deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-38373
Published: 2021-08-10
Description: In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-77, CWE-319
References: https://bugs.kde.org/show_bug.cgi?id=423423; https://nostarttls.secvuln.info; https://bugs.kde.org/show_bug.cgi?id=423423
CVE: CVE-2020-23171
Published: 2021-08-10
Description: A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-610
References: https://github.com/nim-lang/zip/issues/54; https://github.com/nim-lang/zip/issues/54
CVE: CVE-2020-23172
Published: 2021-08-10
Description: A vulnerability in all versions of Kuba allows attackers to overwrite arbitrary files in arbitrary directories with crafted Zip files due to improper validation of file paths in .zip archives.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/kuba--/zip/issues/123; https://github.com/kuba--/zip/issues/123
CVE: CVE-2020-25082
Published: 2021-08-10
Description: An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elliptic Curve Cryptography (ECC) private key via a side-channel attack against ECDSA, because of an Observable Timing Discrepancy.
CVSS Score: 3.8 (LOW)
CWE: CWE-203
References: https://www.nuvoton.com/support/product-related-information/security-advisories/sa-002/; https://www.nuvoton.com/support/product-related-information/security-advisories/sa-002/
CVE: CVE-2021-32768
Published: 2021-08-10
Description: TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions failing to properly parse, sanitize and encode malicious rich-text content, the content rendering process in the website frontend is vulnerable to cross-site scripting. Corresponding rendering instructions via TypoScript functionality HTMLparser does not consider all potentially malicious HTML tag & attribute combinations per default. In default scenarios, a valid backend user account is needed to exploit this vulnerability. In case custom plugins used in the website frontend accept and reflect rich-text content submitted by users, no authentication is required. Update to TYPO3 versions 7.6.53 ELTS, 8.7.42 ELTS, 9.5.29, 10.4.19, 11.3.2 that fix the problem described.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-c5c9-8c6m-727v; https://typo3.org/security/advisory/typo3-core-sa-2021-013; https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-c5c9-8c6m-727v
CVE: CVE-2021-37365
Published: 2021-08-10
Description: CTparental before 4.45.03 is vulnerable to cross-site scripting (XSS) in the CTparental admin panel. In bl_categires_help.php, the 'categories' variable is assigned with the content of the query string param 'cat' without sanitization or encoding, enabling an attacker to inject malicious code into the output webpage.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/securylight/092ba96a660e07ad76f2a380c2eaa75a; https://gitlab.com/marsat/CTparental/; https://gist.github.com/securylight/092ba96a660e07ad76f2a380c2eaa75a
CVE: CVE-2021-37366
Published: 2021-08-10
Description: CTparental before 4.45.03 is vulnerable to cross-site request forgery (CSRF) in the CTparental admin panel. By combining CSRF with XSS, an attacker can trick the administrator into clicking a link that cancels the filtering for all standard users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://gist.github.com/securylight/092ba96a660e07ad76f2a380c2eaa75a; https://gitlab.com/marsat/CTparental/; https://gist.github.com/securylight/092ba96a660e07ad76f2a380c2eaa75a
CVE: CVE-2021-37367
Published: 2021-08-10
Description: CTparental before 4.45.07 is affected by a code execution vulnerability in the CTparental admin panel. Because The file "bl_categories_help.php" is vulnerable to directory traversal, an attacker can create a file that contains scripts and run arbitrary commands.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://gist.github.com/securylight/092ba96a660e07ad76f2a380c2eaa75a; https://gitlab.com/marsat/CTparental/; https://gist.github.com/securylight/092ba96a660e07ad76f2a380c2eaa75a
CVE: CVE-2021-3692
Published: 2021-08-10
Description: yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1241, CWE-330
References: https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46; https://huntr.dev/bounties/55517f19-5c28-4db2-8b00-f78f841e8aba; https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46
CVE: CVE-2021-28838
Published: 2021-08-10
Description: Null pointer dereference vulnerability in D-Link DAP-2310 2,10RC039, DAP-2330 1.10RC036 BETA, DAP-2360 2.10RC055, DAP-2553 3.10rc039 BETA, DAP-2660 1.15rc131b, DAP-2690 3.20RC115 BETA, DAP-2695 1.20RC093, DAP-3320 1.05RC027 BETA and DAP-3662 1.05rc069 in the sbin/httpd binary. The crash happens at the `atoi' operation when a specific network package are sent to the httpd binary.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/zyw-200/EQUAFL/blob/main/dlink-email-cve.pdf; https://github.com/zyw-200/EQUAFL/blob/main/dlink-email-cve2.pdf; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-28839
Published: 2021-08-10
Description: Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, DAP-2553 3.06.RC027, DAP-2660 1.13.RC074, DAP-2690 3.16.RC100, DAP-2695 1.17.RC063, DAP-3320 1.01.RC014 and DAP-3662 1.01.RC022 in the upload_certificate function of sbin/httpd binary. When the binary handle the specific HTTP GET request, the strrchr in the upload_certificate function would take NULL as first argument, and incur the NULL pointer dereference vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/zyw-200/EQUAFL/blob/main/dlink-email-cve.pdf; https://github.com/zyw-200/EQUAFL/blob/main/dlink-email-cve2.pdf; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-28840
Published: 2021-08-10
Description: Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, DAP-2553 3.06.RC027, DAP-2660 1.13.RC074, DAP-2690 3.16.RC100, DAP-2695 1.17.RC063, DAP-3320 1.01.RC014 and DAP-3662 1.01.RC022 in the upload_config function of sbin/httpd binary. When the binary handle the specific HTTP GET request, the content in upload_file variable is NULL in the upload_config function then the strncasecmp would take NULL as first argument, and incur the NULL pointer dereference vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/zyw-200/EQUAFL/blob/main/dlink-email-cve.pdf; https://github.com/zyw-200/EQUAFL/blob/main/dlink-email-cve2.pdf; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-38140
Published: 2021-08-10
Description: The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after set_user().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://github.com/pgaudit/set_user/compare/REL2_0_0...REL2_0_1; https://github.com/pgaudit/set_user/releases/tag/REL2_0_1; https://github.com/pgaudit/set_user/compare/REL2_0_0...REL2_0_1
CVE: CVE-2021-38380
Published: 2021-08-10
Description: Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can leverage this to launch a DoS attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.live555.com/pipermail/live-devel/2021-August/021954.html; http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.04%5D; http://lists.live555.com/pipermail/live-devel/2021-August/021954.html
CVE: CVE-2021-38381
Published: 2021-08-10
Description: Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: http://lists.live555.com/pipermail/live-devel/2021-August/021961.html; http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.09%5D; http://lists.live555.com/pipermail/live-devel/2021-August/021961.html
CVE: CVE-2021-38382
Published: 2021-08-10
Description: Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: http://lists.live555.com/pipermail/live-devel/2021-August/021959.html; http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.06%5D; http://lists.live555.com/pipermail/live-devel/2021-August/021959.html
CVE: CVE-2021-38383
Published: 2021-08-10
Description: OwnTone (aka owntone-server) through 28.1 has a use-after-free in net_bind() in misc.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://github.com/owntone/owntone-server/commit/246d8ae0cef27377e5dfe9ee3ad87e864d6b6266; https://github.com/owntone/owntone-server/commit/246d8ae0cef27377e5dfe9ee3ad87e864d6b6266
CVE: CVE-2021-38384
Published: 2021-08-10
Description: Serverless Offline 8.0.0 returns a 403 HTTP status code for a route that has a trailing / character, which might cause a developer to implement incorrect access control, because the actual behavior within the Amazon AWS environment is a 200 HTTP status code (i.e., possibly greater than expected permissions).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-755
References: https://github.com/dherault/serverless-offline/issues/1259; https://github.com/dherault/serverless-offline/issues/1259
CVE: CVE-2021-21567
Published: 2021-08-10
Description: Dell PowerScale OneFS 9.1.0.x contains an improper privilege management vulnerability. It may allow an authenticated user with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE to elevate privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732, CWE-269
References: https://www.dell.com/support/kbdoc/000189495; https://www.dell.com/support/kbdoc/000189495
CVE: CVE-2021-21597
Published: 2021-08-10
Description: Dell Wyse ThinOS, version 9.0, contains a Sensitive Information Disclosure Vulnerability. An authenticated malicious user with physical access to the system could exploit this vulnerability to read sensitive information written to the log files.
CVSS Score: 7.2 (HIGH)
CWE: CWE-532
References: https://www.dell.com/support/kbdoc/000189543; https://www.dell.com/support/kbdoc/000189543
CVE: CVE-2021-21598
Published: 2021-08-10
Description: Dell Wyse ThinOS, versions 9.0, 9.1, and 9.1 MR1, contain a Sensitive Information Disclosure Vulnerability. An authenticated attacker with physical access to the system could exploit this vulnerability to read sensitive Smartcard data in log files.
CVSS Score: 3.9 (LOW)
CWE: CWE-532
References: https://www.dell.com/support/kbdoc/000189543; https://www.dell.com/support/kbdoc/000189543
CVE: CVE-2021-21600
Published: 2021-08-10
Description: Dell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API service. An authorized API user could potentially exploit this vulnerability via the web and desktop user interfaces, leading to denial of service in the manageability path.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://www.dell.com/support/kbdoc/000189694; https://www.dell.com/support/kbdoc/000189694
CVE: CVE-2021-21601
Published: 2021-08-10
Description: Dell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an Information Exposure in Log File Vulnerability in CIS. A local low privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with the privileges of the compromised account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-532
References: https://www.dell.com/support/kbdoc/000189555; https://www.dell.com/support/kbdoc/000189555
CVE: CVE-2021-28841
Published: 2021-08-10
Description: Null Pointer Dereference vulnerability in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending a POST request to apply_cgi via an action ping_test without a ping_ipaddr key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf; https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf
CVE: CVE-2021-28842
Published: 2021-08-10
Description: Null Pointer Deference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial os service by sending the POST request to apply_cgi via action do_graph_auth without login_name key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf; https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf
CVE: CVE-2021-28843
Published: 2021-08-10
Description: Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi with an unknown action name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf; https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf
CVE: CVE-2021-28844
Published: 2021-08-10
Description: Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi via a do_graph_auth action without a session_id key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf; https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf
CVE: CVE-2021-38386
Published: 2021-08-10
Description: In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service because the ls command is mishandled when a directory has many files with long names.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/contiki-os/contiki/issues/2687; https://github.com/contiki-os/contiki/issues/2687
CVE: CVE-2021-38387
Published: 2021-08-10
Description: In Contiki 3.0, a Telnet server that silently quits (before disconnection with clients) leads to connected clients entering an infinite loop and waiting forever, which may cause excessive CPU consumption.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/contiki-os/contiki/issues/2688; https://github.com/contiki-os/contiki/issues/2688
CVE: CVE-2021-28845
Published: 2021-08-10
Description: Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending the POST request to apply_cgi via the lang action without a language key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf; https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf
CVE: CVE-2021-28846
Published: 2021-08-10
Description: A Format String vulnerablity exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service due to a logic bug at address 0x40dcd0 when calling fprintf with "%s: key len = %d, too long\n" format. The two variables seem to be put in the wrong order. The vulnerability could be triggered by sending the POST request to apply_cgi with a long and unknown key in the request body.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-134
References: https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf; https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf
CVE: CVE-2021-29294
Published: 2021-08-10
Description: Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK_1.01, which could let a remove malicious user cause a denial of service via the send_hnap_unauthorized function. It could be triggered by sending crafted POST request to /HNAP1/. NOTE: The DSL-2740R and all hardware revisions are considered End of Life and as such this issue will not be patched
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10213; https://www.dlink.com/en/security-bulletin/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10213
CVE: CVE-2021-29295
Published: 2021-08-10
Description: Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL in the start line directly to the device. NOTE: The DSP-W215 and all hardware revisions is considered End of Life and as such this issue will not be patched
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10211; https://www.dlink.com/en/security-bulletin/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10211
CVE: CVE-2021-29296
Published: 2021-08-10
Description: Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerability could be triggered by sending an HTTP request with URL /vct_wan; the sbin/httpd would invoke the strchr function and take NULL as a first argument, which finally leads to the segmentation fault. NOTE: The DIR-825 and all hardware revisions is considered End of Life and as such this issue will not be patched
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10212; https://www.dlink.com/en/security-bulletin/; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10212
CVE: CVE-2021-33708
Published: 2021-08-10
Description: Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://github.com/kyma-project/kyma/security/advisories/GHSA-f2jp-5gj4-q9c9; https://github.com/kyma-project/kyma/security/advisories/GHSA-f2jp-5gj4-q9c9
CVE: CVE-2021-37389
Published: 2021-08-10
Description: Chamilo 1.11.14 allows stored XSS via main/install/index.php and main/install/ajax.php through the port parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chamilo-lms-1.11.14-xss-vulnerabilities; https://github.com/chamilo/chamilo-lms/commit/dfae49f5dc392c00cd43badcb3043db3a646ff0c; https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chamilo-lms-1.11.14-xss-vulnerabilities
CVE: CVE-2021-37390
Published: 2021-08-10
Description: A Chamilo LMS 1.11.14 reflected XSS vulnerability exists in main/social/search.php=q URI (social network search feature).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chamilo-lms-1.11.14-xss-vulnerabilities; https://github.com/chamilo/chamilo-lms/commit/3fcc751d5cc7da311532a8756fba5a8778f50ca0; https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chamilo-lms-1.11.14-xss-vulnerabilities
CVE: CVE-2021-37391
Published: 2021-08-10
Description: A user without privileges in Chamilo LMS 1.11.14 can send an invitation message to another user, e.g., the administrator, through main/social/search.php, main/inc/lib/social.lib.php and steal cookies or execute arbitrary code on the administration side via a stored XSS vulnerability via social network the send invitation feature.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chamilo-lms-1.11.14-xss-vulnerabilities; https://github.com/chamilo/chamilo-lms/commit/de43a77049771cce08ea7234c5c1510b5af65bc8; https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chamilo-lms-1.11.14-xss-vulnerabilities
CVE: CVE-2020-21675
Published: 2021-08-10
Description: A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ptk format.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://cwe.mitre.org/data/definitions/121.html; https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html; https://sourceforge.net/p/mcj/tickets/78/
CVE: CVE-2020-21676
Published: 2021-08-10
Description: A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://cwe.mitre.org/data/definitions/121.html; https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html; https://lists.debian.org/debian-lts-announce/2023/01/msg00044.html
CVE: CVE-2020-21677
Published: 2021-08-10
Description: A heap-based buffer overflow in the sixel_encoder_output_without_macro function in encoder.c of Libsixel 1.8.4 allows attackers to cause a denial of service (DOS) via converting a crafted PNG file into Sixel format.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/saitoha/libsixel/issues/123; https://github.com/saitoha/libsixel/issues/123
CVE: CVE-2020-21678
Published: 2021-08-10
Description: A global buffer overflow in the genmp_writefontmacro_latex component in genmp.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into mp format.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://sourceforge.net/p/mcj/tickets/71/; https://sourceforge.net/p/mcj/tickets/71/
CVE: CVE-2020-21680
Published: 2021-08-10
Description: A stack-based buffer overflow in the put_arrow() component in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://sourceforge.net/p/mcj/tickets/74/; https://sourceforge.net/p/mcj/tickets/74/
CVE: CVE-2020-21681
Published: 2021-08-10
Description: A global buffer overflow in the set_color component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://sourceforge.net/p/mcj/tickets/73/; https://sourceforge.net/p/mcj/tickets/73/
CVE: CVE-2020-21682
Published: 2021-08-10
Description: A global buffer overflow in the set_fill component in genge.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ge format.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://sourceforge.net/p/mcj/tickets/72/; https://sourceforge.net/p/mcj/tickets/72/
CVE: CVE-2020-21683
Published: 2021-08-10
Description: A global buffer overflow in the shade_or_tint_name_after_declare_color in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://sourceforge.net/p/mcj/tickets/77/; https://sourceforge.net/p/mcj/tickets/77/
CVE: CVE-2020-21684
Published: 2021-08-10
Description: A global buffer overflow in the put_font in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pict2e format.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://sourceforge.net/p/mcj/tickets/75/; https://sourceforge.net/p/mcj/tickets/75/