deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-6742
Published: 2017-07-17
Description: A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device.&nbsp;



The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system.



Only traffic directed to the affected system can be used to exploit this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp; http://www.securityfocus.com/bid/99345; http://www.securitytracker.com/id/1038808
CVE: CVE-2017-6743
Published: 2017-07-17
Description: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities.

The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload.

Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable.

  There are workarounds that address these vulnerabilities.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp; http://www.securityfocus.com/bid/99345; http://www.securitytracker.com/id/1038808
CVE: CVE-2017-6744
Published: 2017-07-17
Description: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities.
 The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload.
 Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable.
   There are workarounds that address these vulnerabilities.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6744
CVE: CVE-2017-7947
Published: 2017-07-17
Description: NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]; https://kb.netapp.com/support/s/article/NTAP-20[PII_REDACTED]
CVE: CVE-2017-8896
Published: 2017-07-17
Description: ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by injecting code in url parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99321; https://hackerone.com/reports/215410; https://owncloud.org/security/advisory/?id=oc-sa-2017-004
CVE: CVE-2017-9338
Published: 2017-07-17
Description: Inadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2. To be exploitable a user has to write or paste malicious content into the search dialogue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99322; https://owncloud.org/security/advisory/?id=oc-sa-2017-007; http://www.securityfocus.com/bid/99322
CVE: CVE-2017-9339
Published: 2017-07-17
Description: A logical error in ownCloud Server before 10.0.2 caused disclosure of valid share tokens for public calendars. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token.
CVSS Score: 5.3 (MEDIUM)
References: https://owncloud.org/security/advisory/?id=oc-sa-2017-005; https://owncloud.org/security/advisory/?id=oc-sa-2017-005
CVE: CVE-2017-9340
Published: 2017-07-17
Description: An attacker is logged in as a normal user and can somehow make admin to delete shared folders in ownCloud Server before 10.0.2.
CVSS Score: 6.5 (MEDIUM)
References: https://hackerone.com/reports/166581; https://owncloud.org/security/advisory/?id=oc-sa-2017-006; https://hackerone.com/reports/166581
CVE: CVE-2017-9609
Published: 2017-07-17
Description: Cross-site scripting (XSS) vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the map_language parameter to backend/pages/lang_settings.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/143103/Blackcat-CMS-1.2-Cross-Site-Scripting.html; https://github.com/BlackCatDevelopment/BlackCatCMS/issues/373; https://github.com/faizzaidi/Blackcat-cms-v1.2-xss-POC-by-Provensec-llc
CVE: CVE-2017-9669
Published: 2017-07-17
Description: A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by crafting a malicious APKINDEX.tar.gz file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2017/06/25/2; http://www.securityfocus.com/bid/99340; https://www.twistlock.com/2017/06/25/alpine-linux-vulnerability-discovery-code-execution-pt-1-2/
CVE: CVE-2017-9671
Published: 2017-07-17
Description: A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax header block.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2017/06/25/2; http://www.securityfocus.com/bid/99340; https://www.twistlock.com/2017/06/25/alpine-linux-vulnerability-discovery-code-execution-pt-1-2/
CVE: CVE-2017-9810
Published: 2017-07-17
Description: There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). This would allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/143190/Kaspersky-Anti-Virus-File-Server-8.0.3.297-XSS-CSRF-Code-Execution.html; http://seclists.org/fulldisclosure/2017/Jun/33; http://www.securityfocus.com/bid/99330
CVE: CVE-2017-9811
Published: 2017-07-17
Description: The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). By abusing the quarantine read and write operations, it is possible to elevate the privileges to root.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://packetstormsecurity.com/files/143190/Kaspersky-Anti-Virus-File-Server-8.0.3.297-XSS-CSRF-Code-Execution.html; http://seclists.org/fulldisclosure/2017/Jun/33; http://www.securityfocus.com/bid/99330
CVE: CVE-2017-9812
Published: 2017-07-17
Description: The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312) to read arbitrary files with kluser privileges.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/143190/Kaspersky-Anti-Virus-File-Server-8.0.3.297-XSS-CSRF-Code-Execution.html; http://seclists.org/fulldisclosure/2017/Jun/33; http://www.securityfocus.com/bid/99330
CVE: CVE-2017-9813
Published: 2017-07-17
Description: In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312), the scriptName parameter of the licenseKeyInfo action method is vulnerable to cross-site scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/143190/Kaspersky-Anti-Virus-File-Server-8.0.3.297-XSS-CSRF-Code-Execution.html; http://seclists.org/fulldisclosure/2017/Jun/33; http://www.securityfocus.com/bid/99330
CVE: CVE-2017-9933
Published: 2017-07-17
Description: Improper cache invalidation in Joomla! CMS 1.7.3 through 3.7.2 leads to disclosure of form contents.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/99450; http://www.securitytracker.com/id/1038817; https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-information-disclosure
CVE: CVE-2017-9934
Published: 2017-07-17
Description: Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99451; http://www.securitytracker.com/id/1038817; https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-xss-vulnerability
CVE: CVE-2017-11403
Published: 2017-07-18
Description: The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/d0a76868ca37; https://blogs.gentoo.org/ago/2017/07/12/graphicsmagick-use-after-free-in-closeblob-blob-c/; https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html
CVE: CVE-2017-11404
Published: 2017-07-18
Description: In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a FileManager action to admin/moduleinterface.php.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-434
References: http://www.yuesec.com/img/cccccve/CMSMadeSimple/upl0advul123/images/upload_vulnerability_yuesec.html; http://www.yuesec.com/img/cccccve/CMSMadeSimple/upl0advul123/images/upload_vulnerability_yuesec.html
CVE: CVE-2017-11405
Published: 2017-07-18
Description: In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/moduleinterface.php, followed by a FilePicker action to admin/moduleinterface.php in which type=image is changed to type=file.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-434
References: http://www.yuesec.com/img/cccccve/CMSMadeSimple/upl0advul123/filepickerimages/FilePicker_upload_vulnerability.html; http://www.yuesec.com/img/cccccve/CMSMadeSimple/upl0advul123/filepickerimages/FilePicker_upload_vulnerability.html
CVE: CVE-2017-11412
Published: 2017-07-18
Description: Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/controller/comment_status.php via $_GET['id'].
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/FiyoCMS/FiyoCMS/issues/5; https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE: CVE-2017-11413
Published: 2017-07-18
Description: Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/comment_status.php via $_GET['id'].
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/FiyoCMS/FiyoCMS/issues/5; https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE: CVE-2017-11414
Published: 2017-07-18
Description: Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/sys_comment.php via $_POST['comment'], $_POST['name'], $_POST['web'], $_POST['email'], $_POST['status'], $_POST['id'], and $_REQUEST['id'].
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/FiyoCMS/FiyoCMS/issues/5; https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE: CVE-2017-11415
Published: 2017-07-18
Description: Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/sys_article.php via $_POST['parent_id'], $_POST['desc'], $_POST['keys'], and $_POST['level'].
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/FiyoCMS/FiyoCMS/issues/5; https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE: CVE-2017-11416
Published: 2017-07-18
Description: Fiyo CMS 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/FiyoCMS/FiyoCMS/issues/5; https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE: CVE-2017-11417
Published: 2017-07-18
Description: Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_status.php via $_GET['id'].
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/FiyoCMS/FiyoCMS/issues/5; https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE: CVE-2017-11418
Published: 2017-07-18
Description: Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_list.php via $_GET['cat'], $_GET['user'], $_GET['level'], and $_GET['iSortCol_'.$i].
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/FiyoCMS/FiyoCMS/issues/5; https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE: CVE-2017-11419
Published: 2017-07-18
Description: Fiyo CMS 2.0.7 has SQL injection in /apps/app_article/controller/editor.php via $_POST['id'] and $_POST['art_title'].
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/FiyoCMS/FiyoCMS/issues/5; https://github.com/FiyoCMS/FiyoCMS/issues/5
CVE: CVE-2017-11420
Published: 2017-07-18
Description: Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-AC66U_B1, RT-AC58U, RT-AC56U, RT-AC55U, RT-AC52U, RT-AC51U, RT-N18U, RT-N66U, RT-N56U, RT-AC3200, RT-AC3100, RT_AC1200GU, RT_AC1200G, RT-AC1200, RT-AC53, RT-N12HP, RT-N12HP_B1, RT-N12D1, RT-N12+, RT_N12+_PRO, RT-N16, and RT-N300 devices allows remote attackers to execute arbitrary code via long device information that is mishandled during a strcat to a device list.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2017/07/13/1; https://asuswrt.lostrealm.ca/changelog; http://www.openwall.com/lists/oss-security/2017/07/13/1
CVE: CVE-2017-1318
Published: 2017-07-18
Description: IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the system, caused by command execution. IBM X-Force ID: 125730.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.ibm.com/support/docview.wss?uid=swg22003815; http://www.securityfocus.com/bid/99594; https://exchange.xforce.ibmcloud.com/vulnerabilities/125730
CVE: CVE-2017-10961
Published: 2017-07-18
Description: REDCap before 7.5.1 has CSRF in the deletion feature of the File Repository and File Upload components.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://community.projectredcap.org/articles/13/changelog-standard-release.html; https://gist.github.com/jordanpotti/fef4f1ada404d5ba7f88ab42e93cdaae; https://community.projectredcap.org/articles/13/changelog-standard-release.html
CVE: CVE-2017-10962
Published: 2017-07-18
Description: REDCap before 7.5.1 has XSS via the query string.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://community.projectredcap.org/articles/13/changelog-standard-release.html; https://gist.github.com/jordanpotti/fef4f1ada404d5ba7f88ab42e93cdaae; https://community.projectredcap.org/articles/13/changelog-standard-release.html
CVE: CVE-2017-5245
Published: 2017-07-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-6320
Published: 2017-07-18
Description: A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (2015-11-26) and v6.0.1.006 (2016-08-19); fixed in 6.1.0.003 (2017-01-17)) in which an authenticated user can execute arbitrary shell commands and gain root privileges. The vulnerability stems from unsanitized data being processed in a system call when the delete_assessment command is issued.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://campus.barracuda.com/product/loadbalanceradc/article/ADC/ReleaseNotes610003/; https://www.exploit-db.com/exploits/42333/; https://campus.barracuda.com/product/loadbalanceradc/article/ADC/ReleaseNotes610003/
CVE: CVE-2017-7506
Published: 2017-07-18
Description: spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: http://www.debian.org/security/2017/dsa-3907; http://www.openwall.com/lists/oss-security/2017/07/14/1; http://www.securityfocus.com/bid/99583
CVE: CVE-2017-5246
Published: 2017-07-18
Description: Biscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name field. An authenticated user can populate this field with a valid AngularJS expression, wrapped in double curly-braces ({{ }}). This expression will be evaluated by any other authenticated user who views the attacker's display name. Affected versions are 5.0.0000 through 5.1.1026. The Issue is fixed in 5.1.1028.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-74
References: https://cve.biscom.com/bis-sft-cv-0004/; https://twitter.com/i_bo0om/status/[PII_REDACTED]67750145; https://cve.biscom.com/bis-sft-cv-0004/
CVE: CVE-2017-5247
Published: 2017-07-18
Description: Biscom Secure File Transfer is vulnerable to cross-site scripting in the File Name field. An authenticated user with permissions to upload or send files can populate this field with a filename that contains standard HTML scripting tags. The resulting script will evaluated by any other authenticated user who views the attacker-supplied file name. All versions of SFT prior to 5.1.1028 are affected. The fix version is 5.1.1028.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cve.biscom.com/bis-sft-cv-0005/; https://twitter.com/i_bo0om/status/[PII_REDACTED]67750145; https://cve.biscom.com/bis-sft-cv-0005/
CVE: CVE-2017-11421
Published: 2017-07-18
Description: gnome-exe-thumbnailer before 0.9.5 is prone to a VBScript Injection when generating thumbnails for MSI files, aka the "Bad Taste" issue. There is a local attack if the victim uses the GNOME Files file manager, and navigates to a directory containing a .msi file with VBScript code in its filename.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: http://news.dieweltistgarnichtso.net/posts/gnome-thumbnailer-msi-fail.html; http://www.securityfocus.com/bid/99922; https://bugs.debian.org/868705
CVE: CVE-2017-10708
Published: 2017-07-18
Description: An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then uses the path to run package specific hooks without protecting against path traversal. This allows remote attackers to execute arbitrary code via a crafted .crash file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://launchpad.net/bugs/1700573; https://launchpad.net/ubuntu/+source/apport/+changelog; https://launchpad.net/bugs/1700573
CVE: CVE-2017-11423
Published: 2017-07-18
Description: The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted CAB file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3946; https://bugzilla.clamav.net/show_bug.cgi?id=11873; https://github.com/hackerlib/hackerlib-vul/tree/master/clamav-vul
CVE: CVE-2017-11406
Published: 2017-07-18
Description: In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://www.securityfocus.com/bid/99903; http://www.securitytracker.com/id/1038966; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13797
CVE: CVE-2017-11407
Published: 2017-07-18
Description: In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/packet-mq.c by validating the fragment length before a reassembly attempt.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99910; http://www.securitytracker.com/id/1038966; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13792
CVE: CVE-2017-11408
Published: 2017-07-18
Description: In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99894; http://www.securitytracker.com/id/1038966; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13780
CVE: CVE-2017-11409
Published: 2017-07-18
Description: In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop. This was addressed in epan/dissectors/packet-gprs-llc.c by using a different integer data type.
CVSS Score: 7.5 (HIGH)
CWE: CWE-834
References: http://www.securityfocus.com/bid/99914; http://www.securitytracker.com/id/1038966; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13603
CVE: CVE-2017-11410
Published: 2017-07-18
Description: In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wbxml.c by adding validation of the relationships between indexes and lengths. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-7702.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-835
References: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13796; https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=3c7168cc5f044b4da8747d35da0b2b204dabf398; https://www.wireshark.org/security/wnpa-sec-2017-13.html