 - https://wordpress.org/plugins/cp-contact-form-with-paypal/#developers
CVE ID: CVE-2015-9235 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T23:05:54.010Z Vendors: HackerOne Products: jsonwebtoken node module Problem Types: CWE-20 Description: In jsonwebtoken node module before 4.2.2 it is possible for an attacker to bypass verification when a token digitally signed with an asymmetric key (RS/ES family) of algorithms but instead the attacker send a token digitally signed with a symmetric algorithm (HS* family). Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/17 - https://github.com/auth0/node-jsonwebtoken/commit/1bb584bc382295eeb7ee8c4452a673a77a68b687 - https://auth0.com/blog/2015/03
ps://github.com/auth0/node-jsonwebtoken/commit/1bb584bc382295eeb7ee8c4452a673a77a68b687 - https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/ - https://www.timmclean.net/2015/02/25/jwt-alg-none.html
CVE ID: CVE-2015-9236 State: PUBLISHED Published: 2018-05-31T20:00:00Z Last Updated: 2024-09-17T04:15:13.448Z Vendors: HackerOne Products: hapi node module Problem Types: CWE-284 Description: Hapi versions less than 11.0.0 implement CORS incorrectly and allowed for configurations that at best returned inconsistent headers and at worst allowed cross-origin activities that were expected to be forbidden. If the connection has CORS enabled but one route has it off, and the route is not GET, the OPTIONS prefetch request will return the default CORS headers and then the actual request will go through and return no CORS headers. This defeats the purpose of turning CORS on the route. Additional Anal
quest will go through and return no CORS headers. This defeats the purpose of turning CORS on the route. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hapijs/hapi/issues/2850 - https://github.com/hapijs/hapi/issues/2840 - https://nodesecurity.io/advisories/45
CVE ID: CVE-2015-9238 State: PUBLISHED Published: 2018-05-31T20:00:00Z Last Updated: 2024-09-16T17:43:37.504Z Vendors: HackerOne Products: secure-compare node module Problem Types: CWE-697 Description: secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vdemedes/secure-compare/pull/1 - https://nodesecurity.io/advisories/50
CVE ID: CVE-2015-9239 State: PUBLISHED Published: 2018-05-31T20:00:00Z Last Updated: 2024-09-16T19:36:41.294Z Vendors: HackerOne Products: ansi2html node module Problem Types: CWE-400 Description: ansi2html is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/51
CVE ID: CVE-2015-9240 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T22:56:15.711Z Vendors: HackerOne Products: keystone node module Problem Types: Improper Authentication Description: Due to a bug in the the default sign in functionality in the keystone node module before 0.3.16, incomplete email addresses could be matched. A correct password is still required to complete sign in. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/60
CVE ID: CVE-2015-9241 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T17:03:05.145Z Vendors: HackerOne Products: hapi node module Problem Types: CWE-400 Description: Certain input passed into the If-Modified-Since or Last-Modified headers will cause an 'illegal access' exception to be raised. Instead of sending a HTTP 500 error back to the sender, hapi node module before 11.1.3 will continue to hold the socket open until timed out (default node timeout is 2 minutes). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jfhbrook/node-ecstatic/pull/179 - https://github.com/hapijs/hapi/commit/aab2496e930dce5ee1ab28eecec94e0e45f03580 - htt
m/jfhbrook/node-ecstatic/pull/179 - https://github.com/hapijs/hapi/commit/aab2496e930dce5ee1ab28eecec94e0e45f03580 - https://nodesecurity.io/advisories/63
CVE ID: CVE-2015-9242 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-17T03:12:59.354Z Vendors: HackerOne Products: ecstatic node module Problem Types: CWE-400 Description: Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception. This leads to a crash and denial of service in ecstatic when this input is passed into the server via the If-Modified-Since header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jfhbrook/node-ecstatic/pull/179 - https://bugs.chromium.org/p/v8/issues/detail?id=4640 - https://nodesecurity.io/advisories/64
CVE ID: CVE-2015-9243 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-17T02:27:19.677Z Vendors: HackerOne Products: hapi node module Problem Types: CWE-284 Description: When server level, connection level or route level CORS configurations in hapi node module before 11.1.4 are combined and when a higher level config included security restrictions (like origin), a higher level config that included security restrictions (like origin) would have those restrictions overridden by less restrictive defaults (e.g. origin defaults to all origins `*`). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hapijs/hapi/issues/2980 - https://nodesecuri
al Analyst Notes: - CVE Program Container: References: - https://github.com/hapijs/hapi/issues/2980 - https://nodesecurity.io/advisories/65
CVE ID: CVE-2015-9244 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T16:48:28.663Z Vendors: HackerOne Products: mysql node module Problem Types: CWE-89 Description: Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/felixge/node-mysql/issues/342 - https://nodesecurity.io/advisories/66
CVE ID: CVE-2015-9245 State: PUBLISHED Published: 2017-10-31T07:00:00 Last Updated: 2024-08-06T08:43:42.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute malicious Java classes via port 20931. Additional Analyst Notes: - CVE Program Container: References: - https://knowledgebase.progress.com/articles/Article/How-to-prevent-Java-RMI-class-loader-exploit-with-AdminServer
CVE ID: CVE-2015-9246 State: PUBLISHED Published: 2018-01-12T22:00:00 Last Updated: 2024-08-06T08:43:42.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Skybox Platform before 7.5.201. Remote Unauthenticated Code Execution exists via a WAR archive containing a JSP file. The WAR file is sent to /skyboxview-softwareupdate/services/CollectorSoftwareUpdate and the JSP file is reached at /opt/skyboxview/thirdparty/jboss/server/web/work/jboss.web/localhost. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20151210-0_Skybox_Platform_Multiple_Vulnerabilities_v10.txt
CVE ID: CVE-2015-9247 State: PUBLISHED Published: 2018-01-12T22:00:00 Last Updated: 2024-08-06T08:43:42.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Skybox Platform before 7.5.401. Reflected cross-site scripting vulnerabilities exist in /skyboxview/webservice/services/VersionRepositoryWebService via a soapenv:Body element, or in the status parameter to login.html. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20151210-0_Skybox_Platform_Multiple_Vulnerabilities_v10.txt
CVE ID: CVE-2015-9248 State: PUBLISHED Published: 2018-01-12T22:00:00 Last Updated: 2024-08-06T08:43:42.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Skybox Platform before 7.5.201. Stored cross-site scripting vulnerabilities exist in the title, Comments, or Description field to /skyboxview/webskybox/tickets in Change Manager. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20151210-0_Skybox_Platform_Multiple_Vulnerabilities_v10.txt
CVE ID: CVE-2015-9249 State: PUBLISHED Published: 2018-01-12T22:00:00 Last Updated: 2024-08-06T08:43:42.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Skybox Platform before 7.5.201. SQL Injection exists in /skyboxview/webservice/services/VersionWebService via a soapenv:Body element. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20151210-0_Skybox_Platform_Multiple_Vulnerabilities_v10.txt
CVE ID: CVE-2015-9250 State: PUBLISHED Published: 2018-01-12T22:00:00 Last Updated: 2024-08-06T08:43:42.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Skybox Platform before 7.5.201. Directory Traversal exists in /skyboxview/webskybox/attachmentdownload and /skyboxview/webskybox/filedownload via the tempFileName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20151210-0_Skybox_Platform_Multiple_Vulnerabilities_v10.txt
CVE ID: CVE-2015-9251 State: PUBLISHED Published: 2018-01-18T23:00:00 Last Updated: 2024-08-06T08:43:41.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105658 - https://seclists.org/bugtraq/2019/May/18 - http://seclists.org/fulldisclosure/2019/May/11 - http://seclists.org/fulldisclosure/2019/May/10 - http://seclists.org/fulldisclosure/2019/May/13 - https://lists.apache.org/thread.html/5
org/fulldisclosure/2019/May/10 - http://seclists.org/fulldisclosure/2019/May/13 - https://lists.apache.org/thread.html/54df3aeb4239b64b50b356f0ca6f986e3c4ca5b84c515dce077c7854%40%3Cuser.flink.apache.org%3E - https://lists.apache.org/thread.html/10f0f3aefd51444d1198c65f44ffdf2d78ca3359423dbc1c168c9731%40%3Cdev.flink.apache.org%3E - https://lists.apache.org/thread.html/17ff53f7999e74fbe3cc0ceb4e1c3b00b180b7c5afec8e978837bc49%40%3Cuser.flink.apache.org%3E - https://lists.apache.org/thread.html/52bafac05ad174000ea465fe275fd3cc7bd5c25535a7631c0bc9bfb2%40%3Cuser.flink.apache.org%3E - https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.a
3E - https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2020:0481 - https://access.redhat.com/errata/RHSA-2020:0729 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html - https://ww
dhat.com/errata/RHSA-2020:0729 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html - https://www.oracle.com/security-alerts/cpuapr2020.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://github.com/jquery/jquery/issues/2432 - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec126.pdf - https://github.com/jquery/jquery/pull/2588/commits/c254d308a7d3f1eac4d0b42837804cfffcba4bb2 - https://snyk.io/vuln/npm:jquery:20150627 - https://github.com/jquery/jquery/pull/2588
a7d3f1eac4d0b42837804cfffcba4bb2 - https://snyk.io/vuln/npm:jquery:20150627 - https://github.com/jquery/jquery/pull/2588 - https://ics-cert.us-cert.gov/advisories/ICSA-18-212-04 - https://github.com/jquery/jquery/commit/f60729f3903d17917dc351f3ac87794de379b0cc - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html - http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.tenable.com/
9-5072835.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.tenable.com/security/tns-2019-08 - https://www.oracle.com/security-alerts/cpujan2020.html - http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601 - https://security.netapp.com/advisory/ntap-20210108-0004/
CVE ID: CVE-2015-9252 State: PUBLISHED Published: 2018-02-13T19:00:00 Last Updated: 2024-08-06T08:43:42.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral() in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qpdf/qpdf/issues/51 - https://usn.ubuntu.com/3638-1/ - https://github.com/qpdf/qpdf/commit/701b518d5c56a1449825a3a37a716c58e05e1c3e
CVE ID: CVE-2015-9253 State: PUBLISHED Published: 2018-02-19T19:00:00 Last Updated: 2024-08-06T08:43:42.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master process restarts a child process in an endless loop when using program execution functions (e.g., passthru, exec, shell_exec, or system) with a non-blocking STDIN stream, causing this master process to consume 100% of the CPU, and consume disk space with a large volume of error logs, as demonstrated by an attack by a customer of a shared-hosting facility. Additional Analyst Notes: - CVE Program Container: Referenc
ted by an attack by a customer of a shared-hosting facility. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php/php-src/blob/PHP-7.1.20/NEWS#L20-L22 - https://bugs.php.net/bug.php?id=70185 - https://bugs.php.net/bug.php?id=75968 - https://usn.ubuntu.com/3766-1/ - https://bugs.php.net/bug.php?id=73342https://github.com/php/php-src/pull/3287 - https://github.com/php/php-src/commit/69dee5c732fe982c82edb17d0dbc3e79a47748d8 - https://www.futureweb.at/security/CVE-2015-9253/ - https://usn.ubuntu.com/4279-1/
CVE ID: CVE-2015-9254 State: PUBLISHED Published: 2018-02-20T06:00:00Z Last Updated: 2024-09-16T20:47:07.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Datto ALTO and SIRIS devices have a default VNC password. Additional Analyst Notes: - CVE Program Container: References: - http://www.information-paradox.net/2015/02/cve-2015-2081-multiple-vulnerabilities.html
CVE ID: CVE-2015-9255 State: PUBLISHED Published: 2018-02-20T06:00:00Z Last Updated: 2024-09-16T19:05:25.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.information-paradox.net/2015/02/cve-2015-2081-multiple-vulnerabilities.html
CVE ID: CVE-2015-9256 State: PUBLISHED Published: 2018-02-20T06:00:00Z Last Updated: 2024-09-17T02:26:45.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default. Additional Analyst Notes: - CVE Program Container: References: - http://www.information-paradox.net/2015/02/cve-2015-2081-multiple-vulnerabilities.html
CVE ID: CVE-2015-9257 State: PUBLISHED Published: 2018-03-24T20:00:00Z Last Updated: 2024-09-17T00:06:36.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: BMC Remedy Action Request (AR) System 9.0 before 9.0.00 Service Pack 2 hot fix 1 has persistent XSS. Additional Analyst Notes: - CVE Program Container: References: - https://docs.bmc.com/docs/display/public/ars9000/Cross+site+scripting+%28XSS%29+in+Remedy+9.0%2C+9.0+Service+Pack+1
CVE ID: CVE-2015-9258 State: PUBLISHED Published: 2018-03-31T21:00:00 Last Updated: 2024-08-06T08:43:41.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Docker Notary before 0.1, gotuf/signed/verify.go has a Signature Algorithm Not Matched to Key vulnerability. Because an attacker controls the field specifying the signature algorithm, they might (for example) be able to forge a signature by forcing a misinterpretation of an RSA-PSS key as Ed25519 elliptic-curve data. Additional Analyst Notes: - CVE Program Container: References: - https://docs.docker.com/notary/changelog/ - https://github.com/theupdateframework/notary/blob/master/docs/resources/ncc_docker_notary_audit_2015_
otary/changelog/ - https://github.com/theupdateframework/notary/blob/master/docs/resources/ncc_docker_notary_audit_2015_07_31.pdf
CVE ID: CVE-2015-9259 State: PUBLISHED Published: 2018-03-31T21:00:00 Last Updated: 2024-08-06T08:43:42.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Docker Notary before 0.1, the checkRoot function in gotuf/client/client.go does not check expiry of root.json files, despite a comment stating that it does. Even if a user creates a new root.json file after a key compromise, an attacker can produce update files referring to an old root.json file. Additional Analyst Notes: - CVE Program Container: References: - https://docs.docker.com/notary/changelog/ - https://github.com/theupdateframework/notary/blob/master/docs/resources/ncc_docker_notary_audit_2015_07_31.pdf
CVE ID: CVE-2015-9260 State: PUBLISHED Published: 2018-07-05T02:00:00 Last Updated: 2024-08-06T08:43:42.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in BEdita before 3.7.0. A cross-site scripting (XSS) attack occurs via a crafted pages/showObjects URI, as demonstrated by appending a payload to a pages/showObjects/2/0/0/leafs URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bedita/bedita/releases/tag/v3.7.0 - https://github.com/bedita/bedita/issues/755#issuecomment-148036760 - https://github.com/cybersecurityworks/Disclosed/issues/8 - https://cybersecurityworks.com/zerodays/cve-2015-9260-bedita.html
CVE ID: CVE-2015-9261 State: PUBLISHED Published: 2018-07-26T19:00:00 Last Updated: 2024-08-06T08:43:42.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file. Additional Analyst Notes: - CVE Program Container: References: - https://git.busybox.net/busybox/commit/?id=1de25a6e87e0e627aa34298105a3d17c60a1f44e - https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html - http://www.openwall.com/lists/oss-security/2015/10/25/3 - https://bugs.debian.org/803097 - https://usn.ubuntu.co
.html - http://www.openwall.com/lists/oss-security/2015/10/25/3 - https://bugs.debian.org/803097 - https://usn.ubuntu.com/3935-1/ - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html - http://seclists.org/fulldisclosure/2019/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html - http://seclists.org/fulldisclosure/2020/Aug/20 - https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html - http://seclists.org/fulldisclosure
re/2020/Aug/20 - https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html - http://seclists.org/fulldisclosure/2022/Jun/36 - http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html