deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-4162
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/158874/Safari-Webkit-For-iOS-7.1.2-JIT-Optimization-Bug.html; http://www.securitytracker.com/id/1040604; https://security.gentoo.org/glsa/201808-04
CVE: CVE-2018-4163
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1040604; https://security.gentoo.org/glsa/201808-04; https://support.apple.com/HT208693
CVE: CVE-2018-4164
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. Xcode before 9.3 is affected. The issue, which is unspecified, involves the "LLVM" component.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.llvm.org/pipermail/llvm-commits/; http://releases.llvm.org/; http://www.securityfocus.com/bid/103583
CVE: CVE-2018-4165
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1040604; https://security.gentoo.org/glsa/201808-04; https://support.apple.com/HT208693
CVE: CVE-2018-4166
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "NSURLSession" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securitytracker.com/id/1040604; http://www.securitytracker.com/id/1040608; https://support.apple.com/HT208692
CVE: CVE-2018-4167
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "File System Events" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securitytracker.com/id/1040604; http://www.securitytracker.com/id/1040608; https://support.apple.com/HT208692
CVE: CVE-2018-4168
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Files Widget" component. It allows physically proximate attackers to obtain sensitive information by leveraging the display of cached data on a locked device.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/103578; http://www.securitytracker.com/id/1040604; https://support.apple.com/HT208693
CVE: CVE-2018-4170
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Admin Framework" component. It allows local users to discover a password by listing a process and its arguments during sysadminctl execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522
References: http://www.securityfocus.com/bid/103582; http://www.securitytracker.com/id/1040608; https://support.apple.com/HT208692
CVE: CVE-2018-4172
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Find My iPhone" component. It allows physically proximate attackers to bypass the iCloud password requirement for disabling the "Find My iPhone" feature via vectors involving a backup restore.
CVSS Score: 4.6 (MEDIUM)
References: http://www.securityfocus.com/bid/103578; http://www.securitytracker.com/id/1040604; https://support.apple.com/HT208693
CVE: CVE-2018-4174
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted messages by leveraging an inconsistency in the user interface.
CVSS Score: 5.9 (MEDIUM)
References: http://www.securityfocus.com/bid/103581; http://www.securitytracker.com/id/1040604; http://www.securitytracker.com/id/1040608
CVE: CVE-2018-4175
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "LaunchServices" component. It allows attackers to bypass the code-signing protection mechanism via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/103582; http://www.securitytracker.com/id/1040608; https://support.apple.com/HT208692
CVE: CVE-2018-4176
Published: 2018-04-03
Description: An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Images" component. It allows attackers to trigger an app launch upon mounting a crafted disk image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/103582; http://www.securitytracker.com/id/1040608; https://support.apple.com/HT208692
CVE: CVE-2018-0492
Published: 2018-04-03
Description: Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://lists.debian.org/debian-lts-announce/2018/04/msg00002.html; https://lists.debian.org/debian-security-announce/2018/msg00089.html; https://security-tracker.debian.org/tracker/CVE-2018-0492
CVE: CVE-2018-0493
Published: 2018-04-03
Description: remctld in remctl before 3.14, when an attacker is authorized to execute a command that uses the sudo option, has a use-after-free that leads to a daemon crash, memory corruption, or arbitrary command execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-416
References: https://git.eyrie.org/?p=kerberos/remctl.git%3Ba=commit%3Bh=86c7e44090c988112a37589d2c7a94029eb5e641; https://www.debian.org/security/2018/dsa-4159; https://www.eyrie.org/~eagle/software/remctl/security/2018-04-01.html
CVE: CVE-2016-7472
Published: 2018-04-03
Description: F5 BIG-IP ASM version 12.1.0 - 12.1.1 may allow remote attackers to cause a denial of service (DoS) via a crafted HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/94260; http://www.securityfocus.com/bid/97168; http://www.securitytracker.com/id/1037275
CVE: CVE-2018-8836
Published: 2018-04-03
Description: Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools. Specially crafted packets may also be sent to Port 2455/TCP/IP, used in Codesys management software, which may result in a denial-of-service condition of communications with commissioning and service tools.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404, CWE-404
References: http://www.securityfocus.com/bid/103726; https://ics-cert.us-cert.gov/advisories/ICSA-18-088-01; https://www.wago.com/medias/Vulnerability-in-the-WAGO-Ethernet-TCP-IP-driver.pdf?context=bWFzdGVyfHJvb3R8MjgxNDk0fGFwcGxpY2F0aW9uL3BkZnxoOTcvaDhkLzkxNTAyMjMyMjA3NjYucGRmfGRlNWQ4ODc0NTE5M2UyNTUwNTIyNDRlOWFkNWI2YjNkMzg0YTVhYzlmYTBjNzM4MDdmNmYzOTM5M2ZlMGEzNzE
CVE: CVE-2016-8365
Published: 2018-04-03
Description: OSIsoft PI System software (Applications using PI Asset Framework (AF) Client versions prior to PI AF Client 2016, Version 2.8.0; Applications using PI Software Development Kit (SDK) versions prior to PI SDK 2016, Version 1.4.6; PI Buffer Subsystem, versions prior to and including, Version 4.4; and PI Data Archive versions prior to PI Data Archive 2015, Version 3.4.395.64) operates between endpoints without a complete model of endpoint features potentially causing the product to perform actions based on this incomplete model, which could result in a denial of service. OSIsoft reports that in order to exploit the vulnerability an attacker would need to be locally connected to a server. A CVSS v3 base score of 7.1 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-437, CWE-284
References: http://www.securityfocus.com/bid/94165; https://ics-cert.us-cert.gov/advisories/ICS-VU-313-03; https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00308
CVE: CVE-2018-1098
Published: 2018-04-03
Description: A cross-site request forgery flaw was found in etcd 3.3.1 and earlier. An attacker can set up a website that tries to send a POST request to the etcd server and modify a key. Adding a key is done with PUT so it is theoretically safe (can't PUT from an HTML form or such) but POST allows creating in-order keys that an attacker can send.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://bugzilla.redhat.com/show_bug.cgi?id=1552714; https://github.com/coreos/etcd/issues/9353; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JX7QTIT465BQGRGNCE74RATRQLKT2QE4/
CVE: CVE-2018-1099
Published: 2018-04-03
Description: DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1552717; https://github.com/coreos/etcd/issues/9353; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JX7QTIT465BQGRGNCE74RATRQLKT2QE4/
CVE: CVE-2018-3689
Published: 2018-04-03
Description: AESM daemon in Intel Software Guard Extensions Platform Software Component for Linux before 2.1.102 can effectively be disabled by a local attacker creating a denial of services like remote attestation provided by the AESM.
CVSS Score: 5.5 (MEDIUM)
References: https://cdrdv2.intel.com/v1/dl/getContent/685355; https://cdrdv2.intel.com/v1/dl/getContent/685355
CVE: CVE-2017-11075
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, if cmd_pkt and reg_pkt are called from different userspace threads, a use after free condition can potentially occur in wdsp_glink_write().
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-14880
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while IPA WAN-driver is processing multiple requests from modem/user-space module, the global variable "num_q6_rule" does not have a mutex lock and thus can be accessed and modified by multiple threads.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-14890
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in the processing of an SWBA event, the vdev_map value is not properly validated leading to a potential buffer overwrite in function wma_send_bcn_buf_ll().
CVSS Score: 7.3 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-14894
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in wma_vdev_start_resp_handler(), vdev id is received from firmware as part of WMI_VDEV_START_RESP_EVENTID. This vdev id can be greater than max bssid stored in wma handle and this would result in buffer overwrite while accessing wma_handle->interfaces[vdev_id].
CVSS Score: 7.3 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-15822
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing a 802.11 management frame, a buffer overflow may potentially occur.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-15836
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, if the firmware sends a service ready event to the host with a large number in the num_hw_modes or num_phy, then it could result in an integer overflow which may potentially lead to a buffer overflow.
CVSS Score: 7.3 (HIGH)
CWE: CWE-190
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-15837
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a policy for the packet pattern attribute NL80211_PKTPAT_OFFSET is not defined which can lead to a buffer over-read in nla_get_u32().
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-15853
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing PTT commands, ptt_sock_send_msg_to_app() is invoked without validating the packet length. If the packet length is invalid, then a buffer over-read can occur.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-17770
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in a power driver ioctl handler, an Untrusted Pointer Dereference may potentially occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2017-18147
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in MMCP, a downlink message is not being properly validated.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/103671; https://source.android.com/security/bulletin/2018-04-01; http://www.securityfocus.com/bid/103671
CVE: CVE-2018-3563
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, untrusted pointer dereference in apr_cb_func can lead to an arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2018-3566
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a buffer overwrite may occur in ProcSetReqInternal() due to missing length check.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/2018-04-01; https://source.android.com/security/bulletin/2018-04-01
CVE: CVE-2018-3584
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a Use After Free condition can occur in the function rmnet_usb_ctrl_init().
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2018-3596
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, legacy code vulnerable after migration has been removed.
CVSS Score: 9.8 (CRITICAL)
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2018-3598
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, insufficient validation of parameters from userspace in the camera driver can lead to information leak and out-of-bounds access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2018-3599
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while notifying a DCI client, a Use After Free condition can occur.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2018-5820
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in the function wma_tbttoffset_update_event_handler(), a parameter received from firmware is used to allocate memory for a local buffer and is not properly validated. This can potentially result in an integer overflow subsequently leading to a heap overwrite.
CVSS Score: 7.3 (HIGH)
CWE: CWE-190
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2018-5821
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in function wma_wow_wakeup_host_event(), wake_info->vdev_id is received from FW and is used directly as array index to access wma->interfaces whose max index should be (max_bssid-1). If wake_info->vdev_id is greater than or equal to max_bssid, an out-of-bounds read occurs.
CVSS Score: 7.3 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2018-5822
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, compromised WLAN FW can potentially cause a buffer overwrite.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2018-5823
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, improper buffer length validation in extscan hotlist event can lead to potential buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2018-5824
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing HTT_T2H_MSG_TYPE_RX_FLUSH or HTT_T2H_MSG_TYPE_RX_PN_IND messages, a buffer overflow can occur if the tid value obtained from the firmware is out of range.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2018-5825
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in the kernel IPA driver, a Use After Free condition can occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2018-5826
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, due to a race condition, a Use After Free condition can occur in the WLAN driver.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362, CWE-416
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2018-5828
Published: 2018-04-03
Description: In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in function wma_extscan_start_stop_event_handler(), vdev_id comes from the variable event from firmware and is not properly validated potentially leading to a buffer overwrite.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2018-04-01; https://source.android.com/security/bulletin/pixel/2018-04-01
CVE: CVE-2017-3773
Published: 2018-04-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none