deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-6651
Published: 2017-05-16
Description: A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that could allow them to access scheduled customer meetings. The vulnerability is due to an incomplete configuration of the robots.txt file on customer-hosted WebEx solutions and occurs when the Short URL functionality is not activated. All releases of Cisco WebEx Meetings Server later than release 2.5MR4 provide this functionality. An attacker could exploit this vulnerability via an exposed parameter to search for indexed meeting information. A successful exploit could allow the attacker to obtain scheduled meeting information and potentially allow the attacker to attend scheduled, customer meetings. This vulnerability affects the following releases of Cisco WebEx Meetings Server: 2.5, 2.6, 2.7, 2.8. Cisco Bug IDs: CSCve25950.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/98387; http://www.securitytracker.com/id/1038459; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170510-cwms
CVE: CVE-2017-6657
Published: 2017-05-16
Description: Cisco Sourcefire Snort 3.0 before build 233 mishandles Ether Type Validation. Since valid ether type and IP protocol numbers do not overlap, Snort++ stores all protocol decoders in a single array. That makes it possible to craft packets that have IP protocol numbers in the ether type field which will confuse the Snort++ decoder. For example, an eth:llc:snap:icmp6 packet will cause a crash because there is no ip6 header with which to calculate the icmp6 checksum. Affected decoders include gre, llc, trans_bridge, ciscometadata, linux_sll, and token_ring. The fix adds a check in the packet manager to validate the ether type before indexing the decoder array. An out of range ether type will raise 116:473.
CVSS Score: 7.5 (HIGH)
References: http://blog.snort.org/2017/05/snort-vulnerabilities-found.html; http://www.securitytracker.com/id/1038483; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170515-snort
CVE: CVE-2017-6658
Published: 2017-05-16
Description: Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. The size was off by one making it possible to read past the end of the array with an ether type of 0xFFFF. Increasing the array size solves this problem.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://blog.snort.org/2017/05/snort-vulnerabilities-found.html; http://www.securitytracker.com/id/1038483; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170515-snort
CVE: CVE-2017-7661
Published: 2017-05-16
Description: Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF (Cross Style Request Forgery) style vulnerability has been found in the Spring 2, Spring 3, Jetty 8 and Jetty 9 plugins in Apache CXF Fediz prior to 1.4.0, 1.3.2 and 1.2.4.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://cxf.apache.org/security-advisories.data/CVE-2017-7661.txt.asc; http://www.securitytracker.com/id/1038497; https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E
CVE: CVE-2017-7662
Published: 2017-05-16
Description: Apache CXF Fediz ships with an OpenId Connect (OIDC) service which has a Client Registration Service, which is a simple web application that allows clients to be created, deleted, etc. A CSRF (Cross Style Request Forgery) style vulnerability has been found in this web application in Apache CXF Fediz prior to 1.4.0 and 1.3.2, meaning that a malicious web application could create new clients, or reset secrets, etc, after the admin user has logged on to the client registration service and the session is still active.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://cxf.apache.org/security-advisories.data/CVE-2017-7662.txt.asc; http://www.securitytracker.com/id/1038498; https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E
CVE: CVE-2017-7488
Published: 2017-05-16
Description: Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/101784; https://access.redhat.com/errata/RHSA-2017:2285; https://bugzilla.redhat.com/show_bug.cgi?id=1441604
CVE: CVE-2011-0540
Published: 2017-05-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2012-1619
Published: 2017-05-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2012-3545
Published: 2017-05-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2013-4360
Published: 2017-05-16
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-9025
Published: 2017-05-17
Description: Heap buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted HTTP Cookie header.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://debugtrap.com/2017/05/09/tm06-vulnerabilities/; http://debugtrap.com/2017/05/09/tm06-vulnerabilities/
CVE: CVE-2017-9026
Published: 2017-05-17
Description: Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://debugtrap.com/2017/05/09/tm06-vulnerabilities/; http://debugtrap.com/2017/05/09/tm06-vulnerabilities/
CVE: CVE-2015-3998
Published: 2017-05-17
Description: Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud-monitoring plugin 1.7.5 for WordPress, allows remote attackers to inject arbitrary web script or HTML via the query parameter to whois.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.vapid.dhs.org/advisory.php?v=119; http://www.vapid.dhs.org/advisory.php?v=119
CVE: CVE-2015-4070
Published: 2017-05-17
Description: Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/75047; http://www.vapid.dhs.org/advisory.php?v=120; http://www.securityfocus.com/bid/75047
CVE: CVE-2016-3403
Published: 2017-05-17
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Zimbra Collaboration before 8.6.0 Patch 8 allow remote attackers to hijack the authentication of administrators for requests that (1) add, (2) modify, or (3) remove accounts by leveraging failure to use of a CSRF token and perform referer header checks, aka bugs 100885 and 100899.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2017/Jan/30; http://www.securityfocus.com/bid/95383; https://bugzilla.zimbra.com/show_bug.cgi?id=100885
CVE: CVE-2017-5214
Published: 2017-05-17
Description: The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to read arbitrary uploaded files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-335
References: https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt; https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt
CVE: CVE-2017-5215
Published: 2017-05-17
Description: The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a "safe file extension" protection mechanism, leading to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt; https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt
CVE: CVE-2017-8422
Published: 2017-05-17
Description: KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-290
References: http://www.debian.org/security/2017/dsa-3849; http://www.openwall.com/lists/oss-security/2017/05/10/3; http://www.securityfocus.com/bid/98412
CVE: CVE-2017-8849
Published: 2017-05-17
Description: smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.debian.org/security/2017/dsa-3951; http://www.openwall.com/lists/oss-security/2017/05/10/3; http://www.securityfocus.com/bid/98690
CVE: CVE-2017-9030
Published: 2017-05-17
Description: The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a directory traversal attack that bypasses a uniqid protection mechanism, and makes it easier to read arbitrary uploaded files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt; https://navixia.com/storage/app/media/uploaded-files/CVE/cve-2017-521415.txt
CVE: CVE-2017-7493
Published: 2017-05-17
Description: Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges inside guest.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://seclists.org/oss-sec/2017/q2/278; http://www.securityfocus.com/bid/98574; https://bugzilla.redhat.com/show_bug.cgi?id=1451709
CVE: CVE-2016-10374
Published: 2017-05-17
Description: perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as demonstrated by creating a perltidy.ERR symlink that the victim cannot delete.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://bugs.debian.org/862667; https://bugs.debian.org/862667
CVE: CVE-2017-9031
Published: 2017-05-17
Description: The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://dev.deluge-torrent.org/wiki/ReleaseNotes/1.3.15; http://git.deluge-torrent.org/deluge/commit/?h=1.3-stable&id=41acade01ae88f7b7bbdba308a0886771aa582fd; http://www.debian.org/security/2017/dsa-3856
CVE: CVE-2017-4011
Published: 2017-05-17
Description: Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to get session/cookie information via modification of the HTTP request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1038523; https://kc.mcafee.com/corporate/index?page=content&id=SB10198; http://www.securitytracker.com/id/1038523
CVE: CVE-2017-4012
Published: 2017-05-17
Description: Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via modification of the HTTP request.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securitytracker.com/id/1038523; https://kc.mcafee.com/corporate/index?page=content&id=SB10198; http://www.securitytracker.com/id/1038523
CVE: CVE-2017-4013
Published: 2017-05-17
Description: Banner Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to obtain product information via HTTP response header.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1038523; https://kc.mcafee.com/corporate/index?page=content&id=SB10198; http://www.securitytracker.com/id/1038523
CVE: CVE-2017-4014
Published: 2017-05-17
Description: Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view, add, and remove users via modification of the HTTP request.
CVSS Score: 8.0 (HIGH)
CWE: CWE-384
References: http://www.securitytracker.com/id/1038523; https://kc.mcafee.com/corporate/index?page=content&id=SB10198; http://www.securitytracker.com/id/1038523
CVE: CVE-2017-4015
Published: 2017-05-17
Description: Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to inject arbitrary web script or HTML via HTTP response header.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-1021
References: http://www.securitytracker.com/id/1038523; https://kc.mcafee.com/corporate/index?page=content&id=SB10198; http://www.securitytracker.com/id/1038523
CVE: CVE-2017-4016
Published: 2017-05-17
Description: Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to exploit and find another hole via HTTP response header.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1038523; https://kc.mcafee.com/corporate/index?page=content&id=SB10198; http://www.securitytracker.com/id/1038523
CVE: CVE-2017-4017
Published: 2017-05-17
Description: User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view user information via the appliance web interface.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1038523; https://kc.mcafee.com/corporate/index?page=content&id=SB10198; http://www.securitytracker.com/id/1038523
CVE: CVE-2017-8917
Published: 2017-05-17
Description: SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/98515; http://www.securitytracker.com/id/1038522; https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-sql-injection.html
CVE: CVE-2017-9038
Published: 2017-05-18
Description: GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to the byte_get_little_endian function in elfcomm.c, the get_unwind_section_word function in readelf.c, and ARM unwind information that contains invalid word offsets.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/98589; https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/; https://security.gentoo.org/glsa/201709-02
CVE: CVE-2017-9039
Published: 2017-05-18
Description: GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers function in readelf.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: http://www.securityfocus.com/bid/98580; https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/; https://security.gentoo.org/glsa/201709-02
CVE: CVE-2017-9040
Published: 2017-05-18
Description: GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash), related to the process_mips_specific function in readelf.c, via a crafted ELF file that triggers a large memory-allocation attempt.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/98579; https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/; https://security.gentoo.org/glsa/201709-02
CVE: CVE-2017-9041
Published: 2017-05-18
Description: GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling in the process_mips_specific function in readelf.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/98598; https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/; https://security.gentoo.org/glsa/201709-02
CVE: CVE-2017-9042
Published: 2017-05-18
Description: readelf.c in GNU Binutils 2017-04-12 has a "cannot be represented in type long" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-704
References: https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/; https://security.gentoo.org/glsa/201709-02; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=7296a62a2a237f6b1ad8db8c38b090e9f592c8cf
CVE: CVE-2017-9043
Published: 2017-05-18
Description: readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/98591; https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/; https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=ddef72cdc10d82ba011a7ff81cafbbd3466acf54
CVE: CVE-2017-9044
Published: 2017-05-18
Description: The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted ELF file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/98587; https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/; http://www.securityfocus.com/bid/98587
CVE: CVE-2017-6195
Published: 2017-05-18
Description: Ipswitch MOVEit Transfer (formerly DMZ) allows pre-authentication blind SQL injection. The fixed versions are MOVEit Transfer 2017 9.0.0.201, MOVEit DMZ 8.3.0.30, and MOVEit DMZ 8.2.0.20.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://ft.ipswitch.com/rs/751-HBN-596/images/Ipswitch-Security-Bulletin-FT-Vulnerability.pdf; https://www.siberas.de/assets/papers/ssa-1705_IPSWITCH_SQLinjection.txt; http://ft.ipswitch.com/rs/751-HBN-596/images/Ipswitch-Security-Bulletin-FT-Vulnerability.pdf
CVE: CVE-2017-8338
Published: 2017-05-18
Description: A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on port 500 (used for L2TP over IPsec), preventing the affected router from accepting new connections; all devices will be disconnected from the router and all logs removed automatically.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://seclists.org/fulldisclosure/2017/May/59; https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstormsecurity.com/files/142538/MikroTik-RouterBoard-6.38.5-Denial-Of-Service.html
CVE: CVE-2017-8769
Published: 2017-05-18
Description: Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files (Audio, Documents, Images, Video, and Voice Notes) associated with a chat, even after that chat is deleted. There may be users who expect file deletion to occur upon chat deletion, or who expect encryption (consistent with the application's use of an encrypted database to store chat text). NOTE: the vendor reportedly indicates that they do not "consider these to be security issues" because a user may legitimately want to preserve any file for use "in other apps like the Google Photos gallery" regardless of whether its associated chat is deleted
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-311
References: http://www.securityfocus.com/bid/100906; https://wwws.nightwatchcybersecurity.com/2017/05/17/advisory-whatsapp-for-android-privacy-issues-with-handling-of-media-files-cve-2017-8769/; http://www.securityfocus.com/bid/100906
CVE: CVE-2017-9045
Published: 2017-05-18
Description: The Google I/O 2017 application before 5.1.4 for Android downloads multiple .json files from http://storage.googleapis.com without SSL, which makes it easier for man-in-the-middle attackers to spoof Feed and Schedule data by creating a modified blocks_v4.json file.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-311
References: http://www.securityfocus.com/bid/98549; https://wwws.nightwatchcybersecurity.com/2017/05/17/advisory-google-io-2017-android-app/; http://www.securityfocus.com/bid/98549
CVE: CVE-2017-9047
Published: 2017-05-18
Description: A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits) whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write about "size" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3952; http://www.openwall.com/lists/oss-security/2017/05/15/1; http://www.securityfocus.com/bid/98599
CVE: CVE-2017-9048
Published: 2017-05-18
Description: libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: http://www.debian.org/security/2017/dsa-3952; http://www.openwall.com/lists/oss-security/2017/05/15/1; http://www.securityfocus.com/bid/98556
CVE: CVE-2017-9049
Published: 2017-05-18
Description: libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: http://www.debian.org/security/2017/dsa-3952; http://www.openwall.com/lists/oss-security/2017/05/15/1; http://www.securityfocus.com/bid/98601
CVE: CVE-2017-9050
Published: 2017-05-18
Description: libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-122
References: http://www.debian.org/security/2017/dsa-3952; http://www.openwall.com/lists/oss-security/2017/05/15/1; http://www.securityfocus.com/bid/98568