deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-12463
Published: 2018-02-07
Description: Memory leak in the ccnl_app_RX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory consumption) via vectors involving an envelope_s structure pointer when the packet format is unknown.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: https://github.com/cn-uofbasel/ccn-lite/issues/129; https://github.com/cn-uofbasel/ccn-lite/issues/129
CVE: CVE-2017-12464
Published: 2018-02-07
Description: ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via vectors involving the keyfile variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/cn-uofbasel/ccn-lite/issues/130; https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0; https://github.com/cn-uofbasel/ccn-lite/issues/130
CVE: CVE-2017-12465
Published: 2018-02-07
Description: Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impact via vectors involving the (1) vallen variable in the iottlv_parse_sequence function or (2) typ, vallen and i variables in the localrpc_parse function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://github.com/cn-uofbasel/ccn-lite/issues/131; https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0; https://github.com/cn-uofbasel/ccn-lite/issues/131
CVE: CVE-2017-12466
Published: 2018-02-07
Description: CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to ssl_halen when running ccn-lite-sim, which trigger an out-of-bounds access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/cn-uofbasel/ccn-lite/issues/132; https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0; https://github.com/cn-uofbasel/ccn-lite/issues/132
CVE: CVE-2017-12467
Published: 2018-02-07
Description: Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory consumption) by leveraging failure to allocate memory for the comp or complen structure member.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: https://github.com/cn-uofbasel/ccn-lite/issues/133; https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0; https://github.com/cn-uofbasel/ccn-lite/issues/133
CVE: CVE-2017-12468
Published: 2018-02-07
Description: Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the vallen and len variables.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/cn-uofbasel/ccn-lite/issues/134; https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0; https://github.com/cn-uofbasel/ccn-lite/issues/134
CVE: CVE-2017-12469
Published: 2018-02-07
Description: Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/cn-uofbasel/ccn-lite/issues/135; https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0; https://github.com/cn-uofbasel/ccn-lite/issues/135
CVE: CVE-2017-12470
Published: 2018-02-07
Description: Integer overflow in the ndn_parse_sequence function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the typ and vallen variables.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://github.com/cn-uofbasel/ccn-lite/issues/136; https://github.com/cn-uofbasel/ccn-lite/issues/136
CVE: CVE-2017-12471
Published: 2018-02-07
Description: The cnb_parse_lev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/cn-uofbasel/ccn-lite/issues/137; https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0; https://github.com/cn-uofbasel/ccn-lite/issues/137
CVE: CVE-2017-12472
Published: 2018-02-07
Description: ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnl_malloc.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: https://github.com/cn-uofbasel/ccn-lite/issues/138; https://github.com/cn-uofbasel/ccn-lite/releases/tag/2.0.0; https://github.com/cn-uofbasel/ccn-lite/issues/138
CVE: CVE-2017-12473
Published: 2018-02-07
Description: ccnl_ccntlv_bytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service (application crash) via vectors involving packets with "wrong L values."
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/cn-uofbasel/ccn-lite/issues/139; https://github.com/cn-uofbasel/ccn-lite/issues/139
CVE: CVE-2017-1692
Published: 2018-02-07
Description: IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. IBM X-Force ID: 134067.
CVSS Score: 7.8 (HIGH)
References: http://aix.software.ibm.com/aix/efixes/security/suid_advisory.asc; http://www.securitytracker.com/id/1040330; https://exchange.xforce.ibmcloud.com/vulnerabilities/134067
CVE: CVE-2017-17552
Published: 2018-02-07
Description: /LoadFrame in Zoho ManageEngine AD Manager Plus build 6590 - 6613 allows attackers to conduct URL Redirection attacks via the src parameter, resulting in a bypass of CSRF protection, or potentially masquerading a malicious URL as trusted.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://umbrielsecurity.wordpress.com/2018/01/31/dangerous-url-redirection-and-csrf-in-zoho-manageengine-ad-manager-plus-cve-2017-17552/; https://umbrielsecurity.wordpress.com/2018/01/31/dangerous-url-redirection-and-csrf-in-zoho-manageengine-ad-manager-plus-cve-2017-17552/
CVE: CVE-2017-1785
Published: 2018-02-07
Description: IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query parameters to obtain sensitive information. IBM X-Force ID: 136859.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22013061; https://exchange.xforce.ibmcloud.com/vulnerabilities/136859; http://www.ibm.com/support/docview.wss?uid=swg22013061
CVE: CVE-2018-1366
Published: 2018-02-07
Description: IBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection. An attacker could exploit this vulnerability to exploit other vulnerabilities in spreadsheet software. IBM X-Force ID: 137452.
CVSS Score: 7.8 (HIGH)
References: http://www.ibm.com/support/docview.wss?uid=swg22012674; https://exchange.xforce.ibmcloud.com/vulnerabilities/137452; http://www.ibm.com/support/docview.wss?uid=swg22012674
CVE: CVE-2018-1382
Published: 2018-02-07
Description: IBM API Connect 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138079.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22013054; https://exchange.xforce.ibmcloud.com/vulnerabilities/138079; http://www.ibm.com/support/docview.wss?uid=swg22013054
CVE: CVE-2018-1388
Published: 2018-02-07
Description: GSKit V7 may disclose side channel information via discrepancies between valid and invalid PKCS#1 padding. IBM X-Force ID: 138212.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22013022; http://www.securityfocus.com/bid/103698; https://exchange.xforce.ibmcloud.com/vulnerabilities/138212
CVE: CVE-2018-6824
Published: 2018-02-07
Description: Cozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript code in the url parameter to the /api/proxy URI, as demonstrated by an XMLHttpRequest call with an 'email:"attacker@example.com"' request, which can be followed by a password reset.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.lynxsecurity.io/releases/XSS%20to%20Account%20Takeover%20in%20Cozy%20Cloud.pdf; http://www.lynxsecurity.io/releases/XSS%20to%20Account%20Takeover%20in%20Cozy%20Cloud.pdf
CVE: CVE-2018-6574
Published: 2018-02-07
Description: Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://access.redhat.com/errata/RHSA-2018:0878; https://access.redhat.com/errata/RHSA-2018:1304; https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2018-6574
CVE: CVE-2018-6655
Published: 2018-02-07
Description: PHP Scripts Mall Doctor Search Script 1.0.2 has Stored XSS via an arbitrary profile field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exploit-db.com/exploits/43988/; https://exploit-db.com/exploits/43988/
CVE: CVE-2018-6795
Published: 2018-02-07
Description: PHP Scripts Mall Naukri Clone Script 3.0.3 has Stored XSS via every profile input field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exploit-db.com/exploits/43990/; https://exploit-db.com/exploits/43990/
CVE: CVE-2018-6796
Published: 2018-02-07
Description: PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exploit-db.com/exploits/43989/; https://exploit-db.com/exploits/43989/
CVE: CVE-2017-15386
Published: 2018-02-07
Description: Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-15387
Published: 2018-02-07
Description: Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-15388
Published: 2018-02-07
Description: Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-15389
Published: 2018-02-07
Description: An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-15390
Published: 2018-02-07
Description: Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-15391
Published: 2018-02-07
Description: Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to access Extension pages without authorisation via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-15392
Published: 2018-02-07
Description: Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Windows Registry to potentially exploit heap corruption via a crafted Windows Registry entry, related to PlatformIntegration.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-15393
Published: 2018-02-07
Description: Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugging functionality via a crafted HTML page, aka a Referer leak.
CVSS Score: 8.8 (HIGH)
CWE: CWE-668
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-15394
Published: 2018-02-07
Description: Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-15395
Published: 2018-02-07
Description: A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an ImageCapture NULL pointer dereference.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-15397
Published: 2018-02-07
Description: Inappropriate implementation in ChromeVox in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker in a privileged network position to observe or tamper with certain cleartext HTTP requests by leveraging that position.
CVSS Score: 7.4 (HIGH)
CWE: CWE-311
References: http://www.securityfocus.com/bid/102435; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-chrome-os_27.html; https://crbug.com/627300
CVE: CVE-2017-15400
Published: 2018-02-07
Description: Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to execute a command with the same privileges as the cups daemon via a crafted PPD file, aka a printer zeroconfig CRLF issue.
CVSS Score: 7.8 (HIGH)
CWE: CWE-93
References: https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-chrome-os_27.html; https://crbug.com/777215; https://security.gentoo.org/glsa/201908-08
CVE: CVE-2017-5124
Published: 2018-02-07
Description: Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-5125
Published: 2018-02-07
Description: Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-5126
Published: 2018-02-07
Description: A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-5127
Published: 2018-02-07
Description: Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-5128
Published: 2018-02-07
Description: Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, related to WebGL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-5129
Published: 2018-02-07
Description: A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-5130
Published: 2018-02-07
Description: An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-190
References: http://bugzilla.gnome.org/show_bug.cgi?id=783026; http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997
CVE: CVE-2017-5131
Published: 2018-02-07
Description: An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an out-of-bounds write.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-5132
Published: 2018-02-07
Description: Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2017-5133
Published: 2018-02-07
Description: Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentially execute code via a crafted PDF file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/101482; https://access.redhat.com/errata/RHSA-2017:2997; https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
CVE: CVE-2018-6829
Published: 2018-02-07
Description: cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for Libgcrypt's ElGamal implementation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://github.com/weikengchen/attack-on-libgcrypt-elgamal; https://github.com/weikengchen/attack-on-libgcrypt-elgamal/wiki; https://lists.gnupg.org/pipermail/gcrypt-devel/2018-February/004394.html
CVE: CVE-2018-0113
Published: 2018-02-08
Description: A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by posting a crafted request to the user interface of Cisco UCS Central. This vulnerability affects Cisco UCS Central Software prior to Release 2.0(1c). Cisco Bug IDs: CSCve70825.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/102966; http://www.securitytracker.com/id/1040337; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-ucsc
CVE: CVE-2018-0116
Published: 2018-02-08
Description: A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to be authorized as a subscriber without providing a valid password; however, the attacker must provide a valid username. The vulnerability is due to incorrect RADIUS user credential validation. An attacker could exploit this vulnerability by attempting to access a Cisco Policy Suite domain configured with RADIUS authentication. An exploit could allow the attacker to be authorized as a subscriber without providing a valid password. This vulnerability affects the Cisco Policy Suite application running a release prior to 13.1.0 with Hotfix Patch 1 when RADIUS authentication is configured for a domain. Cisco Policy Suite Release 14.0.0 is also affected, as it includes vulnerable code, but RADIUS authentication is not officially supported in Cisco Policy Suite Releases 14.0.0 and later. Cisco Bug IDs: CSCvg40124.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/102968; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-cps; http://www.securityfocus.com/bid/102968
CVE: CVE-2018-0117
Published: 2018-02-08
Description: A vulnerability in the ingress packet processing functionality of the Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software could allow an unauthenticated, remote attacker to cause both control function (CF) instances on an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient handling of user-supplied data by the affected software. An attacker could exploit this vulnerability by sending malicious traffic to the internal distributed instance (DI) network address on an affected system. A successful exploit could allow the attacker to cause an unhandled error condition on the affected system, which would cause the CF instances to reload and consequently cause the entire VPC to reload, resulting in the disconnection of all subscribers and a DoS condition on the affected system. This vulnerability affects Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software N4.0 through N5.5 with the Cisco StarOS operating system 19.2 through 21.3. Cisco Bug IDs: CSCve17656.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/102970; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-vpcdi; http://www.securityfocus.com/bid/102970