deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-3579
Published: 2018-06-12
Description: In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, event->num_entries_in_page is a value received from firmware that is not properly validated which can lead to a buffer over-read
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/pixel/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-3581
Published: 2018-06-12
Description: In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, a buffer overwrite can occur if the vdev_id received from firmware is larger than max_bssid.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/pixel/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-3582
Published: 2018-06-12
Description: Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-119
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/pixel/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-5842
Published: 2018-06-12
Description: An arbitrary address write can occur if a compromised WLAN firmware sends incorrect data to WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/pixel/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-5843
Published: 2018-06-12
Description: In the function wma_pdev_div_info_evt_handler() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, there is no upper bound check on the value event->num_chains_valid received from firmware which can lead to a buffer overwrite of the fixed size chain_rssi_result structure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/pixel/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-5844
Published: 2018-06-12
Description: In the video driver function set_output_buffers(), binfo can be accessed after being freed in a failure scenario in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/pixel/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-5847
Published: 2018-06-12
Description: Early or late retirement of rotation requests can result in a Use After Free condition in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/pixel/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-5848
Published: 2018-06-12
Description: In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the 'ie_len' argument can cause a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-190
References: https://access.redhat.com/errata/RHSA-2018:2948; https://access.redhat.com/errata/RHSA-2018:3083; https://access.redhat.com/errata/RHSA-2018:3096
CVE: CVE-2018-5849
Published: 2018-06-12
Description: Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, when more than one HLOS client loads the same TA, a Use After Free condition can occur.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/pixel/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-5851
Published: 2018-06-12
Description: Buffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out-of-range num_msdus value in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-129
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/pixel/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-12263
Published: 2018-06-13
Description: portfolioCMS 1.0.5 allows upload of arbitrary .php files via the admin/portfolio.php?newpage=true URI.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/oyeahtime/test/issues/3; https://github.com/oyeahtime/test/issues/3
CVE: CVE-2018-12264
Published: 2018-06-13
Description: Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html; https://access.redhat.com/errata/RHSA-2019:2101; https://github.com/Exiv2/exiv2/issues/366
CVE: CVE-2018-12265
Published: 2018-06-13
Description: Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html; https://access.redhat.com/errata/RHSA-2019:2101; https://github.com/Exiv2/exiv2/issues/365
CVE: CVE-2018-12266
Published: 2018-06-13
Description: system\errors\404.php in HongCMS 3.0.0 has XSS via crafted input that triggers a 404 HTTP status code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/lzlzh2016/CVE/blob/master/XSS.md; https://github.com/lzlzh2016/CVE/blob/master/XSS.md
CVE: CVE-2018-12268
Published: 2018-06-13
Description: acccheck.pl in acccheck 0.2.1 allows Command Injection via shell metacharacters in a username or password file, as demonstrated by injection into an smbclient command line.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://b3n7s.github.io/acccheck-command-injection.html; http://b3n7s.github.io/acccheck-command-injection.html
CVE: CVE-2011-4183
Published: 2018-06-13
Description: A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-434
References: https://bugzilla.suse.com/show_bug.cgi?id=736243; https://github.com/openSUSE/open-build-service/commit/5281e4bff9df31f1f91e22a0d1e9086b93b23d7e; https://bugzilla.suse.com/show_bug.cgi?id=736243
CVE: CVE-2018-12272
Published: 2018-06-13
Description: xowl/request.php in Ximdex 4.0 has XSS via the content parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/XIMDEX/ximdex/issues/148; https://github.com/XIMDEX/ximdex/issues/148
CVE: CVE-2018-12273
Published: 2018-06-13
Description: The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/XIMDEX/ximdex/issues/149; https://github.com/XIMDEX/ximdex/issues/149
CVE: CVE-2018-5432
Published: 2018-06-13
Description: The TIBCO Administrator server component of of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, and TIBCO Administrator - Enterprise Edition for z/Linux contains multiple vulnerabilities wherein a malicious user could theoretically perform cross-site scripting (XSS) attacks by way of manipulating artifacts prior to uploading them. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions up to and including 5.10.0, and TIBCO Administrator - Enterprise Edition for z/Linux: versions up to and including 5.9.1.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: http://www.securityfocus.com/bid/104458; https://www.tibco.com/support/advisories/2018/06/security-advisory-june-12-2018-tibco-administrator-enterprise-edition-2018-5432; http://www.securityfocus.com/bid/104458
CVE: CVE-2018-5433
Published: 2018-06-13
Description: The TIBCO Administrator server component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, and TIBCO Administrator - Enterprise Edition for z/Linux contains vulnerabilities wherein a malicious user could perform XML external entity expansion (XXE) attacks to disclose host machine information. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions up to and including 5.10.0, and TIBCO Administrator - Enterprise Edition for z/Linux: versions up to and including 5.9.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: http://www.securityfocus.com/bid/104451; https://www.tibco.com/support/advisories/2018/06/security-advisory-june-12-2018-tibco-administrator-enterprise-edition-2018-5433; http://www.securityfocus.com/bid/104451
CVE: CVE-2018-5434
Published: 2018-06-13
Description: The TIBCO Designer component of TIBCO Software Inc.'s TIBCO Runtime Agent, and TIBCO Runtime Agent for z/Linux contains vulnerabilities wherein a malicious user could perform XML external entity expansion (XXE) attacks to disclose host machine information. Affected releases are TIBCO Software Inc.'s TIBCO Runtime Agent: versions up to and including 5.10.0, and TIBCO Runtime Agent for z/Linux: versions up to and including 5.9.1.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-611
References: http://www.securityfocus.com/bid/104454; https://www.tibco.com/support/advisories/2018/06/security-advisory-june-12-2018-tibco-runtime-agent-2018-5434; http://www.securityfocus.com/bid/104454
CVE: CVE-2018-12290
Published: 2018-06-13
Description: The Yii2-StateMachine extension v2.x.x for Yii2 has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.iwantacve.cn/index.php/archives/40/; http://www.iwantacve.cn/index.php/archives/40/
CVE: CVE-2018-12291
Published: 2018-06-13
Description: The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied correctly.
CVSS Score: 7.5 (HIGH)
References: https://github.com/matrix-org/synapse/pull/3371; https://github.com/matrix-org/synapse/releases/tag/v0.31.1; https://github.com/matrix-org/synapse/pull/3371
CVE: CVE-2018-12292
Published: 2018-06-13
Description: A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://www.exploit-db.com/exploits/44900/; https://www.palemoon.org/releasenotes.shtml; https://www.exploit-db.com/exploits/44900/
CVE: CVE-2018-1393
Published: 2018-06-13
Description: IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.6 could allow an authenticated user to execute a specially crafted command that could obtain sensitive information. IBM X-Force ID: 138378.
CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22013250; http://www.securityfocus.com/bid/104466; https://exchange.xforce.ibmcloud.com/vulnerabilities/138378
CVE: CVE-2018-1431
Published: 2018-06-13
Description: A vulnerability in GSKit affects IBM Spectrum Scale 4.1.1, 4.2.0, 4.2.1, 4.2.3, and 5.0.0 that could allow a local attacker to obtain control of the Spectrum Scale daemon and to access and modify files in the Spectrum Scale file system, and possibly to obtain administrator privileges on the node. IBM X-Force ID: 139240.
CVSS Score: 7.4 (HIGH)
References: http://www.ibm.com/support/docview.wss?uid=ssg1S1012049; http://www.securityfocus.com/bid/105546; https://exchange.xforce.ibmcloud.com/vulnerabilities/139240
CVE: CVE-2018-3759
Published: 2018-06-13
Description: private_address_check ruby gem before 0.5.0 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition due to the address the socket uses not being checked. DNS entries with a TTL of 0 can trigger this case where the initial resolution is a public address but the subsequent resolution is a private address.
CVSS Score: 3.7 (LOW)
CWE: CWE-362, CWE-362
References: https://github.com/jtdowney/private_address_check/commit/[PII_REDACTED]db87fea7577f[PII_REDACTED]772bb147; https://github.com/jtdowney/private_address_check/commit/[PII_REDACTED]db87fea7577f[PII_REDACTED]772bb147
CVE: CVE-2017-16652
Published: 2018-06-13
Description: An issue was discovered in Symfony 2.7.x before 2.7.38, 2.8.x before 2.8.31, 3.2.x before 3.2.14, and 3.3.x before 3.3.13. DefaultAuthenticationSuccessHandler or DefaultAuthenticationFailureHandler takes the content of the _target_path parameter and generates a redirect response, but no check is performed on the path, which could be an absolute URL to an external domain. This Open redirect vulnerability can be exploited for example to mount effective phishing attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html; https://symfony.com/blog/cve-2017-16652-open-redirect-vulnerability-on-security-handlers; https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html
CVE: CVE-2018-11385
Published: 2018-06-13
Description: An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. A session fixation vulnerability within the "Guard" login feature may allow an attacker to impersonate a victim towards the web application if the session id value was previously known to the attacker.
CVSS Score: 8.1 (HIGH)
CWE: CWE-384
References: https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G4XNBMFW33H47O5TZGA7JYCVLDBCXAJV/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBQK7JDXIELADIPGZIOUCZKMAJM5LSBW/
CVE: CVE-2018-11386
Published: 2018-06-13
Description: An issue was discovered in the HttpFoundation component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. The PDOSessionHandler class allows storing sessions on a PDO connection. Under some configurations and with a well-crafted payload, it was possible to do a denial of service on a Symfony application without too much resources.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-613
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G4XNBMFW33H47O5TZGA7JYCVLDBCXAJV/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBQK7JDXIELADIPGZIOUCZKMAJM5LSBW/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WU5N2TZFNGXDGMXMPP7LZCWTFLENF6WH/
CVE: CVE-2018-11406
Published: 2018-06-13
Description: An issue was discovered in the Security component in Symfony 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11. By default, a user's session is invalidated when the user is logged out. This behavior can be disabled through the invalidate_session option. In this case, CSRF tokens were not erased during logout which allowed for CSRF token fixation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G4XNBMFW33H47O5TZGA7JYCVLDBCXAJV/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBQK7JDXIELADIPGZIOUCZKMAJM5LSBW/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WU5N2TZFNGXDGMXMPP7LZCWTFLENF6WH/
CVE: CVE-2018-11407
Published: 2018-06-13
Description: An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7. It allows remote attackers to bypass authentication by logging in with a "null" password and valid username, which triggers an unauthenticated bind.  NOTE: this issue exists because of an incomplete fix for CVE-2016-2403.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://symfony.com/blog/cve-2018-11407-unauthorized-access-on-a-misconfigured-ldap-server-when-using-an-empty-password; https://symfony.com/blog/cve-2018-11407-unauthorized-access-on-a-misconfigured-ldap-server-when-using-an-empty-password
CVE: CVE-2018-11408
Published: 2018-06-13
Description: The security handlers in the Security component in Symfony in 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11 have an Open redirect vulnerability when security.http_utils is inlined by a container.  NOTE: this issue exists because of an incomplete fix for CVE-2017-16652.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G4XNBMFW33H47O5TZGA7JYCVLDBCXAJV/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBQK7JDXIELADIPGZIOUCZKMAJM5LSBW/
CVE: CVE-2018-11688
Published: 2018-06-13
Description: Ignite Realtime Openfire before 3.9.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/148057/Ignite-Realtime-Openfire-3.7.1-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2018/Jun/13; http://seclists.org/fulldisclosure/2018/Jun/24
CVE: CVE-2018-11806
Published: 2018-06-13
Description: m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2018/06/07/1; http://www.securityfocus.com/bid/104400; https://access.redhat.com/errata/RHSA-2018:2462
CVE: CVE-2018-12320
Published: 2018-06-13
Description: There is a use after free in radare2 2.6.0 in r_anal_bb_free() in libr/anal/bb.c via a crafted Java binary file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://github.com/radare/radare2/commit/90b71c017a7fa9732fe45fd21b245ee051b1f548; https://github.com/radare/radare2/issues/10293; https://github.com/radare/radare2/commit/90b71c017a7fa9732fe45fd21b245ee051b1f548
CVE: CVE-2018-12321
Published: 2018-06-13
Description: There is a heap out of bounds read in radare2 2.6.0 in java_switch_op() in libr/anal/p/anal_java.c via a crafted Java binary file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/radare/radare2/commit/224e6bc13fa353dd3b7f7a2334588f1c4229e58d; https://github.com/radare/radare2/issues/10296; https://github.com/radare/radare2/commit/224e6bc13fa353dd3b7f7a2334588f1c4229e58d
CVE: CVE-2018-12322
Published: 2018-06-13
Description: There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via a crafted iNES ROM binary file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/radare/radare2/commit/bbb4af56003c1afdad67af0c4339267ca38b1017; https://github.com/radare/radare2/issues/10294; https://github.com/radare/radare2/commit/bbb4af56003c1afdad67af0c4339267ca38b1017
CVE: CVE-2018-12323
Published: 2018-06-13
Description: An issue was discovered on Momentum Axel 720P 5.1.8 devices. A password of EHLGVG is hard-coded for the root and admin accounts, which makes it easier for physically proximate attackers to login at the console.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-798
References: https://rchase.com/downloads/momentum-iot-penetration-test-report.pdf; https://rchase.com/downloads/momentum-iot-penetration-test-report.pdf
CVE: CVE-2018-5242
Published: 2018-06-13
Description: Norton App Lock prior to version 1.3.0.329 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking the device, thereby allowing the individual to gain device access.
CVSS Score: 6.2 (MEDIUM)
References: http://www.securityfocus.com/bid/104414; https://support.symantec.com/en_US/article.SYMSA1453.html; http://www.securityfocus.com/bid/104414
CVE: CVE-2018-7161
Published: 2018-06-13
Description: All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node server providing an http2 server to crash. This can be accomplished by interacting with the http2 server in a manner that triggers a cleanup bug where objects are used in native code after they are no longer available. This has been addressed by updating the http2 implementation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/106363; https://nodejs.org/en/blog/vulnerability/june-2018-security-releases/; https://security.gentoo.org/glsa/202003-48
CVE: CVE-2018-7162
Published: 2018-06-13
Description: All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash. This can be accomplished by sending duplicate/unexpected messages during the handshake. This vulnerability has been addressed by updating the TLS implementation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104468; https://nodejs.org/en/blog/vulnerability/june-2018-security-releases/; https://security.gentoo.org/glsa/202003-48
CVE: CVE-2018-7164
Published: 2018-06-13
Description: Node.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM. A bug introduced in 9.7.0 increases the memory consumed when reading from the network into JavaScript using the net.Socket object directly as a stream. An attacker could use this cause a denial of service by sending tiny chunks of data in short succession. This vulnerability was restored by reverting to the prior behaviour.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/104463; https://nodejs.org/en/blog/vulnerability/june-2018-security-releases/; https://security.gentoo.org/glsa/202003-48