deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-10610
Published: 2017-10-13
Description: On SRX Series devices, a crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to crash. Repeated crashes of the flowd process constitutes an extended denial of service condition for the SRX Series device. This issue only occurs if NAT64 is configured. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D71, 12.3X48 prior to 12.3X48-D55, 15.1X49 prior to 15.1X49-D100 on SRX Series. No other Juniper Networks products or platforms are affected by this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://kb.juniper.net/JSA10813; https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/nat-stateful-nat64-configuring.html; https://kb.juniper.net/JSA10813
CVE: CVE-2017-10611
Published: 2017-10-13
Description: If extended statistics are enabled via 'set chassis extended-statistics', when executing any operation that fetches interface statistics, including but not limited to SNMP GET requests, the pfem process or the FPC may crash and restart. Repeated crashes of PFE processing can result in an extended denial of service condition. This issue only affects the following platforms: (1) EX2200, EX3300, XRE200 (2) MX Series routers with MPC7E/8E/9E PFEs installed, and only if 'extended-statistics' are enabled under the [edit chassis] configuration. Affected releases are Juniper Networks Junos OS 14.1 prior to 14.1R8-S5, 14.1R9 on MX Series; 14.1X53 prior to 14.1X53-D46, 14.1X53-D50 on EX2200, EX3300, XRE200; 14.2 prior to 14.2R7-S9, 14.2R8 on MX Series; 15.1 prior to 15.1F5-S8, 15.1F6-S8, 15.1R5-S3, 15.1R6 on MX Series; 16.1 prior to 16.1R4-S5, 16.1R5, 16.1R6 on MX Series; 16.1X65 prior to 16.1X65-D45 on EX2200, EX3300, XRE200; 16.2 prior to 16.2R2-S1, 16.2R3 on MX Series; 17.1 prior to 17.1R2-S2, 17.1R3 on MX Series; 17.2 prior to 17.2R1-S3, 17.2R2 on MX Series; 17.2X75 prior to 17.2X75-D50 on MX Series; 17.3 prior to 17.3R1-S1, 17.3R2 on MX Series. No other Juniper Networks products or platforms are affected by this issue.
CVSS Score: 6.5 (MEDIUM)
References: https://kb.juniper.net/JSA10814; https://kb.juniper.net/JSA10814
CVE: CVE-2017-10612
Published: 2017-10-13
Description: A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: http://www.securityfocus.com/bid/101256; https://kb.juniper.net/JSA10826; http://www.securityfocus.com/bid/101256
CVE: CVE-2017-10613
Published: 2017-10-13
Description: A vulnerability in a specific loopback filter action command, processed in a specific logical order of operation, in a running configuration of Juniper Networks Junos OS, allows an attacker with CLI access and the ability to initiate remote sessions to the loopback interface with the defined action, to hang the kernel. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D55; 12.3X48 prior to 12.3X48-D35; 14.1 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D40; 14.2 prior to 14.2R4-S9, 14.2R7-S8, 14.2R8; 15.1 prior to 15.1F5-S3, 15.1F6, 15.1R4; 15.1X49 prior to 15.1X49-D60; 15.1X53 prior to 15.1X53-D47; 16.1 prior to 16.1R2. No other Juniper Networks products or platforms are affected by this issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://kb.juniper.net/JSA10816; https://kb.juniper.net/JSA10816
CVE: CVE-2017-10614
Published: 2017-10-13
Description: A vulnerability in telnetd service on Junos OS allows a remote attacker to cause a limited memory and/or CPU consumption denial of service attack. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS 12.1X46 prior to 12.1X46-D45; 12.3X48 prior to 12.3X48-D30; 14.1 prior to 14.1R4-S9, 14.1R8; 14.2 prior to 14.2R6; 15.1 prior to 15.1F5, 15.1R3; 15.1X49 prior to 15.1X49-D40; 15.1X53 prior to 15.1X53-D232, 15.1X53-D47.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://kb.juniper.net/JSA10817; https://kb.juniper.net/JSA10817
CVE: CVE-2017-10615
Published: 2017-10-13
Description: A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM. Affected Juniper Networks Junos OS releases are: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D50 on EX and QFX series; 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8; No other Junos OS releases are affected by this issue. No other Juniper Networks products are affected by this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securitytracker.com/id/1040039; https://kb.juniper.net/JSA10818; http://www.securitytracker.com/id/1040039
CVE: CVE-2017-10616
Published: 2017-10-13
Description: The ifmap service that comes bundled with Juniper Networks Contrail releases uses hard coded credentials. Affected releases are Contrail releases 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-2017-10617 can be chained together and have a combined CVSSv3 score of 5.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-798
References: https://github.com/orangecertcc/security-research/security/advisories/GHSA-qx9c-49m4-f3vj; https://kb.juniper.net/JSA10819; https://github.com/orangecertcc/security-research/security/advisories/GHSA-qx9c-49m4-f3vj
CVE: CVE-2017-10617
Published: 2017-10-13
Description: The ifmap service that comes bundled with Contrail has an XML External Entity (XXE) vulnerability that may allow an attacker to retrieve sensitive system files. Affected releases are Juniper Networks Contrail 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-2017-10617 can be chained together and have a combined CVSSv3 score of 5.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-611
References: https://github.com/orangecertcc/security-research/security/advisories/GHSA-wjp8-8qf6-vqmc; https://kb.juniper.net/JSA10819; https://github.com/orangecertcc/security-research/security/advisories/GHSA-wjp8-8qf6-vqmc
CVE: CVE-2017-10618
Published: 2017-10-13
Description: When the 'bgp-error-tolerance' feature &#xe2;&#x80;" designed to help mitigate remote session resets from malformed path attributes &#xe2;&#x80;" is enabled, a BGP UPDATE containing a specifically crafted set of transitive attributes can cause the RPD routing process to crash and restart. Devices with BGP enabled that do not have 'bgp-error-tolerance' configured are not vulnerable to this issue. Affected releases are Juniper Networks Junos OS 13.3 prior to 13.3R10-S2; 14.1 prior to 14.1R8-S4, 14.1R9; 14.1X50 prior to 14.1X50-D185; 14.1X53 prior to 14.1X53-D45, 14.1X53-D50; 14.2 prior to 14.2R7-S7, 14.2R8; 15.1 prior to 15.1F5-S8, 15.1F6-S7, 15.1R5-S6, 15.1R6-S2, 15.1R7; 15.1X49 prior to 15.1X49-D100; 15.1X53 prior to 15.1X53-D64, 15.1X53-D70; 16.1 prior to 16.1R3-S4, 16.1R4-S3, 16.1R5; 16.2 prior to 16.2R1-S5, 16.2R2; 17.1 prior to 17.1R1-S3, 17.1R2; 17.2 prior to 17.2R1-S2, 17.2R2; 17.2X75 prior to 17.2X75-D50. No other Juniper Networks products or platforms are affected by this issue.
CVSS Score: 5.9 (MEDIUM)
References: https://kb.juniper.net/JSA10820; https://www.juniper.net/documentation/en_US/junos/topics/concept/bgp-error-handling-overview.html; https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/bgp-error-tolerance.html
CVE: CVE-2017-10619
Published: 2017-10-13
Description: When Express Path (formerly known as service offloading) is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800 in high availability cluster configuration mode, certain multicast packets might cause the flowd process to crash, halting or interrupting traffic from flowing through the device and triggering RG1+ (data-plane) fail-over to the secondary node. Repeated crashes of the flowd process may constitute an extended denial of service condition. This service is not enabled by default and is only supported in high-end SRX platforms. Affected releases are Juniper Networks Junos OS 12.3X48 prior to 12.3X48-D45, 15.1X49 prior to 15.1X49-D80 on SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800.
CVSS Score: 7.5 (HIGH)
References: https://kb.juniper.net/JSA10821; https://kb.juniper.net/JSA10821
CVE: CVE-2017-10620
Published: 2017-10-13
Description: Juniper Networks Junos OS on SRX series devices do not verify the HTTPS server certificate before downloading anti-virus updates. This may allow a man-in-the-middle attacker to inject bogus signatures to cause service disruptions or make the device not detect certain types of attacks. Affected Junos OS releases are: 12.1X46 prior to 12.1X46-D71; 12.3X48 prior to 12.3X48-D55; 15.1X49 prior to 15.1X49-D110;
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: https://kb.juniper.net/JSA10822; https://kb.juniper.net/JSA10822
CVE: CVE-2017-10621
Published: 2017-10-13
Description: A denial of service vulnerability in telnetd service on Juniper Networks Junos OS allows remote unauthenticated attackers to cause a denial of service. Affected Junos OS releases are: 12.1X46 prior to 12.1X46-D71; 12.3X48 prior to 12.3X48-D50; 14.1 prior to 14.1R8-S5, 14.1R9; 14.1X53 prior to 14.1X53-D50; 14.2 prior to 14.2R7-S9, 14.2R8; 15.1 prior to 15.1F2-S16, 15.1F5-S7, 15.1F6-S6, 15.1R5-S2, 15.1R6; 15.1X49 prior to 15.1X49-D90; 15.1X53 prior to 15.1X53-D47; 16.1 prior to 16.1R4-S1, 16.1R5; 16.2 prior to 16.2R1-S3, 16.2R2;
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://kb.juniper.net/JSA10817; https://kb.juniper.net/JSA10817
CVE: CVE-2017-10622
Published: 2017-10-13
Description: An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any privileged user. This issue only affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases prior to 16.1R3. This issue was found by an external security researcher.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/101258; https://kb.juniper.net/JSA10824; http://www.securityfocus.com/bid/101258
CVE: CVE-2017-10623
Published: 2017-10-13
Description: Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos Space cluster operations between two nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-287
References: https://kb.juniper.net/JSA10826; https://kb.juniper.net/JSA10826
CVE: CVE-2017-10624
Published: 2017-10-13
Description: Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-345
References: http://www.securityfocus.com/bid/101255; https://kb.juniper.net/JSA10826; http://www.securityfocus.com/bid/101255
CVE: CVE-2017-6223
Published: 2017-10-13
Description: Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt; https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt
CVE: CVE-2017-6224
Published: 2017-10-13
Description: Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating system by appending those commands in the Common Name field in the Certificate Generation Request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt; https://ruckus-www.s3.amazonaws.com/pdf/security/faq-security-advisory-id-092917.txt
CVE: CVE-2017-15298
Published: 2017-10-14
Description: Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service (memory consumption) via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to build the data structure in memory before writing to disk.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html; https://github.com/Katee/git-bomb; https://kate.io/blog/git-bomb/
CVE: CVE-2017-12629
Published: 2017-10-14
Description: Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external entity expansion vulnerability occurs in the XML Query Parser which is available, by default, for any query request with parameters deftype=xmlparser and can be exploited to upload malicious data to the /upload request handler or as Blind XXE using ftp wrapper in order to read arbitrary local files from the Solr server. Note also that the second vulnerability relates to remote code execution using the RunExecutableListener available on all affected versions of Solr.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://mail-archives.us.apache.org/mod_mbox/www-announce/201710.mbox/%3CCAOOKt51UO_6Vy%3Dj8W%3Dx1pMbLW9VJfZyFWz7pAnXJC_OAdSZubA%40mail.gmail.com%3E; http://openwall.com/lists/oss-security/2017/10/13/1; http://www.securityfocus.com/bid/101261
CVE: CVE-2017-15299
Published: 2017-10-14
Description: The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that already exists but is uninstantiated, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted system call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://access.redhat.com/errata/RHSA-2018:0654; https://bugzilla.redhat.com/show_bug.cgi?id=1498016; https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html
CVE: CVE-2017-15304
Published: 2017-10-15
Description: /bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a "Cookie: PHPSESSID=" header. This can be used to achieve persistent access to the admin panel even after an admin password change.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384
References: https://www.utkusen.com/blog/multiple-vulnerabilities-on-airtame-device-before-version-3.html; https://www.utkusen.com/blog/multiple-vulnerabilities-on-airtame-device-before-version-3.html
CVE: CVE-2017-15305
Published: 2017-10-15
Description: XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.recorday.cn/about/xss2.txt; https://github.com/C0der1iu/Nexusphppoc/blob/master/xss2.txt; http://www.recorday.cn/about/xss2.txt
CVE: CVE-2017-15300
Published: 2017-10-15
Description: The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort of request is made (such as "GET / HTTP/1.1"), which allows for a Denial of Service attack preventing a user from viewing their mining statistics by an attacker opening a session with telnet or netcat and connecting to the miner on the HTTP API port.
CVSS Score: 5.3 (MEDIUM)
References: https://bitcointalk.org/index.php?topic=1707546.msg23016970#msg23016970; https://www.legacysecuritygroup.com/cve-2017-15300.html; https://bitcointalk.org/index.php?topic=1707546.msg23016970#msg23016970
CVE: CVE-2017-15360
Published: 2017-10-15
Description: PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b; https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b
CVE: CVE-2017-15363
Published: 2017-10-15
Description: Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://extensions.typo3.org/extension/download/restler/1.7.1/zip/; https://extensions.typo3.org/extension/restler/; https://extensions.typo3.org/extension/download/restler/1.7.1/zip/
CVE: CVE-2017-15364
Published: 2017-10-15
Description: The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact via a crafted file. NOTE: This has been disputed and it is argued that this is not present in version 1.1.0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-415
References: https://github.com/evan/ccsv/commit/24e0b9b94c44a15b23475e821366239d53764dbd; https://github.com/evan/ccsv/commit/c59d960ffa6b742a0616a[PII_REDACTED]62142e6c1#diff-e39824a4819928ff248d5e90a12d1b311db[PII_REDACTED]cdc0ad7058da12244d9R224; https://github.com/evan/ccsv/issues/15
CVE: CVE-2017-15302
Published: 2017-10-16
Description: In CPUID CPU-Z through 1.81, there are improper access rights to a kernel-mode driver (e.g., cpuz143_x64.sys for version 1.43) that can result in information disclosure or elevation of privileges, because of an arbitrary read of any physical address via ioctl 0x9C402604. Any application running on the system (Windows), including sandboxed users, can issue an ioctl to this driver without any validation. Furthermore, the driver can map any physical page on the system and returns the allocated map page address to the user: that results in an information leak and EoP. NOTE: the vendor indicates that the arbitrary read itself is intentional behavior (for ACPI scan functionality); the security issue is the lack of an ACL.
CVSS Score: 7.8 (HIGH)
References: https://github.com/akayn/Bugs/blob/master/CPUID/CVE-2017-15302/README.md; https://github.com/akayn/Bugs/blob/master/CPUID/CVE-2017-15302/README.md
CVE: CVE-2017-15303
Published: 2017-10-16
Description: In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, because any program running on the local machine (while CPU-Z is running) can issue an ioctl 0x9C402430 call to the kernel-mode driver (e.g., cpuz141_x64.sys for version 1.41).
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/akayn/Bugs/blob/master/CPUID/CVE-2017-15303/README.md; https://github.com/akayn/Bugs/blob/master/CPUID/CVE-2017-15303/README.md
CVE: CVE-2017-15362
Published: 2017-10-16
Description: osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication channels, etc. The vulnerability is present after login into the application. This affects a different tickets.php file than CVE-2015-1176.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://becomepentester.blogspot.ae/2017/10/osTicket-XSS-CVE-2017-15362.html; https://becomepentester.blogspot.ae/2017/10/osTicket-XSS-CVE-2017-15362.html
CVE: CVE-2017-15368
Published: 2017-10-16
Description: The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted WASM file that triggers an incorrect r_hex_bin2str call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/radare/radare2/commit/52b1526443c1f[PII_REDACTED]91d1c3d37a5600515; https://github.com/radare/radare2/issues/8673; https://github.com/radare/radare2/commit/52b1526443c1f[PII_REDACTED]91d1c3d37a5600515
CVE: CVE-2017-15369
Published: 2017-10-16
Description: The build_filter_chain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, which allows remote attackers to cause a denial of service (Fitz fz_drop_imp use-after-free and application crash) or possibly have unspecified other impact via a crafted PDF document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://git.ghostscript.com/?p=mupdf.git%3Bh=c2663e51238ec8256da7fc61ad580db891d9fe9a; https://bugs.ghostscript.com/show_bug.cgi?id=698592; http://git.ghostscript.com/?p=mupdf.git%3Bh=c2663e51238ec8256da7fc61ad580db891d9fe9a
CVE: CVE-2017-15370
Published: 2017-10-16
Description: There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=1500554; https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html; https://lists.debian.org/debian-lts-announce/2019/02/msg00042.html
CVE: CVE-2017-15371
Published: 2017-10-16
Description: There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617
References: https://bugzilla.redhat.com/show_bug.cgi?id=1500570; https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html; https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html
CVE: CVE-2017-15372
Published: 2017-10-16
Description: There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service attack during conversion of an audio file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=1500553; https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html; https://lists.debian.org/debian-lts-announce/2019/02/msg00042.html
CVE: CVE-2017-15373
Published: 2017-10-16
Description: E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php (aka the search private area).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://k33r0k.wordpress.com/2017/10/12/e-sic-sql-injection/; https://www.exploit-db.com/exploits/42979/; https://k33r0k.wordpress.com/2017/10/12/e-sic-sql-injection/