deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-15185
Published: 2017-10-09
Description: plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbis_block_clear function with uninitialized data upon detection of invalid input, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://seclists.org/fulldisclosure/2017/Jul/82; https://anonscm.debian.org/cgit/users/ron/mp3splt.git/commit/?id=18f018cd774cb931116ce06a520dc0c5f9443932; https://lists.debian.org/debian-lts/2017/09/msg00115.html
CVE: CVE-2014-0030
Published: 2017-10-10
Description: The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://liftsecurity.io/advisories/Apache_Roller_XML-RPC_susceptible_to_XXE/; https://mail-archives.apache.org/mod_mbox/roller-dev/201401.mbox/%3CCAF1aazCMzDGB12Ls4t-SOwNA=OdguD010LX3yZGhk2GQHafFXw%40mail.gmail.com%3E; https://www.exploit-db.com/exploits/45341/
CVE: CVE-2014-9474
Published: 2017-10-10
Description: Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpn_set_str.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147737.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147745.html; http://www.mpfr.org/mpfr-3.1.2/patch11
CVE: CVE-2015-7842
Published: 2017-10-10
Description: Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before V100R002C00SPC701, RH1288A V2 with software before V100R002C00SPC502, RH8100 V3 with software before V100R003C00SPC110, CH222 V3 with software before V100R001C00SPC161, CH220 V3 with software before V100R001C00SPC161, and CH121 V3 with software before V100R001C00SPC161 allow remote authenticated operators to change server information by leveraging failure to verify user permissions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-275
References: http://www.securityfocus.com/bid/76836; http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454418.htm; http://www.securityfocus.com/bid/76836
CVE: CVE-2017-13721
Published: 2017-10-10
Description: In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared memory extension enabled can cause aborts of the X server or replace shared memory segments of other X clients in the same session.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-269
References: http://www.debian.org/security/2017/dsa-4000; http://www.openwall.com/lists/oss-security/2017/10/04/10; http://www.securityfocus.com/bid/101238
CVE: CVE-2017-13723
Published: 2017-10-10
Description: In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-4000; http://www.openwall.com/lists/oss-security/2017/10/04/10; http://www.securityfocus.com/bid/101253
CVE: CVE-2017-14603
Published: 2017-10-10
Description: In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cert18 and 13.x before 13.13-cert6, insufficient RTCP packet validation could allow reading stale buffer contents and when combined with the "nat" and "symmetric_rtp" options allow redirecting where Asterisk sends the next RTCP report.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://downloads.asterisk.org/pub/security/AST-2017-008.html; http://www.debian.org/security/2017/dsa-3990; https://issues.asterisk.org/jira/browse/ASTERISK-27274
CVE: CVE-2017-14614
Published: 2017-10-10
Description: Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2017/10/05/1; http://www.openwall.com/lists/oss-security/2017/10/05/1
CVE: CVE-2017-14980
Published: 2017-10-10
Description: Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/144452/Sync-Breeze-Enterprise-10.0.28-Buffer-Overflow.html; http://packetstormsecurity.com/files/144452/Sync-Breeze-Enterprise-10.0.28-Buffer-Overflow.html
CVE: CVE-2017-15038
Published: 2017-10-10
Description: Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-362
References: http://www.openwall.com/lists/oss-security/2017/10/06/1; https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html; https://lists.gnu.org/archive/html/qemu-devel/2017-10/msg00729.html
CVE: CVE-2017-5637
Published: 2017-10-10
Description: Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suffer from this issue, fixed in 3.4.10, 3.5.3, and later.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-400
References: http://www.debian.org/security/2017/dsa-3871; http://www.securityfocus.com/bid/98814; https://access.redhat.com/errata/RHSA-2017:2477
CVE: CVE-2017-14943
Published: 2017-10-10
Description: Trapeze TransitMaster is vulnerable to information disclosure (emails / hashed passwords) via a modified userID field in JSON data to ManageSubscriber.aspx/GetSubscriber. NOTE: this software is independently deployed at multiple municipal transit systems; it is not found exclusively on the "webwatch.(REDACTED).com" server mentioned in the reference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/TransitMaster%20%3E%20Information%20Disclosure%20-%20CVE-2017-14943; https://raw.githubusercontent.com/badbiddy/Vulnerability-Disclosure/master/TransitMaster%20%3E%20Information%20Disclosure%20-%20CVE-2017-14943
CVE: CVE-2014-9092
Published: 2017-10-10
Description: libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service (crash) via a crafted JPEG file, related to the Exif marker.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147315.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147336.html; http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150957.html
CVE: CVE-2015-2856
Published: 2017-10-10
Description: Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a .. (dot dot) in the statecode cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.rapid7.com/db/modules/auxiliary/scanner/http/accellion_fta_statecode_file_read; https://www.rapid7.com/db/modules/auxiliary/scanner/http/accellion_fta_statecode_file_read
CVE: CVE-2017-12860
Published: 2017-10-10
Description: The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.In addition to the password, each projector has a hardcoded "backdoor" code (2270), which authenticates to all devices.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://rhinosecuritylabs.com/research/epson-easymp-remote-projection-vulnerabilities/; https://rhinosecuritylabs.com/research/epson-easymp-remote-projection-vulnerabilities/
CVE: CVE-2017-12861
Published: 2017-10-10
Description: The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are authenticated using a unique 4-digit code, displayed on-screen - ensuring only those who can view it are streaming.All Epson projectors supporting the "EasyMP" software are vulnerable to a brute-force vulnerability, allowing any attacker on the network to remotely control and stream to the vulnerable device
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: https://rhinosecuritylabs.com/research/epson-easymp-remote-projection-vulnerabilities/; https://rhinosecuritylabs.com/research/epson-easymp-remote-projection-vulnerabilities/
CVE: CVE-2017-13706
Published: 2017-10-10
Description: XML external entity (XXE) vulnerability in the import package functionality of the deployment module in Lansweeper before 6.0.100.67 allows remote authenticated users to obtain sensitive information, cause a denial of service, conduct server-side request forgery (SSRF) attacks, conduct internal port scans, or have unspecified other impact via an XML request, aka bug #572705.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-611
References: http://packetstormsecurity.com/files/144527/Lansweeper-6.0.100.29-XXE-Injection.html; http://seclists.org/fulldisclosure/2017/Oct/14; https://www.lansweeper.com/changelog.aspx
CVE: CVE-2008-7315
Published: 2017-10-10
Description: UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.openwall.com/lists/oss-security/2015/10/08/6; http://www.securityfocus.com/bid/77031/info; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496448
CVE: CVE-2015-2988
Published: 2017-10-10
Description: Rakuten card App for iOS 5.2.0 through 5.2.4 does not verify SSL certificates which might allow remote attackers to execute man-in-the-middle attacks.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: http://jvn.jp/en/jp/JVN81207766/index.html; http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000120.html; http://www.securityfocus.com/bid/76531
CVE: CVE-2015-5639
Published: 2017-10-10
Description: niconico App for iOS before 6.38 does not verify SSL certificates which could allow remote attackers to execute man-in-the-middle attacks.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: http://blog.nicovideo.jp/niconews/ni055746.html; http://jvn.jp/en/jp/JVN20355129/index.html; http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000137.html
CVE: CVE-2015-5675
Published: 2017-10-10
Description: The sys_amd64 IRET Handler in the kernel in FreeBSD 9.3 and 10.1 allows local users to gain privileges or cause a denial of service (kernel panic).
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/133335/FreeBSD-Security-Advisory-IRET-Handler-Privilege-Escalation.html; http://www.securityfocus.com/archive/1/536321/100/0/threaded; http://www.securityfocus.com/bid/76485
CVE: CVE-2015-6521
Published: 2017-10-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in ATutor LMS version 2.2.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/08/19/1; https://github.com/atutor/ATutor/issues/103; http://www.openwall.com/lists/oss-security/2015/08/19/1
CVE: CVE-2015-6918
Published: 2017-10-10
Description: salt before 2015.5.5 leaks git usernames and passwords to the log.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=1257154; https://github.com/saltstack/salt/commit/28aa9b105804ff433d8f663b2f9b804f2b75495a; https://bugzilla.redhat.com/show_bug.cgi?id=1257154
CVE: CVE-2015-7384
Published: 2017-10-10
Description: Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/101260; https://bugzilla.redhat.com/show_bug.cgi?id=1268791; https://github.com/nodejs/node/issues/3138
CVE: CVE-2015-7503
Published: 2017-10-10
Description: Zend Framework before 2.4.9, zend-framework/zend-crypt 2.4.x before 2.4.9, and 2.5.x before 2.5.2 allows remote attackers to recover the RSA private key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-320
References: https://bugzilla.redhat.com/show_bug.cgi?id=1283137; https://framework.zend.com/security/advisory/ZF2015-10; https://bugzilla.redhat.com/show_bug.cgi?id=1283137
CVE: CVE-2015-7778
Published: 2017-10-10
Description: Gurunavi App for iOS before 6.0.0 does not verify SSL certificates which could allow remote attackers to perform man-in-the-middle attacks.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://jvn.jp/en/jp/JVN29141986/index.html; http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000181.html; http://www.securityfocus.com/bid/77637
CVE: CVE-2015-8239
Published: 2017-10-10
Description: The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: http://www.openwall.com/lists/oss-security/2015/11/18/22; https://bugzilla.redhat.com/show_bug.cgi?id=1283635; https://www.sudo.ws/repos/sudo/rev/0cd3cc8fa195
CVE: CVE-2017-12623
Published: 2017-10-10
Description: An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML External Entity (XXE) attack. The fix to properly handle XML External Entities was applied on the Apache NiFi 1.4.0 release. Users running a prior 1.x release should upgrade to the appropriate release.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://nifi.apache.org/security.html#CVE-2017-12623; https://nifi.apache.org/security.html#CVE-2017-12623
CVE: CVE-2017-15216
Published: 2017-10-10
Description: MISP before 2.4.81 has a potential reflected XSS in a quickDelete action that is used to delete a sighting, related to app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/ca6f4a783a6ba65532dc8767446bda44773ec627; https://www.misp.software/Changelog.txt; https://github.com/MISP/MISP/commit/ca6f4a783a6ba65532dc8767446bda44773ec627
CVE: CVE-2017-13675
Published: 2017-10-10
Description: A denial of service (DoS) attack in Symantec Endpoint Encryption before SEE 11.1.3HF2 allows remote attackers to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network.
CVSS Score: 4.2 (MEDIUM)
References: http://www.securityfocus.com/bid/101089; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171009_00; http://www.securityfocus.com/bid/101089
CVE: CVE-2017-13679
Published: 2017-10-10
Description: A denial of service (DoS) attack in Symantec Encryption Desktop before SED 10.4.1 MP2HF1 allows remote attackers to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network.
CVSS Score: 4.2 (MEDIUM)
References: http://www.securityfocus.com/bid/101090; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171009_00; http://www.securityfocus.com/bid/101090
CVE: CVE-2016-10513
Published: 2017-10-10
Description: Cross Site Scripting (XSS) exists in Piwigo before 2.8.3 via a crafted search expression to include/functions_search.inc.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://piwigo.org/releases/2.8.3; https://github.com/Piwigo/Piwigo/commit/9a93d1f44b06605af84520509e7a0e8b64ab0c05; https://github.com/Piwigo/Piwigo/issues/548
CVE: CVE-2016-10514
Published: 2017-10-10
Description: url_check_format in include/functions.inc.php in Piwigo before 2.8.3 allows remote attackers to bypass intended access restrictions via a URL that contains a " character, or a URL beginning with a substring other than the http:// or https:// substring.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://piwigo.org/releases/2.8.3; https://github.com/Piwigo/Piwigo/commit/b3157cbfd859c914911b114d4edbba4654758b57; https://github.com/Piwigo/Piwigo/issues/547
CVE: CVE-2017-11046
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when an audio driver ioctl handler is called, a kernel out-of-bounds write can potentially occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-11048
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a display driver function, a Use After Free condition can occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-11050
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when the pktlogconf tool gives a pktlog buffer of size less than the minimal possible source data size in the host driver, a buffer overflow can potentially occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-11051
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, information disclosure is possible in function __wlan_hdd_cfg80211_testmode since buffer hb_params is not initialized to zero.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-11052
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_NDP cfg80211 vendor command a buffer over-read can occur.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-11053
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when qos map set IE of length less than 16 is received in association response or in qos map configure action frame, a buffer overflow can potentially occur in ConvertQosMapsetFrame().
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101117; https://source.android.com/security/bulletin/2017-10-01; http://www.securityfocus.com/bid/101117
CVE: CVE-2017-11054
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially crafted cfg80211 vendor command, a buffer over-read can occur.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-11055
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially crafted QCA_NL80211_VENDOR_SUBCMD_SET_WIFI_CONFIGURATION cfg80211 vendor command, a buffer over-read can occur.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-11056
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while doing sha and cipher operations, a userspace buffer is directly accessed in kernel space potentially leading to a page fault.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-11057
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in compatibility mode, flash_data from 64-bit userspace may cause disclosure of kernel memory or a fault due to using a userspace-provided address.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-11059
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, setting the HMAC key by different threads during SHA operations may potentially lead to a buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-11060
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overread is observed during processing of ACA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_PASSPOINT_LIST and QCA_NL80211_VENDOR_SUBCMD_EXTSCAN_PNO_SET_LIST cfg80211 vendor commands in __wlan_hdd_cfg80211_set_passpoint_list and hdd_extscan_passpoint_fill_network_list function respectively. Android ID: A-36817548. References: QC-CR#2058447, QC-CR#2054770.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-11061
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing cfg80211 vendor sub command QCA_NL80211_VENDOR_SUBCMD_ROAM, a buffer over-read can occur.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-11062
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, currently attributes are not validated in __wlan_hdd_cfg80211_do_acs which can potentially lead to a buffer overread.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160
CVE: CVE-2017-11063
Published: 2017-10-10
Description: In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, as a result of a race condition between two userspace processes that interact with the driver concurrently, a null pointer dereference can potentially occur.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/101160; https://source.android.com/security/bulletin/pixel/2017-10-01; http://www.securityfocus.com/bid/101160