deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-8843
Published: 2017-01-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8844
Published: 2017-01-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8845
Published: 2017-01-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8846
Published: 2017-01-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8847
Published: 2017-01-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8848
Published: 2017-01-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8849
Published: 2017-01-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8850
Published: 2017-01-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8851
Published: 2017-01-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8852
Published: 2017-01-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8853
Published: 2017-01-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8854
Published: 2017-01-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-5024
Published: 2017-01-03
Description: Virtual servers in F5 BIG-IP systems 11.6.1 before 11.6.1 HF1 and 12.1.x before 12.1.2, when configured to parse RADIUS messages via an iRule, allow remote attackers to cause a denial of service (Traffic Management Microkernel restart) via crafted network traffic.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/95228; http://www.securitytracker.com/id/1037510; https://support.f5.com/csp/#/article/K92859602
CVE: CVE-2016-10112
Published: 2017-01-04
Description: Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.6.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML by providing crafted tax-rate table values in CSV format.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95292; https://wordpress.org/plugins/woocommerce/changelog/; http://www.securityfocus.com/bid/95292
CVE: CVE-2016-10114
Published: 2017-01-04
Description: SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via vectors involving categorysearch and smartSearch.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/95293; https://github.com/qemm/joomlasqli; https://vel.joomla.org/resolved/1897-aweb-cart-watching-system-2-6-0
CVE: CVE-2016-10115
Published: 2017-01-04
Description: NETGEAR Arlo base stations with firmware 1.7.5_6178 and earlier, Arlo Q devices with firmware 1.8.0_5551 and earlier, and Arlo Q Plus devices with firmware 1.8.1_6094 and earlier have a default password of 12345678, which makes it easier for remote attackers to obtain access after a factory reset or in a factory configuration.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://blog.newskysecurity.com/2016/09/factory_reset_vuln_in_netgear_arlo/; http://kb.netgear.com/30731/Arlo-WiFi-Default-Password-Security-Vulnerability; http://www.securityfocus.com/bid/95265
CVE: CVE-2016-10116
Published: 2017-01-04
Description: NETGEAR Arlo base stations with firmware 1.7.5_6178 and earlier, Arlo Q devices with firmware 1.8.0_5551 and earlier, and Arlo Q Plus devices with firmware 1.8.1_6094 and earlier use a pattern of adjective, noun, and three-digit number for the customized password, which makes it easier for remote attackers to obtain access via a dictionary attack.
CVSS Score: 8.1 (HIGH)
CWE: CWE-264
References: http://blog.newskysecurity.com/2016/09/brute-force-vulnerability-netgear-arlo/; http://kb.netgear.com/30731/Arlo-WiFi-Default-Password-Security-Vulnerability; http://www.securityfocus.com/bid/95266
CVE: CVE-2014-9911
Published: 2017-01-04
Description: Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode (ICU) before 54.1 for C/C++ allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted uloc_getDisplayName call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://bugs.icu-project.org/trac/changeset/35699; http://bugs.icu-project.org/trac/ticket/1089; http://www.openwall.com/lists/oss-security/2016/11/25/1
CVE: CVE-2014-9912
Published: 2017-01-04
Description: The get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c in PHP before 5.3.29, 5.4.x before 5.4.30, and 5.5.x before 5.5.14 does not properly restrict calls to the ICU uresbund.cpp component, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a locale_get_display_name call with a long first argument.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/11/25/1; http://www.php.net/ChangeLog-5.php; http://www.securityfocus.com/bid/68549
CVE: CVE-2016-6595
Published: 2017-01-04
Description: The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause a denial of service (prevention of cluster joins) via a long sequence of join and quit actions.  NOTE: the vendor disputes this issue, stating that this sequence is not "removing the state that is left by old nodes. At some point the manager obviously stops being able to accept new nodes, since it runs out of memory. Given that both for Docker swarm and for Docker Swarmkit nodes are *required* to provide a secret token (it's actually the only mode of operation), this means that no adversary can simply join nodes and exhaust manager resources. We can't do anything about a manager running out of memory and not being able to add new legitimate nodes to the system. This is merely a resource provisioning issue, and definitely not a CVE worthy vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://www.openwall.com/lists/oss-security/2016/08/04/1; http://www.openwall.com/lists/oss-security/2016/09/02/1; http://www.openwall.com/lists/oss-security/2016/09/02/8
CVE: CVE-2016-8670
Published: 2017-01-04
Description: Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted imagecreatefromstring call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.debian.org/security/2016/dsa-3693; http://www.openwall.com/lists/oss-security/2016/10/15/1; http://www.php.net/ChangeLog-5.php
CVE: CVE-2016-8860
Published: 2017-01-04
Description: Tor before 0.2.8.9 and 0.2.9.x before 0.2.9.4-alpha had internal functions that were entitled to expect that buf_t data had NUL termination, but the implementation of or/buffers.c did not ensure that NUL termination was present, which allows remote attackers to cause a denial of service (client, hidden service, relay, or authority crash) via crafted data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://openwall.com/lists/oss-security/2016/10/19/11; http://www.debian.org/security/2016/dsa-3694; http://www.securityfocus.com/bid/95116
CVE: CVE-2016-9137
Published: 2017-01-04
Description: Use-after-free vulnerability in the CURLFile implementation in ext/curl/curl_file.c in PHP before 5.6.27 and 7.x before 7.0.12 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that is mishandled during __wakeup processing.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=0e6fe3a4c96be2d3e88389a5776f878021b4c59f; http://www.debian.org/security/2016/dsa-3698; http://www.openwall.com/lists/oss-security/2016/11/01/2
CVE: CVE-2016-9138
Published: 2017-01-04
Description: PHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup processing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data, as demonstrated by Exception::__toString with DateInterval::__wakeup.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2016/11/01/2; http://www.securityfocus.com/bid/95268; https://bugs.php.net/bug.php?id=73147
CVE: CVE-2016-9933
Published: 2017-01-04
Description: Stack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics Library (aka libgd) before 2.2.2, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (segmentation violation) via a crafted imagefilltoborder call that triggers use of a negative color value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00133.html; http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00002.html
CVE: CVE-2016-9934
Published: 2017-01-04
Description: ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html
CVE: CVE-2016-9935
Published: 2017-01-04
Description: The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.29 and 7.x before 7.0.14 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) or possibly have unspecified other impact via an empty boolean element in a wddxPacket XML document.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00142.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00054.html
CVE: CVE-2016-9936
Published: 2017-01-04
Description: The unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted serialized data.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6834.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-updates/2017-01/msg00034.html; http://www.openwall.com/lists/oss-security/2016/12/12/2; http://www.php.net/ChangeLog-7.php
CVE: CVE-2016-6894
Published: 2017-01-04
Description: Arista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series devices allow remote attackers to cause a denial of service (device reboot) by sending crafted packets to the control plane.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/95267; https://www.arista.com/en/support/advisories-notices/security-advisories/1752-security-advisory-25; http://www.securityfocus.com/bid/95267
CVE: CVE-2016-7399
Published: 2017-01-04
Description: scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, 2.7.x through 2.7.3, and 3.0.x allow remote attackers to execute arbitrary commands via shell metacharacters in the hostName parameter to appliancews/getLicense.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.sec-1.com/blog/2016/veritas-netbackup-appliance-unauthenticated-remote-command-execution; http://www.securityfocus.com/bid/94384; http://www.securitytracker.com/id/1037555
CVE: CVE-2016-7902
Published: 2017-01-04
Description: Unrestricted file upload vulnerability in the fileUnzip->unzip method in Dotclear before 2.10.3 allows remote authenticated users with permissions to manage media items to execute arbitrary code by uploading a ZIP file containing a file with a crafted extension, as demonstrated by .php.txt or .php%20.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://www.openwall.com/lists/oss-security/2016/10/05/6; http://www.securityfocus.com/bid/93440; https://dotclear.org/blog/post/2016/11/01/Dotclear-2.10.3
CVE: CVE-2016-7903
Published: 2017-01-04
Description: Dotclear before 2.10.3, when the Host header is not part of the web server routing process, allows remote attackers to modify the password reset address link via the HTTP Host header.
CVSS Score: 3.7 (LOW)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2016/10/05/5; http://www.securityfocus.com/bid/93439; https://dotclear.org/blog/post/2016/11/01/Dotclear-2.10.3
CVE: CVE-2016-10009
Published: 2017-01-05
Description: Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.
CVSS Score: 7.3 (HIGH)
CWE: CWE-426
References: http://packetstormsecurity.com/files/140261/OpenSSH-Arbitrary-Library-Loading.html; http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2023/Jul/31
CVE: CVE-2016-10010
Published: 2017-01-05
Description: sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/140262/OpenSSH-Local-Privilege-Escalation.html; http://www.openwall.com/lists/oss-security/2016/12/19/2; http://www.securityfocus.com/bid/94972
CVE: CVE-2016-10011
Published: 2017-01-05
Description: authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-320
References: http://www.openwall.com/lists/oss-security/2016/12/19/2; http://www.securityfocus.com/bid/94977; http://www.securitytracker.com/id/1037490
CVE: CVE-2016-10012
Published: 2017-01-05
Description: The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/12/19/2; http://www.securityfocus.com/bid/94975; http://www.securitytracker.com/id/1037490
CVE: CVE-2016-7168
Published: 2017-01-05
Description: Cross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2016/dsa-3681; http://www.openwall.com/lists/oss-security/2016/09/08/19; http://www.openwall.com/lists/oss-security/2016/09/08/24
CVE: CVE-2016-7169
Published: 2017-01-05
Description: Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 allows remote authenticated users to access arbitrary files via a crafted urlholder parameter.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22
References: http://www.debian.org/security/2016/dsa-3681; http://www.securityfocus.com/bid/92841; https://codex.wordpress.org/Version_4.6.1
CVE: CVE-2016-10030
Published: 2017-01-05
Description: The _prolog_error function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 has a vulnerability in how the slurmd daemon informs users of a Prolog failure on a compute node. That vulnerability could allow a user to assume control of an arbitrary file on the system. Any exploitation of this is dependent on the user being able to cause or anticipate the failure (non-zero return code) of a Prolog script that their job would run on. This issue affects all Slurm versions from 0.6.0 (September 2005) to present. Workarounds to prevent exploitation of this are to either disable your Prolog script, or modify it such that it always returns 0 ("success") and adjust it to set the node as down using scontrol instead of relying on the slurmd to handle that automatically. If you do not have a Prolog set you are unaffected by this issue.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/95299; https://github.com/SchedMD/slurm/commit/92362a92fffe60187df61f99ab11c249d44120ee; https://www.schedmd.com/news.php?id=178
CVE: CVE-2016-9754
Published: 2017-01-05
Description: The ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the Linux kernel before 4.6.1 mishandles certain integer calculations, which allows local users to gain privileges by writing to the /sys/kernel/debug/tracing/buffer_size_kb file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=59643d1535eb220668692a5359de22545af579f6; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.1; http://www.securityfocus.com/bid/95278
CVE: CVE-2015-3441
Published: 2017-01-05
Description: The Parental Control panel in Genexis devices with DRGOS before 1.14.1 allows remote authenticated users to execute arbitrary CLI commands via the (1) start_hour, (2) start_minute, (3) end_hour, (4) end_minute, or (5) hostname parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://www.securityfocus.com/bid/95398; https://www.navixia.com/CVE-2015-3441.txt; http://www.securityfocus.com/bid/95398
CVE: CVE-2016-6890
Published: 2017-01-05
Description: Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/93498; http://www.tripwire.com/state-of-security/security-data-protection/cyber-security/flawed-matrixssl-code-highlights-need-for-better-iot-update-practices/; https://github.com/matrixssl/matrixssl/blob/3-8-6-open/CHANGES.md
CVE: CVE-2016-6891
Published: 2017-01-05
Description: MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 Bit Field primitive in an X.509 certificate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/93498; http://www.tripwire.com/state-of-security/security-data-protection/cyber-security/flawed-matrixssl-code-highlights-need-for-better-iot-update-practices/; https://github.com/matrixssl/matrixssl/blob/3-8-6-open/CHANGES.md
CVE: CVE-2016-6892
Published: 2017-01-05
Description: The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (free of unallocated memory) via a crafted X.509 certificate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/93498; http://www.tripwire.com/state-of-security/security-data-protection/cyber-security/flawed-matrixssl-code-highlights-need-for-better-iot-update-practices/; https://github.com/matrixssl/matrixssl/blob/3-8-6-open/CHANGES.md
CVE: CVE-2016-8006
Published: 2017-01-05
Description: Authentication bypass vulnerability in Enterprise Security Manager (ESM) and License Manager (LM) in Intel Security McAfee Security Information and Event Management (SIEM) 9.6.0 MR3 allows an administrator to make changes to other SIEM users' information including user passwords without supplying the current administrator password a second time via the GUI or GUI terminal commands.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://www.quantumleap.it/mcafee-siem-esm-esmrec-authentication-bypass-vulnerability/; http://www.securityfocus.com/bid/95313; https://kc.mcafee.com/corporate/index?page=content&id=KB87744
CVE: CVE-2017-5179
Published: 2017-01-05
Description: Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95307; http://www.securitytracker.com/id/1037558; https://www.tenable.com/security/tns-2017-01
CVE: CVE-2015-2867
Published: 2017-01-06
Description: A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.securityfocus.com/bid/95120; http://www.talosintelligence.com/reports/TALOS-2016-0028/; http://www.securityfocus.com/bid/95120
CVE: CVE-2015-2868
Published: 2017-01-06
Description: An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS service. An attacker who can connect to the DSS service on the Trane ComfortLink II device can send an overly long REG request that can overflow a fixed size stack buffer, resulting in arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95118; http://www.talosintelligence.com/reports/TALOS-2016-0027/; http://www.securityfocus.com/bid/95118
CVE: CVE-2015-7848
Published: 2017-01-06
Description: An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/77275; http://www.securitytracker.com/id/1033951; http://www.talosintelligence.com/reports/TALOS-2015-0052/