deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-13316
Published: 2018-11-27
Description: System command injection in formAliasIp in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "subnet" POST parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154; https://blog.securityevaluators.com/new-vulnerabilities-in-totolink-a3002ru-d6f42a081154
CVE: CVE-2018-13329
Published: 2018-11-27
Description: Cross-site scripting in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "lines" URL parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13334
Published: 2018-11-27
Description: Cross-site scripting in handle.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "options[sysname]" parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13337
Published: 2018-11-27
Description: Session Fixation in the web application for TerraMaster TOS version 3.1.03 allows attackers to control users' session cookies via JavaScript.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-384
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-14892
Published: 2018-11-27
Description: Missing protections against Cross-Site Request Forgery in the web application in ZyXEL NSA325 V2 version 4.81 allow attackers to perform state-changing actions via crafted HTTP forms.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://blog.securityevaluators.com/ise-labs-finds-vulnerabilities-in-zyxel-nsa325-945481a699b8; https://blog.securityevaluators.com/ise-labs-finds-vulnerabilities-in-zyxel-nsa325-945481a699b8
CVE: CVE-2018-14893
Published: 2018-11-27
Description: A system command injection vulnerability in zyshclient in ZyXEL NSA325 V2 version 4.81 allows attackers to execute system commands via the web application API.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://blog.securityevaluators.com/ise-labs-finds-vulnerabilities-in-zyxel-nsa325-945481a699b8; https://blog.securityevaluators.com/ise-labs-finds-vulnerabilities-in-zyxel-nsa325-945481a699b8
CVE: CVE-2018-16130
Published: 2018-11-27
Description: System command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary system commands via the "payload" URL parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://blog.securityevaluators.com/hack-routers-get-toys-exploiting-the-mi-router-3-1d7fd42f0838; https://blog.securityevaluators.com/hack-routers-get-toys-exploiting-the-mi-router-3-1d7fd42f0838
CVE: CVE-2018-17934
Published: 2018-11-27
Description: NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the intended directory. This could allow an attacker to impersonate a legitimate user, obtain restricted information, or execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02; https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02
CVE: CVE-2018-17936
Published: 2018-11-27
Description: NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to the server, which could allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02; https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02
CVE: CVE-2018-18982
Published: 2018-11-27
Description: NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02; https://www.exploit-db.com/exploits/46449/; https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02
CVE: CVE-2018-13330
Published: 2018-11-27
Description: System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands during group creation via the "groupname" parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13331
Published: 2018-11-27
Description: Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript when viewing users by placing JavaScript in their usernames.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13332
Published: 2018-11-27
Description: Directory Traversal in the explorer application in TerraMaster TOS version 3.1.03 allows attackers to upload files to arbitrary locations via the "path" URL parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13333
Published: 2018-11-27
Description: Cross-site scripting in File Manager in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript in the permissions window by placing JavaScript in users' usernames.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13335
Published: 2018-11-27
Description: Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript when viewing shared folders via their descriptions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13336
Published: 2018-11-27
Description: System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "pwd" parameter during user creation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13338
Published: 2018-11-27
Description: System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "username" parameter during user creation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13349
Published: 2018-11-27
Description: Cross-site scripting in the web application taskbar in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the user's username.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13350
Published: 2018-11-27
Description: SQL injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute SQL queries via the "Event" parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13351
Published: 2018-11-27
Description: Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the edit password form.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13352
Published: 2018-11-27
Description: Session Exposure in the web application for TerraMaster TOS version 3.1.03 allows attackers to view active session tokens in a world-readable directory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13353
Published: 2018-11-27
Description: System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute commands via the "checkport" parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13354
Published: 2018-11-27
Description: System command injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "Event" parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13355
Published: 2018-11-27
Description: Incorrect access controls in ajaxdata.php in TerraMaster TOS version 3.1.03 allow attackers to create user groups without proper authorization.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13356
Published: 2018-11-27
Description: Incorrect access control on ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to elevate user permissions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13357
Published: 2018-11-27
Description: Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript when viewing Shared Folders via JavaScript in Shared Folders' names.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13358
Published: 2018-11-27
Description: System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "checkName" parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13359
Published: 2018-11-27
Description: Cross-site scripting in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "modgroup" parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13360
Published: 2018-11-27
Description: Cross-site scripting in Text Editor in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "filename" URL parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13361
Published: 2018-11-27
Description: User enumeration in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to list all system users via the "modgroup" parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-13418
Published: 2018-11-27
Description: System command injection in ajaxdata.php in TerraMaster TOS 3.1.03 allows attackers to execute system commands via the "newname" parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a; https://blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86a
CVE: CVE-2018-7946
Published: 2018-11-27
Description: There is an information leak vulnerability in some Huawei smartphones. An attacker may do some specific configuration in the smartphone and trick a user into inputting some sensitive information. Due to improper design, successful exploit may cause some information leak.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181121-01-phone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181121-01-phone-en
CVE: CVE-2018-7958
Published: 2018-11-27
Description: There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploited to intercept and tamper with the data information.
CVSS Score: 7.4 (HIGH)
CWE: CWE-287
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-01-espace-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-01-espace-en
CVE: CVE-2018-7959
Published: 2018-11-27
Description: There is a short key vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept and decrypt the call information when the user enables SRTP to make a call. Successful exploitation may cause sensitive information leak.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-02-espace-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-02-espace-en
CVE: CVE-2018-7960
Published: 2018-11-27
Description: There is a SRTP icon display vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to intercept the packets in non-secure transmission mode. Successful exploitation may intercept and tamper with the call information, eventually cause sensitive information leak.
CVSS Score: 7.4 (HIGH)
CWE: CWE-319
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-02-espace-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-02-espace-en
CVE: CVE-2018-7961
Published: 2018-11-27
Description: There is a smart SMS verification code vulnerability in some Huawei smart phones. An attacker should trick a user to access malicious Website or malicious App and register. Due to incorrect processing of the smart SMS verification code, successful exploitation can cause sensitive information leak.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181121-02-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181121-02-smartphone-en
CVE: CVE-2018-7977
Published: 2018-11-27
Description: There is an information leakage vulnerability on several Huawei products. Due to insufficient communication protection for specific services, a remote, unauthorized attacker can exploit this vulnerability to connect to specific services to obtain additional information. Successful exploitation of this vulnerability can lead to information leakage.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-01-fusionsphere-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-01-fusionsphere-en
CVE: CVE-2018-7988
Published: 2018-11-27
Description: There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could allow the attacker bypass the FRP protection.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-863
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-01-smartphone-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-01-smartphone-en
CVE: CVE-2018-0721
Published: 2018-11-27
Description: Buffer Overflow vulnerability in NAS devices. QTS allows attackers to run arbitrary code. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on build 20180725; version 4.3.4 and prior versions on build 20180710.
CVSS Score: 7.7 (HIGH)
CWE: CWE-120, CWE-119
References: https://www.qnap.com/zh-tw/security-advisory/nas-201809-20; https://www.qnap.com/zh-tw/security-advisory/nas-201809-20
CVE: CVE-2018-19620
Published: 2018-11-28
Description: ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-425
References: https://github.com/CCCCCrash/POCs/tree/master/Web/showdoc/IncorrectAccessControl#0x02-modify; https://github.com/star7th/showdoc/commit/bcdb5e3519285bdf81e618b3c9b90d22bc49e13c; https://github.com/star7th/showdoc/issues/397
CVE: CVE-2018-19621
Published: 2018-11-28
Description: server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/CCCCCrash/POCs/tree/master/Web/showdoc/csrf; https://github.com/CCCCCrash/POCs/tree/master/Web/showdoc/csrf
CVE: CVE-2018-19630
Published: 2018-11-28
Description: cgi_handle_request in uhttpd in OpenWrt through 18.06.1 and LEDE through 17.01 has unauthenticated reflected XSS via the URI, as demonstrated by a cgi-bin/?[XSS] URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugs.openwrt.org/index.php?do=details&task_id=1974; https://bugs.openwrt.org/index.php?do=details&task_id=1974
CVE: CVE-2018-14629
Published: 2018-11-28
Description: A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-835
References: http://www.securityfocus.com/bid/106022; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14629; https://lists.debian.org/debian-lts-announce/2018/12/msg00005.html
CVE: CVE-2018-16841
Published: 2018-11-28
Description: Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call talloc_free() twice on the same memory if the principal in a validly signed certificate does not match the principal in the AS-REQ. This is only possible after authentication with a trusted certificate. talloc is robust against further corruption from a double-free with talloc_free() and directly calls abort(), terminating the KDC process.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-415
References: http://www.securityfocus.com/bid/106023; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16841; https://security.gentoo.org/glsa/202003-52
CVE: CVE-2018-16851
Published: 2018-11-28
Description: Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP search before Samba's AD DC returns the LDAP entries to the client, the entries are cached in a single memory object with a maximum size of 256MB. When this size is reached, the Samba process providing the LDAP service will follow the NULL pointer, terminating the process. There is no further vulnerability associated with this issue, merely a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: http://www.securityfocus.com/bid/106027; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16851; https://lists.debian.org/debian-lts-announce/2018/12/msg00005.html
CVE: CVE-2018-16852
Published: 2018-11-28
Description: Samba from version 4.9.0 and before version 4.9.3 is vulnerable to a NULL pointer de-reference. During the processing of an DNS zone in the DNS management DCE/RPC server, the internal DNS server or the Samba DLZ plugin for BIND9, if the DSPROPERTY_ZONE_MASTER_SERVERS property or DSPROPERTY_ZONE_SCAVENGING_SERVERS property is set, the server will follow a NULL pointer and terminate. There is no further vulnerability associated with this issue, merely a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: http://www.securityfocus.com/bid/106024; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16852; https://security.gentoo.org/glsa/202003-52
CVE: CVE-2018-16853
Published: 2018-11-28
Description: Samba from version 4.7.0 has a vulnerability that allows a user in a Samba AD domain to crash the KDC when Samba is built in the non-default MIT Kerberos configuration. With this advisory the Samba Team clarify that the MIT Kerberos build of the Samba AD DC is considered experimental. Therefore the Samba Team will not issue security patches for this configuration. Additionally, Samba 4.7.12, 4.8.7 and 4.9.3 have been issued as security releases to prevent building of the AD DC with MIT Kerberos unless --with-experimental-mit-ad-dc is specified to the configure command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: http://www.securityfocus.com/bid/106026; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16853; https://security.gentoo.org/glsa/202003-52
CVE: CVE-2018-16857
Published: 2018-11-28
Description: Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict brute forcing of passwords) in a window of more than 3 minutes may not watch for bad passwords at all. The primary risk from this issue is with regards to domains that have been upgraded from Samba 4.8 and earlier. In these cases the manual testing done to confirm an organisation's password policies apply as expected may not have been re-done after the upgrade.
CVSS Score: 7.4 (HIGH)
CWE: CWE-358, CWE-358
References: http://www.securityfocus.com/bid/106024; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16857; https://security.gentoo.org/glsa/202003-52
CVE: CVE-2017-18315
Published: 2018-11-28
Description: Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105838; https://www.qualcomm.com/company/product-security/bulletins; http://www.securityfocus.com/bid/105838