deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-12370
Published: 2020-03-18
Description: The Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gubello.me; https://sparkmailapp.com/; https://www.gubello.me/blog/javascript-injection-in-six-android-mail-clients/
CVE: CVE-2019-12769
Published: 2020-03-18
Description: SolarWinds Serv-U Managed File Transfer (MFT) Web client before 15.1.6 Hotfix 2 is vulnerable to Cross-Site Request Forgery in the file upload functionality via ?Command=Upload with the Dir and File parameters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://medium.com/%40clod81/cve-2019-12769-solarwinds-serv-u-managed-file-transfer-mft-web-client-15-1-6-a2dab98d668d; https://support.solarwinds.com/SuccessCenter/s/article/Serv-U-15-1-6-HotFix-2; https://medium.com/%40clod81/cve-2019-12769-solarwinds-serv-u-managed-file-transfer-mft-web-client-15-1-6-a2dab98d668d
CVE: CVE-2019-12921
Published: 2020-03-18
Description: In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00049.html; http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00051.html; http://www.graphicsmagick.org/
CVE: CVE-2019-18581
Published: 2020-03-18
Description: Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server missing authorization vulnerability in the REST API. A remote authenticated malicious user with administrative privileges may potentially exploit this vulnerability to alter the application’s allowable list of OS commands. This may lead to arbitrary OS command execution as the regular user runs the DPA service on the affected system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.dell.com/support/security/en-us/details/539430/DSA-2019-155-Dell-EMC-Data-Protection-Advisor-Security-Update-for-Multiple-Vulnerabilities; https://www.dell.com/support/security/en-us/details/539430/DSA-2019-155-Dell-EMC-Data-Protection-Advisor-Security-Update-for-Multiple-Vulnerabilities
CVE: CVE-2019-18582
Published: 2020-03-18
Description: Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server-side template injection vulnerability in the REST API. A remote authenticated malicious user with administrative privileges may potentially exploit this vulnerability to inject malicious report generation scripts in the server. This may lead to OS command execution as the regular user runs the DPA service on the affected system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94, CWE-94
References: https://www.dell.com/support/security/en-us/details/539430/DSA-2019-155-Dell-EMC-Data-Protection-Advisor-Security-Update-for-Multiple-Vulnerabilities; https://www.dell.com/support/security/en-us/details/539430/DSA-2019-155-Dell-EMC-Data-Protection-Advisor-Security-Update-for-Multiple-Vulnerabilities
CVE: CVE-2019-20511
Published: 2020-03-18
Description: ERPNext 11.1.47 allows blog?blog_category= Frame Injection.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.netsparker.com/web-applications-advisories/ns-19-018-frame-injection-in-erpnext/; https://www.netsparker.com/web-applications-advisories/ns-19-018-frame-injection-in-erpnext/
CVE: CVE-2019-20512
Published: 2020-03-18
Description: Open edX Ironwood.1 allows support/certificates?course_id= reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.netsparker.com/web-applications-advisories/ns-19-014-reflected-cross-site-scripting-in-openedx/; https://www.netsparker.com/web-applications-advisories/ns-19-014-reflected-cross-site-scripting-in-openedx/
CVE: CVE-2019-20528
Published: 2020-03-18
Description: Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp username parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.netsparker.com/web-applications-advisories/ns-19-015-reflected-cross-site-scripting-in-openfire/; https://www.netsparker.com/web-applications-advisories/ns-19-015-reflected-cross-site-scripting-in-openfire/
CVE: CVE-2019-20529
Published: 2020-03-18
Description: In core/doctype/prepared_report/prepared_report.py in Frappe 11 and 12, data files generated with Prepared Report were being stored as public files (no authentication is required to access; having a link is sufficient) instead of private files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-552
References: https://github.com/frappe/frappe/pull/8884; https://github.com/frappe/frappe/pull/8885; https://github.com/frappe/frappe/pull/8884
CVE: CVE-2019-3762
Published: 2020-03-18
Description: Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by obtaining a CA signed certificate from Data Protection Central to impersonate a valid system to compromise the integrity of data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-296, CWE-295
References: https://www.dell.com/support/security/en-us/details/537007/DSA-2019-135-Dell-EMC-Data-Protection-Central-Improper-Chain-of-Trust-Vulnerability; https://www.dell.com/support/security/en-us/details/537007/DSA-2019-135-Dell-EMC-Data-Protection-Central-Improper-Chain-of-Trust-Vulnerability
CVE: CVE-2020-10665
Published: 2020-03-18
Description: Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnostics with Administrator privileges, leading to arbitrary DACL permissions overwrites and arbitrary file writes. This affects Docker Desktop Enterprise before 2.1.0.9, Docker Desktop for Windows Stable before 2.2.0.4, and Docker Desktop for Windows Edge before 2.2.2.0.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-59
References: https://docs.docker.com/release-notes/; https://github.com/active-labs/Advisories/blob/master/2020/ACTIVE-2020-002.md; https://github.com/spaceraccoon/CVE-2020-10665
CVE: CVE-2019-18979
Published: 2020-03-18
Description: Adaware antivirus 12.6.1005.11662 and 12.7.1055.0 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder.
CVSS Score: 7.8 (HIGH)
References: https://medium.com/%40kusolwatcharaapanukorn/0-days-adaware-antivirus-quarantine-flaws-allow-privilege-escalation-3d1f3c8214ec; https://medium.com/%40kusolwatcharaapanukorn/0-days-adaware-antivirus-quarantine-flaws-allow-privilege-escalation-3d1f3c8214ec
CVE: CVE-2020-7256
Published: 2020-03-18
Description: Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10310; https://kc.mcafee.com/corporate/index?page=content&id=SB10310
CVE: CVE-2020-7258
Published: 2020-03-18
Description: Cross site scripting vulnerability in McAfee Network Security Management (NSM) Prior to 9.1 update 6 Mar 2020 Update allows attackers to unspecified impact via unspecified vectors.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10310; https://kc.mcafee.com/corporate/index?page=content&id=SB10310
CVE: CVE-2019-19676
Published: 2020-03-18
Description: A CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other computers. By entering formula code in the following columns: Kundennummer, Firma, Street, PLZ, Ort, Zahlziel, and Bemerkung, an attacker can create a user with a name that contains malicious code. Other users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker could gain remote access to the user's PC.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-1236
References: https://www2.deloitte.com/de/de/pages/risk/articles/arxes-tolina-csv-injection.html; https://www2.deloitte.com/de/de/pages/risk/articles/arxes-tolina-csv-injection.html
CVE: CVE-2020-10365
Published: 2020-03-18
Description: LogicalDoc before 8.3.3 allows SQL Injection. LogicalDoc populates the list of available documents by querying the database. This list could be filtered by modifying some of the parameters. Some of them are not properly sanitized which could allow an authenticated attacker to perform arbitrary queries to the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://www.coresecurity.com/advisories/logicaldoc-virtual-appliance-multiple-vulnerabilities; https://www.coresecurity.com/advisories/logicaldoc-virtual-appliance-multiple-vulnerabilities
CVE: CVE-2020-10672
Published: 2020-03-18
Description: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://github.com/FasterXML/jackson-databind/issues/2659; https://lists.debian.org/debian-lts-announce/2020/03/msg00027.html; https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
CVE: CVE-2020-10673
Published: 2020-03-18
Description: FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://github.com/FasterXML/jackson-databind/issues/2660; https://lists.debian.org/debian-lts-announce/2020/03/msg00027.html; https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
CVE: CVE-2020-10674
Published: 2020-03-18
Description: PerlSpeak through 2.01 allows attackers to execute arbitrary OS commands, as demonstrated by use of system and 2-argument open.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://metacpan.org/source/JKAMPHAUS/PerlSpeak-2.01/Changes; https://rt.cpan.org/Public/Bug/Display.html?id=132173; https://metacpan.org/source/JKAMPHAUS/PerlSpeak-2.01/Changes
CVE: CVE-2020-9423
Published: 2020-03-18
Description: LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of data from the database. LogicalDoc provides a functionality to add documents. Those documents could then be used for multiple tasks, such as version control, shared among users, applying tags, etc. This functionality could be abused by an unauthenticated attacker to upload an arbitrary file in a restricted folder. This would lead to the executions of malicious commands with root privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.coresecurity.com/advisories/logicaldoc-virtual-appliance-multiple-vulnerabilities; https://www.coresecurity.com/advisories/logicaldoc-virtual-appliance-multiple-vulnerabilities
CVE: CVE-2019-19677
Published: 2020-03-18
Description: arxes-tolina 3.0.0 allows User Enumeration.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://www2.deloitte.com/de/de/pages/risk/articles/arxes-tolina-user-disclosure-via-application-function.html; https://www2.deloitte.com/de/de/pages/risk/articles/arxes-tolina-user-disclosure-via-application-function.html
CVE: CVE-2019-20485
Published: 2020-03-19
Description: qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows attackers to cause a denial of service (API blockage).
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-20
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953078; https://bugzilla.redhat.com/show_bug.cgi?id=1809740; https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=a663a860819287e041c3de672aad1d8543098ecc
CVE: CVE-2019-14872
Published: 2020-03-19
Description: The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return value. This could result in NULL pointer dereference.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/; https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
CVE: CVE-2019-12128
Published: 2020-03-19
Description: In ONAP SO through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager (OOM) setups are affected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://jira.onap.org/browse/OJSI-27; https://jira.onap.org/browse/OJSI-27
CVE: CVE-2019-12129
Published: 2020-03-19
Description: In ONAP MSB through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager (OOM) setups are affected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://jira.onap.org/browse/OJSI-27; https://jira.onap.org/browse/OJSI-27
CVE: CVE-2019-12130
Published: 2020-03-19
Description: In ONAP CLI through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager (OOM) setups are affected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://jira.onap.org/browse/OJSI-27; https://jira.onap.org/browse/OJSI-27
CVE: CVE-2019-19336
Published: 2020-03-19
Description: A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the user's oVirt session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19336; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19336
CVE: CVE-2019-20522
Published: 2020-03-19
Description: ilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.netsparker.com/web-applications-advisories/ns-19-016-cross-site-scripting-in-ilchcms/; https://www.netsparker.com/web-applications-advisories/ns-19-016-cross-site-scripting-in-ilchcms/
CVE: CVE-2019-20523
Published: 2020-03-19
Description: ilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.netsparker.com/web-applications-advisories/ns-19-016-cross-site-scripting-in-ilchcms/; https://www.netsparker.com/web-applications-advisories/ns-19-016-cross-site-scripting-in-ilchcms/
CVE: CVE-2019-20524
Published: 2020-03-19
Description: ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.netsparker.com/web-applications-advisories/ns-19-016-cross-site-scripting-in-ilchcms/; https://www.netsparker.com/web-applications-advisories/ns-19-016-cross-site-scripting-in-ilchcms/
CVE: CVE-2019-20527
Published: 2020-03-19
Description: Ignite Realtime Openfire 4.4.1 allows XSS via the setup/setup-datasource-standard.jsp serverURL parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.netsparker.com/web-applications-advisories/ns-19-015-reflected-cross-site-scripting-in-openfire/; https://www.netsparker.com/web-applications-advisories/ns-19-015-reflected-cross-site-scripting-in-openfire/
CVE: CVE-2020-10648
Published: 2020-03-19
Description: Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00030.html; http://www.openwall.com/lists/oss-security/2020/03/18/5; https://github.com/u-boot/u-boot/commits/master
CVE: CVE-2020-10675
Published: 2020-03-19
Description: The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via a Delete call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/buger/jsonparser/issues/188; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4C7PV6KEUUM76V4B2J5IFN2U6LEOWB67/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6KUHKDQSEYJNROA66OMN6AAQMGAAN6WI/
CVE: CVE-2020-4203
Published: 2020-03-19
Description: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privileged user due to improper access controls. IBM X-Force ID: 174956.
CVSS Score: 4.9 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/174956; https://www.ibm.com/support/pages/node/6090934; https://exchange.xforce.ibmcloud.com/vulnerabilities/174956
CVE: CVE-2020-4205
Published: 2020-03-19
Description: IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could allow an authenticated user to bypass security restrictions, and continue to access the server even after authentication certificates have been revolked. IBM X-Force ID: 174961.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-287
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/174961; https://www.ibm.com/support/pages/node/6090886; https://exchange.xforce.ibmcloud.com/vulnerabilities/174961
CVE: CVE-2019-12416
Published: 2020-03-19
Description: we got reports for 2 injection attacks against the DeltaSpike windowhandler.js. This is only active if a developer selected the ClientSideWindowStrategy which is not the default.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74
References: https://lists.apache.org/thread.html/r848d7d4c0bf637da55f01103eb8ba0fce344c295fda53264cbaa1568%40%3Ccommits.camel.apache.org%3E; https://lists.apache.org/thread.html/r8f327712b2b07f867fde1e77cbafcf8cc6a3facaa693ffdd2c3285e3%40%3Cdev.deltaspike.apache.org%3E; https://lists.apache.org/thread.html/r848d7d4c0bf637da55f01103eb8ba0fce344c295fda53264cbaa1568%40%3Ccommits.camel.apache.org%3E
CVE: CVE-2019-5104
Published: 2020-03-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9013. Reason: This candidate is a duplicate of CVE-2019-9013. Notes: All CVE users should reference CVE-2019-9013 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-10678
Published: 2020-03-19
Description: In Octopus Deploy before 2020.1.5, for customers running on-premises Active Directory linked to their Octopus server, an authenticated user can leverage a bug to escalate privileges.
CVSS Score: 8.8 (HIGH)
References: https://github.com/OctopusDeploy/Issues/issues/6258; https://github.com/OctopusDeploy/Issues/issues/6258
CVE: CVE-2014-2721
Published: 2020-03-19
Description: In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH defect.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://fortiguard.com/advisory/FG-IR-14-010; https://fortiguard.com/advisory/FG-IR-14-010
CVE: CVE-2014-2722
Published: 2020-03-19
Description: In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH defect.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://fortiguard.com/advisory/FG-IR-14-010; https://fortiguard.com/advisory/FG-IR-14-010
CVE: CVE-2014-2723
Published: 2020-03-19
Description: In FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH defect.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://fortiguard.com/advisory/FG-IR-14-010; https://fortiguard.com/advisory/FG-IR-14-010
CVE: CVE-2019-14873
Published: 2020-03-19
Description: In the __multadd function of the newlib libc library, prior to versions 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. This will trigger a null pointer dereference bug in case of a memory allocation failure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/; https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
CVE: CVE-2019-14874
Published: 2020-03-19
Description: In the __i2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access of _ x[0] will trigger a null pointer dereference bug in case of a memory allocation failure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/; https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
CVE: CVE-2019-14875
Published: 2020-03-19
Description: In the __multiply function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access of _x[0] will trigger a null pointer dereference bug in case of a memory allocation failure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/; https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
CVE: CVE-2019-14876
Published: 2020-03-19
Description: In the __lshift function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access to b1 will trigger a null pointer dereference bug in case of a memory allocation failure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/; https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
CVE: CVE-2019-14877
Published: 2020-03-19
Description: In the __mdiff function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate big integers, however no check is performed to verify if the allocation succeeded or not. The access to _wds and _sign will trigger a null pointer dereference bug in case of a memory allocation failure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/; https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/