deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-9604
Published: 2017-06-13
Description: KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311
References: https://commits.kde.org/kmail/78c5552be2f00a4ac25bd77ca39386522fca70a8; https://commits.kde.org/messagelib/c54706e990bbd6498e7b1597ec7900bc809e8197; https://commits.kde.org/kmail/78c5552be2f00a4ac25bd77ca39386522fca70a8
CVE: CVE-2015-3220
Published: 2017-06-13
Description: The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception and process crash).
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=1254215; https://github.com/trevp/tlslite/commit/aca8d4f898b436ff6754e1a9ab96cae976c8a853; https://groups.google.com/forum/#%21topic/tlslite-dev/MoWE7B0A4iU
CVE: CVE-2015-4596
Published: 2017-06-13
Description: Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2015-4596; https://support.lenovo.com/us/en/product_security/len_2015_066; https://support.lenovo.com/us/en/product_security/len_2015_066
CVE: CVE-2016-3696
Published: 2017-06-13
Description: The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://access.redhat.com/errata/RHSA-2018:0336; https://bugzilla.redhat.com/show_bug.cgi?id=1328930; https://docs.pulpproject.org/user-guide/release-notes/2.8.x.html#pulp-2-8-5
CVE: CVE-2016-5411
Published: 2017-06-13
Description: /var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer (QCI) before 1.0 GA is created world readable and contains the root password of the deployed system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: http://www.securityfocus.com/bid/92669; https://bugzilla.redhat.com/show_bug.cgi?id=1366412; http://www.securityfocus.com/bid/92669
CVE: CVE-2016-3704
Published: 2017-06-13
Description: Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords.
CVSS Score: 7.5 (HIGH)
CWE: CWE-255
References: https://access.redhat.com/errata/RHSA-2018:0336; https://bugzilla.redhat.com/show_bug.cgi?id=1330264; https://docs.pulpproject.org/user-guide/release-notes/2.8.x.html#pulp-2-8-5
CVE: CVE-2016-5391
Published: 2017-06-13
Description: libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon restart).
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=1356183; https://libreswan.org/security/CVE-2016-5391/CVE-2016-5391.txt; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/65R6OA5AY7K2UBQUDOLOS5Y3SCULQI6I/
CVE: CVE-2017-9246
Published: 2017-06-13
Description: New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during use of the Slow Queries feature, as demonstrated by a mishandled quote in a VALUES clause of an INSERT statement, after bypassing a SET SHOWPLAN_ALL ON protection mechanism.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://blog.seanmcelroy.com/2017/05/26/sql-injection-with-new-relic-patched/; https://blog.seanmcelroy.com/2017/05/26/sql-injection-with-new-relic-patched/
CVE: CVE-2017-9429
Published: 2017-06-13
Description: SQL injection vulnerability in the Event List plugin 0.7.8 for WordPress allows an authenticated user to execute arbitrary SQL commands via the id parameter to wp-admin/admin.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/42173/; https://www.exploit-db.com/exploits/42173/
CVE: CVE-2017-9603
Published: 2017-06-13
Description: SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via the jobid parameter to wp-admin/edit.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wordpress.org/plugins/wp-jobs/#developers; https://wpvulndb.com/vulnerabilities/8847; https://www.exploit-db.com/exploits/42172/
CVE: CVE-2016-9973
Published: 2017-06-13
Description: IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120209.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22004534; http://www.securityfocus.com/bid/99060; https://exchange.xforce.ibmcloud.com/vulnerabilities/120209
CVE: CVE-2016-9984
Published: 2017-06-13
Description: IBM Maximo Asset Management 7.5 and 7.6 could allow a remote authenticated attacker to execute arbitrary commands on the system as administrator. IBM X-Force ID: 120276.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.ibm.com/support/docview.wss?uid=swg21998608; https://exchange.xforce.ibmcloud.com/vulnerabilities/120276; http://www.ibm.com/support/docview.wss?uid=swg21998608
CVE: CVE-2017-1099
Published: 2017-06-13
Description: IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force ID: 120659.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22004534; https://exchange.xforce.ibmcloud.com/vulnerabilities/120659; http://www.ibm.com/support/docview.wss?uid=swg22004534
CVE: CVE-2017-1100
Published: 2017-06-13
Description: IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120661.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22004428; http://www.securityfocus.com/bid/99006; http://www.securitytracker.com/id/1038698
CVE: CVE-2017-1101
Published: 2017-06-13
Description: IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120662.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22004428; http://www.securityfocus.com/bid/98997; http://www.securitytracker.com/id/1038698
CVE: CVE-2017-1102
Published: 2017-06-13
Description: IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120663.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22004428; http://www.securityfocus.com/bid/99008; http://www.securitytracker.com/id/1038698
CVE: CVE-2017-1104
Published: 2017-06-13
Description: IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120666.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22004428; http://www.securityfocus.com/bid/99004; http://www.securitytracker.com/id/1038698
CVE: CVE-2017-9605
Published: 2017-06-13
Description: The vmw_gb_surface_define_ioctl function (accessible via DRM_IOCTL_VMW_GB_SURFACE_CREATE) in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.11.4 defines a backup_handle variable but does not give it an initial value. If one attempts to create a GB surface, with a previously allocated DMA buffer to be used as a backup buffer, the backup_handle variable does not get written to and is then later returned to user space, allowing local users to obtain sensitive information from uninitialized kernel memory via a crafted ioctl call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=07678eca2cf9c9a18584e546c2b2a0d0c9a3150c; http://www.debian.org/security/2017/dsa-3927; http://www.debian.org/security/2017/dsa-3945
CVE: CVE-2014-9960
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2014-9961
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-on write protection.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2014-9962
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of a DRM provisioning command.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2014-9963
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in WideVine DRM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2014-9964
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in debug functionality.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2014-9965
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of an SCM call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2014-9966
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in Secure Display.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2014-9967
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9020
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the unlocking of memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9021
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9022
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9023
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9024
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9025
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9026
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9027
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9028
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9029
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a vulnerability exists in the access control settings of modem memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9030
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, the Hypervisor API could be misused to bypass authentication.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9031
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9032
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2015-9033
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2016-10332
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-254
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2016-10333
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2016-10334
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2016-10335
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, libtomcrypt was updated.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2016-10336
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-254
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2016-10337
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2016-10338
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2016-10339
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2016-10340
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall handler.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2016-10341
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2016-10342
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98874; http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01
CVE: CVE-2017-7365
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01; http://www.securitytracker.com/id/1038623
CVE: CVE-2017-7366
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01; http://www.securitytracker.com/id/1038623
CVE: CVE-2017-7367
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01; http://www.securitytracker.com/id/1038623
CVE: CVE-2017-7368
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a sound driver.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01; http://www.securitytracker.com/id/1038623
CVE: CVE-2017-7369
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading to kernel stack corruption.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01; http://www.securitytracker.com/id/1038623
CVE: CVE-2017-7370
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free condition.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01; http://www.securitytracker.com/id/1038623
CVE: CVE-2017-7371
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned off by Bluetooth.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01; http://www.securitytracker.com/id/1038623
CVE: CVE-2017-7372
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow or write to arbitrary pointer location.
CVSS Score: 7.0 (HIGH)
CWE: CWE-119, CWE-362
References: http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01; http://www.securitytracker.com/id/1038623
CVE: CVE-2017-7373
Published: 2017-06-13
Description: In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a display driver.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: http://www.securitytracker.com/id/1038623; https://source.android.com/security/bulletin/2017-06-01; http://www.securitytracker.com/id/1038623