deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-0735
Published: 2017-08-09
Description: A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38239864.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0736
Published: 2017-08-09
Description: A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38487564.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0737
Published: 2017-08-09
Description: A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37563942.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; https://usn.ubuntu.com/3692-2/
CVE: CVE-2017-0738
Published: 2017-08-09
Description: A information disclosure vulnerability in the Android media framework (audioserver). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37563371.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0739
Published: 2017-08-09
Description: A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37712181.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0740
Published: 2017-08-09
Description: A remote code execution vulnerability in the Broadcom networking driver. Product: Android. Versions: Android kernel. Android ID: A-37168488. References: B-RB#116402.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100217; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100217
CVE: CVE-2017-0741
Published: 2017-08-09
Description: A elevation of privilege vulnerability in the MediaTek gpu driver. Product: Android. Versions: Android kernel. Android ID: A-32458601. References: M-ALPS03007523.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100209; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100209
CVE: CVE-2017-0742
Published: 2017-08-09
Description: A elevation of privilege vulnerability in the MediaTek video driver. Product: Android. Versions: Android kernel. Android ID: A-36074857. References: M-ALPS03275524.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100209; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100209
CVE: CVE-2017-0745
Published: 2017-08-09
Description: A remote code execution vulnerability in the Android media framework (avc decoder). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37079296.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: http://www.securityfocus.com/bid/100204; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100204
CVE: CVE-2017-0746
Published: 2017-08-09
Description: A elevation of privilege vulnerability in the Qualcomm ipa driver. Product: Android. Versions: Android kernel. Android ID: A-35467471. References: QC-CR#2029392.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100213; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100213
CVE: CVE-2017-0747
Published: 2017-08-09
Description: A elevation of privilege vulnerability in the Qualcomm proprietary component. Product: Android. Versions: Android kernel. Android ID: A-32524214. References: QC-CR#2044821.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100213; https://source.android.com/security/bulletin/2017-08-01; http://www.securityfocus.com/bid/100213
CVE: CVE-2017-0749
Published: 2017-08-09
Description: A elevation of privilege vulnerability in the Upstream Linux linux kernel. Product: Android. Versions: Android kernel. Android ID: A-36007735.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100215; https://bugzilla.novell.com/show_bug.cgi?id=1053162; https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-0749.html
CVE: CVE-2017-0750
Published: 2017-08-09
Description: A elevation of privilege vulnerability in the Upstream Linux file system. Product: Android. Versions: Android kernel. Android ID: A-36817013.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/100215; https://bugzilla.novell.com/show_bug.cgi?id=1053160; https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-0750.html
CVE: CVE-2017-12756
Published: 2017-08-09
Description: Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile[0] parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: http://extplorer.net/news/21; http://extplorer.net/news/21
CVE: CVE-2017-12762
Published: 2017-08-09
Description: In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. This affects the Linux kernel 4.9-stable tree, 4.12-stable tree, 3.18-stable tree, and 4.4-stable tree.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2020/02/11/1; http://www.openwall.com/lists/oss-security/2020/02/11/2; http://www.openwall.com/lists/oss-security/2020/02/14/4
CVE: CVE-2017-12774
Published: 2017-08-09
Description: finecms in 1.9.5\controllers\member\ContentController.php allows remote attackers to operate website database
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/yzcrnx/finecms/issues/1; https://github.com/yzcrnx/finecms/issues/1
CVE: CVE-2017-12777
Published: 2017-08-09
Description: Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via some parameter to usersearch.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lu4n.com/cve/4.txt; http://www.d4rksec.org/cve/CVE-2017-12777.txt; http://lu4n.com/cve/4.txt
CVE: CVE-2017-3752
Published: 2017-08-09
Description: An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First (OSPF) routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers, switches, or other devices that support OSPF within a routing domain.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99995; https://support.lenovo.com/us/en/product_security/LEN-14078; http://www.securityfocus.com/bid/99995
CVE: CVE-2017-9799
Published: 2017-08-09
Description: It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it is theoretically possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user. In the worst case this could lead to secure credentials of the other user being compromised.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/100235; http://www.securitytracker.com/id/1039116; https://lists.apache.org/thread.html/b9125bf507ed6f2ca6e85ba1a4b44e232aa70eeddfba2a9d8a954127%40%3Cdev.storm.apache.org%3E
CVE: CVE-2017-3751
Published: 2017-08-10
Description: An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://support.lenovo.com/us/en/product_security/LEN-15061; https://support.lenovo.com/us/en/product_security/LEN-15061
CVE: CVE-2017-3753
Published: 2017-08-10
Description: A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With this vulnerability, conditions exist where an attacker with administrative privileges or physical access to a system may be able to run specially crafted code that can allow them to bypass system protections such as Device Guard and Hyper-V.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: https://support.lenovo.com/us/en/product_security/LEN-14695; https://support.lenovo.com/us/en/product_security/LEN-14695
CVE: CVE-2014-0142
Published: 2017-08-10
Description: QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector function in block/parallels.c or (2) extent_size field in the bochs function in block/bochs.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=8e53abbc20d08ae3ec30c2054e1161314ad9501d; http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9302e863aa8baa5d932fc078967050c055fa1a7f; http://rhn.redhat.com/errata/RHSA-2014-0420.html
CVE: CVE-2014-0143
Published: 2017-08-10
Description: Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a crafted catalog size in (1) the parallels_open function in block/parallels.c or (2) bochs_open function in bochs.c, a large L1 table in the (3) qcow2_snapshot_load_tmp in qcow2-snapshot.c or (4) qcow2_grow_l1_table function in qcow2-cluster.c, (5) a large request in the bdrv_check_byte_request function in block.c and other block drivers, (6) crafted cluster indexes in the get_refcount function in qcow2-refcount.c, or (7) a large number of blocks in the cloop_open function in cloop.c, which trigger buffer overflows, memory corruption, large memory allocations and out-of-bounds read and writes.
CVSS Score: 7.0 (HIGH)
CWE: CWE-190
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=509a41bab[PII_REDACTED]b5fff02eadf96d9c8676a; http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=6a83f8b5bec6f59e56cc49bd49e4c3f8f805d56f; http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=8f4754ede56e3f9ea3fd7207f4a7c4453e59285b
CVE: CVE-2014-0145
Published: 2017-08-10
Description: Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (crash) or possibly execute arbitrary code via a large (1) L1 table in the qcow2_snapshot_load_tmp in the QCOW 2 block driver (block/qcow2-snapshot.c) or (2) uncompressed chunk, (3) chunk length, or (4) number of sectors in the DMG block driver (block/dmg.c).
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c05e4667be91b46ab42b5a11babf8e84d476cc6b; http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f0dce23475b5af5da6b17b97c[PII_REDACTED]34b6; http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=c165f7758009a4f793c1fc19ebb69cf55313450b
CVE: CVE-2014-0146
Published: 2017-08-10
Description: The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service (NULL pointer dereference) via a crafted image which causes an error, related to the initialization of the snapshot_offset and nb_snapshots fields.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=11b128f4062dd7f89b14abc8877ff20d41b28be9; http://rhn.redhat.com/errata/RHSA-2014-0420.html; http://rhn.redhat.com/errata/RHSA-2014-0421.html
CVE: CVE-2017-1168
Published: 2017-08-10
Description: IBM Rational Engineering Lifecycle Manager 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123187.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22006976; http://www.securityfocus.com/bid/100269; https://exchange.xforce.ibmcloud.com/vulnerabilities/123187
CVE: CVE-2017-1174
Published: 2017-08-10
Description: IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123296.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.ibm.com/support/docview.wss?uid=swg22004268; http://www.securityfocus.com/bid/100246; https://exchange.xforce.ibmcloud.com/vulnerabilities/123296
CVE: CVE-2017-1192
Published: 2017-08-10
Description: IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663.
CVSS Score: 8.2 (HIGH)
CWE: CWE-611
References: http://www.ibm.com/support/docview.wss?uid=swg22004267; http://www.securityfocus.com/bid/102864; https://exchange.xforce.ibmcloud.com/vulnerabilities/123663
CVE: CVE-2017-1377
Published: 2017-08-10
Description: IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the system. IBM X-Force ID: 126874.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22007031; http://www.securityfocus.com/bid/100247; https://exchange.xforce.ibmcloud.com/vulnerabilities/126874
CVE: CVE-2017-1431
Published: 2017-08-10
Description: IBM InfoSphere Streams 4.0, 4.1, and 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127632.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22006827; http://www.securityfocus.com/bid/100253; https://exchange.xforce.ibmcloud.com/vulnerabilities/127632
CVE: CVE-2016-0762
Published: 2017-08-10
Description: The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to determine valid user names. Note that the default configuration includes the LockOutRealm which makes exploitation of this vulnerability harder.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-203
References: http://rhn.redhat.com/errata/RHSA-2017-0457.html; http://www.debian.org/security/2016/dsa-3720; http://www.securityfocus.com/bid/93939
CVE: CVE-2016-5018
Published: 2017-08-10
Description: In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications.
CVSS Score: 9.1 (CRITICAL)
References: http://packetstormsecurity.com/files/155873/Tomcat-9.0.0.M1-Sandbox-Escape.html; http://rhn.redhat.com/errata/RHSA-2017-0457.html; http://rhn.redhat.com/errata/RHSA-2017-1551.html
CVE: CVE-2016-6794
Published: 2017-08-10
Description: When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70, 6.0.0 to 6.0.45 the system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible.
CVSS Score: 5.3 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2017-0457.html; http://www.debian.org/security/2016/dsa-3720; http://www.securityfocus.com/bid/93943
CVE: CVE-2016-6812
Published: 2017-08-10
Description: The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses FormattedServiceListWriter to provide an HTML page which lists the names and absolute URL addresses of the available service endpoints. The module calculates the base URL using the current HttpServletRequest. The calculated base URL is used by FormattedServiceListWriter to build the service endpoint absolute URLs. If the unexpected matrix parameters have been injected into the request URL then these matrix parameters will find their way back to the client in the services list page which represents an XSS risk to the client.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://cxf.apache.org/security-advisories.data/CVE-2016-6812.txt.asc; http://www.securityfocus.com/bid/97582; http://www.securitytracker.com/id/1037543
CVE: CVE-2016-8739
Published: 2017-08-10
Description: The JAX-RS module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 provides a number of Atom JAX-RS MessageBodyReaders. These readers use Apache Abdera Parser which expands XML entities by default which represents a major XXE risk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: http://cxf.apache.org/security-advisories.data/CVE-2016-8739.txt.asc; http://www.securityfocus.com/bid/97579; http://www.securitytracker.com/id/1037544
CVE: CVE-2017-12798
Published: 2017-08-10
Description: Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lu4n.com/cve/6.txt; http://lu4n.com/cve/6.txt
CVE: CVE-2017-12799
Published: 2017-08-10
Description: The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100292; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=21933
CVE: CVE-2017-3156
Published: 2017-08-10
Description: The OAuth2 Hawk and JOSE MAC Validation code in Apache CXF prior to 3.0.13 and 3.1.x prior to 3.1.10 is not using a constant time MAC signature comparison algorithm which may be exploited by sophisticated timing attacks.
CVSS Score: 7.5 (HIGH)
References: http://cxf.apache.org/security-advisories.data/CVE-2017-3156.txt.asc; http://www.securityfocus.com/bid/96398; https://access.redhat.com/errata/RHSA-2017:1832
CVE: CVE-2017-8518
Published: 2017-08-10
Description: Microsoft Edge allows a remote code execution vulnerability due to the way it accesses objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100122; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8518; http://www.securityfocus.com/bid/100122
CVE: CVE-2008-1421
Published: 2017-08-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2008-1422
Published: 2017-08-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-1419.  Reason: This candidate is a reservation duplicate of CVE-2008-1419.  Notes: All CVE users should reference CVE-2008-1419 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-3130
Published: 2017-08-10
Description: An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100211; https://fortiguard.com/advisory/FG-IR-17-073; http://www.securityfocus.com/bid/100211
CVE: CVE-2017-7737
Published: 2017-08-10
Description: An information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows logged-in admin user to view SNMPv3 user password in cleartext in webui via the HTML source code.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200, CWE-552
References: http://www.securityfocus.com/bid/100205; https://fortiguard.com/advisory/FG-IR-17-162; http://www.securityfocus.com/bid/100205
CVE: CVE-2016-6797
Published: 2017-08-10
Description: The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global JNDI resources to those resources explicitly linked to the web application. Therefore, it was possible for a web application to access any global JNDI resource whether an explicit ResourceLink had been configured or not.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: http://rhn.redhat.com/errata/RHSA-2017-0457.html; http://www.debian.org/security/2016/dsa-3720; http://www.securityfocus.com/bid/93940
CVE: CVE-2016-6817
Published: 2017-08-10
Description: The HTTP/2 header parser in Apache Tomcat 9.0.0.M1 to 9.0.0.M11 and 8.5.0 to 8.5.6 entered an infinite loop if a header was received that was larger than the available buffer. This made a denial of service attack possible.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-835
References: http://www.securityfocus.com/bid/94462; http://www.securitytracker.com/id/1037330; https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
CVE: CVE-2016-8745
Published: 2017-08-10
Description: A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.RC1 to 8.0.39, 7.0.0 to 7.0.73 and 6.0.16 to 6.0.48 resulted in the current Processor object being added to the Processor cache multiple times. This in turn meant that the same Processor could be used for concurrent requests. Sharing a Processor can result in information leakage between requests including, not not limited to, session ID and the response body. The bug was first noticed in 8.5.x onwards where it appears the refactoring of the Connector code for 8.5.x onwards made it more likely that the bug was observed. Initially it was thought that the 8.5.x refactoring introduced the bug but further investigation has shown that the bug is present in all currently supported Tomcat versions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-388
References: http://rhn.redhat.com/errata/RHSA-2017-0457.html; http://rhn.redhat.com/errata/RHSA-2017-0527.html; http://www.debian.org/security/2017/dsa-3754
CVE: CVE-2017-3168
Published: 2017-08-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-8658
Published: 2017-08-11
Description: A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100036; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8658; http://www.securityfocus.com/bid/100036
CVE: CVE-2016-6796
Published: 2017-08-11
Description: A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Servlet.
CVSS Score: 7.5 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2017-0457.html; http://rhn.redhat.com/errata/RHSA-2017-1551.html; http://www.debian.org/security/2016/dsa-3720