deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-18310
Published: 2018-10-15
Description: An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to cause a denial of service (application crash) with a crafted ELF file, as demonstrated by consider_notes.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html; https://access.redhat.com/errata/RHSA-2019:2197; https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html
CVE: CVE-2018-18315
Published: 2018-10-15
Description: com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files because the copyMultipartFileToFile method in CdnUtils only checks for a ../ substring, and does not validate the file type and spaceName parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://github.com/xuhuisheng/lemon/issues/175; https://github.com/xuhuisheng/lemon/issues/175
CVE: CVE-2018-18316
Published: 2018-10-15
Description: emlog v6.0.0 has CSRF via the admin/user.php?action=new URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/yanchongchong/swallow/issues/5; https://github.com/yanchongchong/swallow/issues/5
CVE: CVE-2018-18317
Published: 2018-10-15
Description: DESHANG DSCMS 1.1 has CSRF via the public/index.php/admin/admin/add.html URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/yanchongchong/swallow/issues/6; https://github.com/yanchongchong/swallow/issues/6
CVE: CVE-2018-18318
Published: 2018-10-15
Description: The /dev/block/mmcblk0rpmb driver kernel module on Qiku 360 Phone N6 Pro 1801-A01 devices allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted 0xc0d8b300 ioctl call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/datadancer/HIAFuzz/blob/master/360%20Phone%20N6%20Pro%20Kernel%20Vuln.md; https://github.com/datadancer/HIAFuzz/blob/master/360%20Phone%20N6%20Pro%20Kernel%20Vuln.md
CVE: CVE-2018-18319
Published: 2018-10-15
Description: An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because api.php has an eval call, as demonstrated by the /6/api.php?function=command&class=remote&Cc='ls' URI. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows remote code execution
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://blog.51cto.com/010bjsoft/2298902; https://github.com/qoli/Merlin.PHP/issues/27; http://blog.51cto.com/010bjsoft/2298902
CVE: CVE-2018-18320
Published: 2018-10-15
Description: An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because exec.php has a popen call. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows remote code execution
CVSS Score: 9.8 (CRITICAL)
References: http://blog.51cto.com/010bjsoft/2298828; https://github.com/qoli/Merlin.PHP/issues/26; http://blog.51cto.com/010bjsoft/2298828
CVE: CVE-2018-18322
Published: 2018-10-15
Description: CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/index.php service_start, service_restart, service_fullstatus, or service_stop parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://0day.today/exploit/31304; https://seccops.com/centos-web-panel-0-9-8-480-multiple-vulnerabilities/; https://www.exploit-db.com/exploits/45610/
CVE: CVE-2018-18323
Published: 2018-10-15
Description: CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/index.php?module=file_editor&file=/../ URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://0day.today/exploit/31304; https://seccops.com/centos-web-panel-0-9-8-480-multiple-vulnerabilities/; https://www.exploit-db.com/exploits/45610/
CVE: CVE-2018-18324
Published: 2018-10-15
Description: CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fm_current_dir parameter, or the admin/index.php module, service_start, service_fullstatus, service_restart, service_stop, or file (within the file_editor) parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://0day.today/exploit/31304; https://seccops.com/centos-web-panel-0-9-8-480-multiple-vulnerabilities/; https://www.exploit-db.com/exploits/45610/
CVE: CVE-2018-1744
Published: 2018-10-15
Description: IBM Security Key Lifecycle Manager 2.5, 2.6, 2.7, and 3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 148423.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/148423; https://www.ibm.com/support/docview.wss?uid=ibm10733353; https://exchange.xforce.ibmcloud.com/vulnerabilities/148423
CVE: CVE-2018-1747
Published: 2018-10-15
Description: IBM Security Key Lifecycle Manager 2.5, 2.6, 2.7, and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 148428.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/148428; https://www.ibm.com/support/docview.wss?uid=ibm10733429; https://exchange.xforce.ibmcloud.com/vulnerabilities/148428
CVE: CVE-2018-18361
Published: 2018-10-15
Description: An issue was discovered in nc-cms through 2017-03-10. index.php?action=edit_html allows XSS via the name parameter, as demonstrated by a value beginning with home_content and containing a crafted SRC attribute of an IMG element.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/gnat/nc-cms/issues/10; https://github.com/gnat/nc-cms/issues/10
CVE: CVE-2018-15590
Published: 2018-10-15
Description: An issue was discovered in Ivanti Workspace Control before 10.3.0.0 and RES One Workspace, when file and folder security are configured. A local authenticated user can bypass file and folder security restriction by leveraging an unspecified attack vector.
CVSS Score: 5.5 (MEDIUM)
References: http://packetstormsecurity.com/files/149617/Ivanti-Workspace-Control-UNC-Path-Data-Security-Bypass.html; http://seclists.org/fulldisclosure/2018/Oct/2; https://community.ivanti.com/docs/DOC-69682
CVE: CVE-2018-15591
Published: 2018-10-15
Description: An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can bypass Application Whitelisting restrictions to execute arbitrary code by leveraging multiple unspecified attack vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-668
References: http://packetstormsecurity.com/files/149614/Ivanti-Workspace-Control-Application-PowerGrid-SEE-Whitelist-Bypass.html; http://seclists.org/fulldisclosure/2018/Oct/4; https://community.ivanti.com/docs/DOC-69684
CVE: CVE-2018-15592
Published: 2018-10-15
Description: An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can execute processes with elevated privileges via an unspecified attack vector.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/149615/Ivanti-Workspace-Control-Named-Pipe-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2018/Oct/1; https://community.ivanti.com/docs/DOC-69692
CVE: CVE-2018-15593
Published: 2018-10-15
Description: An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can decrypt the encrypted datastore or relay server password by leveraging an unspecified attack vector.
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/149616/Ivanti-Workspace-Control-Registry-Stored-Credentials.html; http://seclists.org/fulldisclosure/2018/Oct/3; https://community.ivanti.com/docs/DOC-69693
CVE: CVE-2018-17961
Published: 2018-10-15
Description: Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving errorhandler setup. NOTE: this issue exists because of an incomplete fix for CVE-2018-17183.
CVSS Score: 8.6 (HIGH)
CWE: CWE-209
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=a54c9e61e7d0; http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=a5a9bf8c6a63; http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=a6807394bd94
CVE: CVE-2018-18073
Published: 2018-10-15
Description: Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-200
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=34cc326eb2c[PII_REDACTED]887fe0b32e8d987741c; http://packetstormsecurity.com/files/149758/Ghostscript-Exposed-System-Operators.html; http://www.openwall.com/lists/oss-security/2018/10/10/12
CVE: CVE-2018-15378
Published: 2018-10-15
Description: A vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service (DoS) condition. The vulnerability is due to an error related to the MEW unpacker within the "unmew11()" function (libclamav/mew.c), which can be exploited to trigger an invalid read memory access via a specially crafted EXE file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://bugzilla.clamav.net/show_bug.cgi?id=12170; https://lists.debian.org/debian-lts-announce/2018/10/msg00014.html; https://secuniaresearch.flexerasoftware.com/advisories/83000/
CVE: CVE-2018-12154
Published: 2018-10-15
Description: Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unprivileged user to potentially create an infinite loop and crash an application via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://seclists.org/fulldisclosure/2019/Oct/55; http://seclists.org/fulldisclosure/2019/Oct/56; http://www.securityfocus.com/bid/105582
CVE: CVE-2017-5934
Published: 2018-10-15
Description: Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00024.html; http://moinmo.in/SecurityFixes; https://github.com/moinwiki/moin-1.9/commit/70955a8eae091cc88fd9a6e510177e70289ec024
CVE: CVE-2018-15538
Published: 2018-10-15
Description: Agentejo Cockpit has multiple Cross-Site Scripting vulnerabilities.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2018/Oct/30; http://seclists.org/fulldisclosure/2018/Oct/30
CVE: CVE-2018-15539
Published: 2018-10-15
Description: Agentejo Cockpit lacks an anti-CSRF protection mechanism. Thus, an attacker is able to change API tokens, passwords, etc.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2018/Oct/30; http://seclists.org/fulldisclosure/2018/Oct/30
CVE: CVE-2018-15540
Published: 2018-10-15
Description: Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2018/Oct/30; http://seclists.org/fulldisclosure/2018/Oct/30
CVE: CVE-2018-17532
Published: 2018-10-15
Description: Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/149777/Teltonika-RUT9XX-Unauthenticated-OS-Command-Injection.html; http://seclists.org/fulldisclosure/2018/Oct/27; https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180319-01_Teltonika_OS_Command_Injection
CVE: CVE-2018-17533
Published: 2018-10-15
Description: Teltonika RUT9XX routers with firmware before 00.05.01.1 are prone to cross-site scripting vulnerabilities in hotspotlogin.cgi due to insufficient user input sanitization.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149781/Teltonika-RUT9XX-Reflected-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2018/Oct/29; https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180410-01_Teltonika_Cross_Site_Scripting
CVE: CVE-2018-17534
Published: 2018-10-15
Description: Teltonika RUT9XX routers with firmware before 00.04.233 provide a root terminal on a serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://packetstormsecurity.com/files/149779/Teltonika-RUT9XX-Missing-Access-Control-To-UART-Root-Terminal.html; http://seclists.org/fulldisclosure/2018/Oct/28; https://github.com/sbaresearch/advisories/tree/public/2018/SBA-ADV-20180319-02_Teltonika_Incorrect_Access_Control
CVE: CVE-2018-17980
Published: 2018-10-15
Description: NoMachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a Trojan horse wintab32.dll file located in the same directory as a .nxs file, as demonstrated by a scenario where the .nxs file and the DLL are in the current working directory, and the Trojan horse code is executed. (The directory could, in general, be on a local filesystem or a network share.).
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://hyp3rlinx.altervista.org/advisories/NOMACHINE-TROJAN-FILE-REMOTE-CODE-EXECUTION.txt; http://packetstormsecurity.com/files/149784/NoMachine-5.3.26-Remote-Code-Execution.html; https://www.exploit-db.com/exploits/45611/
CVE: CVE-2018-18259
Published: 2018-10-15
Description: Stored XSS has been discovered in version 1.0.12 of the LUYA CMS software via /admin/api-cms-nav/create-page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149771/LUYA-CMS-1.0.12-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149771/LUYA-CMS-1.0.12-Cross-Site-Scripting.html
CVE: CVE-2018-18260
Published: 2018-10-15
Description: In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The profile image in the User settings section can be run in the update / upload area via /admin/media/upload?actions=false. NOTE: the vendor reports that they are "unable to reproduce the reported issue on any version."
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149772/CAMALEON-CMS-2.4-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149772/CAMALEON-CMS-2.4-Cross-Site-Scripting.html
CVE: CVE-2018-18374
Published: 2018-10-16
Description: XSS exists in the MetInfo 6.1.2 admin/index.php page via the anyid parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://mang0.me/archives/a5c61176/; http://mang0.me/archives/a5c61176/
CVE: CVE-2018-18375
Published: 2018-10-16
Description: goform/getProfileList in Orange AirBox Y858_FL_01.16_04 allows attackers to extract APN data (name, number, username, and password) via the rand parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-330
References: https://github.com/remix30303/AirBoxAPNLeaks; https://github.com/remix30303/AirBoxAPNLeaks
CVE: CVE-2018-18376
Published: 2018-10-16
Description: goform/getWlanClientInfo in Orange AirBox Y858_FL_01.16_04 allows remote attackers to discover information about currently connected devices (hostnames, IP addresses, MAC addresses, and connection time) via the rand parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/remix30303/AirboxLeak; https://github.com/remix30303/AirboxLeak
CVE: CVE-2018-18377
Published: 2018-10-16
Description: goform/setReset on Orange AirBox Y858_FL_01.16_04 devices allows attackers to reset a router to factory settings, which can be used to login using the default admin:admin credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://github.com/remix30303/AirBoxDoom; https://github.com/remix30303/AirBoxDoom
CVE: CVE-2018-18381
Published: 2018-10-16
Description: Z-BlogPHP 1.5.2.1935 (Zero) has a stored XSS Vulnerability in zb_system/function/c_system_admin.php via the Content-Type header during the uploading of image attachments.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/seedis/Z-BlogPHP/blob/master/Z-BlogPHP_stored_xss.md; https://github.com/seedis/Z-BlogPHP/blob/master/Z-BlogPHP_stored_xss.md
CVE: CVE-2018-18382
Published: 2018-10-16
Description: Advanced HRM 1.6 allows Remote Code Execution via PHP code in a .php file to the user/update-user-avatar URI, which can be accessed through an "Update Profile" "Change Picture" (aka user/edit-profile) action.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://www.exploit-db.com/exploits/45604/; https://www.exploit-db.com/exploits/45604/
CVE: CVE-2018-13399
Published: 2018-10-16
Description: The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://jira.atlassian.com/browse/CRUC-8314; https://jira.atlassian.com/browse/FE-7105; https://jira.atlassian.com/browse/CRUC-8314
CVE: CVE-2018-10839
Published: 2018-10-16
Description: Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-121, CWE-190
References: https://access.redhat.com/errata/RHSA-2019:2892; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10839; https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
CVE: CVE-2018-18384
Published: 2018-10-16
Description: Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00009.html; https://access.redhat.com/errata/RHSA-2019:2159; https://bugzilla.suse.com/show_bug.cgi?id=1110194
CVE: CVE-2018-18385
Published: 2018-10-16
Description: Asciidoctor in versions < 1.5.8 allows remote attackers to cause a denial of service (infinite loop). The loop was caused by the fact that Parser.next_block was not exhausting all the lines in the reader as the while loop expected it would. This was happening because the regular expression that detects any list was not agreeing with the regular expression that detects a specific list type. So the line kept getting pushed back onto the reader, hence causing the loop.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/asciidoctor/asciidoctor/issues/2888; https://github.com/asciidoctor/asciidoctor/issues/2888
CVE: CVE-2018-18389
Published: 2018-10-16
Description: Due to incorrect access control in Neo4j Enterprise Database Server 3.4.x before 3.4.9, the setting of LDAP for authentication with STARTTLS, and System Account for authorization, allows an attacker to log into the server by sending any valid username with an arbitrary password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/neo4j/neo4j/issues/12047; https://github.com/neo4j/neo4j/issues/12047
CVE: CVE-2018-1777
Published: 2018-10-16
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148800.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1041873; https://exchange.xforce.ibmcloud.com/vulnerabilities/148800; https://www.ibm.com/support/docview.wss?uid=ibm10730631
CVE: CVE-2018-6974
Published: 2018-10-16
Description: VMware ESXi (6.7 before ESXi[PII_REDACTED]01-SG, 6.5 before ESXi[PII_REDACTED]01-BG, and 6.0 before ESXi[PII_REDACTED]01-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to execute code on the host.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105660; http://www.securitytracker.com/id/1041875; http://www.securitytracker.com/id/1041876
CVE: CVE-2018-11019
Published: 2018-10-16
Description: kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command[PII_REDACTED] and cause a kernel crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-88
References: https://github.com/datadancer/HIAFuzz/blob/master/CVE-2018-11019.md; https://github.com/datadancer/HIAFuzz/blob/master/CVE-Advisory.md; https://github.com/datadancer/HIAFuzz/blob/master/CVE-2018-11019.md
CVE: CVE-2018-11020
Published: 2018-10-16
Description: kernel/omap/drivers/rpmsg/rpmsg_omx.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device file /dev/rpmsg-omx1 with the command[PII_REDACTED], and cause a kernel crash.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-88
References: https://github.com/datadancer/HIAFuzz/blob/master/CVE-2018-11020.md; https://github.com/datadancer/HIAFuzz/blob/master/CVE-Advisory.md; https://github.com/datadancer/HIAFuzz/blob/master/CVE-2018-11020.md
CVE: CVE-2018-11021
Published: 2018-10-16
Description: kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/dsscomp with the command[PII_REDACTED] and cause a kernel crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-88
References: https://github.com/datadancer/HIAFuzz/blob/master/CVE-2018-11021.md; https://github.com/datadancer/HIAFuzz/blob/master/CVE-Advisory.md; https://github.com/datadancer/HIAFuzz/blob/master/CVE-2018-11021.md
CVE: CVE-2018-11022
Published: 2018-10-16
Description: kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command[PII_REDACTED] and cause a kernel crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-88
References: https://github.com/datadancer/HIAFuzz/blob/master/CVE-Advisory.md; https://github.com/datadancer/HIAFuzz/blob/master/CVE-Advisory.md
CVE: CVE-2018-11023
Published: 2018-10-16
Description: kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command[PII_REDACTED] and cause a kernel crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-88
References: https://github.com/datadancer/HIAFuzz/blob/master/CVEs.md; https://github.com/datadancer/HIAFuzz/blob/master/CVEs.md