deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-27394
Published: 2024-05-14
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix Use-After-Free in tcp_ao_connect_init

Since call_rcu, which is called in the hlist_for_each_entry_rcu traversal
of tcp_ao_connect_init, is not part of the RCU read critical section, it
is possible that the RCU grace period will pass during the traversal and
the key will be free.

To prevent this, it should be changed to hlist_for_each_entry_safe.
CVSS Score: 7.4 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/80e679b352c3ce5158f3f778cfb77eb767e586fb; https://git.kernel.org/stable/c/ca4fb6c6764b3f75b4f5aa81db[PII_REDACTED]ff7f; https://git.kernel.org/stable/c/80e679b352c3ce5158f3f778cfb77eb767e586fb
CVE: CVE-2024-27395
Published: 2024-05-14
Description: In the Linux kernel, the following vulnerability has been resolved:

net: openvswitch: Fix Use-After-Free in ovs_ct_exit

Since kfree_rcu, which is called in the hlist_for_each_entry_rcu traversal
of ovs_ct_limit_exit, is not part of the RCU read critical section, it
is possible that the RCU grace period will pass during the traversal and
the key will be free.

To prevent this, it should be changed to hlist_for_each_entry_safe.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/2db9a8c0a01fa1c762c1e61a13c212c492752994; https://git.kernel.org/stable/c/35880c3fa6f8fe281a19975d[PII_REDACTED]ca33d3; https://git.kernel.org/stable/c/589523cf0b384164e445dd5db8d5b1bf97982424
CVE: CVE-2024-27396
Published: 2024-05-14
Description: In the Linux kernel, the following vulnerability has been resolved:

net: gtp: Fix Use-After-Free in gtp_dellink

Since call_rcu, which is called in the hlist_for_each_entry_rcu traversal
of gtp_dellink, is not part of the RCU read critical section, it
is possible that the RCU grace period will pass during the traversal and
the key will be free.

To prevent this, it should be changed to hlist_for_each_entry_safe.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/07b20d0a3dc13fb1adff10b60021a4924498da58; https://git.kernel.org/stable/c/0caff3e6390f840666b8dc1ecebf985c2ef3f1dd; https://git.kernel.org/stable/c/25a1c2d4b1fcf938356a9688a96a6456abd44b29
CVE: CVE-2024-27397
Published: 2024-05-14
Description: In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: use timestamp to check for set element timeout

Add a timestamp field at the beginning of the transaction, store it
in the nftables per-netns area.

Update set backend .insert, .deactivate and sync gc path to use the
timestamp, this avoids that an element expires while control plane
transaction is still unfinished.

.lookup and .update, which are used from packet path, still use the
current time to check if the element has expired. And .get path and dump
also since this runs lockless under rcu read size lock. Then, there is
async gc which also needs to check the current time since it runs
asynchronously from a workqueue.
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/0d40e8cb1d1f56a994cdd2e015af622fdca9ed4d; https://git.kernel.org/stable/c/383182db8d58c4237772ba0764cded4938a235c3; https://git.kernel.org/stable/c/7395dfacfff65e9938ac0889dafa1ab01e987d15
CVE: CVE-2024-27400
Published: 2024-05-14
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2

This reverts drm/amdgpu: fix ftrace event amdgpu_bo_move always move
on same heap. The basic problem here is that after the move the old
location is simply not available any more.

Some fixes were suggested, but essentially we should call the move
notification before actually moving things because only this way we have
the correct order for DMA-buf and VM move notifications as well.

Also rework the statistic handling so that we don't update the eviction
counter before the move.

v2: add missing NULL check
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/0c7ed3ed35eec9138b88d42217b5a6b9a62bda4d; https://git.kernel.org/stable/c/5c25b169f9a0b34ee410891a96bc9d7b9ed6f9be; https://git.kernel.org/stable/c/9a4f6e138720b6e9adf7b82a71d0292f3f276480
CVE: CVE-2024-27401
Published: 2024-05-14
Description: In the Linux kernel, the following vulnerability has been resolved:

firewire: nosy: ensure user_length is taken into account when fetching packet contents

Ensure that packet_buffer_get respects the user_length provided. If
the length of the head packet exceeds the user_length, packet_buffer_get
will now return 0 to signify to the user that no data were read
and a larger buffer size is required. Helps prevent user space overflows.
CVSS Score: 7.1 (HIGH)
References: https://git.kernel.org/stable/c/1fe60ee709436550f8cfbab01295936b868d5baa; https://git.kernel.org/stable/c/38762a0763c10c24a4915feee722d7aa6e73eb98; https://git.kernel.org/stable/c/4ee0941da10e8fdcdb34756b877efd3282594c1f
CVE: CVE-2024-27460
Published: 2024-05-14
Description: A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-266
References: https://support.hp.com/us-en/document/ish_9[PII_REDACTED]285-16/hpsbpy03895; https://support.hp.com/us-en/document/ish_9[PII_REDACTED]285-16/hpsbpy03895
CVE: CVE-2024-27789
Published: 2024-05-14
Description: A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12.7.5, macOS Sonoma 14.4, macOS Ventura 13.6.7. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-922
References: https://support.apple.com/en-us/120895; https://support.apple.com/en-us/120898; https://support.apple.com/en-us/120899
CVE: CVE-2024-27790
Published: 2024-05-14
Description: Claris International has resolved an issue of potentially allowing unauthorized access to records stored in databases hosted on FileMaker Server. This issue has been fixed in FileMaker Server 20.3.2 by validating transactions before replying to client requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://support.claris.com/s/answerview?anum=000041674&language=en_US; https://support.claris.com/s/answerview?anum=000041674&language=en_US
CVE: CVE-2024-27793
Published: 2024-05-14
Description: The issue was addressed with improved checks. This issue is fixed in iTunes 12.13.2 for Windows. Parsing a file may lead to an unexpected app termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://support.apple.com/en-us/120897; http://seclists.org/fulldisclosure/2024/May/8; https://support.apple.com/en-us/HT214099
CVE: CVE-2024-27796
Published: 2024-05-14
Description: The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An attacker may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1325
References: https://support.apple.com/en-us/120898; https://support.apple.com/en-us/120899; https://support.apple.com/en-us/120900
CVE: CVE-2024-27798
Published: 2024-05-14
Description: An authorization issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An attacker may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863, CWE-863
References: https://support.apple.com/en-us/120899; https://support.apple.com/en-us/120900; https://support.apple.com/en-us/120903
CVE: CVE-2024-27803
Published: 2024-05-14
Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to share items from the lock screen.
CVSS Score: 2.4 (LOW)
CWE: CWE-284
References: https://support.apple.com/en-us/120905; http://seclists.org/fulldisclosure/2024/May/10; https://support.apple.com/en-us/HT214101
CVE: CVE-2024-27804
Published: 2024-05-14
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.3, watchOS 10.5. An app may be able to cause unexpected system termination.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770, CWE-1325
References: https://support.apple.com/en-us/120901; https://support.apple.com/en-us/120902; https://support.apple.com/en-us/120903
CVE: CVE-2024-27810
Published: 2024-05-14
Description: A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, watchOS 10.5. An app may be able to read sensitive location information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-28
References: https://support.apple.com/en-us/120899; https://support.apple.com/en-us/120900; https://support.apple.com/en-us/120901
CVE: CVE-2024-27813
Published: 2024-05-14
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
CVSS Score: 8.6 (HIGH)
References: https://support.apple.com/en-us/120903; http://seclists.org/fulldisclosure/2024/May/12; https://support.apple.com/en-us/HT214106
CVE: CVE-2024-27816
Published: 2024-05-14
Description: A logic issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker may be able to access user data.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/120901; https://support.apple.com/en-us/120902; https://support.apple.com/en-us/120903
CVE: CVE-2024-27818
Published: 2024-05-14
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to cause unexpected app termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://support.apple.com/en-us/120898; https://support.apple.com/en-us/120903; https://support.apple.com/en-us/120905
CVE: CVE-2024-27821
Published: 2024-05-14
Description: A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A shortcut may output sensitive user data without consent.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://support.apple.com/en-us/120902; https://support.apple.com/en-us/120903; https://support.apple.com/en-us/120905
CVE: CVE-2024-27822
Published: 2024-05-14
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-277
References: https://support.apple.com/en-us/120903; http://seclists.org/fulldisclosure/2024/May/12; https://support.apple.com/en-us/HT214106
CVE: CVE-2024-27824
Published: 2024-05-14
Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/120899; https://support.apple.com/en-us/120900; https://support.apple.com/en-us/120903
CVE: CVE-2024-27825
Published: 2024-05-14
Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.5. An app may be able to bypass certain Privacy preferences.
CVSS Score: 7.1 (HIGH)
CWE: CWE-277
References: https://support.apple.com/en-us/120903; http://seclists.org/fulldisclosure/2024/May/12; https://support.apple.com/en-us/HT214106
CVE: CVE-2024-27827
Published: 2024-05-14
Description: This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to read arbitrary files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://support.apple.com/en-us/120900; https://support.apple.com/en-us/120903; http://seclists.org/fulldisclosure/2024/May/12
CVE: CVE-2024-27829
Published: 2024-05-14
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.5. Processing a file may lead to unexpected app termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788
References: https://support.apple.com/en-us/120903; http://seclists.org/fulldisclosure/2024/May/12; https://support.apple.com/en-us/HT214106
CVE: CVE-2024-27834
Published: 2024-05-14
Description: The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-277
References: https://support.apple.com/en-us/120896; https://support.apple.com/en-us/120898; https://support.apple.com/en-us/120901
CVE: CVE-2024-27835
Published: 2024-05-14
Description: This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to access notes from the lock screen.
CVSS Score: 2.4 (LOW)
CWE: CWE-287
References: https://support.apple.com/en-us/120905; http://seclists.org/fulldisclosure/2024/May/10; https://support.apple.com/en-us/HT214101
CVE: CVE-2024-27837
Published: 2024-05-14
Description: A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.5. A local attacker may gain access to Keychain items.
CVSS Score: 3.3 (LOW)
CWE: CWE-280
References: https://support.apple.com/en-us/120903; http://seclists.org/fulldisclosure/2024/May/12; https://support.apple.com/en-us/HT214106
CVE: CVE-2024-27839
Published: 2024-05-14
Description: A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in iOS 17.5 and iPadOS 17.5. A malicious application may be able to determine a user's current location.
CVSS Score: 3.3 (LOW)
CWE: CWE-203
References: https://support.apple.com/en-us/120905; http://seclists.org/fulldisclosure/2024/May/10; https://support.apple.com/en-us/HT214101
CVE: CVE-2024-27841
Published: 2024-05-14
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An app may be able to disclose kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/120903; https://support.apple.com/en-us/120905; http://seclists.org/fulldisclosure/2024/May/10
CVE: CVE-2024-27842
Published: 2024-05-14
Description: The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-358
References: https://support.apple.com/en-us/120903; http://seclists.org/fulldisclosure/2024/May/12; https://support.apple.com/en-us/HT214106
CVE: CVE-2024-27843
Published: 2024-05-14
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/120899; https://support.apple.com/en-us/120900; https://support.apple.com/en-us/120903
CVE: CVE-2024-27847
Published: 2024-05-14
Description: This issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-277
References: https://support.apple.com/en-us/120898; https://support.apple.com/en-us/120899; https://support.apple.com/en-us/120900
CVE: CVE-2024-27852
Published: 2024-05-14
Description: A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to distribute a script that tracks users on other webpages.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/120905; http://seclists.org/fulldisclosure/2024/May/10; https://support.apple.com/en-us/HT214101
CVE: CVE-2024-28075
Published: 2024-05-14
Description: The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution. 

We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.   
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-502
References: https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-4_release_notes.htm; https://documentation.solarwinds.com/en/success_center/arm/content/secure-your-arm-deployment.htm; https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28075
CVE: CVE-2024-28276
Published: 2024-05-14
Description: Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting (XSS) via add-task.php?task_name=.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/unrealjbr/CVE-2024-28276; https://www.sourcecodester.com/download-code?nid=16877&title=School+Task+Manager+Using+PHP+with+Source+Code; https://github.com/unrealjbr/CVE-2024-28276
CVE: CVE-2024-28277
Published: 2024-05-14
Description: In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subject_name= parameter, enabling Stored Cross-Site Scripting (XSS) attacks. This vulnerability allows attackers to manipulate the subject's name, potentially leading to the execution of malicious JavaScript payloads.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/unrealjbr/CVE-2024-28277; https://www.sourcecodester.com/download-code?nid=16877&title=School+Task+Manager+Using+PHP+with+Source+Code; https://github.com/unrealjbr/CVE-2024-28277
CVE: CVE-2024-28279
Published: 2024-05-14
Description: Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://code-projects.org/computer-book-store-in-php-with-source-code/; https://github.com/unrealjbr/CVE-2024-28279; https://code-projects.org/computer-book-store-in-php-with-source-code/
CVE: CVE-2024-28285
Published: 2024-05-14
Description: A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of Cryptopp Crypto++ 8.9, allows an attacker to co-reside in the same system with a victim process to disclose information and escalate privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-209, CWE-285
References: https://gist.github.com/liang-junkai/3e91f58070812ea76c1b8c126c3e28c7; https://gist.github.com/liang-junkai/3e91f58070812ea76c1b8c126c3e28c7
CVE: CVE-2024-28759
Published: 2024-05-14
Description: A crafted network packet may cause a buffer overrun in Wind River VxWorks 7 through 23.09.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-120
References: https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2024-28759; https://windriver.com; https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2024-28759
CVE: CVE-2024-28760
Published: 2024-05-14
Description: IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 dashboard is vulnerable to a denial of service due to improper restrictions of resource allocation.  IBM X-Force ID:  285244.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/285244; https://www.ibm.com/support/pages/node/7150845; https://exchange.xforce.ibmcloud.com/vulnerabilities/285244
CVE: CVE-2024-28761
Published: 2024-05-14
Description: IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.  IBM X-Force ID:  285245.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/285245; https://www.ibm.com/support/pages/node/7150847; https://exchange.xforce.ibmcloud.com/vulnerabilities/285245
CVE: CVE-2024-28781
Published: 2024-05-14
Description: IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4, and 8.0 through 8.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  285654.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/285654; https://www.ibm.com/support/pages/node/7150747; https://exchange.xforce.ibmcloud.com/vulnerabilities/285654
CVE: CVE-2024-28866
Published: 2024-05-14
Description: GoCD is a continuous delivery server. GoCD versions from 19.4.0 to 23.5.0 (inclusive) are potentially vulnerable to a reflected cross-site scripting vulnerability on the loading page displayed while GoCD is starting, via abuse of a `redirect_to` query parameter with inadequate validation.

Attackers could theoretically abuse the query parameter to steal session tokens or other values from the user's browser. In practice exploiting this to perform privileged actions is likely rather difficult to exploit because the target user would need to be triggered to open an attacker-crafted link in the period where the server is starting up (but not completely started), requiring chaining with a separate denial-of-service vulnerability. Additionally, GoCD server restarts invalidate earlier session tokens (i.e GoCD does not support persistent sessions), so a stolen session token would be unusable once the server has completed restart, and executed XSS would be done within a logged-out context.

The issue is fixed in GoCD 24.1.0. As a workaround, it is technically possible in earlier GoCD versions to override the loading page with an earlier version which is not vulnerable, by starting GoCD with the Java system property override as either `-Dloading.page.resource.path=/loading_pages/default.loading.page.html` (simpler early version of loading page without GoCD introduction) or `-Dloading.page.resource.path=/does_not_exist.html` (to display a simple message with no interactivity).
CVSS Score: 3.1 (LOW)
CWE: CWE-79
References: https://github.com/gocd/gocd/commit/388d8893ec4cac51d2b76e923cc9b55c7703e402; https://github.com/gocd/gocd/releases/tag/24.1.0; https://github.com/gocd/gocd/security/advisories/GHSA-q882-q6mm-mgvh
CVE: CVE-2024-29157
Published: 2024-05-14
Description: HDF5 through 1.14.3 contains a heap buffer overflow in H5HG_read, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/; https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
CVE: CVE-2024-29158
Published: 2024-05-14
Description: HDF5 through 1.14.3 contains a stack buffer overflow in H5FL_arr_malloc, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution.
CVSS Score: 7.4 (HIGH)
CWE: CWE-122
References: https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/; https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/