deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-12980
Published: 2017-08-21
Description: DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc/parser/xhtml.php. An attacker can create or edit a wiki that uses RSS or Atom data from an attacker-controlled server to trigger JavaScript execution. The JavaScript can be in an author field, as demonstrated by the dc:creator element.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/splitbrain/dokuwiki/issues/2081; https://github.com/splitbrain/dokuwiki/issues/2081
CVE: CVE-2017-12981
Published: 2017-08-21
Description: NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/gitsucce/nexusphp/blob/master/nexusphp.md; https://github.com/gitsucce/nexusphp/blob/master/nexusphp.md
CVE: CVE-2017-12982
Published: 2017-08-21
Description: The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service (memory allocation failure) in the opj_image_create function in lib/openjp2/image.c, related to the opj_aligned_alloc_n function in opj_malloc.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/08/14/openjpeg-memory-allocation-failure-in-opj_aligned_alloc_n-opj_malloc-c/; https://github.com/uclouvain/openjpeg/commit/baf0c1ad4572daa89caa3b12985bdd93530f0dd7; https://github.com/uclouvain/openjpeg/issues/983
CVE: CVE-2017-12983
Published: 2017-08-21
Description: Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/ImageMagick/ImageMagick/issues/682; https://security.gentoo.org/glsa/201711-07; https://usn.ubuntu.com/3681-1/
CVE: CVE-2017-12984
Published: 2017-08-21
Description: PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/message_update.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.yuag.org/2016/08/17/phpmywind_5-3%E5%AD%98%E5%82%A8%E5%9E%8Bxss/; https://www.exploit-db.com/exploits/42535/; http://www.yuag.org/2016/08/17/phpmywind_5-3%E5%AD%98%E5%82%A8%E5%9E%8Bxss/
CVE: CVE-2017-5187
Published: 2017-08-21
Description: A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter (CWE-275) configuration information and inject OS commands (CWE-78) via forged requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017; https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017
CVE: CVE-2017-7420
Published: 2017-08-21
Description: An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter configuration information and alter the state of the running product (CWE-275).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017; https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017
CVE: CVE-2017-7421
Published: 2017-08-21
Description: Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration web UI) and ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow remote authenticated attackers to bypass protection mechanisms (CWE-693) and other security features.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017; https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017
CVE: CVE-2017-7422
Published: 2017-08-21
Description: Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allow remote authenticated attackers to bypass protection mechanisms (CWE-693) and other security features, if this component is configured. Note esfadmingui is not enabled by default.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017; https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017
CVE: CVE-2017-7423
Published: 2017-08-21
Description: A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to forge requests, if this component is configured. This includes creating new privileged credentials, resulting in privilege elevation (CWE-275). Note esfadmingui is not enabled by default.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017; https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017
CVE: CVE-2017-7424
Published: 2017-08-21
Description: A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote authenticated users to download arbitrary files from a system running the product, if this component is configured. Note esfadmingui is not enabled by default.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017; https://community.microfocus.com/microfocus/mainframe_solutions/enterprise_server/w/knowledge_base/29131/enterprise-server-security-fixes-july-2017
CVE: CVE-2017-6329
Published: 2017-08-21
Description: Symantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading vulnerability. These types of issues occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, the application will generally follow a specific search path to locate the DLL. The exploitation of the vulnerability manifests as a simple file write (or potentially an over-write) which results in a foreign executable running under the context of the application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: http://www.securityfocus.com/bid/100200; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170821_00; http://www.securityfocus.com/bid/100200
CVE: CVE-2017-8037
Published: 2017-08-21
Description: In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, there is an incomplete fix for CVE-2017-8035. If you took steps to remediate CVE-2017-8035 you should also upgrade to fix this CVE. A carefully crafted CAPI request from a Space Developer can allow them to gain access to files on the Cloud Controller VM for that installation, aka an Information Leak / Disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100448; https://www.cloudfoundry.org/cve-2017-8037/; http://www.securityfocus.com/bid/100448
CVE: CVE-2017-13058
Published: 2017-08-22
Description: In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/100468; https://github.com/ImageMagick/ImageMagick/issues/666; https://security.gentoo.org/glsa/201711-07
CVE: CVE-2017-13059
Published: 2017-08-22
Description: In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of service (WriteJNGImage memory consumption) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/100457; https://github.com/ImageMagick/ImageMagick/issues/667; https://security.gentoo.org/glsa/201711-07
CVE: CVE-2017-13060
Published: 2017-08-22
Description: In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/100469; https://github.com/ImageMagick/ImageMagick/issues/644; https://security.gentoo.org/glsa/201711-07
CVE: CVE-2017-13061
Published: 2017-08-22
Description: In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service (ReadPSDImage memory exhaustion) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/100481; https://github.com/ImageMagick/ImageMagick/issues/645; https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE: CVE-2017-13062
Published: 2017-08-22
Description: In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service (WriteMETAImage memory consumption) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/ImageMagick/ImageMagick/issues/669; https://security.gentoo.org/glsa/201711-07; https://usn.ubuntu.com/3681-1/
CVE: CVE-2017-13063
Published: 2017-08-22
Description: GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/54f48ab2d52a; https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/
CVE: CVE-2017-13064
Published: 2017-08-22
Description: GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:311:12.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/54f48ab2d52a; http://www.securityfocus.com/bid/100474; https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html
CVE: CVE-2017-13065
Published: 2017-08-22
Description: GraphicsMagick 1.3.26 has a NULL pointer dereference vulnerability in the function SVGStartElement in coders/svg.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/54f48ab2d52a; https://lists.debian.org/debian-lts-announce/2018/06/msg00009.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/
CVE: CVE-2017-13066
Published: 2017-08-22
Description: GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/100463; https://sourceforge.net/p/graphicsmagick/bugs/430/; http://www.securityfocus.com/bid/100463
CVE: CVE-2017-12843
Published: 2017-08-22
Description: Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted (1) SYNCAPPLY, (2) SYNCGET or (3) SYNCRESTORE command.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/cyrusimap/cyrus-imapd/commit/53c4137bd924b954432c6c59da7572c4c5ffa901; https://github.com/cyrusimap/cyrus-imapd/commit/5edadcfb83bf[PII_REDACTED]0801817f9e6d0ad941; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M32R5QPCCNT57BVH3NPV5WVJFSTDP7Q/
CVE: CVE-2017-7557
Published: 2017-08-22
Description: dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287, CWE-352
References: http://www.securityfocus.com/bid/100508; https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2017-02.html; http://www.securityfocus.com/bid/100508
CVE: CVE-2014-6189
Published: 2017-08-22
Description: Cross-site scripting (XSS) vulnerability in IBM Security Network Protection 3100, 4100, 5100, and 7100 devices with firmware 5.2 before 5.2.0.0-ISS-XGS-All-Models-Hotfix-FP0008 and 5.3 before 5.3.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21697248; http://www.securityfocus.com/bid/73940; http://www-01.ibm.com/support/docview.wss?uid=swg21697248
CVE: CVE-2015-2857
Published: 2017-08-22
Description: Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://packetstormsecurity.com/files/132665/Accellion-FTA-getStatus-verify_oauth_token-Command-Execution.html; http://www.rapid7.com/db/modules/exploit/linux/http/accellion_fta_getstatus_oauth; https://community.rapid7.com/community/metasploit/blog/2015/07/10/r7-2015-08-accellion-file-transfer-appliance-vulnerabilities-cve-2015-2856-cve-2015-2857
CVE: CVE-2015-3617
Published: 2017-08-22
Description: Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/74444; http://www.securitytracker.com/id/1032188; https://fortiguard.com/psirt/FG-IR-15-011
CVE: CVE-2017-12785
Published: 2017-08-22
Description: The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is prone to a buffer overflow in the "show log cli" command. This could be used by a read-only user (monitor role) to gain privileged (root) code execution on the switch via command injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://www.exploit-db.com/exploits/42518/; https://www.exploit-db.com/exploits/42518/
CVE: CVE-2017-12786
Published: 2017-08-22
Description: Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are applied. This could be leveraged by remote, unauthenticated attackers to gain resultant privileged (root) code execution on the switch, because there is a stack-based buffer overflow during unserialization of packet data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://www.exploit-db.com/exploits/42518/; https://www.exploit-db.com/exploits/42518/
CVE: CVE-2017-12787
Published: 2017-08-22
Description: A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, can be inadvertently exposed if an operator attempts to modify ACLs, because of a bug when ACL modifications are applied. This could be leveraged by remote, unauthenticated attackers to gain resultant privileged (root) code execution on the switch, because incoming packet data can contain embedded OS commands, and can also trigger a stack-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://www.exploit-db.com/exploits/42518/; https://www.exploit-db.com/exploits/42518/
CVE: CVE-2015-5258
Published: 2017-08-22
Description: Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177420.html; https://bugzilla.redhat.com/show_bug.cgi?id=1305443; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177420.html
CVE: CVE-2015-6472
Published: 2017-08-22
Description: WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: http://packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html; http://seclists.org/fulldisclosure/2016/Mar/4; http://www.securityfocus.com/bid/84138
CVE: CVE-2015-6473
Published: 2017-08-22
Description: WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-254
References: http://packetstormsecurity.com/files/136077/WAGO-IO-PLC-758-870-750-849-Credential-Management-Privilege-Separation.html; http://seclists.org/fulldisclosure/2016/Mar/4; http://www.securityfocus.com/bid/84138
CVE: CVE-2016-2102
Published: 2017-08-22
Description: HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://bugzilla.redhat.com/show_bug.cgi?id=1311145; https://bugzilla.redhat.com/show_bug.cgi?id=1311145
CVE: CVE-2016-4460
Published: 2017-08-22
Description: Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://markmail.org/message/jy7o23cppny26icu; http://www.securityfocus.com/bid/100449; http://markmail.org/message/jy7o23cppny26icu
CVE: CVE-2016-6310
Published: 2017-08-22
Description: oVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine.log file in RHEV before 4.0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/92345; https://bugzilla.redhat.com/show_bug.cgi?id=1363738; http://www.securityfocus.com/bid/92345
CVE: CVE-2016-6311
Published: 2017-08-22
Description: Get requests in JBoss Enterprise Application Platform (EAP) 7 disclose internal IP addresses to remote attackers.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://access.redhat.com/errata/RHSA-2017:3454; https://access.redhat.com/errata/RHSA-2017:3455; https://access.redhat.com/errata/RHSA-2017:3456
CVE: CVE-2017-5208
Published: 2017-08-22
Description: Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted executable, which triggers a denial of service (application crash) or the possibility of execution of arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://rhn.redhat.com/errata/RHSA-2017-0837.html; http://www.debian.org/security/2017/dsa-3756; http://www.openwall.com/lists/oss-security/2017/01/08/5
CVE: CVE-2017-1422
Published: 2017-08-22
Description: IBM MaaS360 DTM all versions up to 3.81 does not perform proper verification for user rights of certain applications which could disclose sensitive information. IBM X-Force ID: 127412.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22006985; http://www.securityfocus.com/bid/100415; https://exchange.xforce.ibmcloud.com/vulnerabilities/127412
CVE: CVE-2017-13130
Published: 2017-08-23
Description: mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://github.com/itm4n/bmc-patrol-mcmnm-privesc; https://github.com/itm4n/bmc-patrol-mcmnm-privesc
CVE: CVE-2017-13131
Published: 2017-08-23
Description: In ImageMagick 7.0.6-8, a memory leak vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (memory consumption in NewLinkedList in MagickCore/linked-list.c) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/100478; https://github.com/ImageMagick/ImageMagick/issues/676; https://security.gentoo.org/glsa/201711-07
CVE: CVE-2017-13132
Published: 2017-08-23
Description: In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoColor packets" step, which allows attackers to cause a denial of service (assertion failure in WriteBlobStream in MagickCore/blob.c) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: http://www.securityfocus.com/bid/100458; https://github.com/ImageMagick/ImageMagick/issues/674; https://security.gentoo.org/glsa/201711-07
CVE: CVE-2017-13133
Published: 2017-08-23
Description: In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory exhaustion) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: http://www.securityfocus.com/bid/100479; https://github.com/ImageMagick/ImageMagick/issues/679; https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
CVE: CVE-2017-13134
Published: 2017-08-23
Description: In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/1b47e0078e05; http://www.securityfocus.com/bid/100476; https://github.com/ImageMagick/ImageMagick/issues/670
CVE: CVE-2017-13139
Published: 2017-08-23
Description: In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://www.securityfocus.com/bid/100494; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870109; https://github.com/ImageMagick/ImageMagick/commit/d072ed6aff835c174e856ce3a428163c0da9e8f4
CVE: CVE-2017-13140
Published: 2017-08-23
Description: In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service (application hang in LockSemaphoreInfo) via a PNG file with a width equal to MAGICK_WIDTH_LIMIT.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870111; https://github.com/ImageMagick/ImageMagick/issues/596; https://security.gentoo.org/glsa/201711-07