deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-9487
Published: 2017-10-17
Description: The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.  NOTE: Related to CVE-2014-2053.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2015/01/03/13; https://bugzilla.redhat.com/show_bug.cgi?id=1175828; https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-December/000173.html
CVE: CVE-2014-9489
Published: 2017-10-17
Description: The gollum-grit_adapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string "master" is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://www.openwall.com/lists/oss-security/2015/01/03/19; http://www.securityfocus.com/bid/71499; https://github.com/gollum/gollum/issues/913
CVE: CVE-2014-9677
Published: 2017-10-17
Description: Cross-site scripting (XSS) vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the Swfile parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/02/12/11; http://www.theregister.co.uk/2014/12/23/wikileaks_pdf_viewer_vuln/; http://www.openwall.com/lists/oss-security/2015/02/12/11
CVE: CVE-2014-9678
Published: 2017-10-17
Description: FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct content-spoofing attacks via the Swfile parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2015/02/12/11; http://www.theregister.co.uk/2014/12/23/wikileaks_pdf_viewer_vuln/; http://www.openwall.com/lists/oss-security/2015/02/12/11
CVE: CVE-2014-9697
Published: 2017-10-17
Description: Huawei USG9560/9520/9580 before V300R001C01SPC300 allows remote attackers to cause a memory leak or denial of service (memory exhaustion, reboot and MPU switchover) via a crafted website.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-408141.htm; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-408141.htm
CVE: CVE-2014-9733
Published: 2017-10-17
Description: nw.js before 0.11.5 can simulate user input events in a normal frame, which allows remote attackers to have unspecified impact via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/nwjs/nw.js/blob/nw11/CHANGELOG.md; https://github.com/nwjs/nw.js/blob/nw11/CHANGELOG.md
CVE: CVE-2014-2277
Published: 2017-10-17
Description: The make_temporary_filename function in perltidy 20120701-1 and earlier allows local users to obtain sensitive information or write to arbitrary files via a symlink attack, related to use of the tmpnam function.
CVSS Score: 7.1 (HIGH)
CWE: CWE-284
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130464.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130479.html; http://www.openwall.com/lists/oss-security/2014/03/09/1
CVE: CVE-2014-2664
Published: 2017-10-17
Description: Unrestricted file upload vulnerability in the ProfileController::actionUploadPhoto method in protected/controllers/ProfileController.php in X2Engine X2CRM before 4.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://karmainsecurity.com/KIS-2014-04; http://secunia.com/advisories/57315; http://www.securityfocus.com/bid/66506/discuss
CVE: CVE-2014-8357
Published: 2017-10-17
Description: backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows remote attackers to obtain arbitrary user passwords via the sessionKey parameter in a getConfig action to backupsettings.conf.
CVSS Score: 8.8 (HIGH)
CWE: CWE-255
References: http://packetstormsecurity.com/files/133921/Zhone-Insecure-Reference-Password-Disclosure-Command-Injection.html; http://seclists.org/fulldisclosure/2015/Oct/57; http://www.securityfocus.com/archive/1/536663/100/0/threaded
CVE: CVE-2014-9118
Published: 2017-10-17
Description: The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddr parameter to zhnping.cmd.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://packetstormsecurity.com/files/133921/Zhone-Insecure-Reference-Password-Disclosure-Command-Injection.html; http://seclists.org/fulldisclosure/2015/Oct/57; http://www.securityfocus.com/archive/1/536663/100/0/threaded
CVE: CVE-2015-7806
Published: 2017-10-17
Description: Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.3 for WordPress allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://appcheck-ng.com/remote-command-execution-in-wordpress-form-manager-plugin-cve-2015-7806/; https://plugins.trac.wordpress.org/changeset/1264145; https://wpvulndb.com/vulnerabilities/8220
CVE: CVE-2017-15537
Published: 2017-10-17
Description: The x86/fpu (Floating Point Unit) subsystem in the Linux kernel before 4.13.5, when a processor supports the xsave feature but not the xsaves feature, does not correctly handle attempts to set reserved bits in the xstate header via the ptrace() or rt_sigreturn() system call, allowing local users to read the FPU registers of other processes on the system, related to arch/x86/kernel/fpu/regset.c and arch/x86/kernel/fpu/signal.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=814fb7bb7db5433757d76f4c4502c96fc53b0b5e; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5; https://github.com/torvalds/linux/commit/814fb7bb7db5433757d76f4c4502c96fc53b0b5e
CVE: CVE-2017-8805
Published: 2017-10-17
Description: Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct directory traversal attacks via a crafted upstream mirror.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2017/10/17/2; https://anonscm.debian.org/cgit/mirror/archvsync.git/commit/?id=d1ca2ab2210990b6dfb664cd6776a41b71c48016; https://lists.debian.org/debian-mirrors/2017/10/msg00017.html
CVE: CVE-2017-15538
Published: 2017-10-17
Description: Stored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5.2.9 allows an authenticated user to inject JavaScript to gain administrator privileges, related to the setParameter function in Services/MediaObjects/classes/class.ilMediaItem.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://openwall.com/lists/oss-security/2017/10/17/3; https://github.com/ILIAS-eLearning/ILIAS/commit/b2a4660afec1e87d41c83c8e381f549bc6dfc70f; https://lists.ilias.de/pipermail/ilias-admins/2017-October/000053.html
CVE: CVE-2017-3758
Published: 2017-10-17
Description: Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://support.lenovo.com/us/en/product_security/LEN-15374; https://support.lenovo.com/us/en/product_security/LEN-15374
CVE: CVE-2017-3759
Published: 2017-10-17
Description: The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://support.lenovo.com/us/en/product_security/LEN-15374; https://support.lenovo.com/us/en/product_security/LEN-15374
CVE: CVE-2017-3760
Published: 2017-10-17
Description: The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-354, CWE-522
References: https://support.lenovo.com/us/en/product_security/LEN-15374; https://support.lenovo.com/us/en/product_security/LEN-15374
CVE: CVE-2017-3761
Published: 2017-10-17
Description: The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://support.lenovo.com/us/en/product_security/LEN-15374; https://support.lenovo.com/us/en/product_security/LEN-15374
CVE: CVE-2017-5531
Published: 2017-10-17
Description: Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Internet Server versions 8.0.0 and 8.0.1 that enable the Administrator Service may be affected by a vulnerability which may allow any authenticated user to gain administrative control of Managed File Transfer web applications.
CVSS Score: 8.0 (HIGH)
References: http://www.securityfocus.com/bid/101545; http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2017/10/tibco-security-advisory-october-17-2017-tibco-managed-file-transfer
CVE: CVE-2017-6273
Published: 2017-10-17
Description: NVIDIA ADSP Firmware contains a vulnerability in the ADSP Loader component where there is the potential to write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service or possible escalation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://nvidia.custhelp.com/app/answers/detail/a_id/4561; http://nvidia.custhelp.com/app/answers/detail/a_id/4561
CVE: CVE-2017-15539
Published: 2017-10-17
Description: SQL Injection exists in zorovavi/blog through 2017-10-17 via the id parameter to recept.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/imsebao/404team/blob/master/zorovavi-blog-sql-injection.md; https://github.com/imsebao/404team/blob/master/zorovavi-blog-sql-injection.md
CVE: CVE-2017-13999
Published: 2017-10-17
Description: A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-based buffer overflow vulnerabilities have been identified in which the application does not verify string size before copying to memory; the attacker may then be able to crash the application or run arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-119
References: http://www.securityfocus.com/bid/101250; http://www.securityfocus.com/bid/102493; https://ics-cert.us-cert.gov/advisories/ICSA-17-285-02
CVE: CVE-2017-14005
Published: 2017-10-17
Description: An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When setting a new password for a user, the application does not require the user to know the original password. An attacker who is authenticated could change a user's password, enabling future access and possible configuration changes.
CVSS Score: 8.8 (HIGH)
CWE: CWE-620, CWE-640
References: http://www.securityfocus.com/bid/101259; https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01; http://www.securityfocus.com/bid/101259
CVE: CVE-2017-14007
Published: 2017-10-17
Description: An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's session is available for an extended period beyond the last activity, allowing an attacker to reuse an old session for authorization.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-613, CWE-613
References: http://www.securityfocus.com/bid/101259; https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01; http://www.securityfocus.com/bid/101259
CVE: CVE-2017-14009
Published: 2017-10-17
Description: An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When an authenticated user uses the Change Password feature on the application, the current password for the user is specified in plaintext. This may allow an attacker who has been authenticated to gain access to the password.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-319
References: http://www.securityfocus.com/bid/101259; https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01; http://www.securityfocus.com/bid/101259
CVE: CVE-2017-14011
Published: 2017-10-17
Description: A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptible to cross-site request forgery. This may allow an attacker to execute unauthorized code, resulting in changes to the configuration of the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://www.securityfocus.com/bid/101259; https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01; http://www.securityfocus.com/bid/101259
CVE: CVE-2017-14013
Published: 2017-10-17
Description: A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The log out function in the application removes the user's session only on the client side. This may allow an attacker to bypass protection mechanisms, gain privileges, or assume the identity of an authenticated user.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-602, CWE-669
References: http://www.securityfocus.com/bid/101259; https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01; http://www.securityfocus.com/bid/101259
CVE: CVE-2017-15565
Published: 2017-10-17
Description: In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via a crafted PDF document.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: https://bugs.freedesktop.org/show_bug.cgi?id=103016; https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html; https://www.debian.org/security/2018/dsa-4079
CVE: CVE-2017-9625
Published: 2017-10-17
Description: An Improper Authentication issue was discovered in Envitech EnviDAS Ultimate Versions prior to v1.0.0.5. The web application lacks proper authentication which could allow an attacker to view information and modify settings or execute code remotely.
CVSS Score: 8.2 (HIGH)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/101249; https://ics-cert.us-cert.gov/advisories/ICSA-17-285-03; http://www.securityfocus.com/bid/101249
CVE: CVE-2016-10515
Published: 2017-10-18
Description: In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.redmine.org/projects/redmine/wiki/Security_Advisories; https://www.redmine.org/projects/redmine/wiki/Security_Advisories
CVE: CVE-2017-15568
Published: 2017-10-18
Description: In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/application_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of issue history.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/redmine/redmine/commit/94f7cfbf990028348b9262578acbc53a94fce448; https://www.debian.org/security/2018/dsa-4191; https://www.redmine.org/issues/27186
CVE: CVE-2017-15569
Published: 2017-10-18
Description: In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/queries_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of an issue list.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/redmine/redmine/commit/56c8ee0440d8555aa7822d947ba9091c8a791508; https://www.debian.org/security/2018/dsa-4191; https://www.redmine.org/issues/27186
CVE: CVE-2017-15570
Published: 2017-10-18
Description: In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/timelog/_list.html.erb via crafted column data.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/redmine/redmine/commit/1a[PII_REDACTED]a128b0a932ba1552c37e9414953b; https://www.debian.org/security/2018/dsa-4191; https://www.redmine.org/issues/27186
CVE: CVE-2017-15571
Published: 2017-10-18
Description: In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/issues/_list.html.erb via crafted column data.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/redmine/redmine/commit/273dd9cb3bcfb1e0a0b90570b3b34eafa07d67aa; https://www.debian.org/security/2018/dsa-4191; https://www.redmine.org/issues/27186
CVE: CVE-2017-15572
Published: 2017-10-18
Description: In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information (password reset tokens) by reading a Referer log, because account/lost_password does not use a redirect.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://www.debian.org/security/2018/dsa-4191; https://www.redmine.org/issues/24416; https://www.redmine.org/projects/redmine/wiki/Security_Advisories
CVE: CVE-2017-15573
Published: 2017-10-18
Description: In Redmine before 3.2.6 and 3.3.x before 3.3.3, XSS exists because markup is mishandled in wiki content.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.debian.org/security/2018/dsa-4191; https://www.redmine.org/issues/25503; https://www.redmine.org/projects/redmine/wiki/Security_Advisories
CVE: CVE-2017-15574
Published: 2017-10-18
Description: In Redmine before 3.2.6 and 3.3.x before 3.3.3, stored XSS is possible by using an SVG document as an attachment.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.debian.org/security/2018/dsa-4191; https://www.redmine.org/issues/24199; https://www.redmine.org/projects/redmine/wiki/Security_Advisories
CVE: CVE-2017-15575
Published: 2017-10-18
Description: In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whether the Repository module is enabled in a project's settings, which might allow remote attackers to obtain sensitive differences information or possibly have unspecified other impact.
CVSS Score: 7.3 (HIGH)
References: https://www.debian.org/security/2018/dsa-4191; https://www.redmine.org/issues/24307; https://www.redmine.org/projects/redmine/wiki/Security_Advisories
CVE: CVE-2017-15576
Published: 2017-10-18
Description: Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views, which allows remote attackers to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.debian.org/security/2018/dsa-4191; https://www.redmine.org/issues/23803; https://www.redmine.org/projects/redmine/wiki/Security_Advisories
CVE: CVE-2017-15577
Published: 2017-10-18
Description: Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows remote attackers to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.debian.org/security/2018/dsa-4191; https://www.redmine.org/issues/23793; https://www.redmine.org/projects/redmine/wiki/Security_Advisories
CVE: CVE-2017-15578
Published: 2017-10-18
Description: In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release/; https://blogs.securiteam.com/index.php/archives/3464; http://www.phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release/
CVE: CVE-2017-15579
Published: 2017-10-18
Description: In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release/; https://blogs.securiteam.com/index.php/archives/3464; http://www.phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release/
CVE: CVE-2017-15583
Published: 2017-10-18
Description: The embedded web server on ABB Fox515T 1.0 devices is vulnerable to Local File Inclusion. It accepts a parameter that specifies a file for display or for use as a template. The filename is not validated; an attacker could retrieve any file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://search-ext.abb.com/library/Download.aspx?DocumentID=1KHW028693&LanguageCode=en&DocumentPartId=&Action=Launch; http://search-ext.abb.com/library/Download.aspx?DocumentID=1KHW028693&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2017-15587
Published: 2017-10-18
Description: An integer overflow was discovered in pdf_read_new_xref_section in pdf/pdf-xref.c in Artifex MuPDF 1.11.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://git.ghostscript.com/?p=mupdf.git%3Bh=82df2631d7d0446b206ea6b434ea609b6c28b0e8; http://www.debian.org/security/2017/dsa-4006; https://bugs.ghostscript.com/show_bug.cgi?id=698605
CVE: CVE-2017-15588
Published: 2017-10-18
Description: An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS because of a race condition that can cause a stale TLB entry.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362
References: http://www.securityfocus.com/bid/101490; http://www.securitytracker.com/id/1039568; https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html
CVE: CVE-2017-15589
Published: 2017-10-18
Description: An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/101496; http://www.securitytracker.com/id/1039568; https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html
CVE: CVE-2017-15590
Published: 2017-10-18
Description: An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MSI mapping was mishandled.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/101500; http://www.securitytracker.com/id/1039568; https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
CVE: CVE-2017-15591
Published: 2017-10-18
Description: An issue was discovered in Xen 4.5.x through 4.9.x allowing attackers (who control a stub domain kernel or tool stack) to cause a denial of service (host OS crash) because of a missing comparison (of range start to range end) within the DMOP map/unmap implementation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://security.gentoo.org/glsa/201801-14; https://xenbits.xen.org/xsa/advisory-238.html; https://security.gentoo.org/glsa/201801-14
CVE: CVE-2017-15592
Published: 2017-10-18
Description: An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because self-linear shadow mappings are mishandled for translated guests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-668
References: http://www.securityfocus.com/bid/101513; http://www.securityfocus.com/bid/102129; http://www.securitytracker.com/id/1039568
CVE: CVE-2017-15593
Published: 2017-10-18
Description: An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (memory leak) because reference counts are mishandled.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securitytracker.com/id/1039568; https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html; https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html