deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-5468
Published: 2020-01-28
Description: An privilege escalation issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 when Mattermost slash commands are used with a blocked account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/57556; https://hackerone.com/reports/493562
CVE: CVE-2019-5470
Published: 2020-01-28
Description: An information disclosure issue was discovered GitLab versions < 12.1.2, < 12.0.4, and < 11.11.6 in the security dashboard which could result in disclosure of vulnerability feedback information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-862
References: https://about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/; https://gitlab.com/gitlab-org/gitlab-ee/issues/9665; https://hackerone.com/reports/490250
CVE: CVE-2019-5472
Published: 2020-01-28
Description: An authorization issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 that prevented owners and maintainer to delete epic comments.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-269
References: https://about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/; https://gitlab.com/gitlab-org/gitlab-ee/issues/11381; https://hackerone.com/reports/538101
CVE: CVE-2019-5474
Published: 2020-01-28
Description: An authorization issue was discovered in GitLab EE < 12.1.2, < 12.0.4, and < 11.11.6 allowing the merge request approval rules to be overridden without appropriate permissions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284, CWE-863
References: https://about.gitlab.com/releases/2019/07/29/security-release-gitlab-12-dot-1-dot-2-released/; https://gitlab.com/gitlab-org/gitlab-ee/issues/11423; https://hackerone.com/reports/544756
CVE: CVE-2020-7997
Published: 2020-01-28
Description: ASUS WRT-AC66U 3 RT 3.0.0.4.372_67 devices allow XSS via the Client Name field to the Parental Control feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/adeshkolte/983bcadd82cc1fd60333098eb646ef68; https://gist.github.com/adeshkolte/983bcadd82cc1fd60333098eb646ef68
CVE: CVE-2020-7998
Published: 2020-01-28
Description: An arbitrary file upload vulnerability has been discovered in the Super File Explorer app 1.0.1 for iOS. The vulnerability is located in the developer path that is accessible and hidden next to the root path. By default, there is no password set for the FTP or Web UI service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://apps.apple.com/us/app/super-file-explorer-file-viewer-file-manager/id[PII_REDACTED]; https://gist.github.com/adeshkolte/9e60b2483d2f20d1951beac0fc917c6f; https://apps.apple.com/us/app/super-file-explorer-file-viewer-file-manager/id[PII_REDACTED]
CVE: CVE-2020-5523
Published: 2020-01-28
Description: Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and also do not properly validate certificates with host-mismatch, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: http://jvn.jp/en/jp/JVN28845872/index.html; http://www.dokodemobank.ne.jp/info_20200128_bankingapp.html; https://www.77bank.co.jp/pdf/oshirase/20012801_appvulnerability.pdf
CVE: CVE-2020-7799
Published: 2020-01-28
Description: An issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates (Home -> Settings -> Email Templates) or themes (Home -> Settings -> Themes), can execute commands on the underlying operating system by abusing freemarker.template.utility.Execute in the Apache FreeMarker engine that processes custom templates.
CVSS Score: 7.2 (HIGH)
CWE: CWE-917
References: http://packetstormsecurity.com/files/156102/FusionAuth-1.10-Remote-Command-Execution.html; https://fusionauth.io/docs/v1/tech/release-notes; https://lab.mediaservice.net/advisory/2020-03-fusionauth.txt
CVE: CVE-2020-7934
Published: 2020-01-28
Description: In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyAccountPortlet are all vulnerable to a persistent XSS issue. Any user can modify these fields with a particular XSS payload, and it will be stored in the database. The payload will then be rendered when a user utilizes the search feature to search for other users (i.e., if a user with modified fields occurs in the search results). This issue was fixed in Liferay Portal CE version 7.3.0 GA1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/160168/LifeRay-7.2.1-GA2-Cross-Site-Scripting.html; https://github.com/3ndG4me/liferay-xss-7.2.1GA2-poc-report-CVE-2020-7934; https://semanticbits.com/liferay-portal-authenticated-xss-disclosure/
CVE: CVE-2012-6114
Published: 2020-01-28
Description: The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/changelog or (2) /tmp/.git-effort.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://www.openwall.com/lists/oss-security/2013/01/22/8; http://www.openwall.com/lists/oss-security/2013/01/23/5; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=698490
CVE: CVE-2013-1437
Published: 2020-01-28
Description: Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114904.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114912.html; https://metacpan.org/changes/distribution/Module-Metadata
CVE: CVE-2013-1895
Published: 2020-01-28
Description: The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.
CVSS Score: 7.5 (HIGH)
CWE: CWE-307
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101382.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101387.html; http://www.openwall.com/lists/oss-security/2013/03/26/2
CVE: CVE-2013-2571
Published: 2020-01-28
Description: Iris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote attackers to execute arbitrary commands via a crafted request to TCP port 7510, as demonstrated by opening the cash drawer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.exploit-db.com/exploits/25987; http://www.securityfocus.com/bid/60359; https://exchange.xforce.ibmcloud.com/vulnerabilities/84761
CVE: CVE-2013-6451
Published: 2020-01-28
Description: Cross-site scripting (XSS) vulnerability in MediaWiki 1.19.9 before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via unspecified CSS values.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html; http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html
CVE: CVE-2013-6455
Published: 2020-01-28
Description: The CentralAuth extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain usernames via vectors related to writing the names to the DOM of a page.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html; http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html
CVE: CVE-2014-2581
Published: 2020-01-28
Description: Smb4K before 1.1.1 allows remote attackers to obtain credentials via vectors related to the cuid option in the "Additional options" line edit.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-June/133898.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-June/133901.html; http://sourceforge.net/projects/smb4k/files/1.1.1/
CVE: CVE-2014-3445
Published: 2020-01-28
Description: backup.php in HandsomeWeb SOS Webpages before 1.1.12 does not require knowledge of the cleartext password, which allows remote attackers to bypass authentication by leveraging knowledge of the administrator password hash.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: http://packetstormsecurity.com/files/126844/HandsomeWeb-SOS-Webpages-1.1.11-Backup-Hash-Disclosure.html; http://seclists.org/fulldisclosure/2014/May/130; http://sourceforge.net/projects/soswebpages/files/SOS%20Webpages/SOS%20Webpages%201.1.12/
CVE: CVE-2013-0294
Published: 2020-01-28
Description: packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-330
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115677.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115705.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116567.html
CVE: CVE-2013-2060
Published: 2020-01-28
Description: The download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.openwall.com/lists/oss-security/2013/05/07/1; http://www.securityfocus.com/bid/59687; https://bugzilla.redhat.com/show_bug.cgi?id=960363
CVE: CVE-2013-4582
Published: 2020-01-28
Description: The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to include information from local files into the metadata of a Git repository via the web interface.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-829
References: http://www.openwall.com/lists/oss-security/2013/11/15/4; https://www.gitlab.com/2013/11/14/multiple-critical-vulnerabilities-in-gitlab/; https://www.openwall.com/lists/oss-security/2013/11/18/4
CVE: CVE-2013-4583
Published: 2020-01-28
Description: The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to gain privileges and clone arbitrary repositories.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: http://www.openwall.com/lists/oss-security/2013/11/15/4; https://www.gitlab.com/2013/11/14/multiple-critical-vulnerabilities-in-gitlab/; https://www.openwall.com/lists/oss-security/2013/11/18/4
CVE: CVE-2014-2896
Published: 2020-01-28
Description: The DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact and vectors, which trigger memory corruption or an out-of-bounds read.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://seclists.org/oss-sec/2014/q2/126; http://seclists.org/oss-sec/2014/q2/130; http://www.wolfssl.com/yaSSL/Blog/Entries/2014/4/11_wolfSSL_Security_Advisory__April_9%2C_2014.html
CVE: CVE-2014-2897
Published: 2020-01-28
Description: The SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding length when verification fails, which allows remote attackers to have unspecified impact via a crafted HMAC, which triggers an out-of-bounds read.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://seclists.org/oss-sec/2014/q2/126; http://seclists.org/oss-sec/2014/q2/130; http://www.wolfssl.com/yaSSL/Blog/Entries/2014/4/11_wolfSSL_Security_Advisory__April_9%2C_2014.html
CVE: CVE-2014-2898
Published: 2020-01-28
Description: wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which triggers an out-of-bounds read when an error occurs, related to not checking the return code and MAC verification failure.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://seclists.org/oss-sec/2014/q2/126; http://seclists.org/oss-sec/2014/q2/130; http://www.wolfssl.com/yaSSL/Blog/Entries/2014/4/11_wolfSSL_Security_Advisory__April_9%2C_2014.html
CVE: CVE-2014-2906
Published: 2020-01-28
Description: The psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly create temporary files, which allows local users to execute arbitrary commands via a temporary file with a predictable name.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.openwall.com/lists/oss-security/2014/04/28/4; https://github.com/fish-shell/fish-shell/issues/1437; https://github.com/fish-shell/fish-shell/releases/tag/2.1.1
CVE: CVE-2014-2914
Published: 2020-01-28
Description: fish (aka fish-shell) 2.0.0 before 2.1.1 does not restrict access to the configuration service (aka fish_config), which allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by set_prompt.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2014/04/28/4; https://github.com/fish-shell/fish-shell/issues/1438; http://www.openwall.com/lists/oss-security/2014/04/28/4
CVE: CVE-2014-3230
Published: 2020-01-28
Description: The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the (1) HTTPS_CA_DIR or (2) HTTPS_CA_FILE environment variable.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2014/05/02/8; http://www.openwall.com/lists/oss-security/2014/05/04/1; http://www.openwall.com/lists/oss-security/2014/05/06/8
CVE: CVE-2014-3856
Published: 2020-01-28
Description: The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://github.com/fish-shell/fish-shell/issues/1437; https://github.com/fish-shell/fish-shell/releases/tag/2.1.1; https://www.openwall.com/lists/oss-security/2014/04/28/4
CVE: CVE-2012-6609
Published: 2020-01-28
Description: Directory traversal vulnerability in a_getlog.cgi in Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2012/Mar/18; https://web.archive.org/web/[PII_REDACTED]2013/http://blog.tempest.com.br/joao-paulo-campello/polycom-web-management-interface-os-command-injection.html; http://seclists.org/fulldisclosure/2012/Mar/18
CVE: CVE-2012-6610
Published: 2020-01-28
Description: Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated users to execute arbitrary commands as demonstrated by a ; (semicolon) to the ping command feature.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://seclists.org/fulldisclosure/2012/Mar/18; https://web.archive.org/web/[PII_REDACTED]2013/http://blog.tempest.com.br/joao-paulo-campello/polycom-web-management-interface-os-command-injection.html; http://seclists.org/fulldisclosure/2012/Mar/18
CVE: CVE-2013-4861
Published: 2020-01-28
Description: Directory traversal vulnerability in cgi-bin/cmh/get_file.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote authenticated users to read arbirary files via a .. (dot dot) in the filename parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/122654/MiCasaVerde-VeraLite-1.5.408-Traversal-Authorization-CSRF-Disclosure.html; http://www.exploit-db.com/exploits/27286; https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-019.txt
CVE: CVE-2013-4862
Published: 2020-01-28
Description: MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firmware via the squashfs parameter to upgrade_step2.sh or (2) obtain hashed passwords via the cgi-bin/cmh/backup.sh page.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: http://packetstormsecurity.com/files/122654/MiCasaVerde-VeraLite-1.5.408-Traversal-Authorization-CSRF-Disclosure.html; http://www.exploit-db.com/exploits/27286; https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-019.txt
CVE: CVE-2013-4863
Published: 2020-01-28
Description: The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute arbitrary Lua code via a RunLua action in a request to upnp/control/hag on port 49451 or (2) remote authenticated users to execute arbitrary Lua code via a RunLua action in a request to port_49451/upnp/control/hag.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: http://packetstormsecurity.com/files/122654/MiCasaVerde-VeraLite-1.5.408-Traversal-Authorization-CSRF-Disclosure.html; http://www.exploit-db.com/exploits/27286; https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-019.txt
CVE: CVE-2013-4864
Published: 2020-01-28
Description: MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to send HTTP requests to intranet servers via the url parameter to cgi-bin/cmh/proxy.sh, related to a Server-Side Request Forgery (SSRF) issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: http://packetstormsecurity.com/files/122654/MiCasaVerde-VeraLite-1.5.408-Traversal-Authorization-CSRF-Disclosure.html; http://www.exploit-db.com/exploits/27286; https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-019.txt
CVE: CVE-2013-4865
Published: 2020-01-28
Description: Cross-site request forgery (CSRF) vulnerability in upgrade_step2.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to hijack the authentication of users for requests that install arbitrary firmware via the squashfs parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.com/files/122654/MiCasaVerde-VeraLite-1.5.408-Traversal-Authorization-CSRF-Disclosure.html; http://www.exploit-db.com/exploits/27286; https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-019.txt
CVE: CVE-2015-7851
Published: 2020-01-28
Description: Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://support.ntp.org/bin/view/Main/NtpBug2918; http://support.ntp.org/bin/view/Main/SecurityNotice; http://www.talosintel.com/reports/TALOS-2015-0062/
CVE: CVE-2020-1940
Published: 2020-01-28
Description: The optional initial password change and password expiration features present in Apache Jackrabbit Oak 1.2.0 to 1.22.0 are prone to a sensitive information disclosure vulnerability. The code mandates the changed password to be passed as an additional attribute to the credentials object but does not remove it upon processing during the first phase of the authentication. In combination with additional, independent authentication mechanisms, this may lead to the new password being disclosed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-212
References: http://www.openwall.com/lists/oss-security/2020/01/28/1; https://lists.apache.org/thread.html/r3da8e2fd253ecd4d3a0de71ce255631148b54be8500225b5812f7737%40%3Coak-commits.jackrabbit.apache.org%3E; https://lists.apache.org/thread.html/r45b0e2fb6ac51c5a03952b08b5e0efde1249ecb809884cc87eb0bd99%40%3Ccommits.jackrabbit.apache.org%3E
CVE: CVE-2020-8086
Published: 2020-01-28
Description: The mod_auth_ldap and mod_auth_ldap2 Community Modules through 2020-01-27 for Prosody incompletely verify the XMPP address passed to the is_admin() function. This grants remote entities admin-only functionality if their username matches the username of a local admin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://hg.prosody.im/prosody-modules/log/tip/mod_auth_ldap/mod_auth_ldap.lua; https://hg.prosody.im/prosody-modules/log/tip/mod_auth_ldap2/mod_auth_ldap2.lua; https://prosody.im/security/advisory_20200128/
CVE: CVE-2020-5209
Published: 2020-01-28
Description: In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence command line options. Users should upgrade to NetHack 3.6.5.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://github.com/NetHack/NetHack/commit/f3def5c0b999478da2d0a8f0b6a7c370a2065f77; https://github.com/NetHack/NetHack/security/advisories/GHSA-fw72-r8xm-45p8; https://github.com/NetHack/NetHack/commit/f3def5c0b999478da2d0a8f0b6a7c370a2065f77
CVE: CVE-2020-5210
Published: 2020-01-28
Description: In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence command line options. Users should upgrade to NetHack 3.6.5.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://github.com/NetHack/NetHack/commit/f3def5c0b999478da2d0a8f0b6a7c370a2065f77; https://github.com/NetHack/NetHack/security/advisories/GHSA-v5pg-hpjg-9rpp; https://github.com/NetHack/NetHack/commit/f3def5c0b999478da2d0a8f0b6a7c370a2065f77
CVE: CVE-2020-5212
Published: 2020-01-28
Description: In NetHack before 3.6.5, an extremely long value for the MENUCOLOR configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own configuration files. Users should upgrade to NetHack 3.6.5.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://github.com/NetHack/NetHack/security/advisories/GHSA-g89f-m829-4m56; https://github.com/NetHack/NetHack/security/advisories/GHSA-g89f-m829-4m56
CVE: CVE-2020-5213
Published: 2020-01-28
Description: In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own configuration files. Users should upgrade to NetHack 3.6.5.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://github.com/NetHack/NetHack/security/advisories/GHSA-rr25-4v34-pr7v; https://github.com/NetHack/NetHack/security/advisories/GHSA-rr25-4v34-pr7v
CVE: CVE-2020-5214
Published: 2020-01-28
Description: In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own configuration files. Users should upgrade to NetHack 3.6.5.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://github.com/NetHack/NetHack/security/advisories/GHSA-p8fw-rq89-xqx6; https://github.com/NetHack/NetHack/security/advisories/GHSA-p8fw-rq89-xqx6
CVE: CVE-2020-8112
Published: 2020-01-28
Description: opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://access.redhat.com/errata/RHSA-2020:0550; https://access.redhat.com/errata/RHSA-2020:0569; https://access.redhat.com/errata/RHSA-2020:0570