deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-14430
Published: 2018-07-25
Description: The Mondula Multi Step Form plugin through 1.2.5 for WordPress allows XSS via the fw_data [id][1], fw_data [id][2], fw_data [id][3], fw_data [id][4], or email field of the contact form, exploitable with an fw_send_email action to wp-admin/admin-ajax.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://hackpuntes.com/cve-2018-14430-wordpress-plugin-multi-step-form-125-multiples-xss-reflejados/; https://wpvulndb.com/vulnerabilities/9106; https://hackpuntes.com/cve-2018-14430-wordpress-plugin-multi-step-form-125-multiples-xss-reflejados/
CVE: CVE-2018-14493
Published: 2018-07-25
Description: Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the group name.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.google.com/document/d/1K3G6a8P_LhYdk5Ddn57Z2aDUpaGAS7I_F8lESVfSFfY/edit; https://www.exploit-db.com/exploits/45160/; https://docs.google.com/document/d/1K3G6a8P_LhYdk5Ddn57Z2aDUpaGAS7I_F8lESVfSFfY/edit
CVE: CVE-2018-8090
Published: 2018-07-25
Description: Quick Heal Total Security 64 bit 17.00 (QHTS64.exe), (QHTSFT64.exe) - Version 10.0.1.38; Quick Heal Total Security 32 bit 17.00 (QHTS32.exe), (QHTSFT32.exe) - Version 10.0.1.38; Quick Heal Internet Security 64 bit 17.00 (QHIS64.exe), (QHISFT64.exe) - Version 10.0.0.37; Quick Heal Internet Security 32 bit 17.00 (QHIS32.exe), (QHISFT32.exe) - Version 10.0.0.37; Quick Heal AntiVirus Pro 64 bit 17.00 (QHAV64.exe), (QHAVFT64.exe) - Version 10.0.0.37; and Quick Heal AntiVirus Pro 32 bit 17.00 (QHAV32.exe), (QHAVFT32.exe) - Version 10.0.0.37 allow DLL Hijacking because of Insecure Library Loading.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://github.com/kernelm0de/CVE-2018-8090; https://github.com/kernelm0de/CVE-2018-8090
CVE: CVE-2017-2637
Published: 2018-07-26
Description: A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration. Libvirtd is deployed by default (by director) listening on 0.0.0.0 (all interfaces) with no-authentication or encryption. Anyone able to make a TCP connection to any compute host IP address, including 127.0.0.1, other loopback interface addresses, or in some cases possibly addresses that have been exposed beyond the management interface, could use this to open a virsh session to the libvirtd instance and gain control of virtual machine instances or possibly take over the host.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-306, CWE-306
References: http://www.securityfocus.com/bid/98576; https://access.redhat.com/errata/RHSA-2017:1242; https://access.redhat.com/errata/RHSA-2017:1504
CVE: CVE-2017-7526
Published: 2018-07-26
Description: libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-200, CWE-310
References: http://www.securityfocus.com/bid/99338; http://www.securitytracker.com/id/1038915; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7526
CVE: CVE-2017-7530
Published: 2018-07-26
Description: In CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1, it was found that privilege check is missing when invoking arbitrary methods via filtering on VMs that MiqExpression will execute that is triggerable by API users. An attacker could use this to execute actions they should not be allowed to (e.g. destroying VMs).
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: http://www.securityfocus.com/bid/100151; https://access.redhat.com/errata/RHSA-2017:1758; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7530
CVE: CVE-2017-7535
Published: 2018-07-26
Description: foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting this requires a user to actively assign hosts to an organization that contains html in its name which is visible to the user prior to taking action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://seclists.org/oss-sec/2017/q3/521; http://www.securityfocus.com/bid/99604; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7535
CVE: CVE-2017-7537
Published: 2018-07-26
Description: It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-592, CWE-798
References: https://access.redhat.com/errata/RHSA-2017:2335; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7537; https://github.com/dogtagpki/pki/commit/876d13c6d20e7e1235b9
CVE: CVE-2016-8647
Published: 2018-07-26
Description: An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://access.redhat.com/errata/RHSA-2017:1685; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8647; https://github.com/ansible/ansible-modules-core/pull/5388
CVE: CVE-2017-12610
Published: 2018-07-26
Description: In Apache Kafka 0.10.0.0 to 0.10.2.1 and 0.11.0.0 to 0.11.0.1, authenticated Kafka clients may use impersonation via a manually crafted protocol message with SASL/PLAIN or SASL/SCRAM authentication when using the built-in PLAIN or SCRAM server implementations in Apache Kafka.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://www.securityfocus.com/bid/104899; https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E; https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
CVE: CVE-2017-2664
Published: 2018-07-26
Description: CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on certain methods in the rails application portion of CloudForms. An attacker with access could use a variety of methods within the rails application portion of CloudForms to escalate privileges.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/100148; https://access.redhat.com/errata/RHSA-2017:1758; https://access.redhat.com/errata/RHSA-2017:3484
CVE: CVE-2017-7539
Published: 2018-07-26
Description: An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection negotiation, where the I/O coroutine was undefined. This could crash the qemu-nbd server if a client sent unexpected data during connection negotiation. A remote user or process could use this flaw to crash the qemu-nbd server resulting in denial of service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-617, CWE-20
References: http://www.openwall.com/lists/oss-security/2017/07/21/4; http://www.securityfocus.com/bid/99944; https://access.redhat.com/errata/RHSA-2017:2628
CVE: CVE-2017-7543
Published: 2018-07-26
Description: A race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1, and 10.x before 10.0.2-1.1, where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an update, at which point an attacker could access exposed tenant VMs and network resources.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-362, CWE-362
References: http://www.securityfocus.com/bid/100237; https://access.redhat.com/errata/RHSA-2017:2447; https://access.redhat.com/errata/RHSA-2017:2448
CVE: CVE-2018-1288
Published: 2018-07-26
Description: In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss.
CVSS Score: 5.4 (MEDIUM)
References: http://www.securityfocus.com/bid/104900; https://access.redhat.com/errata/RHSA-2018:3768; https://lists.apache.org/thread.html/29f61337323f48c47d4b41d74b9e452bd60e65d0e5103af9a6bb2fef%40%3Cusers.kafka.apache.org%3E
CVE: CVE-2017-2589
Published: 2018-07-26
Description: It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies are stored locally and are not passed between the client and the end URL) which means all clients using that proxy are sharing the same cookies.
CVSS Score: 8.7 (HIGH)
CWE: CWE-285
References: https://access.redhat.com/errata/RHSA-2017:1832; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2589; https://access.redhat.com/errata/RHSA-2017:1832
CVE: CVE-2017-7538
Published: 2018-07-26
Description: A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite 5, before 5.8. A user able to change an organization's name could exploit this flaw to perform XSS attacks against other Satellite users.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: http://www.securitytracker.com/id/1039267; https://access.redhat.com/errata/RHSA-2017:2645; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7538
CVE: CVE-2017-7545
Published: 2018-07-26
Description: It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while parsing XML files. A remote attacker could use this flaw to read files accessible to the user running the application server and, potentially, perform other more advanced XML eXternal Entity (XXE) attacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611, CWE-611
References: http://www.securityfocus.com/bid/102179; https://access.redhat.com/errata/RHSA-2017:3354; https://access.redhat.com/errata/RHSA-2017:3355
CVE: CVE-2017-7558
Published: 2018-07-26
Description: A kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() functions present since version 4.7-rc1 through version 4.13. A data leak happens when these functions fill in sockaddr data structures used to export socket's diagnostic information. As a result, up to 100 bytes of the slab data could be leaked to a userspace.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://seclists.org/oss-sec/2017/q3/338; http://www.securityfocus.com/bid/100466; http://www.securitytracker.com/id/1039221
CVE: CVE-2017-7562
Published: 2018-07-26
Description: An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arbitrary principals under rare and erroneous circumstances.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287, CWE-295, CWE-287
References: http://www.securityfocus.com/bid/100511; https://access.redhat.com/errata/RHSA-2018:0666; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7562
CVE: CVE-2018-10900
Published: 2018-07-26
Description: Network Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack. A new line character can be used to inject a Password helper parameter into the configuration data passed to VPNC, allowing an attacker to execute arbitrary commands as root.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://bugzilla.novell.com/show_bug.cgi?id=1101147; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10900; https://download.gnome.org/sources/NetworkManager-vpnc/1.2/NetworkManager-vpnc-1.2.6.news
CVE: CVE-2017-12163
Published: 2018-07-26
Description: An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/100925; http://www.securitytracker.com/id/1039401; https://access.redhat.com/errata/RHSA-2017:2789
CVE: CVE-2017-12164
Published: 2018-07-26
Description: A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-592, CWE-665
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12164; https://gitlab.gnome.org/GNOME/gdm/commit/ff98b28; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12164
CVE: CVE-2017-7509
Published: 2018-07-26
Description: An input validation error was found in Red Hat Certificate System's handling of client provided certificates before 8.1.20-1. If the certreq field is not present in a certificate an assertion error is triggered causing a denial of service.
CVSS Score: 3.5 (LOW)
CWE: CWE-20, CWE-20
References: http://www.securitytracker.com/id/1039248; https://access.redhat.com/errata/RHSA-2017:2560; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7509
CVE: CVE-2017-12167
Published: 2018-07-26
Description: It was found in EAP 7 before 7.0.9 that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732, CWE-200
References: http://www.securityfocus.com/bid/100903; https://access.redhat.com/errata/RHSA-2017:3454; https://access.redhat.com/errata/RHSA-2017:3455
CVE: CVE-2017-12171
Published: 2018-07-26
Description: A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284, CWE-20
References: http://www.securityfocus.com/bid/101516; http://www.securitytracker.com/id/1039633; https://access.redhat.com/errata/RHSA-2017:2972
CVE: CVE-2017-12175
Published: 2018-07-26
Description: Red Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering filter and you use autocomplete functionality.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/101245; https://access.redhat.com/errata/RHSA-2018:2927; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12175
CVE: CVE-2017-2582
Published: 2018-07-26
Description: It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request ID field to be the chosen system property which could be obtained in the "InResponseTo" field in the response.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-201, CWE-200
References: http://www.securityfocus.com/bid/101046; http://www.securitytracker.com/id/1041707; https://access.redhat.com/errata/RHSA-2017:2808
CVE: CVE-2018-0607
Published: 2018-07-26
Description: SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://jvn.jp/en/jp/JVN13415512/index.html; https://kb.cybozu.support/article/33120/; http://jvn.jp/en/jp/JVN13415512/index.html
CVE: CVE-2018-0613
Published: 2018-07-26
Description: NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00) allows remote authenticated attackers to bypass access restriction to conduct arbitrary operations with administrative privilege via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: http://jvn.jp/en/jp/JVN63895206/index.html; https://www.necplatforms.co.jp/product/enkaku/info180702.html; http://jvn.jp/en/jp/JVN63895206/index.html
CVE: CVE-2018-0614
Published: 2018-07-26
Description: Cross-site scripting vulnerability in NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN63895206/index.html; https://www.necplatforms.co.jp/product/enkaku/info180702.html; http://jvn.jp/en/jp/JVN63895206/index.html
CVE: CVE-2018-0617
Published: 2018-07-26
Description: Directory traversal vulnerability in ChamaNet MemoCGI v2.1800 to v2.2200 allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://jvn.jp/en/jp/JVN58362455/index.html; http://www.chama.ne.jp/download/etc/memo/index.htm; http://jvn.jp/en/jp/JVN58362455/index.html
CVE: CVE-2018-0618
Published: 2018-07-26
Description: Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN00846677/index.html; https://lists.debian.org/debian-lts-announce/2018/07/msg00034.html; https://mail.python.org/pipermail/mailman-announce/2018-June/000236.html
CVE: CVE-2018-0619
Published: 2018-07-26
Description: Untrusted search path vulnerability in the installer of Glarysoft Glary Utilities (Glary Utilities 5.99 and earlier and Glary Utilities Pro 5.99 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN84967039/index.html; http://jvn.jp/en/jp/JVN84967039/index.html
CVE: CVE-2018-0620
Published: 2018-07-26
Description: Untrusted search path vulnerability in LOGICOOL Game Software versions before 8.87.116 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN52574492/index.html; http://jvn.jp/en/jp/JVN52574492/index.html
CVE: CVE-2018-0621
Published: 2018-07-26
Description: Untrusted search path vulnerability in LOGICOOL CONNECTION UTILITY SOFTWARE versions before 2.30.9 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN52574492/index.html; http://jvn.jp/en/jp/JVN52574492/index.html
CVE: CVE-2018-0622
Published: 2018-07-26
Description: The DHC Online Shop App for Android version 3.2.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: http://jvn.jp/en/jp/JVN77409513/index.html; http://jvn.jp/en/jp/JVN77409513/index.html
CVE: CVE-2018-10901
Published: 2018-07-26
Description: A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: http://www.securityfocus.com/bid/104905; https://access.redhat.com/errata/RHSA-2018:2390; https://access.redhat.com/errata/RHSA-2018:2391
CVE: CVE-2017-12150
Published: 2018-07-26
Description: It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.
CVSS Score: 7.4 (HIGH)
CWE: CWE-300
References: http://www.securityfocus.com/bid/100918; http://www.securitytracker.com/id/1039401; https://access.redhat.com/errata/RHSA-2017:2789
CVE: CVE-2018-10876
Published: 2018-07-26
Description: A flaw was found in Linux kernel in the ext4 filesystem code. A use-after-free is possible in ext4_ext_remove_space() function when mounting and operating a crafted ext4 image.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-416, CWE-416
References: http://patchwork.ozlabs.org/patch/929239/; http://www.securityfocus.com/bid/104904; http://www.securityfocus.com/bid/106503
CVE: CVE-2018-10878
Published: 2018-07-26
Description: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds write and a denial of service or unspecified other impact is possible by mounting and operating a crafted ext4 filesystem image.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://patchwork.ozlabs.org/patch/929237/; http://patchwork.ozlabs.org/patch/929238/; https://access.redhat.com/errata/RHSA-2018:2948
CVE: CVE-2018-10879
Published: 2018-07-26
Description: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free in ext4_xattr_set_entry function and a denial of service or unspecified other impact may occur by renaming a file in a crafted ext4 filesystem image.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-416, CWE-416
References: http://patchwork.ozlabs.org/patch/928666/; http://patchwork.ozlabs.org/patch/928667/; http://www.securityfocus.com/bid/104902
CVE: CVE-2018-10881
Published: 2018-07-26
Description: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound access in ext4_get_group_info function, a denial of service, and a system crash by mounting and operating on a crafted ext4 filesystem image.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-787, CWE-119
References: http://patchwork.ozlabs.org/patch/929792/; http://www.securityfocus.com/bid/104901; https://access.redhat.com/errata/RHSA-2018:2948
CVE: CVE-2015-9261
Published: 2018-07-26
Description: huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html; http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html; http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html
CVE: CVE-2017-18344
Published: 2018-07-26
Description: The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allows userspace applications to read arbitrary kernel memory (on a kernel built with CONFIG_POSIX_TIMERS and CONFIG_CHECKPOINT_RESTORE).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/104909; http://www.securitytracker.com/id/1041414; https://access.redhat.com/errata/RHSA-2018:2948