deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-24086
Published: 2022-02-16
Description: Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/magento/apsb22-12.html; https://helpx.adobe.com/security/products/magento/apsb22-12.html; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-24086
CVE: CVE-2022-24663
Published: 2022-02-16
Description: PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://www.wordfence.com/blog/2022/02/critical-vulnerabilities-in-php-everywhere-allow-remote-code-execution/; https://www.wordfence.com/blog/2022/02/critical-vulnerabilities-in-php-everywhere-allow-remote-code-execution/
CVE: CVE-2022-24664
Published: 2022-02-16
Description: PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://www.wordfence.com/blog/2022/02/critical-vulnerabilities-in-php-everywhere-allow-remote-code-execution/; https://www.wordfence.com/blog/2022/02/critical-vulnerabilities-in-php-everywhere-allow-remote-code-execution/
CVE: CVE-2022-24665
Published: 2022-02-16
Description: PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://www.wordfence.com/blog/2022/02/critical-vulnerabilities-in-php-everywhere-allow-remote-code-execution/; https://www.wordfence.com/blog/2022/02/critical-vulnerabilities-in-php-everywhere-allow-remote-code-execution/
CVE: CVE-2022-22853
Published: 2022-02-16
Description: A stored cross-site scripting (XSS) vulnerability in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Dheeraj-Deshmukh/stored-xss-in-Hospital-s-Patient-Records-Management-System; https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html; https://www.sourcecodester.com/sites/default/files/download/oretnom23/hprms_0.zip
CVE: CVE-2021-3560
Published: 2022-02-16
Description: It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863, CWE-754
References: http://packetstormsecurity.com/files/172836/polkit-Authentication-Bypass.html; http://packetstormsecurity.com/files/172846/Facebook-Fizz-Denial-Of-Service.html; https://bugzilla.redhat.com/show_bug.cgi?id=1961710
CVE: CVE-2021-3578
Published: 2022-02-16
Description: A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an unexpected APPENDUID response. This could be plausibly exploited for remote code execution on the client.
CVSS Score: 7.8 (HIGH)
CWE: CWE-704, CWE-704
References: http://www.openwall.com/lists/oss-security/2021/06/07/1; https://bugzilla.redhat.com/show_bug.cgi?id=1961710; https://bugzilla.redhat.com/show_bug.cgi?id=1967397
CVE: CVE-2021-3752
Published: 2022-02-16
Description: A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-416, CWE-362
References: https://bugzilla.redhat.com/show_bug.cgi?id=1999544; https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html; https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
CVE: CVE-2021-3753
Published: 2022-02-16
Description: A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vc_mode is not protected by lock-in vt_ioctl (KDSETMDE). The highest threat from this vulnerability is to data confidentiality.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-125, CWE-125, CWE-362
References: https://bugzilla.redhat.com/show_bug.cgi?id=1999589; https://github.com/torvalds/linux/commit/2287a51ba822384834dafc1c798453375d1107c7; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-3760
Published: 2022-02-16
Description: A flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=2000585; https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-3773
Published: 2022-02-16
Description: A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=2004949; https://citizenlab.ca/2024/07/vulnerabilities-in-vpns-paper-presented-at-the-privacy-enhancing-technologies-symposium-2024/; https://www.oracle.com/security-alerts/cpujul2022.html
CVE: CVE-2021-3781
Published: 2022-02-16
Description: A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-20, CWE-78
References: https://bugzilla.redhat.com/show_bug.cgi?id=2002271; https://ghostscript.com/CVE-2021-3781.html; https://security.gentoo.org/glsa/202211-11
CVE: CVE-2022-23644
Published: 2022-02-16
Description: BookWyrm is a decentralized social network for tracking reading habits and reviewing books. The functionality to load a cover via url is vulnerable to a server-side request forgery attack. Any BookWyrm instance running a version prior to v0.3.0 is susceptible to attack from a logged-in user. The problem has been patched and administrators should upgrade to version 0.3.0 As a workaround, BookWyrm instances can close registration and limit members to trusted individuals.
CVSS Score: 8.8 (HIGH)
CWE: CWE-918
References: https://github.com/bookwyrm-social/bookwyrm/security/advisories/GHSA-5m7g-66h6-5cvq; https://github.com/bookwyrm-social/bookwyrm/security/advisories/GHSA-5m7g-66h6-5cvq
CVE: CVE-2022-25255
Published: 2022-02-16
Description: In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH.
CVSS Score: 7.8 (HIGH)
References: https://codereview.qt-project.org/c/qt/qtbase/+/393113; https://codereview.qt-project.org/c/qt/qtbase/+/394914; https://codereview.qt-project.org/c/qt/qtbase/+/396020
CVE: CVE-2021-3242
Published: 2022-02-16
Description: DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/duxphp/DuxCMS3/issues/4; https://www.star123.top/2021/01/16/duxcms3-1-3%E5%AE%A1%E8%AE%A1/; https://github.com/duxphp/DuxCMS3/issues/4
CVE: CVE-2022-25258
Published: 2022-02-16
Description: An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks certain validation of interface OS descriptor requests (ones with a large array index and ones associated with NULL function pointer retrieval). Memory corruption might occur.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-476
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10; https://github.com/szymonh/d-os-descriptor; https://github.com/torvalds/linux/commit/75e5b4849b81e19e9efe1654b30d7f3151c33c2c
CVE: CVE-2021-43299
Published: 2022-02-16
Description: Stack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://github.com/pjsip/pjproject/security/advisories/GHSA-qcvw-h34v-c7r9; https://lists.debian.org/debian-lts-announce/2022/03/msg00035.html; https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html
CVE: CVE-2021-43300
Published: 2022-02-16
Description: Stack overflow in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://github.com/pjsip/pjproject/security/advisories/GHSA-qcvw-h34v-c7r9; https://lists.debian.org/debian-lts-announce/2022/03/msg00035.html; https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html
CVE: CVE-2021-43301
Published: 2022-02-16
Description: Stack overflow in PJSUA API when calling pjsua_playlist_create. An attacker-controlled 'file_names' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://github.com/pjsip/pjproject/security/advisories/GHSA-qcvw-h34v-c7r9; https://lists.debian.org/debian-lts-announce/2022/03/msg00035.html; https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html
CVE: CVE-2021-43302
Published: 2022-02-16
Description: Read out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause an out-of-bounds read when the filename is shorter than 4 characters.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://github.com/pjsip/pjproject/security/advisories/GHSA-qcvw-h34v-c7r9; https://lists.debian.org/debian-lts-announce/2022/03/msg00035.html; https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html
CVE: CVE-2021-43303
Published: 2022-02-16
Description: Buffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplying an output buffer smaller than 128 characters may overflow the output buffer, regardless of the 'maxlen' argument supplied
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/pjsip/pjproject/security/advisories/GHSA-qcvw-h34v-c7r9; https://lists.debian.org/debian-lts-announce/2022/03/msg00035.html; https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html
CVE: CVE-2022-25265
Published: 2022-02-16
Description: In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-913
References: https://github.com/torvalds/linux/blob/1c33bb0507508af24fd754dd7123bd8e997fab2f/arch/x86/include/asm/elf.h#L281-L294; https://github.com/x0reaxeax/exec-prot-bypass; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-22880
Published: 2022-02-16
Description: Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/jeecgboot/jeecg-boot/issues/3347; https://github.com/jeecgboot/jeecg-boot/issues/3347
CVE: CVE-2022-22881
Published: 2022-02-16
Description: Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/jeecgboot/jeecg-boot/issues/3348; https://github.com/jeecgboot/jeecg-boot/issues/3348
CVE: CVE-2022-22885
Published: 2022-02-16
Description: Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-295
References: https://apidoc.gitee.com/dromara/hutool/cn/hutool/http/ssl/DefaultSSLInfo.html; https://github.com/dromara/hutool/issues/2042; https://apidoc.gitee.com/dromara/hutool/cn/hutool/http/ssl/DefaultSSLInfo.html
CVE: CVE-2022-23636
Published: 2022-02-16
Description: Wasmtime is an open source runtime for WebAssembly & WASI. Prior to versions 0.34.1 and 0.33.1, there exists a bug in the pooling instance allocator in Wasmtime's runtime where a failure to instantiate an instance for a module that defines an `externref` global will result in an invalid drop of a `VMExternRef` via an uninitialized pointer. A number of conditions listed in the GitHub Security Advisory must be true in order for an instance to be vulnerable to this issue. Maintainers believe that the effective impact of this bug is relatively small because the usage of `externref` is still uncommon and without a resource limiter configured on the `Store`, which is not the default configuration, it is only possible to trigger the bug from an error returned by `mprotect` or `VirtualAlloc`. Note that on Linux with the `uffd` feature enabled, it is only possible to trigger the bug from a resource limiter as the call to `mprotect` is skipped. The bug has been fixed in 0.34.1 and 0.33.1 and users are encouraged to upgrade as soon as possible. If it is not possible to upgrade to version 0.34.1 or 0.33.1 of the `wasmtime` crate, it is recommend that support for the reference types proposal be disabled by passing `false` to `Config::wasm_reference_types`. Doing so will prevent modules that use `externref` from being loaded entirely.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-824
References: https://github.com/bytecodealliance/wasmtime/commit/886ecc562040bef61faf19438c22285c2d62403a; https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-88xq-w8cq-xfg7; https://github.com/bytecodealliance/wasmtime/commit/886ecc562040bef61faf19438c22285c2d62403a
CVE: CVE-2022-24981
Published: 2022-02-16
Description: A reflected cross-site scripting (XSS) vulnerability in forms generated by JQueryForm.com before 2022-02-05 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to admin.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://JQueryForm.com; https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560; https://www.nou-systems.com/cyber-security
CVE: CVE-2022-24982
Published: 2022-02-16
Description: Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to access the cleartext credentials of all other form users. admin.php contains a hidden base64-encoded string with these credentials.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: https://JQueryForm.com; https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560; https://www.nou-systems.com/cyber-security
CVE: CVE-2022-24983
Published: 2022-02-16
Description: Forms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by capturing the POST response. When chained with CVE-2022-24984, this could lead to unauthenticated remote code execution on the underlying web server. This occurs because the Unique ID field is contained in the POST response upon submitting a form.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://JQueryForm.com; https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560; https://www.nou-systems.com/cyber-security
CVE: CVE-2022-24984
Published: 2022-02-16
Description: Forms generated by JQueryForm.com before 2022-02-05 (if file-upload capability is enabled) allow remote unauthenticated attackers to upload executable files and achieve remote code execution. This occurs because file-extension checks occur on the client side, and because not all executable content (e.g., .phtml or .php.bak) is blocked.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://JQueryForm.com; https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560; https://www.nou-systems.com/cyber-security
CVE: CVE-2022-24985
Published: 2022-02-16
Description: Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of other forms hosted on the same web server. This is relevant only when an organization hosts more than one of these forms on their server.
CVSS Score: 8.8 (HIGH)
References: https://JQueryForm.com; https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560; https://www.nou-systems.com/cyber-security
CVE: CVE-2022-25271
Published: 2022-02-16
Description: Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter critical or sensitive data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/; https://www.drupal.org/sa-core-2022-003
CVE: CVE-2022-25270
Published: 2022-02-17
Description: The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access. Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://www.drupal.org/sa-core-2022-004; https://www.drupal.org/sa-core-2022-004
CVE: CVE-2022-0622
Published: 2022-02-17
Description: Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://github.com/snipe/snipe-it/commit/178e44095141ab805c282f563fb088df1a10b2e2; https://huntr.dev/bounties/4ed99dab-5319-4b6b-919a-84a9acd0061a; https://github.com/snipe/snipe-it/commit/178e44095141ab805c282f563fb088df1a10b2e2
CVE: CVE-2022-22901
Published: 2022-02-17
Description: There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at parser_parse_function_arguments in /js/js-parser.c of JerryScript commit a6ab5e9.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617
References: http://jerryscript.com; https://github.com/jerryscript-project/jerryscript; https://github.com/jerryscript-project/jerryscript/issues/4916
CVE: CVE-2022-24953
Published: 2022-02-17
Description: The Crypt_GPG extension before 1.6.7 for PHP does not prevent additional options in GPG calls, which presents a risk for certain environments and GPG versions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-88
References: https://github.com/pear/Crypt_GPG/commit/29c0fbe96d0d4063ecd5c9a4644cb65a7fb7cc4e; https://github.com/pear/Crypt_GPG/commit/74c8f989cefbe0887274b461dc56197e121bfd04; https://github.com/pear/Crypt_GPG/commit/29c0fbe96d0d4063ecd5c9a4644cb65a7fb7cc4e
CVE: CVE-2022-0623
Published: 2022-02-17
Description: Out-of-bounds Read in Homebrew mruby prior to 3.2.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/mruby/mruby/commit/ff3a5ebed6ffbe3e70481531cfb969b497aa73ad; https://huntr.dev/bounties/5b908ac7-d8f1-4fcd-9355-85df565f7580; https://github.com/mruby/mruby/commit/ff3a5ebed6ffbe3e70481531cfb969b497aa73ad
CVE: CVE-2021-46368
Published: 2022-02-17
Description: TRIGONE Remote System Monitor 3.61 is vulnerable to an unquoted path service allowing local users to launch processes with elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://packetstormsecurity.com/files/165404/TRIGONE-Remote-System-Monitor-3.61-Unquoted-Service-Path.html; https://www.exploit-db.com/exploits/50633; https://packetstormsecurity.com/files/165404/TRIGONE-Remote-System-Monitor-3.61-Unquoted-Service-Path.html
CVE: CVE-2022-0629
Published: 2022-02-17
Description: Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41; https://github.com/vim/vim/commit/34f8117dec685ace52cd9e578e2729db278163fc
CVE: CVE-2022-22899
Published: 2022-02-17
Description: Core FTP / SFTP Server v2 Build 725 was discovered to allow unauthenticated attackers to cause a Denial of Service (DoS) via a crafted packet through the SSH service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://coreftp.com; http://coreftp.com/forums/viewtopic.php?f=15&t=4022509; https://yoursecuritybores.me/coreftp-vulnerabilities/
CVE: CVE-2022-23318
Published: 2022-02-17
Description: A heap-buffer-overflow in pcf2bdf, versions >= 1.05 allows an attacker to trigger unsafe memory access via a specially crafted PCF font file. This out-of-bound read may lead to an application crash, information disclosure via program memory or other context-dependent impact.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787
References: https://github.com/ganaware/pcf2bdf; https://github.com/ganaware/pcf2bdf/issues/4; https://github.com/ganaware/pcf2bdf
CVE: CVE-2022-23319
Published: 2022-02-17
Description: A segmentation fault during PCF file parsing in pcf2bdf versions >=1.05 allows an attacker to trigger a program crash via a specially crafted PCF font file. This crash affects the availability of the software and dependent downstream components.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1284
References: https://github.com/ganaware/pcf2bdf; https://github.com/ganaware/pcf2bdf/issues/5; https://github.com/ganaware/pcf2bdf
CVE: CVE-2022-20653
Published: 2022-02-17
Description: A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification component of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient error handling in DNS name resolution by the affected software. An attacker could exploit this vulnerability by sending specially formatted email messages that are processed by an affected device. A successful exploit could allow the attacker to cause the device to become unreachable from management interfaces or to process additional email messages for a period of time until the device recovers, resulting in a DoS condition. Continued attacks could cause the device to become completely unavailable, resulting in a persistent DoS condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-dos-MxZvGtgU; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-dos-MxZvGtgU