deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-12958
Published: 2019-06-25
Description: In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second privateDicts array element, because the privateDicts array has only one element allocated.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://forum.xpdfreader.com/viewtopic.php?f=3&t=41815; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJJD7X3ES7ZHJUY2R3DAVCJPV23R64VK/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FWEWFUVITPA3Y6F4A5SJSROKYT7PRH7Q/
CVE: CVE-2019-12949
Published: 2019-06-25
Description: In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trick an authenticated administrator into clicking on a button on a phishing page, an attacker can leverage XSS to upload arbitrary executable code, via diag_command.php and rrd_fetch_json.php (timePeriod parameter), to a server. Then, the remote attacker can run any command with root privileges on that server.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/tarantula-team/CVE-2019-12949; https://github.com/tarantula-team/CVE-2019-12949
CVE: CVE-2019-12817
Published: 2019-06-25
Description: arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected.
CVSS Score: 7.0 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html; http://www.openwall.com/lists/oss-security/2019/06/24/5; http://www.securityfocus.com/bid/108884
CVE: CVE-2019-12960
Published: 2019-06-25
Description: LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter p_dt_s_d.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://forums.livezilla.net/index.php?/topic/10983-fg-vd-19-086-livezilla-server-is-vulnerable-to-sql-injection-ii/; https://forums.livezilla.net/index.php?/topic/10983-fg-vd-19-086-livezilla-server-is-vulnerable-to-sql-injection-ii/
CVE: CVE-2019-12961
Published: 2019-06-25
Description: LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://forums.livezilla.net/index.php?/topic/10985-fg-vd-19-088-livezilla-server-is-vulnerable-to-csv-injection/; https://forums.livezilla.net/index.php?/topic/10985-fg-vd-19-088-livezilla-server-is-vulnerable-to-csv-injection/
CVE: CVE-2019-12962
Published: 2019-06-25
Description: LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/161867/LiveZilla-Server-8.0.1.0-Cross-Site-Scripting.html; https://forums.livezilla.net/index.php?/topic/10984-fg-vd-19-083085087-livezilla-server-are-vulnerable-to-cross-site-scripting-in-admin-panel/; http://packetstormsecurity.com/files/161867/LiveZilla-Server-8.0.1.0-Cross-Site-Scripting.html
CVE: CVE-2019-12963
Published: 2019-06-25
Description: LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://forums.livezilla.net/index.php?/topic/10984-fg-vd-19-083085087-livezilla-server-are-vulnerable-to-cross-site-scripting-in-admin-panel/; https://forums.livezilla.net/index.php?/topic/10984-fg-vd-19-083085087-livezilla-server-are-vulnerable-to-cross-site-scripting-in-admin-panel/
CVE: CVE-2019-12964
Published: 2019-06-25
Description: LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://forums.livezilla.net/index.php?/topic/10984-fg-vd-19-083085087-livezilla-server-are-vulnerable-to-cross-site-scripting-in-admin-panel/; https://forums.livezilla.net/index.php?/topic/10984-fg-vd-19-083085087-livezilla-server-are-vulnerable-to-cross-site-scripting-in-admin-panel/
CVE: CVE-2018-1858
Published: 2019-06-25
Description: IBM API Connect 5.0.0.0 through 5.0.8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 151256.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.ibm.com/support/docview.wss?uid=ibm10794169; http://www.securityfocus.com/bid/108898; http://www.securityfocus.com/bid/109111
CVE: CVE-2018-2011
Published: 2019-06-25
Description: IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially crafted HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: 155150.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/108907; https://exchange.xforce.ibmcloud.com/vulnerabilities/155150; https://www.ibm.com/support/docview.wss?uid=ibm10882932
CVE: CVE-2018-2013
Published: 2019-06-25
Description: IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized user that could aid in further attacks against the system. IBM X-Force ID: 155193.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/108907; https://exchange.xforce.ibmcloud.com/vulnerabilities/155193; https://www.ibm.com/support/docview.wss?uid=ibm10882924
CVE: CVE-2019-4135
Published: 2019-06-25
Description: IBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability that could allow authenticated users to impersonate other users. IBM X-Force ID: 158331.
CVSS Score: 8.8 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158331; https://www.ibm.com/support/docview.wss?uid=ibm10888379; https://exchange.xforce.ibmcloud.com/vulnerabilities/158331
CVE: CVE-2019-4145
Published: 2019-06-25
Description: IBM Security Access Manager 9.0.1 through 9.0.6 could reveal highly sensitive in specialized conditions to a local user which could be used in further attacks against the system. IBM X-Force ID: 158400.
CVSS Score: 7.1 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158400; https://www.ibm.com/support/docview.wss?uid=ibm10888379; https://exchange.xforce.ibmcloud.com/vulnerabilities/158400
CVE: CVE-2019-4150
Published: 2019-06-25
Description: IBM Security Access Manager 9.0.1 through 9.0.6 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-Force ID: 158510.
CVSS Score: 3.7 (LOW)
CWE: CWE-295
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158510; https://www.ibm.com/support/docview.wss?uid=ibm10888379; https://exchange.xforce.ibmcloud.com/vulnerabilities/158510
CVE: CVE-2019-4151
Published: 2019-06-25
Description: IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158512.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-326
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158512; https://www.ibm.com/support/docview.wss?uid=ibm10888379; https://exchange.xforce.ibmcloud.com/vulnerabilities/158512
CVE: CVE-2019-4152
Published: 2019-06-25
Description: IBM Security Access Manager 9.0.1 through 9.0.6 does not invalidate session tokens in a timely manner. The lack of proper session expiration may allow attackers with local access to login into a closed browser session. IBM X-Force ID: 158515.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-384
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158515; https://www.ibm.com/support/docview.wss?uid=ibm10888379; https://exchange.xforce.ibmcloud.com/vulnerabilities/158515
CVE: CVE-2019-4153
Published: 2019-06-25
Description: IBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 158517.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-601
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158517; https://www.ibm.com/support/docview.wss?uid=ibm10888379; https://exchange.xforce.ibmcloud.com/vulnerabilities/158517
CVE: CVE-2019-4156
Published: 2019-06-25
Description: IBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158572.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158572; https://www.ibm.com/support/docview.wss?uid=ibm10888379; https://exchange.xforce.ibmcloud.com/vulnerabilities/158572
CVE: CVE-2019-4157
Published: 2019-06-25
Description: IBM Security Access Manager 9.0.1 through 9.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158573.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158573; https://www.ibm.com/support/docview.wss?uid=ibm10888379; https://exchange.xforce.ibmcloud.com/vulnerabilities/158573
CVE: CVE-2019-4158
Published: 2019-06-25
Description: IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the exposure of resources or functionality to unintended actors. IBM X-Force ID: 158574.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/158574; https://www.ibm.com/support/docview.wss?uid=ibm10888379; https://exchange.xforce.ibmcloud.com/vulnerabilities/158574
CVE: CVE-2019-4377
Published: 2019-06-25
Description: IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 reveals sensitive information from a stack trace that could be used in further attacks against the system. IBM X-Force ID: 162803.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209
References: http://www.securityfocus.com/bid/108915; https://exchange.xforce.ibmcloud.com/vulnerabilities/162083; https://www.ibm.com/support/docview.wss?uid=ibm10887853
CVE: CVE-2019-4382
Published: 2019-06-25
Description: IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the system users using specially crafted HTTP requests. IBM X-Force ID: 162162.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-319
References: http://www.securityfocus.com/bid/108893; https://exchange.xforce.ibmcloud.com/vulnerabilities/162162; https://www.ibm.com/support/docview.wss?uid=ibm10886747
CVE: CVE-2019-6328
Published: 2019-06-25
Description: HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6329.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/108891; https://support.hp.com/us-en/document/c06388027; http://www.securityfocus.com/bid/108891
CVE: CVE-2019-6329
Published: 2019-06-25
Description: HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6328.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/108891; https://support.hp.com/us-en/document/c06388027; http://www.securityfocus.com/bid/108891
CVE: CVE-2019-12280
Published: 2019-06-25
Description: PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: http://packetstormsecurity.com/files/153374/PC-Doctor-Toolbox-DLL-Hijacking.html; http://seclists.org/fulldisclosure/2019/Jun/29; http://www.pc-doctor.com/company/pr-articles/130-pc-doctor-responds-to-software-vulnerability-report
CVE: CVE-2019-3961
Published: 2019-06-25
Description: Nessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker could potentially exploit this vulnerability via a specially crafted request to execute arbitrary script code in a users browser session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/108892; https://www.tenable.com/security/tns-2019-04; http://www.securityfocus.com/bid/108892
CVE: CVE-2019-9836
Published: 2019-06-25
Description: Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-327
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00032.html; http://packetstormsecurity.com/files/153436/AMD-Secure-Encrypted-Virtualization-SEV-Key-Recovery.html; https://seclists.org/fulldisclosure/2019/Jun/46
CVE: CVE-2019-12888
Published: 2019-06-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-12887. Reason: This candidate is a reservation duplicate of CVE-2019-12887. Notes: All CVE users should reference CVE-2019-12887 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-12966
Published: 2019-06-26
Description: FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the {"a":(function(){confirm(1)})()} input.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://github.com/zxlie/FeHelper/issues/63; https://github.com/zxlie/FeHelper/issues/63
CVE: CVE-2019-12968
Published: 2019-06-26
Description: A vulnerability was found in the Sonic Robo Blast 2 (SRB2) plugin (EP_Versions 9 to 11 inclusive) distributed with Doomseeker 1.1 and 1.2. Affected plugin versions did not discard IP packets with an unnaturally long response length from a Sonic Robo Blast 2 master server, allowing a remote attacker to cause a potential crash / denial of service in Doomseeker. The issue has been remediated in the Doomseeker 1.3 release with source code patches to the SRB2 plugin.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119
References: https://bitbucket.org/Doomseeker/doomseeker/commits/ae456aac888cb794ea3292f7f99cb87d6b22a555; https://bitbucket.org/Doomseeker/doomseeker/commits/b9a90f1f56e704c5cbeefe83da2f9ce939920278; https://bitbucket.org/Doomseeker/doomseeker/pull-requests/74/more-openbsd-issues-3654-the-srb2-thingy/diff
CVE: CVE-2019-11272
Published: 2019-06-26
Description: Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions support plain text passwords using PlaintextPasswordEncoder. If an application using an affected version of Spring Security is leveraging PlaintextPasswordEncoder and a user has a null encoded password, a malicious user (or attacker) can authenticate using a password of "null".
CVSS Score: 7.3 (HIGH)
CWE: CWE-287, CWE-522
References: https://lists.debian.org/debian-lts-announce/2019/07/msg00008.html; https://pivotal.io/security/cve-2019-11272; https://lists.debian.org/debian-lts-announce/2019/07/msg00008.html
CVE: CVE-2019-12972
Published: 2019-06-26
Description: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. There is a heap-based buffer over-read in _bfd_doprnt in bfd.c because elf_object_p in elfcode.h mishandles an e_shstrndx section of type SHT_GROUP by omitting a trailing '\0' character.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html; http://www.securityfocus.com/bid/108903
CVE: CVE-2019-6163
Published: 2019-06-26
Description: A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404
References: https://support.lenovo.com/solutions/LEN-27348; https://support.lenovo.com/solutions/LEN-27348
CVE: CVE-2019-6166
Published: 2019-06-26
Description: A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://support.lenovo.com/solutions/LEN-27725; https://support.lenovo.com/solutions/LEN-27725
CVE: CVE-2019-6167
Published: 2019-06-26
Description: A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://support.lenovo.com/solutions/LEN-27725; https://support.lenovo.com/solutions/LEN-27725
CVE: CVE-2019-6168
Published: 2019-06-26
Description: A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://support.lenovo.com/solutions/LEN-27725; https://support.lenovo.com/solutions/LEN-27725
CVE: CVE-2019-6169
Published: 2019-06-26
Description: A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311
References: https://support.lenovo.com/solutions/LEN-27725; https://support.lenovo.com/solutions/LEN-27725
CVE: CVE-2019-3569
Published: 2019-06-26
Description: HHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could allow a malicious individual unintended direct access to the application, which could result in information disclosure. This issue affects versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, versions 3.30.5 and below, and all versions in the 4.0, 4.1, and 4.2 series.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552, CWE-668
References: https://github.com/facebook/hhvm/commit/97ef580ec2cca9a54da6f9bd9fdd9a455f6d74ed; https://hhvm.com/blog/2019/06/10/hhvm-4.9.0.html; https://github.com/facebook/hhvm/commit/97ef580ec2cca9a54da6f9bd9fdd9a455f6d74ed
CVE: CVE-2019-4224
Published: 2019-06-26
Description: IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 159240.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/159240; https://www-01.ibm.com/support/docview.wss?uid=ibm10885602; https://exchange.xforce.ibmcloud.com/vulnerabilities/159240
CVE: CVE-2019-4225
Published: 2019-06-26
Description: IBM PureApplication System 2.2.3.0 through 2.2.5.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 159242.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-532
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/159242; https://www-01.ibm.com/support/docview.wss?uid=ibm10885602; https://exchange.xforce.ibmcloud.com/vulnerabilities/159242
CVE: CVE-2019-4234
Published: 2019-06-26
Description: IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor. An attacker by intercepting the subsequent requests can bypass business logic to modify the pattern to unlocked state. IBM X-Force ID: 159416.
CVSS Score: 4.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/159416; https://www-01.ibm.com/support/docview.wss?uid=ibm10885602; https://exchange.xforce.ibmcloud.com/vulnerabilities/159416
CVE: CVE-2019-4235
Published: 2019-06-26
Description: IBM PureApplication System 2.2.3.0 through 2.2.5.3 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 159417.
CVSS Score: 7.5 (HIGH)
CWE: CWE-521
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/159417; https://www-01.ibm.com/support/docview.wss?uid=ibm10885602; https://exchange.xforce.ibmcloud.com/vulnerabilities/159417
CVE: CVE-2019-4241
Published: 2019-06-26
Description: IBM PureApplication System 2.2.3.0 through 2.2.5.3 could allow an authenticated user with local access to bypass authentication and obtain administrative access. IBM X-Force ID: 159467.
CVSS Score: 7.8 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/159467; https://www-01.ibm.com/support/docview.wss?uid=ibm10885602; https://exchange.xforce.ibmcloud.com/vulnerabilities/159467
CVE: CVE-2019-10164
Published: 2019-06-26
Description: PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00035.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10164; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAGE6H4FWLKFLHLWVYNPYGQRPIXTUWGB/
CVE: CVE-2019-11583
Published: 2019-06-26
Description: The issue searching component in Jira before version 8.1.0 allows remote attackers to deny access to Jira service via denial of service vulnerability in issue search when ordering by "Epic Name".
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/108901; https://jira.atlassian.com/browse/JSWSERVER-20111; http://www.securityfocus.com/bid/108901
CVE: CVE-2018-20845
Published: 2019-06-26
Description: Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: http://www.securityfocus.com/bid/108921; https://github.com/uclouvain/openjpeg/pull/1168/commits/c5bd64ea146162967c29bd2af0cbb845ba3eaaaf; http://www.securityfocus.com/bid/108921
CVE: CVE-2018-20846
Published: 2019-06-26
Description: Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/108921; https://github.com/uclouvain/openjpeg/pull/1168/commits/c277159986c80142180fbe5efb256bbf3bdf3edc; http://www.securityfocus.com/bid/108921
CVE: CVE-2018-20847
Published: 2019-06-26
Description: An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/108921; https://github.com/uclouvain/openjpeg/commit/5d00b719f4b93b1445e6fb4c766b9a9883c57949; https://github.com/uclouvain/openjpeg/issues/431
CVE: CVE-2019-12973
Published: 2019-06-26
Description: In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-834
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html; http://www.securityfocus.com/bid/108900