deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-9593
Published: 2017-06-16
Description: The "Oculina Mobile Banking" by Oculina Bank app 3.0.0 -- aka oculina-mobile-banking/id867025690 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5; https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE: CVE-2017-9594
Published: 2017-06-16
Description: The "SVB Mobile" by Sauk Valley Bank Mobile Banking app 3.0.0 -- aka svb-mobile/id796429885 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5; https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE: CVE-2017-9595
Published: 2017-06-16
Description: The "First State Bank of Bigfork Mobile Banking" by First State Bank of Bigfork app 4.0.3 -- aka first-state-bank-of-bigfork-mobile-banking/id[PII_REDACTED] for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5; https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE: CVE-2017-9596
Published: 2017-06-16
Description: The "CFB Mobile Banking" by Citizens First Bank Wisconsin app 3.0.1 -- aka cfb-mobile-banking/id[PII_REDACTED] for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5; https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE: CVE-2017-9597
Published: 2017-06-16
Description: The "Blue Ridge Bank and Trust Co. Mobile Banking" by Blue Ridge Bank and Trust Co. app 3.0.1 -- aka blue-ridge-bank-and-trust-co-mobile-banking/id699679197 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5; https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE: CVE-2017-9598
Published: 2017-06-16
Description: The "Morton Credit Union Mobile Banking" by Morton Credit Union app 3.0.1 -- aka morton-credit-union-mobile-banking/id[PII_REDACTED] for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5; https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE: CVE-2017-9599
Published: 2017-06-16
Description: The "Fountain Trust Mobile Banking" by FOUNTAIN TRUST COMPANY app before 3.2.0 -- aka fountain-trust-mobile-banking/id891343006 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://itunes.apple.com/us/app/fountain-trust-mobile-banking/id891343006; https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5; https://itunes.apple.com/us/app/fountain-trust-mobile-banking/id891343006
CVE: CVE-2017-9600
Published: 2017-06-16
Description: The "Peoples Bank Tulsa" by Peoples Bank - OK app 3.0.2 -- aka peoples-bank-tulsa/id[PII_REDACTED] for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5; https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE: CVE-2017-9601
Published: 2017-06-16
Description: The "FNB Kemp Mobile Banking" by First National Bank of Kemp app 3.0.2 -- aka fnb-kemp-mobile-banking/id571448725 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5; https://medium.com/%40chronic_9612/advisory-44-credit-union-apps-for-ios-may-allow-login-credential-exposure-4d2f380b85c5
CVE: CVE-2017-7884
Published: 2017-06-16
Description: In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unprivileged, user to run arbitrary code with elevated privileges by replacing the service executable apcupsd.exe with a malicious executable that will run with SYSTEM privileges at startup. This occurs because of "RW NT AUTHORITY\Authenticated Users" permissions for %SYSTEMDRIVE%\apcupsd\bin\apcupsd.exe.
CVSS Score: 8.4 (HIGH)
CWE: CWE-427
References: http://seclists.org/fulldisclosure/2017/Jun/20; http://www.securityfocus.com/bid/99092; http://www.securitytracker.com/id/1038707
CVE: CVE-2017-9602
Published: 2017-06-16
Description: KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-management component. An unauthenticated user can access the file upload and deletion functionality. Through this functionality, a user can upload an ASPX script to Uploads/Documents/ to run any arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://www.exploit-db.com/exploits/42184/; https://www.exploit-db.com/exploits/42184/
CVE: CVE-2017-9728
Published: 2017-06-16
Description: In uClibc 0.9.33.2, there is an out-of-bounds read in the get_subexp function in misc/regex/regexec.c when processing a crafted regular expression.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://openwall.com/lists/oss-security/2017/06/16/4; http://openwall.com/lists/oss-security/2017/06/16/4
CVE: CVE-2017-9729
Published: 2017-06-16
Description: In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled recursion) in the check_dst_limits_calc_pos_1 function in misc/regex/regexec.c when processing a crafted regular expression.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: http://openwall.com/lists/oss-security/2017/06/16/4; http://openwall.com/lists/oss-security/2017/06/16/4
CVE: CVE-2017-9731
Published: 2017-06-16
Description: In meta/classes/package_ipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://git.yoctoproject.org/cgit/cgit.cgi/poky/patch/?id=f01b909a266498853e6b3f10e6b39f2d95148129; http://git.yoctoproject.org/cgit/cgit.cgi/poky/patch/?id=f01b909a266498853e6b3f10e6b39f2d95148129
CVE: CVE-2017-6899
Published: 2017-06-16
Description: The msm_bus_dbg_update_request_write function in drivers/platform/msm/msm_bus/msm_bus_dbg.c in android_kernel_huawei_msm8916 through 2017-06-16 in LineageOS, and possibly other kernels for MSM devices, allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted /sys/kernel/debug/msm-bus-dbg/client-data/update-request write request.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-476
References: http://blog.secret-team.cn/index.php/archives/5/; http://www.securityfocus.com/bid/99107; http://blog.secret-team.cn/index.php/archives/5/
CVE: CVE-2017-7507
Published: 2017-06-16
Description: GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.debian.org/security/2017/dsa-3884; http://www.securityfocus.com/bid/99102; https://access.redhat.com/errata/RHSA-2017:2292
CVE: CVE-2015-9056
Published: 2017-06-16
Description: Kibana versions prior to 4.1.3 and 4.2.1 are vulnerable to a XSS attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.elastic.co/community/security; https://www.elastic.co/community/security
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-16
Description: Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an attacker to generate superfluous reports whenever an authenticated Kibana user navigates to a specially-crafted page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/99253; https://www.elastic.co/community/security; http://www.securityfocus.com/bid/99253
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-16
Description: Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield.
CVSS Score: 7.5 (HIGH)
CWE: CWE-285
References: http://www.securityfocus.com/bid/99178; https://www.elastic.co/community/security; http://www.securityfocus.com/bid/99178
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-16
Description: Kibana before 4.5.4 and 4.1.11 are vulnerable to an XSS attack that would allow an attacker to execute arbitrary JavaScript in users' browsers.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99179; https://www.elastic.co/community/security; http://www.securityfocus.com/bid/99179
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-16
Description: Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/99126; https://www.elastic.co/community/security; http://www.securityfocus.com/bid/99126
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-16
Description: Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-88
References: https://www.elastic.co/community/security; https://www.elastic.co/community/security
CVE: CVE-2016-10362
Published: 2017-06-16
Description: Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532, CWE-200
References: http://www.securityfocus.com/bid/99154; https://www.elastic.co/community/security; http://www.securityfocus.com/bid/99154
CVE: CVE-2016-10363
Published: 2017-06-16
Description: Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of service attack on the Logstash instance. The errors resulting from these crafted inputs are not handled by the codec and can cause the Logstash process to exit.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248, CWE-404
References: https://www.elastic.co/community/security; https://www.elastic.co/community/security
CVE: CVE-2016-10364
Published: 2017-06-16
Description: With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those services regardless of their own permissions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306, CWE-264
References: https://www.elastic.co/community/security; https://www.elastic.co/community/security
CVE: CVE-2016-10365
Published: 2017-06-16
Description: Kibana versions before 4.6.3 and 5.0.1 have an open redirect vulnerability that would enable an attacker to craft a link in the Kibana domain that redirects to an arbitrary website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://www.elastic.co/community/security; https://www.elastic.co/community/security
CVE: CVE-2016-10366
Published: 2017-06-16
Description: Kibana versions after and including 4.3 and before 4.6.2 are vulnerable to a cross-site scripting (XSS) attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.elastic.co/community/security; https://www.elastic.co/community/security
CVE: CVE-2017-8449
Published: 2017-06-16
Description: X-Pack Security 5.2.x would allow access to more fields than the user should have seen if the field level security rules used a mix of grant and exclude rules when merging multiple rules with field level security rules for the same index.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-732, CWE-200
References: https://www.elastic.co/community/security; https://www.elastic.co/community/security
CVE: CVE-2017-8450
Published: 2017-06-16
Description: X-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi-get requests so users without access to a document and/or field may have been able to access this information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732, CWE-200
References: https://www.elastic.co/community/security; https://www.elastic.co/community/security
CVE: CVE-2017-8451
Published: 2017-06-16
Description: With X-Pack installed, Kibana versions before 5.3.1 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://www.elastic.co/community/security; https://www.elastic.co/community/security
CVE: CVE-2017-8452
Published: 2017-06-16
Description: Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process crashes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-775, CWE-769
References: https://www.elastic.co/community/security; https://www.elastic.co/community/security
CVE: CVE-2017-9735
Published: 2017-06-16
Description: Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords.
CVSS Score: 7.5 (HIGH)
CWE: CWE-203
References: http://www.securityfocus.com/bid/99104; https://bugs.debian.org/864631; https://github.com/eclipse/jetty.project/issues/1556
CVE: CVE-2015-3254
Published: 2017-06-16
Description: The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service (infinite recursion) via vectors involving the skip function.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://grokbase.com/t/thrift/user/15c2tss3td/notice-apache-thrift-security-vulnerability-cve-2015-1774; http://www.securityfocus.com/bid/99112; https://access.redhat.com/errata/RHSA-2017:2477
CVE: CVE-2017-9231
Published: 2017-06-16
Description: XML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3 allows attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/98995; http://www.securitytracker.com/id/1038704; https://support.citrix.com/article/CTX220138
CVE: CVE-2017-9373
Published: 2017-06-16
Description: Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the AHCI device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d68f0f778e7f4fbd[PII_REDACTED]67f269e40f0b04; http://www.debian.org/security/2017/dsa-3920; http://www.openwall.com/lists/oss-security/2017/06/05/1
CVE: CVE-2017-9374
Published: 2017-06-16
Description: Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d710e1e7bd3d5bfc26b631f02ae87901ebe646b0; http://www.debian.org/security/2017/dsa-3920; http://www.openwall.com/lists/oss-security/2017/06/06/3
CVE: CVE-2017-9375
Published: 2017-06-16
Description: QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service (infinite recursive call) via vectors involving control transfer descriptors sequencing.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=96d87bdda3919bb16f754b3d3fd1227e1f38f13c; http://www.debian.org/security/2017/dsa-3991; http://www.openwall.com/lists/oss-security/2017/06/05/2
CVE: CVE-2017-9503
Published: 2017-06-16
Description: QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2017/06/08/1; http://www.securityfocus.com/bid/99010; https://bugzilla.redhat.com/show_bug.cgi?id=1459477
CVE: CVE-2017-9736
Published: 2017-06-17
Description: SPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the host field, allowing a remote attacker to cause remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.debian.org/security/2017/dsa-3890; https://contrib.spip.net/CRITICAL-security-update-SPIP-3-1-6-and-SPIP-3-2-Beta; https://core.spip.net/projects/spip/repository/revisions/23593
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-17
Description: sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i.e., uninitialized memory contents may be disclosed when a read and an ioctl happen at the same time.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ba3021b2c79b2fa9114f92790a99deb27a65b728; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d11662f4f798b50d8c8743f433842c3e40fe3378; http://www.debian.org/security/2017/dsa-3981
CVE: CVE-2017-9668
Published: 2017-06-18
Description: In admin\addgroup.php in CMS Made Simple 2.1.6, when adding a user group, there is no XSS filtering, resulting in storage-type XSS generation, via the description parameter in an addgroup action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/XiaoZhis/ProjectSend/issues/2; https://github.com/XiaoZhis/ProjectSend/issues/2
CVE: CVE-2017-9741
Published: 2017-06-18
Description: install/make-config.php in ProjectSend r754 allows remote attackers to execute arbitrary PHP code via the dbprefix parameter, related to replacing TABLES_PREFIX in the configuration file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/XiaoZhis/ProjectSend/issues/1; https://github.com/XiaoZhis/ProjectSend/issues/1
CVE: CVE-2017-9742
Published: 2017-06-19
Description: The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99105; https://security.gentoo.org/glsa/201709-02; https://sourceware.org/bugzilla/show_bug.cgi?id=21576
CVE: CVE-2017-9743
Published: 2017-06-19
Description: The print_insn_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99106; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=21577
CVE: CVE-2017-9744
Published: 2017-06-19
Description: The sh_elf_set_mach_from_flags function in bfd/elf32-sh.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99108; https://sourceware.org/bugzilla/show_bug.cgi?id=21578; http://www.securityfocus.com/bid/99108
CVE: CVE-2017-9745
Published: 2017-06-19
Description: The _bfd_vms_slurp_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99109; https://sourceware.org/bugzilla/show_bug.cgi?id=21579; http://www.securityfocus.com/bid/99109
CVE: CVE-2017-9746
Published: 2017-06-19
Description: The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of rae insns printing for this file during "objdump -D" execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99117; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=21580
CVE: CVE-2017-9747
Published: 2017-06-19
Description: The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99114; https://sourceware.org/bugzilla/show_bug.cgi?id=21581; https://www.exploit-db.com/exploits/42200/