Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-17433 State: PUBLISHED Published: 2018-09-24T14:00:00 Last Updated: 2024-08-05T10:47:04.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow in ReadGifImageDesc() in gifread.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln8#heap-overflow-in-readgifimagedesc
CVE ID: CVE-2018-17434 State: PUBLISHED Published: 2018-09-24T00:00:00 Last Updated: 2024-08-05T10:47:04.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SIGFPE signal is raised in the function apply_filters() of h5repack_filters.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln4#divided-by-zero---poc_apply_filters_h5repack_filters - https://lists.debian.org/debian-lts-announce/2023/08/msg00009.htm
divided-by-zero---poc_apply_filters_h5repack_filters - https://lists.debian.org/debian-lts-announce/2023/08/msg00009.html
CVE ID: CVE-2018-17435 State: PUBLISHED Published: 2018-09-24T14:00:00 Last Updated: 2024-08-05T10:47:04.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer over-read in H5O_attr_decode() in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting an HDF file to GIF file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln7#heap-overflow-in-h5o_attr_decode
CVE ID: CVE-2018-17436 State: PUBLISHED Published: 2018-09-24T14:00:00 Last Updated: 2024-08-05T10:47:04.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: ReadCode() in decompress.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (invalid write access) via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln8#invalid-write-memory-access-in-decompressc
CVE ID: CVE-2018-17437 State: PUBLISHED Published: 2018-09-24T00:00:00 Last Updated: 2024-08-05T10:47:04.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln5#memory-leak-in-h5o_dtype_decode_helper - https://lists.debian.org/debian-lts-announce/2023/08/msg00009.html
CVE ID: CVE-2018-17438 State: PUBLISHED Published: 2018-09-24T14:00:00 Last Updated: 2024-08-05T10:47:04.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln4#divided-by-zero---poc_h5d__select_io_h5dselect
CVE ID: CVE-2018-17439 State: PUBLISHED Published: 2018-09-24T14:00:00 Last Updated: 2024-08-05T10:47:04.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the HDF HDF5 1.10.3 library. There is a stack-based buffer overflow in the function H5S_extent_get_dims() in H5S.c. Specifically, this issue occurs while converting an HDF5 file to a GIF file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SegfaultMasters/covering360/tree/master/HDF5/vuln5#stack-overflow-in-h5s_extent_get_dims
CVE ID: CVE-2018-17440 State: PUBLISHED Published: 2018-10-08T16:00:00 Last Updated: 2024-08-05T10:47:04.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. They expose an FTP server that serves by default on port 9000 and has hardcoded credentials (admin, admin). Taking advantage of this, a remote unauthenticated attacker could execute arbitrary PHP code by uploading any file in the web root directory and then accessing it via a request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45533/ - https://www.secureauth.com/labs/advisories/d-link-cent
ainer: References: - https://www.exploit-db.com/exploits/45533/ - https://www.secureauth.com/labs/advisories/d-link-central-wifimanager-software-controller-multiple-vulnerabilities - http://seclists.org/fulldisclosure/2018/Oct/11 - https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10092
CVE ID: CVE-2018-17441 State: PUBLISHED Published: 2018-10-08T16:00:00 Last Updated: 2024-08-05T10:47:04.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'username' parameter of the addUser endpoint is vulnerable to stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45533/ - https://www.secureauth.com/labs/advisories/d-link-central-wifimanager-software-controller-multiple-vulnerabilities - http://seclists.org/fulldisclosure/2018/Oct/11 - https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10092
CVE ID: CVE-2018-17442 State: PUBLISHED Published: 2018-10-08T16:00:00 Last Updated: 2024-08-05T10:47:04.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. An unrestricted file upload vulnerability in the onUploadLogPic endpoint allows remote authenticated users to execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45533/ - https://www.secureauth.com/labs/advisories/d-link-central-wifimanager-software-controller-multiple-vulnerabilities - http://seclists.org/fulldisclosure/2018/Oct/11 - https://securityadvisories.dlink.com
troller-multiple-vulnerabilities - http://seclists.org/fulldisclosure/2018/Oct/11 - https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10092
CVE ID: CVE-2018-17443 State: PUBLISHED Published: 2018-10-08T16:00:00 Last Updated: 2024-08-05T10:47:04.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'sitename' parameter of the UpdateSite endpoint is vulnerable to stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45533/ - https://www.secureauth.com/labs/advisories/d-link-central-wifimanager-software-controller-multiple-vulnerabilities - http://seclists.org/fulldisclosure/2018/Oct/11 - https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10092
CVE ID: CVE-2018-17444 State: PUBLISHED Published: 2018-10-23T21:00:00 Last Updated: 2024-08-05T10:47:04.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX236992 - http://www.securityfocus.com/bid/105711
CVE ID: CVE-2018-17445 State: PUBLISHED Published: 2018-10-23T21:00:00 Last Updated: 2024-08-05T10:47:04.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX236992 - http://www.securityfocus.com/bid/105711
CVE ID: CVE-2018-17446 State: PUBLISHED Published: 2018-10-23T21:00:00 Last Updated: 2024-08-05T10:47:04.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX236992 - http://www.securityfocus.com/bid/105711
CVE ID: CVE-2018-17447 State: PUBLISHED Published: 2018-10-23T21:00:00 Last Updated: 2024-08-05T10:47:04.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX236992 - http://www.securityfocus.com/bid/105711
CVE ID: CVE-2018-17448 State: PUBLISHED Published: 2018-10-23T21:00:00 Last Updated: 2024-08-05T10:47:04.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX236992 - http://www.securityfocus.com/bid/105711
CVE ID: CVE-2018-17449 State: PUBLISHED Published: 2023-04-15T00:00:00.000Z Last Updated: 2025-02-07T16:46:22.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Remote attackers could obtain sensitive information about issues, comments, and project titles via events API insecure direct object reference. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2018/10/01/security-release-gitlab-11-dot-3-dot-1-released/
CVE ID: CVE-2018-17450 State: PUBLISHED Published: 2023-04-15T00:00:00.000Z Last Updated: 2025-02-06T20:38:05.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Server-Side Request Forgery (SSRF) via the Kubernetes integration, leading (for example) to disclosure of a GCP service token. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2018/10/01/security-release-gitlab-11-dot-3-dot-1-released/
CVE ID: CVE-2018-17451 State: PUBLISHED Published: 2023-04-15T00:00:00.000Z Last Updated: 2025-02-06T20:36:43.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Cross Site Request Forgery (CSRF) in the Slack integration for issuing slash commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2018/10/01/security-release-gitlab-11-dot-3-dot-1-released/
CVE ID: CVE-2018-17452 State: PUBLISHED Published: 2023-04-15T00:00:00.000Z Last Updated: 2025-02-06T20:29:19.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Server-Side Request Forgery (SSRF) via a loopback address to the validate_localhost function in url_blocker.rb. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2018/10/01/security-release-gitlab-11-dot-3-dot-1-released/
CVE ID: CVE-2018-17453 State: PUBLISHED Published: 2023-04-15T00:00:00.000Z Last Updated: 2025-02-06T20:25:19.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers may have been able to obtain sensitive access-token data from Sentry logs via the GRPC::Unknown exception. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2018/10/01/security-release-gitlab-11-dot-3-dot-1-released/
CVE ID: CVE-2018-17454 State: PUBLISHED Published: 2023-04-15T00:00:00.000Z Last Updated: 2025-02-06T20:24:19.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS on the issue details screen. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2018/10/01/security-release-gitlab-11-dot-3-dot-1-released/
CVE ID: CVE-2018-17455 State: PUBLISHED Published: 2023-04-15T00:00:00.000Z Last Updated: 2025-02-06T20:18:51.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers could obtain sensitive information about group names, avatars, LDAP settings, and descriptions via an insecure direct object reference to the "merge request approvals" feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2018/10/01/security-release-gitlab-11-dot-3-do
.gitlab.com/blog/categories/releases/ - https://about.gitlab.com/releases/2018/10/01/security-release-gitlab-11-dot-3-dot-1-released/
CVE ID: CVE-2018-17456 State: PUBLISHED Published: 2018-10-06T14:00:00 Last Updated: 2024-08-05T10:47:04.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/45631/ - http://www.securityfocus.com/bid/105523 - http://www.securitytracker.com/id/1041811 - https://www.debian.org/security/2018/dsa-
www.securityfocus.com/bid/105523 - http://www.securitytracker.com/id/1041811 - https://www.debian.org/security/2018/dsa-4311 - https://access.redhat.com/errata/RHSA-2018:3505 - https://github.com/git/git/commit/1a7fd1fb2998002da6e9ff2ee46e1bdd25ee8404 - https://www.exploit-db.com/exploits/45548/ - https://access.redhat.com/errata/RHSA-2018:3541 - https://github.com/git/git/commit/a124133e1e6ab5c7a9fef6d0e6bcb084e3455b46 - https://access.redhat.com/errata/RHSA-2018:3408 - https://marc.info/?l=git&m=153875888916397&w=2 - https://www.openwall.com/lists/oss-security/2018/10/06/3 - https://usn.ubuntu.com/3791-1/ - https://seclists.org/bugtraq/2019/Mar/30 - http://www.securityfocus.com/bid/107511
3 - https://usn.ubuntu.com/3791-1/ - https://seclists.org/bugtraq/2019/Mar/30 - http://www.securityfocus.com/bid/107511 - http://packetstormsecurity.com/files/152173/Sourcetree-Git-Arbitrary-Code-Execution-URL-Handling.html - https://access.redhat.com/errata/RHSA-2020:0316 - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html
CVE ID: CVE-2018-17457 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:47:04.878Z Vendors: Google Products: Chrome Problem Types: Object lifecycle issue Description: An object lifecycle issue in Blink could lead to a use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/848306 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html
CVE ID: CVE-2018-17458 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:47:04.979Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: An improper update of the WebAssembly dispatch table in WebAssembly in Google Chrome prior to 69.0.3497.92 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/875322 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop_11.html - https://access.redhat.com/errata/RHSA-2018:2818
CVE ID: CVE-2018-17459 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:47:04.943Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Incorrect handling of clicks in the omnibox in Navigation in Google Chrome prior to 69.0.3497.92 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/880759 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop_11.html - https://access.redhat.com/errata/RHSA-2018:2818
CVE ID: CVE-2018-17460 State: PUBLISHED Published: 2019-06-27T16:13:41 Last Updated: 2024-08-05T10:47:04.941Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Insufficient data validation in filesystem URIs in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://crbug.com/696446
CVE ID: CVE-2018-17461 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:47:04.999Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: An out of bounds read in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://crbug.com/874359
CVE ID: CVE-2018-17462 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T10:47:04.982Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Incorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/888926 - https://www.debian.org/security/2018/dsa-4330 - https://access.redhat.com/errata/RHSA-2018:3004 - https://security.gentoo.org/glsa/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666
CVE ID: CVE-2018-17463 State: PUBLISHED Published: 2018-11-14T15:00:00.000Z Last Updated: 2025-10-21T23:45:47.003Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.debian.org/security/2018/dsa-4330 - https://crbug.com/888923 - https://access.redhat.com/errata/RHSA-2018:3004 - https://security.gentoo.org/glsa/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-up
2018:3004 - https://security.gentoo.org/glsa/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666 - http://packetstormsecurity.com/files/156640/Google-Chrome-67-68-69-Object.create-Type-Confusion.html
CVE ID: CVE-2018-17464 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T10:47:04.996Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4330 - https://access.redhat.com/errata/RHSA-2018:3004 - https://security.gentoo.org/glsa/201811-10 - https://crbug.com/887273 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html
811-10 - https://crbug.com/887273 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666
CVE ID: CVE-2018-17465 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T10:47:04.877Z Vendors: Google Products: Chrome Problem Types: Uninitialized Use Description: Incorrect implementation of object trimming in V8 in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4330 - https://crbug.com/870226 - https://access.redhat.com/errata/RHSA-2018:3004 - https://security.gentoo.org/glsa/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://w
too.org/glsa/201811-10 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666
CVE ID: CVE-2018-17466 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T10:47:04.973Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/12/msg00002.html - https://access.redhat.com/errata/RHSA-2018:3833 - https://access.redhat.com/errata/RHSA-2018:3831 - https://www.debian.org/security/2019/dsa-4362 - https://www.debian.org/security/2018/dsa-4330 - https://usn.ub
18:3831 - https://www.debian.org/security/2019/dsa-4362 - https://www.debian.org/security/2018/dsa-4330 - https://usn.ubuntu.com/3844-1/ - http://www.securityfocus.com/bid/106168 - https://access.redhat.com/errata/RHSA-2019:0159 - https://access.redhat.com/errata/RHSA-2018:3004 - https://www.debian.org/security/2018/dsa-4354 - https://security.gentoo.org/glsa/201811-10 - https://usn.ubuntu.com/3868-1/ - https://crbug.com/880906 - https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/105666 - https://access.redhat.com/errata/RHSA-2019:0160