Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-20169 State: PUBLISHED Published: 2018-12-17T06:00:00 Last Updated: 2024-08-05T11:51:19.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3879-2/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=704620afc70cf47abb9d6a1a57f3825d2bca49cf - https://usn.ubuntu.com/3879-1/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.9 - https://git
d2bca49cf - https://usn.ubuntu.com/3879-1/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.9 - https://github.com/torvalds/linux/commit/704620afc70cf47abb9d6a1a57f3825d2bca49cf - https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/ - https://access.redhat.com/errata/RHSA-2019:3309 - https://access.redhat.com/errata/RHSA-2019:3517
CVE ID: CVE-2018-20170 State: PUBLISHED Published: 2018-12-17T06:00:00 Last Updated: 2024-11-14T20:09:49.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Keystone through 14.0.1 has a user enumeration vulnerability because invalid usernames have much faster responses than valid ones for a POST /v3/auth/tokens request. NOTE: the vendor's position is that this is a hardening opportunity, and not necessarily an issue that should have an OpenStack Security Advisory Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.launchpad.net/keystone/+bug/1795800
CVE ID: CVE-2018-20171 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:51:19.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Nagios XI before 5.5.8. The url parameter of rss_dashlet/magpierss/scripts/magpie_simple.php is not filtered, resulting in an XSS vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://www.seebug.org/vuldb/ssvid-97713
CVE ID: CVE-2018-20172 State: PUBLISHED Published: 2018-12-17T15:00:00 Last Updated: 2024-08-05T11:51:19.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Nagios XI before 5.5.8. The rss_url parameter of rss_dashlet/magpierss/scripts/magpie_slashbox.php is not filtered, resulting in an XSS vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://www.seebug.org/vuldb/ssvid-97714
CVE ID: CVE-2018-20173 State: PUBLISHED Published: 2018-12-17T08:00:00Z Last Updated: 2024-09-16T16:38:57.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/network-monitoring/help/read-me.html
CVE ID: CVE-2018-20174 State: PUBLISHED Published: 2019-03-15T18:00:00 Last Updated: 2024-08-05T11:51:19.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function ui_clip_handle_data() that results in an information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://li
point.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-20175 State: PUBLISHED Published: 2019-03-15T18:00:00 Last Updated: 2024-08-05T11:51:19.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: rdesktop versions up to and including v1.8.3 contains several Integer Signedness errors that lead to Out-Of-Bounds Reads in the file mcs.c and result in a Denial of Service (segfault). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/
/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-20176 State: PUBLISHED Published: 2019-03-15T18:00:00 Last Updated: 2024-08-05T11:58:18.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: rdesktop versions up to and including v1.8.3 contain several Out-Of- Bounds Reads in the file secure.c that result in a Denial of Service (segfault). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://li
CVE ID: CVE-2018-20177 State: PUBLISHED Published: 2019-03-15T18:00:00 Last Updated: 2024-08-05T11:58:18.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on
65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-20178 State: PUBLISHED Published: 2019-03-15T18:00:00 Last Updated: 2024-08-05T11:58:18.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in the function process_demand_active() that results in a Denial of Service (segfault). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394
esearch.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-20179 State: PUBLISHED Published: 2019-03-15T18:00:00 Last Updated: 2024-08-05T11:58:18.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspci_process() and results in memory corruption and probably even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-o
b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-20180 State: PUBLISHED Published: 2019-03-15T18:00:00 Last Updated: 2024-08-05T11:58:18.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function rdpsnddbg_process() and results in memory corruption and probably even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-executi
5163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-20181 State: PUBLISHED Published: 2019-03-15T18:00:00 Last Updated: 2024-08-05T11:58:18.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function seamless_process() and results in memory corruption and probably even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-executio
163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-20182 State: PUBLISHED Published: 2019-03-15T18:00:00 Last Updated: 2024-08-05T11:58:18.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: rdesktop versions up to and including v1.8.3 contain a Buffer Overflow over the global variables in the function seamless_process_line() that results in memory corruption and probably even a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106938 - https://github.com/rdesktop/rdesktop/commit/4dca546d04321a610c1835010b5dad85163b65e1 - https://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clien
ps://security.gentoo.org/glsa/201903-06 - https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/ - https://www.debian.org/security/2019/dsa-4394 - https://lists.debian.org/debian-lts-announce/2019/02/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00040.html
CVE ID: CVE-2018-20184 State: PUBLISHED Published: 2018-12-17T17:00:00 Last Updated: 2024-08-05T11:58:18.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed the pixel-dimension restrictions of the TGA specification. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106229 - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/15d1b5fd003b - https://lists.debian.org/debian-lts-announce/2018/
9 - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/15d1b5fd003b - https://lists.debian.org/debian-lts-announce/2018/12/msg00018.html - https://sourceforge.net/p/graphicsmagick/bugs/583/ - https://usn.ubuntu.com/4207-1/ - https://www.debian.org/security/2020/dsa-4640
CVE ID: CVE-2018-20185 State: PUBLISHED Published: 2018-12-17T17:00:00 Last Updated: 2024-08-05T11:58:18.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits. Additional Analyst Notes: - CVE Program Container: References: - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/648e3977a293 - https://sourceforge.net/p/graphicsmagick/bugs/582/ - http://www.securityfocus.com/bid/106229 - https:
rev/648e3977a293 - https://sourceforge.net/p/graphicsmagick/bugs/582/ - http://www.securityfocus.com/bid/106229 - https://lists.debian.org/debian-lts-announce/2018/12/msg00018.html - https://usn.ubuntu.com/4207-1/ - https://www.debian.org/security/2020/dsa-4640
CVE ID: CVE-2018-20186 State: PUBLISHED Published: 2018-12-17T17:00:00 Last Updated: 2024-08-05T11:58:18.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bento4 1.5.1-627. AP4_Sample::ReadData in Core/Ap4Sample.cpp allows attackers to trigger an attempted excessive memory allocation, related to AP4_DataBuffer::SetDataSize and AP4_DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/342
CVE ID: CVE-2018-20187 State: PUBLISHED Published: 2019-03-08T19:00:00 Last Updated: 2024-08-05T11:58:18.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: A side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely measuring the time taken for ECC key generation may be able to derive information about the high bits of the secret key, as the function to derive the public point from the secret scalar uses an unblinded Montgomery ladder whose loop iteration count depends on the bitlength of the secret. This issue affects only key generation, not ECDSA signatures or ECDH key agreement. Additional Analyst Notes: - CVE Program Container: References: -
eneration, not ECDSA signatures or ECDH key agreement. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/crocs-muni/ECTester - https://botan.randombit.net/news.html - https://botan.randombit.net/security.html
CVE ID: CVE-2018-20188 State: PUBLISHED Published: 2018-12-17T19:00:00Z Last Updated: 2024-09-16T18:43:46.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/m3lon/CVE/blob/master/CSRF/FUELCMS%20CSRF.md
CVE ID: CVE-2018-20189 State: PUBLISHED Published: 2018-12-17T20:00:00 Last Updated: 2024-08-05T11:58:18.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping (which is not available beyond 8-bits/sample), and therefore lacks indexes initialization. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106227 - https://sourceforge.net/p/graphicsmagick/bugs/585/ - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/648e2b406589 -
- https://sourceforge.net/p/graphicsmagick/bugs/585/ - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/648e2b406589 - https://lists.debian.org/debian-lts-announce/2018/12/msg00018.html - https://usn.ubuntu.com/4207-1/ - https://www.debian.org/security/2020/dsa-4640
CVE ID: CVE-2018-20190 State: PUBLISHED Published: 2018-12-17T20:00:00 Last Updated: 2024-08-05T11:58:18.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass::Supports_Operator*) in eval.cpp may cause a Denial of Service (application crash) via a crafted sass input file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106232 - https://github.com/sass/libsass/issues/2786 - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html - http://lists.opensuse
19-07/msg00047.html - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE ID: CVE-2018-20191 State: PUBLISHED Published: 2018-12-20T22:00:00 Last Updated: 2024-08-05T11:58:18.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/rdma/vmw/pvrdma_main.c in QEMU does not implement a read operation (such as uar_read by analogy to uar_write), which allows attackers to cause a denial of service (NULL pointer dereference). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106276 - http://www.openwall.com/lists/oss-security/2018/12/18/1 - https://lists.gnu.org/archive/html/qemu-devel/2018-12/msg03066.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CGCFI
2/msg03066.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CGCFIFSIWUREEQQOZDZFBYKWZHXCWBZN/ - https://usn.ubuntu.com/3923-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJMTVGDLA654HNCDGLCUEIP36SNJEKK7/
CVE ID: CVE-2018-20193 State: PUBLISHED Published: 2018-12-21T23:00:00 Last Updated: 2024-08-05T11:58:18.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Secure Access SA Series SSL VPN products (originally developed by Juniper Networks but now sold and supported by Pulse Secure, LLC) allow privilege escalation, as demonstrated by Secure Access SSL VPN SA-4000 5.1R5 (build 9627) 4.2 Release (build 7631). This occurs because appropriate controls are not performed. Specifically, it is possible for a readonly user to change the administrator user password by making a local copy of the /dana-admin/user/update.cgi page, changing the "user" value, and saving the changes. Add
d by making a local copy of the /dana-admin/user/update.cgi page, changing the "user" value, and saving the changes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106289 - http://seclists.org/fulldisclosure/2018/Dec/37
CVE ID: CVE-2018-20194 State: PUBLISHED Published: 2018-12-18T01:00:00 Last Updated: 2024-08-05T11:58:18.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because limiting the additional noise energy level is mishandled for the G_max <= G case. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/knik0/faad2/issues/21 - https://lists.debian.org/debian-lts-announce/2019/05/msg00022.html - https://ww
tps://github.com/knik0/faad2/issues/21 - https://lists.debian.org/debian-lts-announce/2019/05/msg00022.html - https://www.debian.org/security/2019/dsa-4522 - https://seclists.org/bugtraq/2019/Sep/28 - https://security.gentoo.org/glsa/202006-17
CVE ID: CVE-2018-20195 State: PUBLISHED Published: 2018-12-18T01:00:00 Last Updated: 2024-08-05T11:58:18.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/knik0/faad2/issues/25 - https://www.debian.org/security/2019/dsa-4522 - https://seclists.org/bugtraq/2019/Sep/28 - https://security.gentoo.org/glsa/202006-17
CVE ID: CVE-2018-20196 State: PUBLISHED Published: 2018-12-18T01:00:00 Last Updated: 2024-08-05T11:58:18.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack-based buffer overflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because the S_M array is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/knik0/faad2/issues/19 - https://lists.debian.org/debian-lts-announce/2019/08/msg00033.html - https://security.gentoo.org/glsa/202006-17 - https://www.debian.
.debian.org/debian-lts-announce/2019/08/msg00033.html - https://security.gentoo.org/glsa/202006-17 - https://www.debian.org/security/2022/dsa-5109
CVE ID: CVE-2018-20197 State: PUBLISHED Published: 2018-12-18T01:00:00 Last Updated: 2024-08-05T11:58:18.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack-based buffer underflow in the third instance of the calculate_gain function in libfaad/sbr_hfadj.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. A crafted input will lead to a denial of service or possibly unspecified other impact because limiting the additional noise energy level is mishandled for the G_max > G case. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/knik0/faad2/issues/20 - https://lists.debian.org/debian-lts-announce/2019/05/msg00022.html - https://www
ps://github.com/knik0/faad2/issues/20 - https://lists.debian.org/debian-lts-announce/2019/05/msg00022.html - https://www.debian.org/security/2019/dsa-4522 - https://seclists.org/bugtraq/2019/Sep/28 - https://security.gentoo.org/glsa/202006-17
CVE ID: CVE-2018-20198 State: PUBLISHED Published: 2018-12-18T01:00:00 Last Updated: 2024-08-05T11:58:18.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the LONG_START_SEQUENCE case. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/knik0/faad2/issues/23 - https://lists.debian.org/debian-lts-announce/2019/05/msg00022.html - https://www.debian.org/security/2019/ds
issues/23 - https://lists.debian.org/debian-lts-announce/2019/05/msg00022.html - https://www.debian.org/security/2019/dsa-4522 - https://seclists.org/bugtraq/2019/Sep/28 - https://security.gentoo.org/glsa/202006-17