deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-12608
Published: 2017-11-20
Description: A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious documents that cause denial of service (memory corruption and application crash) potentially resulting in arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/101585; http://www.securitytracker.com/id/1039733; http://www.securitytracker.com/id/1039735
CVE: CVE-2017-16906
Published: 2017-11-20
Description: In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event" action.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html; https://github.com/horde/kronolith/commit/09d90141292f9ec516a7a2007bf828ce2bbdf60d; https://github.com/starnightcyber/Miscellaneous/blob/master/Horde/README.md
CVE: CVE-2017-16907
Published: 2017-11-20
Description: In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html; https://github.com/horde/base/commit/fb2113bbcd04bd4a28c46aad0889fb0a3979a230; https://lists.debian.org/debian-lts-announce/2020/08/msg00046.html
CVE: CVE-2017-16908
Published: 2017-11-20
Description: In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource. This can be leveraged for remote code execution after compromising an administrator account, because the CVE-2015-7984 CSRF protection mechanism can then be bypassed.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html; https://github.com/horde/kronolith/commit/39f740068ad21618f6f70b6e37855c61cadbd716; https://lists.debian.org/debian-lts-announce/2020/08/msg00048.html
CVE: CVE-2017-3157
Published: 2017-11-20
Description: By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacker by, e.g., using hidden sections to store the information, tricking the user into saving the document and convincing the user to send the document back to the attacker. The vulnerability is mitigated by the need for the attacker to know the precise file path in the target system, and the need to trick the user into saving the document and sending it back.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96402; http://www.securitytracker.com/id/1037893; https://access.redhat.com/errata/RHSA-2017:0914
CVE: CVE-2017-12110
Published: 2017-11-20
Description: An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can cause memory corruption resulting in remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://security.gentoo.org/glsa/202003-64; https://www.debian.org/security/2018/dsa-4173; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0462
CVE: CVE-2017-12111
Published: 2017-11-20
Description: An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memory corruption resulting in remote code execution. An attacker can send a malicious XLS file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://security.gentoo.org/glsa/202003-64; https://www.debian.org/security/2018/dsa-4173; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0463
CVE: CVE-2017-2896
Published: 2017-11-20
Description: An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://security.gentoo.org/glsa/202003-64; https://www.debian.org/security/2018/dsa-4173; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0403
CVE: CVE-2017-2897
Published: 2017-11-20
Description: An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://security.gentoo.org/glsa/202003-64; https://www.debian.org/security/2018/dsa-4173; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0404
CVE: CVE-2017-2919
Published: 2017-11-20
Description: An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://security.gentoo.org/glsa/202003-64; https://www.debian.org/security/2018/dsa-4173; https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0426
CVE: CVE-2017-16840
Published: 2017-11-21
Description: The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service (out-of-bounds read) because of incorrect buffer padding for non-Haar wavelets, related to libavcodec/vc2enc.c and libavcodec/vc2enc_dwt.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=a94cb36ab2ad99d3a1331c9f91831ef593d94f74; http://www.securityfocus.com/bid/101924; https://github.com/FFmpeg/FFmpeg/commit/94e538aebbc9f9c529e8b1f2eda860cfb8c473b1
CVE: CVE-2017-16919
Published: 2017-11-21
Description: MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/RamonSilva20/mapos/issues/81; https://github.com/RamonSilva20/mapos/issues/81
CVE: CVE-2017-15044
Published: 2017-11-21
Description: The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by modifying text. The default installation is unsafe because the server listens on the network interface, not the localhost interface.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/archive/1/541548; http://www.securityfocus.com/archive/1/541548
CVE: CVE-2017-16613
Published: 2017-11-21
Description: An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving (unhashed) tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allows attackers to bypass authentication by inserting a token into an X-Auth-Token header of a new request. NOTE: github.com/openstack/swauth URLs do not mean that Swauth is maintained by an official OpenStack project team.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/101926; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882314; https://bugs.launchpad.net/swift/+bug/1655781
CVE: CVE-2017-16920
Published: 2017-11-21
Description: v5/config/system.php in dayrui FineCms 5.2.0 has a default SYS_KEY value and does not require key regeneration for each installation, which allows remote attackers to upload arbitrary .php files via a member api swfupload action to index.php.
CVSS Score: 9.8 (CRITICAL)
References: https://gitee.com/dayrui/finecms/commit/ff4b7ad3c3fbd3245b3bb7bc774d20c9705d9882; https://user-images.githubusercontent.com/31153532/33065202-21b536f2-cee3-11e7-997a-c7d4f1b00ca7.jpg; https://gitee.com/dayrui/finecms/commit/ff4b7ad3c3fbd3245b3bb7bc774d20c9705d9882
CVE: CVE-2017-16664
Published: 2017-11-21
Description: Code injection exists in Kernel/System/Spelling.pm in Open Ticket Request System (OTRS) 5 before 5.0.24, 4 before 4.0.26, and 3.3 before 3.3.20. In the agent interface, an authenticated remote attacker can execute shell commands as the webserver user via URL manipulation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://lists.debian.org/debian-lts-announce/2017/12/msg00015.html; https://www.debian.org/security/2017/dsa-4047; https://www.otrs.com/security-advisory-2017-07-security-update-otrs-framework/
CVE: CVE-2017-16923
Published: 2017-11-21
Description: Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15 US_AC15V1.0BR_V15.03.05.18_multi_TD01, Ac15 US_AC15V1.0BR_V15.03.05.19_multi_TD01, Ac18 US_AC18V1.0BR_V15.03.05.05_multi_TD01, and Ac18 ac18_kf_V15.03.05.19(6318_)_cn devices allows remote unauthenticated attackers to execute arbitrary OS commands via a crafted cgi-bin/luci/usbeject?dev_name= GET request from the LAN. This occurs because the "sub_A6E8 usbeject_process_entry" function executes a system function with untrusted input.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/Iolop/Poc/tree/master/Router/Tenda; https://github.com/Iolop/Poc/tree/master/Router/Tenda
CVE: CVE-2017-5705
Published: 2017-11-21
Description: Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101917; http://www.securitytracker.com/id/1039852; https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
CVE: CVE-2017-5706
Published: 2017-11-21
Description: Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/101906; http://www.securitytracker.com/id/1039955
CVE: CVE-2017-5707
Published: 2017-11-21
Description: Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to the system to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101919; https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf; https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
CVE: CVE-2017-5708
Published: 2017-11-21
Description: Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged content via unspecified vector.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/101921; http://www.securitytracker.com/id/1039852; https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
CVE: CVE-2017-5709
Published: 2017-11-21
Description: Multiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged content via unspecified vector.
CVSS Score: 7.8 (HIGH)
References: http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/101906; http://www.securitytracker.com/id/1039955
CVE: CVE-2017-5710
Published: 2017-11-21
Description: Multiple privilege escalations in kernel in Intel Trusted Execution Engine Firmware 3.0 allows unauthorized process to access privileged content via unspecified vector.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/101922; https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf; https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
CVE: CVE-2017-5711
Published: 2017-11-21
Description: Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101918; http://www.securitytracker.com/id/1039852; https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
CVE: CVE-2017-5712
Published: 2017-11-21
Description: Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101920; http://www.securitytracker.com/id/1039852; https://cert-portal.siemens.com/productcert/pdf/ssa-892715.pdf
CVE: CVE-2017-5719
Published: 2017-11-21
Description: A vulnerability in the Intel Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a local user.
CVSS Score: 9.8 (CRITICAL)
References: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00100&languageid=en-fr; https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00100&languageid=en-fr
CVE: CVE-2017-5729
Published: 2017-11-21
Description: Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames via channel-based man-in-the-middle.
CVSS Score: 7.4 (HIGH)
References: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00093&languageid=en-fr; https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00093&languageid=en-fr
CVE: CVE-2015-3934
Published: 2017-11-21
Description: Multiple SQL injection vulnerabilities in Fiyo CMS 2.0_1.9.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to apps/app_article/controller/rating.php or (2) user parameter to user/login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/132479/Fiyo-CMS-2.0_1.9.1-SQL-Injection.html; http://packetstormsecurity.com/files/132479/Fiyo-CMS-2.0_1.9.1-SQL-Injection.html
CVE: CVE-2017-7550
Published: 2017-11-21
Description: A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not allowing passwords to be specified in the "params" argument, and noting this in the module documentation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532, CWE-532
References: https://access.redhat.com/errata/RHSA-2017:2966; https://bugzilla.redhat.com/show_bug.cgi?id=1473645; https://github.com/ansible/ansible/issues/30874
CVE: CVE-2017-16926
Published: 2017-11-22
Description: Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing a source tree for Ohcount processing) to execute arbitrary code as the user running Ohcount.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://bugs.debian.org/882372; https://bugs.debian.org/882372
CVE: CVE-2017-8860
Published: 2017-11-22
Description: Information disclosure through directory listing on the Cohu 3960HD allows an attacker to view and download source code, log files, and other sensitive device information via a specially crafted web request with an extra / character, such as a "GET // HTTP/1.1" request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/; https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/
CVE: CVE-2017-8861
Published: 2017-11-22
Description: Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters such as IP address and username/password via specially crafted XML SOAP packets.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/; https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/
CVE: CVE-2017-8862
Published: 2017-11-22
Description: The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files or process, allowing an attacker to upload a specially crafted postinstall.sh file that will be executed with "root" privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/; https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/
CVE: CVE-2017-8863
Published: 2017-11-22
Description: Information disclosure of .esp source code on the Cohu 3960 allows an attacker to view sensitive information such as application logic with a simple web browser.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/; https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/
CVE: CVE-2017-8864
Published: 2017-11-22
Description: Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent to the camera and cause malfunction or code execution, as demonstrated by a client-side "if (!passwordsAreEqual())" test.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-693
References: https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/; https://bneg.io/2017/05/12/vulnerabilities-in-cohu-3960hd/
CVE: CVE-2017-6166
Published: 2017-11-22
Description: In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel (TMM) may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. If the affected BIG-IP system is configured as part of a device group, it will trigger a failover to the peer device.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-415
References: http://www.securityfocus.com/bid/102264; http://www.securitytracker.com/id/1039949; https://support.f5.com/csp/article/K65615624
CVE: CVE-2017-13071
Published: 2017-11-22
Description: QNAP has already patched this vulnerability. This security concern allows a remote attacker to run arbitrary commands on the QNAP Video Station 5.1.3 (for QTS 4.3.3), 5.2.0 (for QTS 4.3.4), and earlier.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://www.qnap.com/zh-tw/security-advisory/nas-201711-21; https://www.qnap.com/zh-tw/security-advisory/nas-201711-21
CVE: CVE-2017-15098
Published: 2017-11-22
Description: Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory.
CVSS Score: 8.1 (HIGH)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/101781; http://www.securitytracker.com/id/1039752; https://access.redhat.com/errata/RHSA-2018:2511
CVE: CVE-2017-7736
Published: 2017-11-22
Description: A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or HTML via special crafted malicious certificate import.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/101916; https://fortiguard.com/advisory/FG-IR-17-131; http://www.securityfocus.com/bid/101916
CVE: CVE-2017-12190
Published: 2017-11-22
Description: The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-772
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95d78c28b5a85bacbc29b8dba7c04babb9b0d467; http://seclists.org/oss-sec/2017/q4/52
CVE: CVE-2017-12193
Published: 2017-11-22
Description: The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ea6789980fdaa610d7eb63602c746bf6ec70cd2b; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11; http://www.securityfocus.com/bid/101678
CVE: CVE-2017-15099
Published: 2017-11-22
Description: INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/101781; http://www.securitytracker.com/id/1039752; https://access.redhat.com/errata/RHSA-2018:2511
CVE: CVE-2017-15528
Published: 2017-11-22
Description: Prior to v 7.6, the Install Norton Security (INS) product can be susceptible to a certificate spoofing vulnerability, which is a type of attack whereby a maliciously procured certificate binds the public key of an attacker to the domain name of the target.
CVSS Score: 3.7 (LOW)
CWE: CWE-295
References: http://www.securityfocus.com/bid/101796; https://www.info-sec.ca/advisories/Norton-Security.html; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171121_00
CVE: CVE-2017-12172
Published: 2017-11-22
Description: PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-59, CWE-59
References: http://www.securityfocus.com/bid/101949; http://www.securitytracker.com/id/1039752; https://access.redhat.com/errata/RHSA-2017:3402