deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-15374
Published: 2017-10-16
Description: Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to provoke persistent execution in the customer and orders section of the backend. The execution occurs in the administrator backend listing when processing a preview of the customers (kunden) or orders (bestellungen). The injection can be performed interactively via user registration or by manipulation of the order information inputs. The issue can be exploited by low privileged user accounts against higher privileged (admin or moderator) accounts.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/43849/; https://www.vulnerability-lab.com/get_content.php?id=1922; https://www.exploit-db.com/exploits/43849/
CVE: CVE-2017-15375
Published: 2017-10-16
Description: Multiple client-side cross site scripting vulnerabilities have been discovered in the WpJobBoard v4.5.1 web-application for WordPress. The vulnerabilities are located in the `query` and `id` parameters of the `wpjb-email`, `wpjb-job`, `wpjb-application`, and `wpjb-membership` modules. Remote attackers are able to inject malicious script code to hijack admin session credentials via the backend, or to manipulate the backend on client-side performed requests. The attack vector is non-persistent and the request method to inject is GET. The attacker does not need a privileged user account to perform a successful exploitation.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.vulnerability-lab.com/get_content.php?id=1941; https://www.vulnerability-lab.com/get_content.php?id=1941
CVE: CVE-2017-15376
Published: 2017-10-16
Description: The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, which allows remote attackers to execute arbitrary commands via TCP port 23.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://www.vulnerability-lab.com/get_content.php?id=2097; https://www.vulnerability-lab.com/get_content.php?id=2097
CVE: CVE-2014-0029
Published: 2017-10-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in the SAM web application in Red Hat katello-headpin allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=1059433; https://bugzilla.redhat.com/show_bug.cgi?id=1059433
CVE: CVE-2016-8734
Published: 2017-10-16
Description: Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack caused by exponential XML entity expansion. The attack can cause the targeted process to consume an excessive amount of CPU resources or memory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://www.debian.org/security/2017/dsa-3932; http://www.securityfocus.com/bid/94588; http://www.securitytracker.com/id/1037361
CVE: CVE-2014-3702
Published: 2017-10-16
Description: Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot dot) the session parameter.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://bugzilla.redhat.com/show_bug.cgi?id=1153470; https://github.com/redhat-cip/edeploy/issues/231; https://bugzilla.redhat.com/show_bug.cgi?id=1153470
CVE: CVE-2014-7851
Published: 2017-10-16
Description: oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users with knowledge of another user's session data to gain that user's privileges by replacing their session token with that of another user.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: https://bugzilla.redhat.com/show_bug.cgi?id=1161730; https://bugzilla.redhat.com/show_bug.cgi?id=1165311; https://bugzilla.redhat.com/show_bug.cgi?id=1161730
CVE: CVE-2014-8087
Published: 2017-10-16
Description: Cross-site scripting (XSS) vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline action to ajax/ph_save.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://g0blin.co.uk/cve-2014-8087/; https://wordpress.org/plugins/post-highlights/#developers; https://wpvulndb.com/vulnerabilities/8240
CVE: CVE-2014-8621
Published: 2017-10-16
Description: SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL commands via the sl_custom_field parameter to sl-xml.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://g0blin.co.uk/cve-2014-8621/; https://wpvulndb.com/vulnerabilities/8241; https://g0blin.co.uk/cve-2014-8621/
CVE: CVE-2014-9147
Published: 2017-10-16
Description: Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup file in .backup/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/131165/FiyoCMS-2.0.1.8-XSS-SQL-Injection-URL-Bypass.html; http://www.securityfocus.com/bid/73437; https://www.exploit-db.com/exploits/36581/
CVE: CVE-2014-9148
Published: 2017-10-16
Description: Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the (1) "Install and Update" or (2) Backup super administrator function via the view parameter in a direct request to fiyo/dapur.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://packetstormsecurity.com/files/131165/FiyoCMS-2.0.1.8-XSS-SQL-Injection-URL-Bypass.html; http://www.securityfocus.com/bid/73437; https://www.exploit-db.com/exploits/36581/
CVE: CVE-2016-4461
Published: 2017-10-16
Description: Apache Struts 2.x before 2.3.29 allows remote attackers to execute arbitrary code via a "%{}" sequence in a tag attribute, aka forced double OGNL evaluation.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0785.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/91277; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://struts.apache.org/docs/s2-036.html
CVE: CVE-2017-14952
Published: 2017-10-16
Description: Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: http://bugs.icu-project.org/trac/changeset/40324/trunk/icu4c/source/i18n/zonemeta.cpp; http://www.sourcebrella.com/blog/double-free-vulnerability-international-components-unicode-icu/; https://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html
CVE: CVE-2017-15293
Published: 2017-10-16
Description: Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/100713; https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/; https://erpscan.io/advisories/erpscan-17-032-sap-pos-missing-authentication-xpressserver/
CVE: CVE-2017-15294
Published: 2017-10-16
Description: The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99532; https://blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017/; https://erpscan.io/advisories/erpscan-17-035-xss-crm-administration-console-java/
CVE: CVE-2017-15295
Published: 2017-10-16
Description: Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017/; https://erpscan.io/advisories/erpscan-17-033-sap-pos-missing-authentication-xpressserver/; https://erpscan.io/research/hacking-sap-pos/
CVE: CVE-2017-15296
Published: 2017-10-16
Description: The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017/; https://erpscan.io/advisories/erpscan-17-036-csrf-sap-java-crm/; https://blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017/
CVE: CVE-2017-15297
Published: 2017-10-16
Description: SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP Security Note 2442993.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/99528; https://blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017/; https://erpscan.io/advisories/erpscan-17-034-sap-hostcontrol-unprotected-web-method-dos/
CVE: CVE-2017-15361
Published: 2017-10-16
Description: The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before [PII_REDACTED] - 4.34, before[PII_REDACTED]00062b - 6.43, and before [PII_REDACTED] - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various cryptographic protection mechanisms via targeted attacks, aka ROCA. Examples of affected technologies include BitLocker with TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS.
CVSS Score: 5.9 (MEDIUM)
References: http://support.lenovo.com/us/en/product_security/LEN-15552; http://www.securityfocus.com/bid/101484; https://arstechnica.com/information-technology/2017/10/crypto-failure-cripples-millions-of-high-security-keys-750k-estonian-ids/
CVE: CVE-2017-15383
Published: 2017-10-16
Description: Nero 7.10.1.0 has an unquoted BINARY_PATH_NAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILES(x86)%\Nero directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstormsecurity.com/files/139658/Nero-7.10.1.0-Privilege-Escalation.html; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2017-15384
Published: 2017-10-16
Description: rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstormsecurity.com/files/139696/ratemephp-xss.txt; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2014-0208
Published: 2017-10-16
Description: Cross-site scripting (XSS) vulnerability in the search auto-completion functionality in Foreman before 1.4.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted key name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://projects.theforeman.org/issues/5471; https://bugzilla.redhat.com/show_bug.cgi?id=1094642; https://theforeman.org/security.html#2014-0208
CVE: CVE-2015-2780
Published: 2017-10-16
Description: Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://seclists.org/fulldisclosure/2015/Mar/155; http://www.openwall.com/lists/oss-security/2015/03/28/4; https://www.exploit-db.com/exploits/36520/
CVE: CVE-2015-3229
Published: 2017-10-16
Description: fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2015/06/12/8; http://www.securityfocus.com/bid/75185; https://bugzilla.redhat.com/show_bug.cgi?id=1231800
CVE: CVE-2015-4650
Published: 2017-10-16
Description: Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access and execute arbitrary code with root privileges via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt; http://www.securityfocus.com/bid/76115; http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt
CVE: CVE-2015-7687
Published: 2017-10-16
Description: Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving req_ca_vrfy_smtp and req_ca_vrfy_mta.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170448.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169600.html; http://www.openwall.com/lists/oss-security/2015/10/03/1
CVE: CVE-2017-15221
Published: 2017-10-16
Description: ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/144590/ASX-To-MP3-3.1.3.7-Buffer-Overflow.html; http://packetstormsecurity.com/files/154788/ASX-To-MP3-Converter-3.1.3.7-Stack-Overflow.html; https://www.exploit-db.com/exploits/42974/
CVE: CVE-2017-15265
Published: 2017-10-16
Description: Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq_ports.c.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=[PII_REDACTED]5fb012937332fe2e806d443c09e026; http://mailman.alsa-project.org/pipermail/alsa-devel/2017-October/126292.html; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8
CVE: CVE-2017-15289
Published: 2017-10-16
Description: The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2017/10/12/16; http://www.securityfocus.com/bid/101262; https://access.redhat.com/errata/RHSA-2017:3368
CVE: CVE-2015-7504
Published: 2017-10-16
Description: Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://rhn.redhat.com/errata/RHSA-2015-2694.html; http://rhn.redhat.com/errata/RHSA-2015-2695.html; http://rhn.redhat.com/errata/RHSA-2015-2696.html
CVE: CVE-2017-0316
Published: 2017-10-16
Description: In GeForce Experience (GFE) 3.x before 3.10.0.55, NVIDIA Installer Framework contains a vulnerability in NVISystemService64 where a value passed from a user to the driver is used without validation, which may lead to denial of service or possible escalation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4560; http://nvidia.custhelp.com/app/answers/detail/a_id/4560
CVE: CVE-2017-9367
Published: 2017-10-16
Description: A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696; http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696
CVE: CVE-2017-9368
Published: 2017-10-16
Description: An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applications by crafting a request for specific files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696; http://www.securityfocus.com/bid/96542; http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696
CVE: CVE-2017-15385
Published: 2017-10-16
Description: The store_versioninfo_gnu_verdef function in libr/bin/format/elf/elf.c in radare2 2.0.0 allows remote attackers to cause a denial of service (r_read_le16 invalid write and application crash) or possibly have unspecified other impact via a crafted ELF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/radare/radare2/commit/21a6f570ba33fa9f52f1bba87f07acc4e8c178f4; https://github.com/radare/radare2/issues/8685; https://github.com/radare/radare2/commit/21a6f570ba33fa9f52f1bba87f07acc4e8c178f4
CVE: CVE-2017-13077
Published: 2017-10-17
Description: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-330
References: http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt; http://www.debian.org/security/2017/dsa-3999; http://www.kb.cert.org/vuls/id/228519
CVE: CVE-2017-13078
Published: 2017-10-17
Description: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames from access points to clients.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-323, CWE-330
References: http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html
CVE: CVE-2017-13079
Published: 2017-10-17
Description: Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-323, CWE-330
References: http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html
CVE: CVE-2017-13080
Published: 2017-10-17
Description: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-323, CWE-330
References: http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html
CVE: CVE-2017-13081
Published: 2017-10-17
Description: Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-323, CWE-330
References: http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html
CVE: CVE-2017-13082
Published: 2017-10-17
Description: Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT) handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
CVSS Score: 8.1 (HIGH)
CWE: CWE-323, CWE-330
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html; http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt; http://www.debian.org/security/2017/dsa-3999
CVE: CVE-2017-13084
Published: 2017-10-17
Description: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-323, CWE-330
References: http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt; http://www.kb.cert.org/vuls/id/228519; http://www.securityfocus.com/bid/101274
CVE: CVE-2017-13086
Published: 2017-10-17
Description: Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-323, CWE-330
References: http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007.txt; http://www.debian.org/security/2017/dsa-3999; http://www.kb.cert.org/vuls/id/228519
CVE: CVE-2017-13087
Published: 2017-10-17
Description: Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-330
References: http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html
CVE: CVE-2017-13088
Published: 2017-10-17
Description: Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-323, CWE-330
References: http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00020.html; http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00024.html
CVE: CVE-2013-6355
Published: 2017-10-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-6355. Reason: This candidate is a duplicate of CVE-2014-6355. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2014-6355 instead of this candidate. All references and  descriptions in this candidate have been removed to prevent accidental  usage
CVE: CVE-2014-8323
Published: 2017-10-17
Description: buddy-ng.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://aircrack-ng.blogspot.com/2014/10/aircrack-ng-12-release-candidate-1.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143216.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143595.html
CVE: CVE-2014-8324
Published: 2017-10-17
Description: network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) via a response with a crafted length parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://aircrack-ng.blogspot.com/2014/10/aircrack-ng-12-release-candidate-1.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143216.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-November/143595.html