deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-4045
Published: 2017-05-23
Description: The sudoers file in the asset discovery scanner in AlienVault OSSIM before 5.0.1 allows local users to gain privileges via a crafted nmap script.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/74791; https://sysdream.com/uploads/media/default/0001/01/8c6a70098657b4474fe7abe9bcdd5e73b234b610.pdf; https://www.alienvault.com/forums/discussion/5127/
CVE: CVE-2015-4046
Published: 2017-05-23
Description: The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbitrary commands via the assets array parameter to netscan/do_scan.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: http://www.securityfocus.com/bid/74795; https://sysdream.com/uploads/media/default/0001/01/8c6a70098657b4474fe7abe9bcdd5e73b234b610.pdf; https://www.alienvault.com/forums/discussion/5127/
CVE: CVE-2015-4054
Published: 2017-05-23
Description: PgBouncer before 1.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by sending a password packet before a startup packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2015/05/22/5; http://www.securityfocus.com/bid/74751; https://github.com/pgbouncer/pgbouncer/commit/74d6e5f7de5ec736f71204b7b422af7380c19ac5
CVE: CVE-2015-4455
Published: 2017-05-23
Description: Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/gform_aviary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/132256/WordPress-Aviary-Image-Editor-Add-On-For-Gravity-Forms-3.0-Beta-Shell-Upload.html; http://www.vapid.dhs.org/advisory.php?v=125; http://packetstormsecurity.com/files/132256/WordPress-Aviary-Image-Editor-Add-On-For-Gravity-Forms-3.0-Beta-Shell-Upload.html
CVE: CVE-2015-4704
Published: 2017-05-23
Description: Directory traversal vulnerability in the Download Zip Attachments plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the File parameter to download.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/132459/Download-Zip-Attachments-1.0-File-Download.html; http://www.vapid.dhs.org/advisory.php?v=129; http://packetstormsecurity.com/files/132459/Download-Zip-Attachments-1.0-File-Download.html
CVE: CVE-2015-5381
Published: 2017-05-23
Description: Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the _mbox parameter to the default URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://trac.roundcube.net/ticket/1490417; http://www.openwall.com/lists/oss-security/2015/07/07/2; https://github.com/roundcube/roundcubemail/commit/b782815dacda55eee6793249b5da[PII_REDACTED]fc
CVE: CVE-2015-5382
Published: 2017-05-23
Description: program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via the _alt parameter when uploading a vCard.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2015/07/07/2; http://www.openwall.com/lists/oss-security/2015/07/07/3; https://github.com/roundcube/roundcubemail/commit/6ccd4c54bcc4cb77365defabe8bbe7d10b2620d4
CVE: CVE-2015-5383
Published: 2017-05-23
Description: Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by reading files in the (1) config, (2) temp, or (3) logs directory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2015/07/07/2; https://github.com/roundcube/roundcubemail/commit/012555c1cef35601b543cde67bff8726de97eb39; https://github.com/roundcube/roundcubemail/issues/4816
CVE: CVE-2015-5401
Published: 2017-05-23
Description: Teradata Gateway before 15.00.03.02-1 and 15.10.x before 15.10.00.01-1 and TD Express before 15.00.02.08_Sles10 and 15.00.02.08_Sles11 allow remote attackers to cause a denial of service (database crash) via a malformed CONFIG REQUEST message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.fortiguard.com/advisory/FG-VD-15-038/; http://www.securitytracker.com/id/1033005; https://blog.fortinet.com/2015/07/23/teradata-vulnerability-announced-big-potential-headaches-for-big-data-solution
CVE: CVE-2015-5468
Published: 2017-05-23
Description: Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter to includes/download.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2015/07/06/19; http://www.openwall.com/lists/oss-security/2015/07/10/4; http://www.vapid.dhs.org/advisory.php?v=136
CVE: CVE-2015-5469
Published: 2017-05-23
Description: Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter to includes/download.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2015/07/07/1; http://www.openwall.com/lists/oss-security/2015/07/10/5; http://www.vapid.dhs.org/advisory.php?v=133
CVE: CVE-2015-5609
Published: 2017-05-23
Description: Absolute path traversal vulnerability in the Image Export plugin 1.1 for WordPress allows remote attackers to read and delete arbitrary files via a full pathname in the file parameter to download.php.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2015/07/13/10; http://www.openwall.com/lists/oss-security/2015/07/21/1; http://www.vapid.dhs.org/advisory.php?v=135
CVE: CVE-2015-5682
Published: 2017-05-23
Description: upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via vectors related to the targetDir variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2015/07/27/8; http://www.vapid.dhs.org/advisory.php?v=132; http://www.openwall.com/lists/oss-security/2015/07/27/8
CVE: CVE-2015-6586
Published: 2017-05-23
Description: The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/76684; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453516.htm; http://www.securityfocus.com/bid/76684
CVE: CVE-2015-6817
Published: 2017-05-23
Description: PgBouncer 1.6.x before 1.6.1, when configured with auth_user, allows remote attackers to gain login access as auth_user via an unknown username.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: http://comments.gmane.org/gmane.comp.db.postgresql.pgbouncer.general/1251; http://www.openwall.com/lists/oss-security/2015/09/05/7; https://github.com/pgbouncer/pgbouncer/commit/7ca3e5279d05fceb1e8a043c6f5b6f58dea3ed38
CVE: CVE-2015-8089
Published: 2017-05-23
Description: The GPU driver in Huawei P7 phones with software P7-L00 before P7-L00C17B851, P7-L05 before P7-L05C00B851, and P7-L09 before P7-L09C92B851 allows local users to read or write to arbitrary kernel memory locations and consequently cause a denial of service (system crash) or gain privileges via a crafted application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-460276.htm; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-460276.htm
CVE: CVE-2015-8477
Published: 2017-05-23
Description: Cross-site scripting (XSS) vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash message rendering.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/12/05/7; http://www.openwall.com/lists/oss-security/2015/12/05/8; http://www.redmine.org/projects/redmine/wiki/Security_Advisories
CVE: CVE-2016-10073
Published: 2017-05-23
Description: The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent messages and potentially obtain sensitive information via a crafted HTTP Host header, as demonstrated by a password reset request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/142486/Vanilla-Forums-2.3-Remote-Code-Execution.html; https://exploitbox.io/vuln/Vanilla-Forums-Exploit-Host-Header-Injection-CVE-2016-10073-0day.html; https://open.vanillaforums.com/discussion/33498/critical-security-release-vanilla-2-3-1
CVE: CVE-2016-1876
Published: 2017-05-23
Description: The backend service process in Lenovo Solution Center (aka LSC) before 3.3.0002 allows local users to gain SYSTEM privileges via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: https://support.lenovo.com/us/en/product_security/len_4326; https://support.lenovo.com/us/en/product_security/len_4326
CVE: CVE-2016-5177
Published: 2017-05-23
Description: Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-updates/2016-10/msg00000.html; http://lists.opensuse.org/opensuse-updates/2016-10/msg00001.html; http://rhn.redhat.com/errata/RHSA-2016-2007.html
CVE: CVE-2016-5178
Published: 2017-05-23
Description: Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-updates/2016-10/msg00000.html; http://lists.opensuse.org/opensuse-updates/2016-10/msg00001.html; http://rhn.redhat.com/errata/RHSA-2016-2007.html
CVE: CVE-2016-5735
Published: 2017-05-23
Description: Integer overflow in the rwpng_read_image24_libpng function in rwpng.c in pngquant 2.7.0 allows remote attackers to have unspecified impact via a crafted PNG file, which triggers a buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://sf.snu.ac.kr/gil.hur/publications/shovel.pdf; https://github.com/pornel/pngquant/commit/b7c217680cda02dddced245d237ebe8c383be285; https://lists.debian.org/debian-lts-announce/2020/06/msg00028.html
CVE: CVE-2016-7977
Published: 2017-05-23
Description: Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=8abd22010eb4db0fb1b10e430d5f5d83e015ef70; http://rhn.redhat.com/errata/RHSA-2017-0013.html; http://rhn.redhat.com/errata/RHSA-2017-0014.html
CVE: CVE-2016-7978
Published: 2017-05-23
Description: Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://rhn.redhat.com/errata/RHSA-2017-0013.html; http://www.debian.org/security/2016/dsa-3691; http://www.openwall.com/lists/oss-security/2016/10/05/15
CVE: CVE-2016-7979
Published: 2017-05-23
Description: Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-704
References: http://git.ghostscript.com/?p=ghostpdl.git%3Bh=875a0095f37626a721c7ff57d606a0f95af03913; http://rhn.redhat.com/errata/RHSA-2017-0013.html; http://rhn.redhat.com/errata/RHSA-2017-0014.html
CVE: CVE-2016-9840
Published: 2017-05-23
Description: inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVSS Score: 8.8 (HIGH)
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html
CVE: CVE-2016-9841
Published: 2017-05-23
Description: inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html
CVE: CVE-2016-9842
Published: 2017-05-23
Description: The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1335
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html
CVE: CVE-2016-9843
Published: 2017-05-23
Description: The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html
CVE: CVE-2017-5870
Published: 2017-05-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in ViMbAdmin 3.0.15 allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) transport parameter to domain/add; the (3) name parameter to mailbox/add/did/<domain id>; the (4) goto parameter to alias/add/did/<domain id>; or the (5) captchatext parameter to auth/lost-password.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2017/05/03/8; https://sysdream.com/news/lab/2017-05-03-cve-2017-5870-multiple-xss-vulnerabilities-in-vimbadmin/; http://www.openwall.com/lists/oss-security/2017/05/03/8
CVE: CVE-2017-6813
Published: 2017-05-23
Description: A service provided by Zimbra Collaboration Suite (ZCS) before 8.7.6 fails to require needed privileges before performing a few requested operations.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/98087; https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.6
CVE: CVE-2017-6821
Published: 2017-05-23
Description: Directory traversal vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.7.6 allows attackers to have unspecified impact via unknown vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://www.securityfocus.com/bid/98090; https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.6
CVE: CVE-2017-7288
Published: 2017-05-23
Description: Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (ZCS) before 8.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/98081; https://wiki.zimbra.com/wiki/Zimbra_Releases/8.7.1; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2017-8309
Published: 2017-05-23
Description: Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: http://www.securityfocus.com/bid/98302; https://access.redhat.com/errata/RHSA-2017:2408; https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
CVE: CVE-2017-8379
Published: 2017-05-23
Description: Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) by rapidly generating large keyboard events.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.openwall.com/lists/oss-security/2017/05/03/2; http://www.securityfocus.com/bid/98277; https://access.redhat.com/errata/RHSA-2017:2408
CVE: CVE-2017-8913
Published: 2017-05-23
Description: The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via a crafted XML document in a request to irj/servlet/prt/portal/prtroot/com.sap.visualcomposer.BIKit.default, aka SAP Security Note 2386873.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: https://erpscan.io/advisories/erpscan-17-007-sap-netweaver-java-7-5-xxe-visual-composer-vc70runtime/; https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-february-2017/; https://erpscan.io/advisories/erpscan-17-007-sap-netweaver-java-7-5-xxe-visual-composer-vc70runtime/
CVE: CVE-2017-8914
Published: 2017-05-23
Description: sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation policy, aka SAP Security Note 2407694.
CVSS Score: 8.3 (HIGH)
References: http://www.securityfocus.com/bid/96206; https://erpscan.io/advisories/erpscan-17-009-sap-hana-sinopia-default-user-creation-policy-insecure/; https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-february-2017/
CVE: CVE-2017-8915
Published: 2017-05-23
Description: sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to cause a denial of service (assertion failure and service crash) by pushing a package with a filename containing a $ (dollar sign) or % (percent) character, aka SAP Security Note 2407694.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://www.securityfocus.com/bid/96206; https://erpscan.io/advisories/erpscan-17-008-sap-hana-xs-sinopia-dos/; https://erpscan.io/press-center/blog/sap-cyber-threat-intelligence-report-february-2017/
CVE: CVE-2017-9151
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm_load_ascii function in input-pnm.c:303:12.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9152
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnm_load_raw function in input-pnm.c:346:41.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9153
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm_load_rawpbm function in input-pnm.c:391:13.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://security.gentoo.org/glsa/201708-09; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9154
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the GET_COLOR function in color.c:16:11.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9155
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the input_pnm_reader function in input-pnm.c:243:3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9156
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm_load_ascii function in input-pnm.c:303:12.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9157
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm_load_ascii function in input-pnm.c:306:14.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9158
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm_load_raw function in input-pnm.c:336:11.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9159
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm_load_rawpbm function in input-pnm.c:391:15.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9160
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a stack-based buffer overflow in the pnmscanner_gettoken function in input-pnm.c:458:12.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9161
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c:188:23.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9162
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c:191:2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/