deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-9998
Published: 2018-07-05
Description: Open-Xchange OX App Suite before 7.6.3-rev37, 7.8.x before 7.8.2-rev40, 7.8.3 before 7.8.3-rev48, and 7.8.4 before 7.8.4-rev28 include folder names in API error responses, which allows remote attackers to obtain sensitive information via the folder parameter in an "all" action to api/tasks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2018/Jul/12; http://www.securitytracker.com/id/1041213; http://seclists.org/fulldisclosure/2018/Jul/12
CVE: CVE-2016-10724
Published: 2018-07-05
Description: Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (deprecated since Q1 2016) if an attacker can sign a message with a certain private key that had been known by unintended actors, because of an infinitely sized map. This affects other uses of the codebase, such as Bitcoin Knots before v0.13.0.knots20160814 and many altcoins.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://bitcoin.org/en/posts/alert-key-and-vulnerabilities-disclosure; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures; https://github.com/JinBean/CVE-Extension
CVE: CVE-2016-10725
Published: 2018-07-05
Description: In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" (which is supposed to override all other alerts) because operations occur in the wrong order. This behavior occurs in the remote network alert system (deprecated since Q1 2016). This affects other uses of the codebase, such as Bitcoin Knots before v0.13.0.knots20160814 and many altcoins.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: https://bitcoin.org/en/posts/alert-key-and-vulnerabilities-disclosure; https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures; https://github.com/JinBean/CVE-Extension
CVE: CVE-2018-13339
Published: 2018-07-05
Description: Imperavi Redactor 3 in Angular Redactor 1.1.6, when HTML content mode is used, allows stored XSS, as demonstrated by an onerror attribute of an IMG element, a related issue to CVE-2018-7035.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/TylerGarlick/angular-redactor/issues/77; https://github.com/gleez/cms/issues/796; https://github.com/TylerGarlick/angular-redactor/issues/77
CVE: CVE-2018-13340
Published: 2018-07-05
Description: Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/gleez/cms/issues/795; https://github.com/gleez/cms/issues/795
CVE: CVE-2018-13346
Published: 2018-07-06
Description: The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20[PII_REDACTED].
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://access.redhat.com/errata/RHSA-2019:2276; https://lists.debian.org/debian-lts-announce/2020/07/msg00032.html; https://www.mercurial-scm.org/repo/hg/rev/faa924469635
CVE: CVE-2018-13347
Published: 2018-07-06
Description: mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20[PII_REDACTED].
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://access.redhat.com/errata/RHSA-2019:2276; https://lists.debian.org/debian-lts-announce/2020/07/msg00032.html; https://www.mercurial-scm.org/repo/hg-committed/log?rev=modifies%28%22mercurial%2Fmpatch.c%22%29+and+4.5%3A%3A
CVE: CVE-2018-13348
Published: 2018-07-06
Description: The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20[PII_REDACTED].
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://lists.debian.org/debian-lts-announce/2020/07/msg00032.html; https://www.mercurial-scm.org/repo/hg/rev/90a274965de7; https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.6.1_.282018-06-06.29
CVE: CVE-2018-8929
Published: 2018-07-06
Description: Improper restriction of communication channel to intended endpoints vulnerability in HTTP daemon in Synology SSL VPN Client before 1.2.4-0224 allows remote attackers to conduct man-in-the-middle attacks via a crafted payload.
CVSS Score: 7.3 (HIGH)
CWE: CWE-319, CWE-417
References: https://www.synology.com/en-global/support/security/Synology_SA_18_19; https://www.synology.com/en-global/support/security/Synology_SA_18_19
CVE: CVE-2017-2665
Published: 2018-07-06
Description: The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to /etc/skyring/skyring.conf file which is owned by root but read by local user. Any local user who has access to system running skyring service will be able to get password in plain text.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-522, CWE-522
References: http://www.securityfocus.com/bid/97612; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2665; http://www.securityfocus.com/bid/97612
CVE: CVE-2017-1237
Published: 2018-07-06
Description: IBM Jazz based applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124355.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/124355; https://www-prd-trops.events.ibm.com/node/715709; https://exchange.xforce.ibmcloud.com/vulnerabilities/124355
CVE: CVE-2017-1238
Published: 2018-07-06
Description: IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124356.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10716201; https://exchange.xforce.ibmcloud.com/vulnerabilities/124356; http://www.ibm.com/support/docview.wss?uid=ibm10716201
CVE: CVE-2017-1239
Published: 2018-07-06
Description: IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124357.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=ibm10716201; https://exchange.xforce.ibmcloud.com/vulnerabilities/124357; http://www.ibm.com/support/docview.wss?uid=ibm10716201
CVE: CVE-2017-1242
Published: 2018-07-06
Description: IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124524.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-94
References: http://www.ibm.com/support/docview.wss?uid=ibm10716201; https://exchange.xforce.ibmcloud.com/vulnerabilities/124524; http://www.ibm.com/support/docview.wss?uid=ibm10716201
CVE: CVE-2017-1248
Published: 2018-07-06
Description: IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124628.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-94
References: http://www.ibm.com/support/docview.wss?uid=ibm10716201; https://exchange.xforce.ibmcloud.com/vulnerabilities/124628; http://www.ibm.com/support/docview.wss?uid=ibm10716201
CVE: CVE-2017-1329
Published: 2018-07-06
Description: IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 126231.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-94
References: http://www.ibm.com/support/docview.wss?uid=ibm10716201; https://exchange.xforce.ibmcloud.com/vulnerabilities/126231; http://www.ibm.com/support/docview.wss?uid=ibm10716201
CVE: CVE-2017-1488
Published: 2018-07-06
Description: An undisclosed vulnerability in Jazz common products exists with potential for information disclosure. IBM X-Force ID: 128627.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/128627; https://www-prd-trops.events.ibm.com/node/715709; https://exchange.xforce.ibmcloud.com/vulnerabilities/128627
CVE: CVE-2017-1509
Published: 2018-07-06
Description: IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. IBM X-Force ID: 129719.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/129719; https://www-prd-trops.events.ibm.com/node/715709; https://exchange.xforce.ibmcloud.com/vulnerabilities/129719
CVE: CVE-2017-1559
Published: 2018-07-06
Description: Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests. IBM X-Force ID: 131758.
CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/131758; https://www-prd-trops.events.ibm.com/node/715709; https://exchange.xforce.ibmcloud.com/vulnerabilities/131758
CVE: CVE-2017-1795
Published: 2018-07-06
Description: IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via trace logs in IBM WebSphere MQ Managed File Transfer. IBM X-Force ID: 137042.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-532
References: http://www.ibm.com/support/docview.wss?uid=swg22012389; https://exchange.xforce.ibmcloud.com/vulnerabilities/137042; http://www.ibm.com/support/docview.wss?uid=swg22012389
CVE: CVE-2018-11124
Published: 2018-07-06
Description: Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted attribute name of an Attribute.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.google.com/document/d/1dJP1CQupHGXjsMWthgPGepOkcnxYA4mDfdjOE46nrhM/edit?usp=sharing; https://www.exploit-db.com/exploits/45053/; https://docs.google.com/document/d/1dJP1CQupHGXjsMWthgPGepOkcnxYA4mDfdjOE46nrhM/edit?usp=sharing
CVE: CVE-2018-13108
Published: 2018-07-06
Description: All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerability where attackers are able to gain root access on the device, and extract further information such as sensitive configuration data of the ISP (e.g., VoIP credentials) or attack the internal network of the ISP.
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/148424/ADB-Local-Root-Jailbreak.html; http://seclists.org/fulldisclosure/2018/Jul/17; http://www.securityfocus.com/archive/1/542117/100/0/threaded
CVE: CVE-2018-13109
Published: 2018-07-06
Description: All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access and manipulate settings within the web interface that are forbidden to end users (e.g., by the ISP). An attacker would be able to enable the TELNET server or other settings as well.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: http://packetstormsecurity.com/files/148429/ADB-Authorization-Bypass.html; http://seclists.org/fulldisclosure/2018/Jul/18; http://www.securityfocus.com/archive/1/542119/100/0/threaded
CVE: CVE-2018-13110
Published: 2018-07-06
Description: All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerability where attackers can gain access to the command line interface (CLI) if previously disabled by the ISP, escalate their privileges, and perform further attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/148430/ADB-Group-Manipulation-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2018/Jul/19; http://www.securityfocus.com/archive/1/542118/100/0/threaded
CVE: CVE-2018-13405
Published: 2018-07-06
Description: The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7; http://openwall.com/lists/oss-security/2018/07/13/2; http://www.securityfocus.com/bid/106503
CVE: CVE-2018-13406
Published: 2018-07-06
Description: An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially elevate privileges because kmalloc_array is not used.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9f645bcc566a1e9f921bdae7528a01ced5bc3713; http://www.securityfocus.com/bid/104685; http://www.securitytracker.com/id/1041355
CVE: CVE-2018-1494
Published: 2018-07-06
Description: IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141097.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22015238; https://exchange.xforce.ibmcloud.com/vulnerabilities/141097; http://www.ibm.com/support/docview.wss?uid=swg22015238
CVE: CVE-2018-1542
Published: 2018-07-06
Description: IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5.2.1 and 5.5.0 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 142597.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: http://www.ibm.com/support/docview.wss?uid=swg22015943; http://www.securitytracker.com/id/1041225; https://exchange.xforce.ibmcloud.com/vulnerabilities/142597
CVE: CVE-2018-1546
Published: 2018-07-06
Description: IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 142650.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/142650; https://www.ibm.com/support/pages/node/715299; https://exchange.xforce.ibmcloud.com/vulnerabilities/142650
CVE: CVE-2018-1555
Published: 2018-07-06
Description: IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142892.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22015943; http://www.securitytracker.com/id/1041225; https://exchange.xforce.ibmcloud.com/vulnerabilities/142892
CVE: CVE-2018-1556
Published: 2018-07-06
Description: IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142893.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22015943; http://www.securitytracker.com/id/1041225; https://exchange.xforce.ibmcloud.com/vulnerabilities/142893
CVE: CVE-2018-1621
Published: 2018-07-06
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling of some datasource custom properties. IBM X-Force ID: 144346.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-312
References: http://www.ibm.com/support/docview.wss?uid=swg22016821; http://www.securitytracker.com/id/1041226; https://exchange.xforce.ibmcloud.com/vulnerabilities/144346
CVE: CVE-2018-1676
Published: 2018-07-06
Description: IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145118.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22016372; https://exchange.xforce.ibmcloud.com/vulnerabilities/145118; http://www.ibm.com/support/docview.wss?uid=swg22016372
CVE: CVE-2018-10892
Published: 2018-07-06
Description: The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to modify host's hardware like enabling/disabling bluetooth or turning up/down keyboard brightness.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-250
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00084.html; https://access.redhat.com/errata/RHBA-2018:2796; https://access.redhat.com/errata/RHSA-2018:2482
CVE: CVE-2017-11088
Published: 2018-07-06
Description: Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability exists in versions MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 835, SD 845.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2017-14872
Published: 2018-07-06
Description: While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=1daa83baa41d1e6291e89f69e6487695b6890c01; https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE: CVE-2017-14893
Published: 2018-07-06
Description: While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image header size or is smaller than the image header size + total image header entry in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=c8dc3bf07ee909e6e57ad7887f9d3c0ffa5df795; https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE: CVE-2017-15824
Published: 2018-07-06
Description: In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, the function UpdateDeviceStatus() writes a local stack buffer without initialization to flash memory using WriteToPartition() which may potentially leak memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components
CVE: CVE-2017-15856
Published: 2018-07-06
Description: Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-415
References: https://source.android.com/security/bulletin/pixel/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=ed02c0ccd6f7461a69d[PII_REDACTED]2eaf21babcd; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2017-18158
Published: 2018-07-06
Description: Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05 while flashing images.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=316136f292cedaecf17823d6f3b63cf2d11314b3; https://source.android.com/security/bulletin/2018-06-01#qualcomm-components
CVE: CVE-2017-18159
Published: 2018-07-06
Description: In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, while processing a StrHwPlatform with length smaller than EFICHIPINFO_MAX_ID_LENGTH, an array out of bounds access may occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2018-06-01#qualcomm-components; https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=04f23441b8c0c897644f9bf391b691039fa0ab70; https://source.codeaurora.org/quic/la/abl/tianocore/edk2/commit/?id=3129148e5a4cfe83003449a[PII_REDACTED]bfddc51
CVE: CVE-2018-11257
Published: 2018-07-06
Description: Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 205, SD 845, SD 850.
CVSS Score: 7.8 (HIGH)
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins
CVE: CVE-2018-11258
Published: 2018-07-06
Description: In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDX20.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1041432; https://www.qualcomm.com/company/product-security/bulletins; http://www.securitytracker.com/id/1041432
CVE: CVE-2018-11259
Published: 2018-07-06
Description: Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and configures the EFS partition addresses in its MPU partition.
CVSS Score: 7.7 (HIGH)
CWE: CWE-732
References: https://www.qualcomm.com/company/product-security/bulletins; https://www.qualcomm.com/company/product-security/bulletins