deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-9718
Published: 2019-03-12
Description: In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ff_htmlmarkup_to_ass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/107382; https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/1f00c97bc3475c477f3c468cf2d924d5761d0982; https://github.com/FFmpeg/FFmpeg/commit/23ccf3cabb4baf6e8af4b1af3fcc59c904736f21
CVE: CVE-2019-9721
Published: 2019-03-12
Description: A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle_open_brace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/107384; https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/894995c41e0795c7a44f81adc4838dedc3932e65; https://github.com/FFmpeg/FFmpeg/commit/273f2755ce8635d42da3cde0eeba15b2e7842774
CVE: CVE-2018-17944
Published: 2019-03-12
Description: On certain Lexmark devices that communicate with an LDAP or SMTP server, a malicious administrator can discover LDAP or SMTP credentials by changing that server's hostname to one that they control, and then capturing the credentials that are sent there. This occurs because stored credentials are not automatically deleted upon that type of hostname change.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://support.lexmark.com/index?page=content&id=TE909; http://support.lexmark.com/index?page=content&id=TE909
CVE: CVE-2019-9711
Published: 2019-03-12
Description: An issue was discovered in Joomla! before 3.9.4. The item_title layout in edit views lacks escaping, leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/107371; https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-xss-in-item-title-layout; http://www.securityfocus.com/bid/107371
CVE: CVE-2019-9712
Published: 2019-03-12
Description: An issue was discovered in Joomla! before 3.9.4. The JSON handler in com_config lacks input validation, leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/107374; https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-xss-in-com-config-json-handler; http://www.securityfocus.com/bid/107374
CVE: CVE-2019-9713
Published: 2019-03-12
Description: An issue was discovered in Joomla! before 3.9.4. The sample data plugins lack ACL checks, allowing unauthorized access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: http://www.securityfocus.com/bid/107372; https://developer.joomla.org/security-centre/[PII_REDACTED]4-core-missing-acl-check-in-sample-data-plugins; http://www.securityfocus.com/bid/107372
CVE: CVE-2019-9714
Published: 2019-03-12
Description: An issue was discovered in Joomla! before 3.9.4. The media form field lacks escaping, leading to XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/107369; https://developer.joomla.org/security-centre/[PII_REDACTED]3-core-xss-in-media-form-field; http://www.securityfocus.com/bid/107369
CVE: CVE-2019-9557
Published: 2019-03-12
Description: Ability Mail Server 4.2.6 has Persistent Cross Site Scripting (XSS) via the body e-mail body. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/151958/Ability-Mail-Server-4.2.6-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/151958/Ability-Mail-Server-4.2.6-Cross-Site-Scripting.html
CVE: CVE-2019-9558
Published: 2019-03-12
Description: Mailtraq WebMail version 2.17.7.3550 has Persistent Cross Site Scripting (XSS) via the body of an e-mail message. To exploit the vulnerability, the victim must open an email with malicious Javascript inserted into the body of the email as an iframe.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/151957/Mailtraq-WebMail-2.17.7.3550-Cross-Site-Scripting.html; https://packetstormsecurity.com/files/151957/Mailtraq-WebMail-2.17.7.3550-Cross-Site-Scripting.html
CVE: CVE-2019-9725
Published: 2019-03-12
Description: The Web manager (aka Commander) on Korenix JetPort 5601 and 5601f devices has Persistent XSS via the Port Alias field under Serial Setting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40bertinjoseb/korenix-jetport-web-manager-persistent-xss-6cf7e2a38634; https://medium.com/%40bertinjoseb/korenix-jetport-web-manager-persistent-xss-6cf7e2a38634
CVE: CVE-2019-3615
Published: 2019-03-12
Description: Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/107385; https://kc.mcafee.com/corporate/index?page=content&id=SB10277; http://www.securityfocus.com/bid/107385
CVE: CVE-2019-0268
Published: 2019-03-12
Description: SAP BusinessObjects Business Intelligence Platform (CMC Module), versions 4.10, 4.20 and 4.30, does not sufficiently validate an XML document accepted from an untrusted source.
CVSS Score: 8.1 (HIGH)
CWE: CWE-91
References: http://www.securityfocus.com/bid/107364; https://launchpad.support.sap.com/#/notes/2689259; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080
CVE: CVE-2019-0269
Published: 2019-03-12
Description: SAP BusinessObjects Business Intelligence Platform (BI Workspace), versions 4.10 and 4.20, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/107359; https://launchpad.support.sap.com/#/notes/2693962; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080
CVE: CVE-2019-0270
Published: 2019-03-12
Description: ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has been corrected in the following versions: KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.74, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, 7.74, 8.04, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, 7.74, 7.75, 8.04.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: http://www.securityfocus.com/bid/107377; https://launchpad.support.sap.com/#/notes/2727689; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080
CVE: CVE-2019-0271
Published: 2019-03-12
Description: ABAP Server (used in NetWeaver and Suite/ERP) and ABAP Platform does not sufficiently validate an XML document accepted from an untrusted source, leading to an XML External Entity (XEE) vulnerability. Fixed in Kernel 7.21 or 7.22, that is ABAP Server 7.00 to 7.31 and Kernel 7.45, 7.49 or 7.53, that is ABAP Server 7.40 to 7.52 or ABAP Platform. For more recent updates please refer to Security Note 2870067 (which supersedes the solution of Security Note 2736825) in the reference section below.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/107355; https://launchpad.support.sap.com/#/notes/2736825; https://launchpad.support.sap.com/#/notes/2870067
CVE: CVE-2019-0274
Published: 2019-03-12
Description: SAP Mobile Platform SDK allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service (i.e. denial of service). Fixed in versions 3.1 SP03 PL02, SDK 3.1 SP04, or later.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/107360; https://launchpad.support.sap.com/#/notes/2753497; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080
CVE: CVE-2019-0275
Published: 2019-03-12
Description: SAML 1.1 SSO Demo Application in SAP NetWeaver Java Application Server (J2EE-APPS), versions 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40 and 7.50, does not sufficiently encode user-controlled inputs, which results in cross-site scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/107362; https://launchpad.support.sap.com/#/notes/2689925; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080
CVE: CVE-2019-0276
Published: 2019-03-12
Description: Banking services from SAP 9.0 (FSAPPL version 5) and SAP S/4HANA Financial Products Subledger (S4FPSL, version 1) performs an inadequate authorization check for an authenticated user, potentially resulting in escalation of privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: http://www.securityfocus.com/bid/107353; https://launchpad.support.sap.com/#/notes/2754235; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080
CVE: CVE-2019-0277
Published: 2019-03-12
Description: SAP HANA extended application services, version 1, advanced does not sufficiently validate an XML document accepted from an authenticated developer with privileges to the SAP space (XML External Entity vulnerability).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: http://www.securityfocus.com/bid/107356; https://launchpad.support.sap.com/#/notes/2764283; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080
CVE: CVE-2019-5917
Published: 2019-03-12
Description: azure-umqtt-c (available through GitHub prior to 2017 October 6) allows remote attackers to cause a denial of service via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://jvn.jp/en/jp/JVN05875753/index.html; http://www.securityfocus.com/bid/107149; https://github.com/Azure/azure-umqtt-c
CVE: CVE-2019-5918
Published: 2019-03-12
Description: Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: http://jvn.jp/en/jp/JVN56542712/index.html; https://nablarch.atlassian.net/projects/NAB/issues/NAB-295; http://jvn.jp/en/jp/JVN56542712/index.html
CVE: CVE-2019-5919
Published: 2019-03-12
Description: An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-327
References: http://jvn.jp/en/jp/JVN56542712/index.html; https://nablarch.atlassian.net/browse/NAB-313; http://jvn.jp/en/jp/JVN56542712/index.html
CVE: CVE-2019-5920
Published: 2019-03-12
Description: Cross-site request forgery (CSRF) vulnerability in FormCraft 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN83501605/index.html; https://wordpress.org/plugins/formcraft-form-builder/#developers; https://wpvulndb.com/vulnerabilities/9231
CVE: CVE-2019-5921
Published: 2019-03-12
Description: Untrusted search path vulnerability in Windows 7 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN69181574/index.html; http://www.securityfocus.com/bid/107218; http://jvn.jp/en/jp/JVN69181574/index.html
CVE: CVE-2019-5922
Published: 2019-03-12
Description: Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN79543573/index.html; http://www.securityfocus.com/bid/107200; http://jvn.jp/en/jp/JVN79543573/index.html
CVE: CVE-2019-5923
Published: 2019-03-12
Description: Directory traversal vulnerability in iChain Insurance Wallet App for iOS Version 1.3.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://jvn.jp/en/jp/JVN11622218/index.html; https://www.ichain.co.jp/security20190311.html; http://jvn.jp/en/jp/JVN11622218/index.html
CVE: CVE-2019-5924
Published: 2019-03-12
Description: Cross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://jvn.jp/jp/JVN97656108/index.html; https://wordpress.org/plugins/smart-forms/#developers; https://wpvulndb.com/vulnerabilities/9232
CVE: CVE-2019-5925
Published: 2019-03-12
Description: Cross-site scripting vulnerability in Dradis Community Edition Dradis Community Edition v3.11 and earlier and Dradis Professional Edition v3.1.1 and earlier allow remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN40288903/index.html; https://dradisframework.com/ce/security_reports.html#fixed-3.11.1; http://jvn.jp/en/jp/JVN40288903/index.html
CVE: CVE-2019-9729
Published: 2019-03-12
Description: In Shanda MapleStory Online V160, the SdoKeyCrypt.sys driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not validating the IOCtl 0x8000c01c input value, leading to an integer signedness error and a heap-based buffer underflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-787
References: https://github.com/DoubleLabyrinth/SdoKeyCrypt-sys-local-privilege-elevation; https://github.com/DoubleLabyrinth/SdoKeyCrypt-sys-local-privilege-elevation
CVE: CVE-2019-9735
Published: 2019-03-13
Description: An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security group rule along with a protocol that doesn't support that option (for example, VRRP), an authenticated user may block further application of security group rules for instances from any project/tenant on the compute hosts to which it's applied. (Only deployments using the iptables security group driver are affected.)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-755
References: http://www.openwall.com/lists/oss-security/2019/03/18/2; http://www.securityfocus.com/bid/107390; https://access.redhat.com/errata/RHSA-2019:0879
CVE: CVE-2019-9736
Published: 2019-03-13
Description: DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/cnxh/1024tools/issues/20; https://github.com/cnxh/1024tools/issues/20
CVE: CVE-2019-9737
Published: 2019-03-13
Description: Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/pandao/editor.md/issues/662; https://github.com/pandao/editor.md/issues/662
CVE: CVE-2019-9738
Published: 2019-03-13
Description: jimmykuu Gopher 2.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jimmykuu/gopher/issues/88; https://github.com/jimmykuu/gopher/issues/88
CVE: CVE-2019-9740
Published: 2019-03-13
Description: An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the query string after a ? character) followed by an HTTP header or a Redis command. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-93
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00041.html; http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html
CVE: CVE-2018-20621
Published: 2019-03-13
Description: An issue was discovered in Microvirt MEmu 6.0.6. The MemuService.exe service binary is vulnerable to local privilege escalation through binary planting due to insecure permissions set at install time. This allows code to be run as NT AUTHORITY/SYSTEM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2018-20621; https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2018-20621
CVE: CVE-2019-9741
Published: 2019-03-13
Description: An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the second argument to http.NewRequest with \r\n followed by an HTTP header or a Redis command.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-93
References: http://www.securityfocus.com/bid/107432; https://access.redhat.com/errata/RHSA-2019:1300; https://access.redhat.com/errata/RHSA-2019:1519
CVE: CVE-2019-9742
Published: 2019-03-13
Description: gdwfpcd.sys in G Data Total Security before 2019-02-22 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILE_DEVICE_SECURE_OPEN and therefore files and directories "inside" the \\.\gdwfpcd device are not properly protected, leading to unintended impersonation or object creation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-03-13-gdata-total-security-acl-bypass.md; https://nafiez.github.io/security/bypass/2019/03/12/gdata-total-security-acl-bypass.html; https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-03-13-gdata-total-security-acl-bypass.md
CVE: CVE-2015-2254
Published: 2019-03-13
Description: Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to capture and change patch loading information resulting in the deletion of directory files and compromise of system functions when loading a patch.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://www.huawei.com/en/psirt/security-advisories/hw-417839; https://www.huawei.com/en/psirt/security-advisories/hw-417839
CVE: CVE-2019-9746
Published: 2019-03-13
Description: In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster and OutputTracks in webm_info.cc will trigger an abort, which allows a DoS attack, a similar issue to CVE-2018-19212.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://bugs.chromium.org/p/webm/issues/detail?id=1605; https://chromium.googlesource.com/webm/libwebm/+/2427abe0bde234987ed005a3adca461e9a85dfb7; https://bugs.chromium.org/p/webm/issues/detail?id=1605
CVE: CVE-2018-17937
Published: 2019-03-13
Description: gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow remote attackers to execute arbitrary code on embedded platforms via traffic on Port 2947/TCP or crafted JSON inputs.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: http://www.securityfocus.com/bid/107029; https://ics-cert.us-cert.gov/advisories/ICSA-18-310-01; https://lists.debian.org/debian-lts-announce/2019/03/msg00040.html
CVE: CVE-2019-9747
Published: 2019-03-13
Description: In tinysvcmdns through 2018-01-16, a maliciously crafted mDNS (Multicast DNS) packet triggers an infinite loop while parsing an mDNS query. When mDNS compressed labels point to each other, the function uncompress_nlabel goes into an infinite loop trying to analyze the packet with an mDNS query. As a result, the mDNS server hangs after receiving the malicious mDNS packet. NOTE: the product's web site states "This project is un-maintained, and has been since 2013. ... There are known vulnerabilities ... You are advised to NOT use this library for any new projects / products."
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://bitbucket.org/geekman/tinysvcmdns/issues/11/denial-of-service-vulnerability-infinite; https://bitbucket.org/geekman/tinysvcmdns/issues/11/denial-of-service-vulnerability-infinite
CVE: CVE-2019-9748
Published: 2019-03-13
Description: In tinysvcmdns through 2018-01-16, an mDNS server processing a crafted packet can perform arbitrary data read operations up to 16383 bytes from the start of the buffer. This can lead to a segmentation fault in uncompress_nlabel in mdns.c and a crash of the server (depending on the memory protection of the CPU and the operating system), or disclosure of memory content via error messages or a server response. NOTE: the product's web site states "This project is un-maintained, and has been since 2013. ... There are known vulnerabilities ... You are advised to NOT use this library for any new projects / products."
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://bitbucket.org/geekman/tinysvcmdns/issues/10/arbitrary-memory-read-while-parsing; https://bitbucket.org/geekman/tinysvcmdns/issues/10/arbitrary-memory-read-while-parsing
CVE: CVE-2019-9749
Published: 2019-03-13
Description: An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin acts as an MQTT broker (server), it mishandles incoming network messages. After processing a crafted packet, the plugin's mqtt_packet_drop function (in /plugins/in_mqtt/mqtt_prot.c) executes the memmove() function with a negative size parameter. That leads to a crash of the whole Fluent Bit server via a SIGSEGV signal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-681
References: https://github.com/fluent/fluent-bit/issues/1135; https://github.com/fluent/fluent-bit/issues/1135
CVE: CVE-2019-9750
Published: 2019-03-13
Description: In IoTivity through 1.3.1, the CoAP server interface can be used for Distributed Denial of Service attacks using source IP address spoofing and UDP-based traffic amplification. The reflected traffic is 6 times bigger than spoofed requests. This occurs because the construction of a "4.01 Unauthorized" response is mishandled. NOTE: the vendor states "While this is an interesting attack, there is no plan for maintainer to fix, as we are migrating to IoTivity Lite."
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-400
References: https://jira.iotivity.org/browse/IOT-3267; https://jira.iotivity.org/browse/IOT-3267
CVE: CVE-2018-0389
Published: 2019-03-13
Description: A vulnerability in the implementation of Session Initiation Protocol (SIP) processing in Cisco Small Business SPA514G IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of SIP request messages by an affected device. An attacker could exploit this vulnerability by sending crafted SIP messages to an affected device. A successful exploit could allow the attacker to cause the affected device to become unresponsive, resulting in a DoS condition that persists until the device is restarted manually. Cisco has not released software updates that address this vulnerability. This vulnerability affects Cisco Small Business SPA514G IP Phones that are running firmware release 7.6.2SR2 or earlier.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/107402; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190313-sip; http://www.securityfocus.com/bid/107402