Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
y. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4177 - http://www.securityfocus.com/bid/101215 - https://www.debian.org/security/2018/dsa-4184 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0394
CVE ID: CVE-2017-2888 State: PUBLISHED Published: 2017-10-11T18:00:00Z Last Updated: 2024-09-16T20:17:03.901Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Talos Products: Simple Direct Media Problem Types: Remote code execution Description: An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http:/
rafted image file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101215 - https://usn.ubuntu.com/4143-1/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00031.html - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0395
CVE ID: CVE-2017-2889 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-17T01:25:36.243Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Circle Media Products: Circle Problem Types: authentication bypass Description: An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A large amount of simultaneous TCP connections causes the APID daemon to repeatedly fork, causing the daemon to run out of memory and trigger a device reboot. An attacker needs network connectivity to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http
ivity to the device to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0396
CVE ID: CVE-2017-2890 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-16T16:28:53.784Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: command injection Description: An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0397
CVE ID: CVE-2017-2891 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-16T22:52:04.709Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Cesanta Products: Mongoose Problem Types: remote code execution Description: An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CGI target can cause a reuse of previously freed pointer potentially resulting in remote code execution. An attacker needs to send this HTTP request over the network to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosint
ork to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0398
CVE ID: CVE-2017-2892 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-16T23:51:31.977Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Cesanta Products: Mongoose Problem Types: remote code execution Description: An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT packet can cause an arbitrary out-of-bounds memory read and write potentially resulting in information disclosure, denial of service and remote code execution. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability. Additional Ana
An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0399
CVE ID: CVE-2017-2893 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-17T00:51:27.255Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Cesanta Products: Mongoose Problem Types: denial of service Description: An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. An MQTT SUBSCRIBE packet can cause a NULL pointer dereference leading to server crash and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.
gger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0400
CVE ID: CVE-2017-2894 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-17T02:16:55.574Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Cesanta Products: Mongoose Problem Types: remote code execution Description: An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause a stack buffer overflow resulting in remote code execution. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintel
k to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0401
CVE ID: CVE-2017-2895 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-17T04:03:40.144Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: Cesanta Products: Mongoose Problem Types: denial of service Description: An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability. Additional Analyst Notes: - CVE Program Conta
cially crafted MQTT packet over the network to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0402
CVE ID: CVE-2017-2896 State: PUBLISHED Published: 2017-11-20T22:00:00Z Last Updated: 2024-09-16T23:50:50.374Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: libxls Products: libxls Problem Types: remote code execution Description: An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4173 - https://security.gentoo.org/glsa/202003-64 - https:/
iner: References: - https://www.debian.org/security/2018/dsa-4173 - https://security.gentoo.org/glsa/202003-64 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0403
CVE ID: CVE-2017-2897 State: PUBLISHED Published: 2017-11-20T22:00:00Z Last Updated: 2024-09-16T20:17:24.866Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: libxls Products: libxls Problem Types: remote code execution Description: An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4173 - https://security.gentoo.org/glsa/202003-64 - https://www.tal
ferences: - https://www.debian.org/security/2018/dsa-4173 - https://security.gentoo.org/glsa/202003-64 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0404
CVE ID: CVE-2017-2898 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-16T18:28:17.364Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: arbitrary code execution Description: An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets can cause an unsigned firmware to be installed in the device resulting in arbitrary code execution. An attacker can send a series of packets to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintellige
trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0405
CVE ID: CVE-2017-2899 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T19:50:46.060Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability. Additional Analyst Note
nce a user to use the file as an asset via the sequencer in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0406
CVE ID: CVE-2017-2900 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T19:14:59.045Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.png' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability. Additional Analyst Notes
ce a user to use the file as an asset via the sequencer in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0407
CVE ID: CVE-2017-2901 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T19:00:46.815Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.iris' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability. Additional Analyst Not
ince a user to use the file as an asset via the sequencer in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0408
CVE ID: CVE-2017-2902 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-17T03:38:59.475Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability. Additional Analyst Notes
ce a user to use the file as an asset via the sequencer in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0409
CVE ID: CVE-2017-2903 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T18:12:45.760Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability. Additional Analyst Notes
ce a user to use the file as an asset via the sequencer in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0410
CVE ID: CVE-2017-2904 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T22:20:57.703Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.hdr' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability. Additional Analyst
onvince a user to use the file as an asset via the sequencer in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0411
CVE ID: CVE-2017-2905 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T22:25:11.124Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.bmp' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability. Additional Analyst Notes
ce a user to use the file as an asset via the sequencer in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0412
CVE ID: CVE-2017-2906 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-17T03:23:35.210Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset in order to trigger this vulnerability. Additional Analyst Notes: - CVE Prog
convince a user to use the file as an asset in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0413
CVE ID: CVE-2017-2907 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T22:36:47.730Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c. A specially created '.avi' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset in order to trigger this vulnerability. Additional Analyst Notes: - CVE Prog
convince a user to use the file as an asset in order to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0414
CVE ID: CVE-2017-2908 State: PUBLISHED Published: 2018-04-24T19:00:00Z Last Updated: 2024-09-16T20:36:50.959Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Blender Products: Blender Problem Types: buffer overflow Description: An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to render the thumbnail for the file while in the File->Open dialog. Additional Analyst Notes: - CVE Program Con
a user to render the thumbnail for the file while in the File->Open dialog. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/08/msg00011.html - https://www.debian.org/security/2018/dsa-4248 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0415
CVE ID: CVE-2017-2909 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-17T03:17:47.948Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Cesanta Products: Mongoose Problem Types: denial of service Description: An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0416
CVE ID: CVE-2017-2910 State: PUBLISHED Published: 2020-12-02T17:26:55 Last Updated: 2024-08-05T14:09:17.514Z Vendors: n/a Products: libxls Problem Types: out of bounds write Description: An exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2017-0417
CVE ID: CVE-2017-2911 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-16T20:01:23.639Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: SSL certificate Description: An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the rclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulner
vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0418
CVE ID: CVE-2017-2912 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-16T17:03:25.593Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Circle Media Products: Circle Problem Types: authentication bypass Description: An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/v
this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0419
CVE ID: CVE-2017-2913 State: PUBLISHED Published: 2017-11-07T16:00:00Z Last Updated: 2024-09-16T22:41:16.454Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Circle Media Products: Circle Problem Types: authentication bypass Description: An exploitable vulnerability exists in the filtering functionality of Circle with Disney. SSL certificates for specific domain names can cause the Bluecoat library to accept a different certificate than intended. An attacker can host an HTTPS server with this certificate to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-
nal Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0420