deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-3982
Published: 2016-04-13
Description: Off-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service (out-of-bounds read or write access and crash) or possibly execute arbitrary code via a crafted image file, which triggers a heap-based buffer overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://bugs.fi/media/afl/optipng/2/; http://lists.opensuse.org/opensuse-updates/2016-04/msg00061.html; http://lists.opensuse.org/opensuse-updates/2016-04/msg00065.html
CVE: CVE-2016-4009
Published: 2016-04-13
Description: Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/86064; https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst; https://github.com/python-pillow/Pillow/commit/4e0d9b0b9740d258ade40cce248c93777362ac1e
CVE: CVE-2014-9655
Published: 2016-04-13
Description: The (1) putcontig8bitYCbCr21tile function in tif_getimage.c or (2) NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://openwall.com/lists/oss-security/2015/02/07/5; http://rhn.redhat.com/errata/RHSA-2016-1546.html; http://rhn.redhat.com/errata/RHSA-2016-1547.html
CVE: CVE-2015-1547
Published: 2016-04-13
Description: The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff5.tif.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://openwall.com/lists/oss-security/2015/01/24/16; http://openwall.com/lists/oss-security/2015/02/07/5; http://rhn.redhat.com/errata/RHSA-2016-1546.html
CVE: CVE-2015-3146
Published: 2016-04-13
Description: The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted SSH packet.
CVSS Score: 7.5 (HIGH)
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161802.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158013.html; http://www.debian.org/security/2016/dsa-3488
CVE: CVE-2015-8665
Published: 2016-04-13
Description: tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2016-1546.html; http://rhn.redhat.com/errata/RHSA-2016-1547.html; http://www.debian.org/security/2016/dsa-3467
CVE: CVE-2015-8683
Published: 2016-04-13
Description: The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2016-1546.html; http://rhn.redhat.com/errata/RHSA-2016-1547.html; http://www.debian.org/security/2016/dsa-3467
CVE: CVE-2015-8784
Published: 2016-04-13
Description: The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://bugzilla.maptools.org/show_bug.cgi?id=2508; http://rhn.redhat.com/errata/RHSA-2016-1546.html; http://rhn.redhat.com/errata/RHSA-2016-1547.html
CVE: CVE-2015-8806
Published: 2016-04-13
Description: dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring in a crafted HTML document.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2016/02/03/5; http://www.oracle.com/technetwork/topics/security/bulletinjul2[PII_REDACTED].html; http://www.securityfocus.com/bid/82071
CVE: CVE-2016-0739
Published: 2016-04-13
Description: libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178058.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178822.html; http://lists.opensuse.org/opensuse-updates/2016-03/msg00111.html
CVE: CVE-2016-0757
Published: 2016-04-13
Description: OpenStack Image Service (Glance) before 2015.1.3 (kilo) and 11.0.x before 11.0.2 (liberty), when show_multiple_locations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: http://rhn.redhat.com/errata/RHSA-2016-0309.html; http://www.securityfocus.com/bid/82696; https://security.openstack.org/ossa/OSSA-2016-006.html
CVE: CVE-2016-0787
Published: 2016-04-13
Description: The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177980.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178573.html; http://lists.opensuse.org/opensuse-updates/2016-03/msg00008.html
CVE: CVE-2016-2313
Published: 2016-04-13
Description: auth_login.php in Cacti before 0.8.8g allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user not in the cacti database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://bugs.cacti.net/view.php?id=2656; http://lists.opensuse.org/opensuse-updates/2016-02/msg00077.html; http://lists.opensuse.org/opensuse-updates/2016-02/msg00078.html
CVE: CVE-2016-1352
Published: 2016-04-14
Description: Cisco Unified Computing System (UCS) Central Software 1.3(1b) and earlier allows remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuv33856.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160413-ucs; http://www.securitytracker.com/id/1035565; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160413-ucs
CVE: CVE-2016-1378
Published: 2016-04-14
Description: Cisco IOS before 15.2(2)E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol (NMSP) port, aka Bug ID CSCum62591.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160413-nms; http://www.securitytracker.com/id/1035566; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160413-nms
CVE: CVE-2015-0284
Published: 2016-04-14
Description: Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7 allows remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the XMLRPC API, involving user details.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-7811.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2016-0590.html; https://bugzilla.redhat.com/show_bug.cgi?id=1181152; https://bugzilla.redhat.com/show_bug.cgi?id=1181472
CVE: CVE-2015-5343
Published: 2016-04-14
Description: Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server crash or memory consumption) and possibly execute arbitrary code via a skel-encoded request body, which triggers an out-of-bounds read and heap-based buffer overflow.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://subversion.apache.org/security/CVE-2015-5343-advisory.txt; http://www.debian.org/security/2015/dsa-3424; http://www.securitytracker.com/id/1034470
CVE: CVE-2015-7999
Published: 2016-04-14
Description: Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: http://support.citrix.com/article/CTX203787; http://www.securityfocus.com/bid/79659; http://www.securitytracker.com/id/1034520
CVE: CVE-2015-8540
Published: 2016-04-14
Description: Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.
CVSS Score: 8.8 (HIGH)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174435.html; http://sourceforge.net/p/libpng/bugs/244/; http://sourceforge.net/p/libpng/code/ci/d9006f683c641793252d92254a75ae9b815b42ed/
CVE: CVE-2015-8550
Published: 2016-04-14
Description: Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.
CVSS Score: 8.2 (HIGH)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html; http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html
CVE: CVE-2015-8554
Published: 2016-04-14
Description: Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries, related to a "write path."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://support.citrix.com/article/CTX203879; http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2[PII_REDACTED].html; http://www.securityfocus.com/bid/79579
CVE: CVE-2015-8560
Published: 2016-04-14
Description: Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.
CVSS Score: 7.3 (HIGH)
References: http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/annotate/head:/NEWS; http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7419; http://rhn.redhat.com/errata/RHSA-2016-0491.html
CVE: CVE-2016-2103
Published: 2016-04-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary web script or HTML via (1) the list_[PII_REDACTED]_oldfilterval parameter to systems/PhysicalList.do or (2) unspecified vectors involving systems/VirtualSystemsList.do.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2016-0590.html; https://bugzilla.redhat.com/show_bug.cgi?id=1305681; http://rhn.redhat.com/errata/RHSA-2016-0590.html
CVE: CVE-2016-3079
Published: 2016-04-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat Satellite 5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to systems/SystemEntitlements.do; (2) the label parameter to admin/multiorg/EntitlementDetails.do; or the name of a (3) snapshot tag or (4) system group in System Set Manager (SSM).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2016-0590.html; https://bugzilla.redhat.com/show_bug.cgi?id=1320444; https://bugzilla.redhat.com/show_bug.cgi?id=1320452
CVE: CVE-2016-4014
Published: 2016-04-14
Description: XML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows remote attackers to cause a denial of service (system hang) via a crafted DTD in an XML request to uddi/api/replication, aka SAP Security Note 2254389.
CVSS Score: 8.6 (HIGH)
References: http://packetstormsecurity.com/files/137919/SAP-NetWeaver-AS-JAVA-7.4-XXE-Injection.html; http://seclists.org/fulldisclosure/2016/Jul/45; https://erpscan.io/advisories/erpscan-16-020-sap-netweaver-java-uddi-component-xxe-vulnerability/
CVE: CVE-2016-4015
Published: 2016-04-14
Description: The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka SAP Security Note 2258784.
CVSS Score: 7.5 (HIGH)
References: https://erpscan.io/advisories/erpscan-16-019-sap-netweaver-enqueue-server-dos-vulnerability/; https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/; https://erpscan.io/advisories/erpscan-16-019-sap-netweaver-enqueue-server-dos-vulnerability/
CVE: CVE-2016-4016
Published: 2016-04-14
Description: Cross-site scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) 15 allows remote attackers to inject arbitrary web script or HTML via the title parameter to webdynpro/resources/sap.com/xapps~xmii~ui~admin~navigation/NavigationApplication, aka SAP Security Note 2201295.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/137920/SAP-xMII-15-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2016/Jul/46; https://erpscan.io/advisories/erpscan-16-021-sap-mii-reflected-xss-vulnerability/
CVE: CVE-2016-4017
Published: 2016-04-14
Description: The Data Provisioning Agent (aka DP Agent) in SAP HANA allows remote attackers to cause a denial of service (process crash) via unspecified vectors, aka SAP Security Note 2262710.
CVSS Score: 7.5 (HIGH)
References: https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/; https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/
CVE: CVE-2016-4018
Published: 2016-04-14
Description: The Data Provisioning Agent (aka DP Agent) in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive information, gain privileges, and conduct unspecified other attacks via unspecified vectors, aka SAP Security Note 2262742.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/; https://erpscan.io/press-center/blog/dos-vulnerabilities-on-the-rise-sap-security-notes-april-2016/
CVE: CVE-2011-4600
Published: 2016-04-14
Description: The networkReloadIptablesRules function in network/bridge_driver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a (1) DNS or (2) DHCP query.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-284
References: http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=ae1232b298323dd7bef909426e2ebafa6bca9157; http://libvirt.org/news-2012.html; http://www.ubuntu.com/usn/USN-2867-1
CVE: CVE-2015-5247
Published: 2016-04-14
Description: The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write connection to cause a denial of service (libvirtd crash) by triggering a failed unlink after creating a volume on a root_squash NFS pool.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://security.libvirt.org/2015/0003.html; http://www.ubuntu.com/usn/USN-2867-1; http://security.libvirt.org/2015/0003.html
CVE: CVE-2015-8336
Published: 2016-04-14
Description: Huawei FusionCompute with software before V100R005C10SPC700 allows remote authenticated users to obtain sensitive "role and permission" information via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-264
References: http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-462904.htm; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-462904.htm
CVE: CVE-2015-8676
Published: 2016-04-14
Description: Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200R001C00 before V200R001SPH018, V200R002C00 before V200R003SPH011, and V200R003C00 before V200R003SPH011; S9300, S7700, and S9700 Campus series switches with software V200R001C00 before V200R001SPH023, V200R002C00 before V200R003SPH011, and V200R003C00 before V200R003SPH011; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote attackers to cause a denial of service (memory consumption and reboot) via a large number of ICMPv6 packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-399
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-02-switch-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-02-switch-en
CVE: CVE-2015-8677
Published: 2016-04-14
Description: Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-03-switch-en; http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-03-switch-en
CVE: CVE-2010-5325
Published: 2016-04-15
Description: Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a long job title.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://bzr.linuxfoundation.org/loggerhead/openprinting/foomatic-4.0/foomatic-filters/annotate/head:/ChangeLog; http://rhn.redhat.com/errata/RHSA-2016-0491.html; http://www.openwall.com/lists/oss-security/2016/02/15/1
CVE: CVE-2016-0889
Published: 2016-04-15
Description: An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary files via a crafted pathname.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://seclists.org/bugtraq/2016/Apr/83; http://www.securitytracker.com/id/1035580; http://seclists.org/bugtraq/2016/Apr/83
CVE: CVE-2016-1264
Published: 2016-04-15
Description: Race condition in the Op command in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 12.3X50 before 12.3X50-D50, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.2X52 before 13.2X52-D30, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.1X53 before 14.1X53-D30, 14.2 before 14.2R4, 15.1 before 15.1F2 or 15.1R2, 15.1X49 before 15.1X49-D10 or 15.1X49-D20, and 16.1 before 16.1R1 allows remote authenticated users to gain privileges via the URL option.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10725; http://www.securitytracker.com/id/1035669; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10725
CVE: CVE-2016-1267
Published: 2016-04-15
Description: Race condition in the RPC functionality in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.1X53 before 14.1X53-D30, 14.2 before 14.2R3-S4, 15.1 before 15.1F2, or 15.1R2, 15.1X49 before 15.1X49-D20, and 16.1 before 16.1R1 allows local users to read, delete, or modify arbitrary files via unspecified vectors.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-362
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10730; http://www.securitytracker.com/id/1035668; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10730
CVE: CVE-2016-1268
Published: 2016-04-15
Description: The administrative web services interface in Juniper ScreenOS before 6.3.0r21 allows remote attackers to cause a denial of service (reboot) via a crafted SSL packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10732; http://www.securitytracker.com/id/1035666; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10732
CVE: CVE-2016-1269
Published: 2016-04-15
Description: Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R9, 13.2X51 before 13.2X51-D39, 13.3 before 13.3R8, 14.1 before 14.1R6, 14.1X53 before 14.1X53-D30, 14.2 before 14.2R4-S1, 15.1 before 15.1R2, 15.1X49 before 15.1X49-D30, and 16.1 before 16.1R1 allow remote attackers to cause a denial of service (socket consumption) via crafted TCP timestamps.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10736; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10736
CVE: CVE-2016-1270
Published: 2016-04-15
Description: The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with BGP-based L2VPN or VPLS, allows remote attackers to cause a denial of service (daemon restart) via a crafted L2VPN family BGP update.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10737; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10737
CVE: CVE-2016-1271
Published: 2016-04-15
Description: Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D25, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.2 before 14.2R4, 15.1 before 15.1R1 or 15.1F2, and 15.1X49 before 15.1X49-D15 allow local users to gain privileges via crafted combinations of CLI commands and arguments, a different vulnerability than CVE-2015-3003, CVE-2014-3816, and CVE-2014-0615.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10739; http://www.securitytracker.com/id/1035667; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10739