deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-9163
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in pxl-outline.c:106:54.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9164
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:16:11.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9165
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:17:11.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9166
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET_COLOR function in color.c:18:11.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9167
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:337:25.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9168
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:353:25.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9169
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:355:25.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9170
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:370:25.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9171
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-bmp.c:492:24.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9172
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:496:29.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9173
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:497:29.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9174
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the GET_COLOR function in color.c:21:23.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9175
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:353:25.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9176
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:370:25.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9177
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:390:12.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9178
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c:421:11.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9179
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:425:14.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9180
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage function in input-bmp.c:440:14.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/98679; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; http://www.securityfocus.com/bid/98679
CVE: CVE-2017-9181
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage function in input-bmp.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9182
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read), related to the GET_COLOR function in color.c:16:11.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/98678; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; http://www.securityfocus.com/bid/98678
CVE: CVE-2017-9183
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:309:7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-704
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9184
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:314:7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9185
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9186
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:326:17.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9187
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:486:7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9188
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a "left shift ... cannot be represented in type int" issue in input-bmp.c:516:63.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9189
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and application crash), related to the GET_COLOR function in color.c:16:11.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9190
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid free), related to the free_bitmap function in bitmap.c:24:5.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9191
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the rle_fread function in input-tga.c:252:15.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9192
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-tga.c:528:7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9193
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:538:33.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9194
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:559:29.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9195
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:620:27.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9196
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a "negative-size-param" issue in the ReadImage function in input-tga.c:528:7.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9197
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:498:55.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9198
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:508:18.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9199
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:192:19.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9200
Published: 2017-05-23
Description: libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:528:63.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/; https://blogs.gentoo.org/ago/2017/05/20/autotrace-multiple-vulnerabilities-the-autotrace-nightmare/
CVE: CVE-2017-9201
Published: 2017-05-23
Description: imagew-cmd.c:850:46 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted image, related to imagew-api.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/; https://github.com/jsummers/imageworsener/commit/dc49c807926b96e503bd7c0dec35119eecd6c6fe; https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/
CVE: CVE-2017-9202
Published: 2017-05-23
Description: imagew-cmd.c:854:45 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted image, related to imagew-api.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/; https://github.com/jsummers/imageworsener/commit/dc49c807926b96e503bd7c0dec35119eecd6c6fe; https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/
CVE: CVE-2017-9203
Published: 2017-05-23
Description: imagew-main.c:960:12 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (buffer underflow) via a crafted image, related to imagew-bmp.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/; https://github.com/jsummers/imageworsener/commit/a4f247707f08e322f0b41e82c3e06e224240a654; https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/
CVE: CVE-2017-9204
Published: 2017-05-23
Description: The iw_get_ui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted image, related to imagew-jpeg.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/; https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d; https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/
CVE: CVE-2017-9205
Published: 2017-05-23
Description: The iw_get_ui16be function in imagew-util.c:422:24 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted image, related to imagew-jpeg.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/; https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d; https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/
CVE: CVE-2017-9206
Published: 2017-05-23
Description: The iw_get_ui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image, related to imagew-jpeg.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/; https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d; https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/
CVE: CVE-2017-9207
Published: 2017-05-23
Description: The iw_get_ui16be function in imagew-util.c:422:24 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image, related to imagew-jpeg.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/; https://github.com/jsummers/imageworsener/commit/b45cb1b665a14b0175b9cb1502ef7168e1fe0d5d; https://blogs.gentoo.org/ago/2017/05/20/imageworsener-multiple-vulnerabilities/
CVE: CVE-2017-9208
Published: 2017-05-23
Description: libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to releaseResolved functions, aka qpdf-infiniteloop1.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/; https://usn.ubuntu.com/3638-1/; https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/
CVE: CVE-2017-9209
Published: 2017-05-23
Description: libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to QPDFObjectHandle::parseInternal, aka qpdf-infiniteloop2.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/; https://usn.ubuntu.com/3638-1/; https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/
CVE: CVE-2017-9210
Published: 2017-05-23
Description: libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to unparse functions, aka qpdf-infiniteloop3.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/; https://usn.ubuntu.com/3638-1/; https://blogs.gentoo.org/ago/2017/05/21/qpdf-three-infinite-loop-in-libqpdf/
CVE: CVE-2017-5965
Published: 2017-05-23
Description: The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive in which a .asp file has a ..\ in its pathname, visiting sitecore/shell/applications/install/dialogs/Upload%20Package/UploadPackage2.aspx to upload this archive and extract its contents, and visiting a URI under sitecore/ to execute the .asp file.
CVSS Score: 6.7 (MEDIUM)
References: http://research.aurainfosec.io/disclosures/2017-05-18-sitecore/; http://research.aurainfosec.io/disclosures/2017-05-18-sitecore/
CVE: CVE-2017-5966
Published: 2017-05-23
Description: Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to read arbitrary files via an absolute path traversal attack on sitecore/shell/download.aspx with the file parameter.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: http://research.aurainfosec.io/disclosures/2017-05-18-sitecore/; http://research.aurainfosec.io/disclosures/2017-05-18-sitecore/
CVE: CVE-2017-9211
Published: 2017-05-23
Description: The crypto_skcipher_init_tfm function in crypto/skcipher.c in the Linux kernel through 4.11.2 relies on a setkey function that lacks a key-size check, which allows local users to cause a denial of service (NULL pointer dereference) via a crafted application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9933e113c2e87a9f46a40fde8dafbf801dca1ab9; https://github.com/torvalds/linux/commit/9933e113c2e87a9f46a40fde8dafbf801dca1ab9; https://patchwork.kernel.org/patch/9718933/
CVE: CVE-2017-9212
Published: 2017-05-23
Description: The Bluetooth stack on the BMW 330i 2011 allows a remote crash of the CD/Multimedia software via %x or %c format string specifiers in a device name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: https://twitter.com/__Obzy__/status/[PII_REDACTED]16254720; https://twitter.com/__Obzy__/status/[PII_REDACTED]16254720