deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-1681
Published: 2019-02-21
Description: A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulnerability is due to improper validation of user-supplied input within TFTP requests processed by the affected software. An attacker could exploit this vulnerability by using directory traversal techniques in malicious requests sent to the TFTP service on a targeted device. An exploit could allow the attacker to retrieve arbitrary files from the targeted device, resulting in the disclosure of sensitive information. This vulnerability affects Cisco IOS XR Software releases prior to Release 6.5.2 for Cisco Network Convergence System 1000 Series devices when the TFTP service is enabled.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-22
References: http://www.securityfocus.com/bid/107107; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190220-ncs; http://www.securityfocus.com/bid/107107
CVE: CVE-2019-1684
Published: 2019-02-21
Description: A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol (LLDP) implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service (DoS) condition. The vulnerability is due to missing length validation of certain Cisco Discovery Protocol or LLDP packet header fields. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted phone. A successful exploit could allow the attacker to cause the affected phone to reload unexpectedly, resulting in a temporary DoS condition. Versions prior to 12.6(1)MN80 are affected.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399, CWE-119
References: http://www.securityfocus.com/bid/107104; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190220-cdp-lldp-dos; http://www.securityfocus.com/bid/107104
CVE: CVE-2019-1685
Published: 2019-02-21
Description: A vulnerability in the Security Assertion Markup Language (SAML) single sign-on (SSO) interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Version 12.5 is affected.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/107102; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190220-cuc-rxss; http://www.securityfocus.com/bid/107102
CVE: CVE-2019-1691
Published: 2019-02-21
Description: A vulnerability in the detection engine of Cisco Firepower Threat Defense Software could allow an unauthenticated, remote attacker to cause the unexpected restart of the SNORT detection engine, resulting in a denial of service (DoS) condition. The vulnerability is due to the incomplete error handling of the SSL or TLS packet header during the connection establishment. An attacker could exploit this vulnerability by sending a crafted SSL or TLS packet during the connection handshake. An exploit could allow the attacker to cause the SNORT detection engine to unexpectedly restart, resulting in a partial DoS condition while the detection engine restarts. Versions prior to 6.2.3.4 are affected.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20, CWE-755
References: http://www.securityfocus.com/bid/107099; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190220-fpwr-ssltls-dos; http://www.securityfocus.com/bid/107099
CVE: CVE-2019-1698
Published: 2019-02-21
Description: A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director (IoT-FND) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by importing a crafted XML file with malicious entries, which could allow the attacker to read files within the affected application. Versions prior to 4.4(0.26) are affected.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-611, CWE-611
References: http://www.securityfocus.com/bid/107093; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190220-iot-fnd-xml; http://www.securityfocus.com/bid/107093
CVE: CVE-2019-1700
Published: 2019-02-21
Description: A vulnerability in field-programmable gate array (FPGA) ingress buffer management for the Cisco Firepower 9000 Series with the Cisco Firepower 2-port 100G double-width network module (PID: FPR9K-DNM-2X100G) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. Manual intervention may be required before a device will resume normal operations. The vulnerability is due to a logic error in the FPGA related to the processing of different types of input packets. An attacker could exploit this vulnerability by being on the adjacent subnet and sending a crafted sequence of input packets to a specific interface on an affected device. A successful exploit could allow the attacker to cause a queue wedge condition on the interface. When a wedge occurs, the affected device will stop processing any additional packets that are received on the wedged interface. Version 2.2 is affected.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-399, CWE-399
References: http://www.securityfocus.com/bid/107105; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190220-firpwr-dos; http://www.securityfocus.com/bid/107105
CVE: CVE-2019-6340
Published: 2019-02-21
Description: Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions is met: The site has the Drupal 8 core RESTful Web Services (rest) module enabled and allows PATCH or POST requests, or the site has another web services module enabled, like JSON:API in Drupal 8, or Services or RESTful Web Services in Drupal 7. (Note: The Drupal 7 Services module itself does not require an update at this time, but you should apply other contributed updates associated with this advisory if Services is in use.)
CVSS Score: 8.1 (HIGH)
CWE: CWE-502, CWE-502
References: http://www.securityfocus.com/bid/107106; https://www.drupal.org/sa-core-2019-003; https://www.exploit-db.com/exploits/46452/
CVE: CVE-2019-8996
Published: 2019-02-21
Description: In Signiant Manager+Agents before 13.5, the implementation of the set command has a Buffer Overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://help.signiant.com/flight-deck/general/release-notes-13-5; https://help.signiant.com/manager-agents/installation/release-notes/; https://help.signiant.com/flight-deck/general/release-notes-13-5
CVE: CVE-2019-8955
Published: 2019-02-21
Description: In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00013.html; http://www.securityfocus.com/bid/107136; https://blog.torproject.org/new-releases-tor-0402-alpha-0358-03411-and-03312
CVE: CVE-2019-9002
Published: 2019-02-22
Description: An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute arbitrary PHP code via the database_host parameter if the installer remains present in its original directory after installation is completed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://github.com/mikelbring/tinyissue/issues/237; https://github.com/pixeline/bugs/commit/9d2d3fcdea22e94f7b497f6ed83791ab3a31ee41; https://github.com/mikelbring/tinyissue/issues/237
CVE: CVE-2019-7728
Published: 2019-02-22
Description: An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to improperly implemented TLS certificate checks, a malicious actor could potentially succeed in executing a man-in-the-middle attack for some connections. (The Bosch Smart Home App is not affected. iOS Apps are not affected.)
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://psirt.bosch.com/Advisory/BOSCH-2019-0202.html; https://psirt.bosch.com/Advisory/BOSCH-2019-0202.html
CVE: CVE-2019-7729
Published: 2019-02-22
Description: An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to setting of insecure permissions, a malicious app could potentially succeed in retrieving video clips or still images that have been cached for clip sharing. (The Bosch Smart Home App is not affected. iOS Apps are not affected.)
CVSS Score: 3.3 (LOW)
CWE: CWE-732
References: https://psirt.bosch.com/Advisory/BOSCH-2019-0204.html; https://psirt.bosch.com/Advisory/BOSCH-2019-0204.html
CVE: CVE-2018-20784
Published: 2019-02-22
Description: In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-835
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c40f7d74c741a907cfaeb73a[PII_REDACTED]c497d0; https://access.redhat.com/errata/RHSA-2019:1959; https://access.redhat.com/errata/RHSA-2019:1971
CVE: CVE-2019-9003
Published: 2019-02-22
Description: In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a "service ipmievd restart" loop.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=77f8269606bf95fcb232ee86f6da80886f1dfae8; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00037.html; http://www.securityfocus.com/bid/107145
CVE: CVE-2019-9004
Published: 2019-02-22
Description: In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, leading to a memory leak. Processing of a single crafted packet leads to leaking (wasting) 24 bytes of memory. This can lead to termination of the LWM2M server after exhausting all available memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://github.com/eclipse/wakaama/issues/425; https://github.com/eclipse/wakaama/issues/425
CVE: CVE-2019-9015
Published: 2019-02-22
Description: A Path Traversal vulnerability was discovered in MOPCMS through 2018-11-30, leading to deletion of unexpected critical files. The exploitation point is in the "column management" function. The path added to the column is not verified. When a column is deleted by an attacker, the corresponding directory is deleted, as demonstrated by ./ to delete the entire web site.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://github.com/yangsuda/mopcms/issues/1; https://github.com/yangsuda/mopcms/issues/1
CVE: CVE-2019-9016
Published: 2019-02-22
Description: An XSS vulnerability was discovered in MOPCMS through 2018-11-30. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[name] parameter in a mod=column request, as demonstrated by the /mopcms/X0AZgf(index).php?mod=column&ac=list&menuid=28&ac=add&menuid=29 URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/yangsuda/mopcms/issues/2; https://github.com/yangsuda/mopcms/issues/2
CVE: CVE-2019-9019
Published: 2019-02-22
Description: The British Airways Entertainment System, as installed on Boeing 777-36N(ER) and possibly other aircraft, does not prevent the USB charging/data-transfer feature from interacting with USB keyboard and mouse devices, which allows physically proximate attackers to conduct unanticipated attacks against Entertainment applications, as demonstrated by using mouse copy-and-paste actions to trigger a Chat buffer overflow or possibly have unspecified other impact.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: https://www.linkedin.com/pulse/buffer-overflow-exploitation-british-airways-system-marco-gisbert/; https://www.linkedin.com/pulse/buffer-overflow-exploitation-british-airways-system-marco-gisbert/
CVE: CVE-2019-6485
Published: 2019-02-22
Description: Citrix NetScaler Gateway 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 and Application Delivery Controller (ADC) 12.1 before build 50.31, 12.0 before build 60.9, 11.1 before build 60.14, 11.0 before build 72.17, and 10.5 before build 69.5 allow remote attackers to obtain sensitive plaintext information because of a TLS Padding Oracle Vulnerability when CBC-based cipher suites are enabled.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: http://www.securityfocus.com/bid/106783; https://github.com/RUB-NDS/TLS-Padding-Oracles; https://support.citrix.com/article/CTX240139
CVE: CVE-2019-9020
Published: 2019-02-22
Description: An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. Invalid input to the function xmlrpc_decode() can lead to an invalid memory access (heap out of bounds read or read after free). This is related to xml_elem_parse_buf in ext/xmlrpc/libxmlrpc/xml_element.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html
CVE: CVE-2019-9021
Published: 2019-02-22
Description: An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the file name, a different vulnerability than CVE-2018-20783. This is related to phar_detect_phar_fname_ext in ext/phar/phar.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html
CVE: CVE-2019-9022
Published: 2019-02-22
Description: An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dns_get_record misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects php_parserr in ext/standard/dns.c for DNS_CAA and DNS_ANY queries.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00044.html; https://access.redhat.com/errata/RHSA-2019:2519
CVE: CVE-2019-9023
Published: 2019-02-22
Description: An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in ext/mbstring/oniguruma/regcomp.c, ext/mbstring/oniguruma/regexec.c, ext/mbstring/oniguruma/regparse.c, ext/mbstring/oniguruma/enc/unicode.c, and ext/mbstring/oniguruma/src/utf32_be.c when a multibyte regular expression pattern contains invalid multibyte sequences.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html
CVE: CVE-2019-9024
Published: 2019-02-22
Description: An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. xmlrpc_decode() can allow a hostile XMLRPC server to cause PHP to read memory outside of allocated areas in base64_decode_xmlrpc in ext/xmlrpc/libxmlrpc/base64.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00083.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00104.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00041.html
CVE: CVE-2019-9025
Published: 2019-02-22
Description: An issue was discovered in PHP 7.3.x before 7.3.1. An invalid multibyte string supplied as an argument to the mb_split() function in ext/mbstring/php_mbregex.c can cause PHP to execute memcpy() with a negative argument, which could read and write past buffers allocated for the data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-787
References: https://bugs.php.net/bug.php?id=77367; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://bugs.php.net/bug.php?id=77367
CVE: CVE-2018-18692
Published: 2019-02-23
Description: A reflected Cross-Site scripting (XSS) vulnerability in SEMCO Semcosoft 5.3 allows remote attackers to inject arbitrary web scripts or HTML via the username parameter to the Login Form.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://atomic111.github.io/article/semcosoft-cross-site-scripting; https://atomic111.github.io/article/semcosoft-cross-site-scripting
CVE: CVE-2019-9026
Published: 2019-02-23
Description: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow in the function InflateVarName() in inflate.c when called from ReadNextCell in mat5.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/tree/master/matio; https://github.com/tbeu/matio/issues/103; https://github.com/TeamSeri0us/pocs/tree/master/matio
CVE: CVE-2019-9027
Published: 2019-02-23
Description: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow problem in the function ReadNextCell() in mat5.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/tree/master/matio; https://github.com/tbeu/matio/issues/103; https://github.com/TeamSeri0us/pocs/tree/master/matio
CVE: CVE-2019-9028
Published: 2019-02-23
Description: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function InflateDimensions() in inflate.c when called from ReadNextCell in mat5.c.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/tree/master/matio; https://github.com/tbeu/matio/issues/103; https://github.com/TeamSeri0us/pocs/tree/master/matio
CVE: CVE-2019-9029
Published: 2019-02-23
Description: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds read with a SEGV in the function Mat_VarReadNextInfo5() in mat5.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/tree/master/matio; https://github.com/tbeu/matio/issues/103; https://github.com/TeamSeri0us/pocs/tree/master/matio
CVE: CVE-2019-9030
Published: 2019-02-23
Description: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in Mat_VarReadNextInfo5() in mat5.c.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/tree/master/matio; https://github.com/tbeu/matio/issues/103; https://github.com/TeamSeri0us/pocs/tree/master/matio
CVE: CVE-2019-9031
Published: 2019-02-23
Description: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a NULL pointer dereference in the function Mat_VarFree() in mat.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/TeamSeri0us/pocs/tree/master/matio; https://github.com/tbeu/matio/issues/103; https://github.com/TeamSeri0us/pocs/tree/master/matio
CVE: CVE-2019-9032
Published: 2019-02-23
Description: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds write problem causing a SEGV in the function Mat_VarFree() in mat.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/tree/master/matio; https://github.com/tbeu/matio/issues/103; https://github.com/TeamSeri0us/pocs/tree/master/matio
CVE: CVE-2019-9033
Published: 2019-02-23
Description: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for the "Rank and Dimension" feature in the function ReadNextCell() in mat5.c.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/tree/master/matio; https://github.com/tbeu/matio/issues/103; https://github.com/TeamSeri0us/pocs/tree/master/matio
CVE: CVE-2019-9034
Published: 2019-02-23
Description: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for a memcpy in the function ReadNextCell() in mat5.c.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/tree/master/matio; https://github.com/tbeu/matio/issues/103; https://github.com/TeamSeri0us/pocs/tree/master/matio
CVE: CVE-2019-9035
Published: 2019-02-23
Description: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function ReadNextStructField() in mat5.c.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/tree/master/matio; https://github.com/tbeu/matio/issues/103; https://github.com/TeamSeri0us/pocs/tree/master/matio
CVE: CVE-2019-9036
Published: 2019-02-23
Description: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow in the function ReadNextFunctionHandle() in mat5.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/tree/master/matio; https://github.com/tbeu/matio/issues/103; https://github.com/TeamSeri0us/pocs/tree/master/matio
CVE: CVE-2019-9037
Published: 2019-02-23
Description: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a buffer over-read in the function Mat_VarPrint() in mat.c.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/tree/master/matio; https://github.com/tbeu/matio/issues/103; https://github.com/TeamSeri0us/pocs/tree/master/matio
CVE: CVE-2019-9038
Published: 2019-02-23
Description: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds read problem with a SEGV in the function ReadNextCell() in mat5.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/TeamSeri0us/pocs/tree/master/matio; https://github.com/tbeu/matio/issues/103; https://github.com/TeamSeri0us/pocs/tree/master/matio