deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-20485
Published: 2018-12-26
Description: Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/152793/Zoho-ManageEngine-ADSelfService-Plus-5.7-Cross-Site-Scripting.html; https://www.manageengine.com/products/self-service-password/release-notes.html; http://packetstormsecurity.com/files/152793/Zoho-ManageEngine-ADSelfService-Plus-5.7-Cross-Site-Scripting.html
CVE: CVE-2018-20486
Published: 2018-12-26
Description: MetInfo 6.x through 6.1.3 has XSS via the /admin/login/login_check.php url_array[] parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://forum.metinfo.cn/thread-1300-1-1.html; https://github.com/Ppsoft1990/Metinfo6.1.3/issues/2; https://forum.metinfo.cn/thread-1300-1-1.html
CVE: CVE-2018-11741
Published: 2018-12-26
Description: NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure via Home.htm?sessionId=#####&GOTO(8) URIs.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://hyp3rlinx.altervista.org/advisories/NEC-UNIVERGE-WEBPRO-v6.00-PREDICTABLE-SESSIONID-CLEARTEXT-PASSWORDS.txt; http://packetstormsecurity.com/files/150610/NEC-Univerge-Sv9100-WebPro-6.00.00-Predictable-Session-ID-Cleartext-Passwords.html; http://seclists.org/fulldisclosure/2018/Dec/1
CVE: CVE-2018-11742
Published: 2018-12-26
Description: NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: http://hyp3rlinx.altervista.org/advisories/NEC-UNIVERGE-WEBPRO-v6.00-PREDICTABLE-SESSIONID-CLEARTEXT-PASSWORDS.txt; http://packetstormsecurity.com/files/150610/NEC-Univerge-Sv9100-WebPro-6.00.00-Predictable-Session-ID-Cleartext-Passwords.html; http://seclists.org/fulldisclosure/2018/Dec/1
CVE: CVE-2018-15518
Published: 2018-12-26
Description: QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00066.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00057.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00071.html
CVE: CVE-2018-17987
Published: 2018-12-26
Description: The determineWinner function of a smart contract implementation for HashHeroes Tiles, an Ethereum game, uses a certain blockhash value in an attempt to generate a random number for the case where NUM_TILES equals the number of people who purchased a tile, which allows an attacker to control the awarding of the prize by being the last person to purchase a tile.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: https://github.com/TEAM-C4B/CVE-LIST/tree/master/CVE-2018-17987; https://github.com/TEAM-C4B/CVE-LIST/tree/master/CVE-2018-17987
CVE: CVE-2018-18535
Published: 2018-12-26
Description: The Asusgio low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes functionality to read and write Machine Specific Registers (MSRs). This could be leveraged to execute arbitrary ring-0 code.
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/150893/ASUS-Driver-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2018/Dec/34; http://www.securityfocus.com/bid/106250
CVE: CVE-2018-18536
Published: 2018-12-26
Description: The GLCKIo and Asusgio low-level drivers in ASUS Aura Sync v1.07.22 and earlier expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/150893/ASUS-Driver-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2018/Dec/34; http://www.securityfocus.com/bid/106250
CVE: CVE-2018-18537
Published: 2018-12-26
Description: The GLCKIo low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes a path to write an arbitrary DWORD to an arbitrary address.
CVSS Score: 5.5 (MEDIUM)
References: http://packetstormsecurity.com/files/150893/ASUS-Driver-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2018/Dec/34; http://www.securityfocus.com/bid/106250
CVE: CVE-2018-19182
Published: 2018-12-26
Description: Engelsystem before commit hash 2e28336 allows CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/MyIgel/engelsystem/commit/2e[PII_REDACTED]3e2c63c8015fb476bc01c822f50a; https://github.com/engelsystem/engelsystem/issues/494; https://github.com/MyIgel/engelsystem/commit/2e[PII_REDACTED]3e2c63c8015fb476bc01c822f50a
CVE: CVE-2018-19615
Published: 2018-12-26
Description: Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arbitrary code into a targeted userâs web browser to gain access to the affected device.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/150600/Rockwell-Automation-Allen-Bradley-PowerMonitor-1000-XSS.html; http://www.securityfocus.com/bid/106333; http://www.securityfocus.com/bid/108538
CVE: CVE-2018-19616
Published: 2018-12-26
Description: An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/remove administrators because access control is implemented on the client side via a disabled attribute for a BUTTON element.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: http://packetstormsecurity.com/files/150619/Rockwell-Automation-Allen-Bradley-PowerMonitor-1000-Authentication-Bypass.html; http://www.securityfocus.com/bid/106333; http://www.securityfocus.com/bid/108538
CVE: CVE-2018-19799
Published: 2018-12-26
Description: Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/150623/Dolibarr-ERP-CRM-8.0.3-Cross-Site-Scripting.html; https://pentest.com.tr/exploits/Dolibarr-ERP-CRM-8-0-3-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/45945/
CVE: CVE-2018-19869
Published: 2018-12-26
Description: An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00057.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00071.html
CVE: CVE-2018-19870
Published: 2018-12-26
Description: An issue was discovered in Qt before 5.11.3. A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00080.html; https://access.redhat.com/errata/RHSA-2019:2135; https://access.redhat.com/errata/RHSA-2019:3390
CVE: CVE-2018-19871
Published: 2018-12-26
Description: An issue was discovered in Qt before 5.11.3. There is QTgaFile Uncontrolled Resource Consumption.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00002.html; https://access.redhat.com/errata/RHSA-2019:2135; https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
CVE: CVE-2018-19873
Published: 2018-12-26
Description: An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2018-12/msg00066.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00057.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00071.html
CVE: CVE-2018-20217
Published: 2018-12-26
Description: A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-617
References: http://krbdev.mit.edu/rt/Ticket/Display.html?id=8763; https://github.com/krb5/krb5/commit/5e6d1796106df8ba6bc1973ee0917c170d929086; https://lists.debian.org/debian-lts-announce/2019/01/msg00020.html
CVE: CVE-2018-20404
Published: 2018-12-26
Description: ETK_E900.sys, a SmartETK driver for VIA Technologies EPIA-E900 system board, is vulnerable to denial of service attack via IOCTL 0x9C402048, which calls memmove and constantly fails on an arbitrary (uncontrollable) address, resulting in an eternal hang or a BSoD.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://downwithup.github.io/CVEPosts.html; https://downwithup.github.io/CVEPosts.html
CVE: CVE-2018-20502
Published: 2018-12-26
Description: An issue was discovered in Bento4 1.5.1-627. There is an attempt at excessive memory allocation in the AP4_DataBuffer class when called from AP4_HvccAtom::Create in Core/Ap4HvccAtom.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/axiomatic-systems/Bento4/issues/349; https://github.com/axiomatic-systems/Bento4/issues/349
CVE: CVE-2018-20508
Published: 2018-12-27
Description: CrashFix 1.0.4 has SQL Injection via the User[status] parameter. This is related to actionIndex in UserController.php, and the protected\models\User.php search() function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://sourceforge.net/p/crashfix/tickets/21/; https://sourceforge.net/p/crashfix/tickets/21/
CVE: CVE-2018-20511
Published: 2018-12-27
Description: An issue was discovered in the Linux kernel before 4.18.11. The ipddp_ioctl function in drivers/net/appletalk/ipddp.c allows local users to obtain sensitive kernel address information by leveraging CAP_NET_ADMIN to read the ipddp_route dev and next fields via an SIOCFINDIPDDPRT ioctl call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9824dfae[PII_REDACTED]a23a7ed5756c7b6efacc9d; http://www.securityfocus.com/bid/106347; https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.11
CVE: CVE-2018-20519
Published: 2018-12-27
Description: An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal&a=ajax_save_basic pid parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://github.com/coolboy0816/audit/issues/2; https://github.com/coolboy0816/audit/issues/2
CVE: CVE-2018-20520
Published: 2018-12-27
Description: MiniCMS V1.10 has XSS via the mc-admin/post-edit.php query string, a related issue to CVE-2018-10296 and CVE-2018-16233.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bg5sbk/MiniCMS/issues/27; https://github.com/bg5sbk/MiniCMS/issues/27
CVE: CVE-2018-20524
Published: 2018-12-27
Description: The Chat Anywhere extension 2.4.0 for Chrome allows XSS via crafted use of <<a> in a message, because a danmuWrapper DIV element in chatbox-only\danmu.js is outside the scope of a Content Security Policy (CSP).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://vul.su.ki/posts/Chat_Anywhere_2.4.0_XSS.md/; https://vul.su.ki/posts/Chat_Anywhere_2.4.0_XSS.md/
CVE: CVE-2018-15333
Published: 2018-12-28
Description: On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user with any role, including Guest Role, to have access and download previously generated and available snapshot files on the BIG-IP configuration utility such as QKView and TCPDumps.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-434
References: http://www.securityfocus.com/bid/106380; https://support.f5.com/csp/article/K53620021; https://support.f5.com/csp/article/K53620021?utm_source=f5support&amp%3Butm_medium=RSS
CVE: CVE-2018-15334
Published: 2018-12-28
Description: A cross-site request forgery (CSRF) vulnerability in the APM webtop 11.2.1 or greater may allow attacker to force an APM webtop session to log out and require re-authentication.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/106364; https://support.f5.com/csp/article/K74114570; http://www.securityfocus.com/bid/106364
CVE: CVE-2018-15335
Published: 2018-12-28
Description: When APM 13.0.0-13.1.x is deployed as an OAuth Resource Server, APM becomes a client application to an external OAuth authorization server. In certain cases when communication between the BIG-IP APM and the OAuth authorization server is lost, APM may not display the intended message in the failure response
CVSS Score: 5.9 (MEDIUM)
References: http://www.securityfocus.com/bid/106355; https://support.f5.com/csp/article/K27617652; http://www.securityfocus.com/bid/106355
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-28
Description: Battelle V2I Hub 2.5.1 is vulnerable to a denial of service, caused by the failure to restrict access to a sensitive functionality. By visiting http://V2I_HUB/UI/powerdown.php, a remote attacker could exploit this vulnerability to shut down the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/147301; https://exchange.xforce.ibmcloud.com/vulnerabilities/147301
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-28
Description: Battelle V2I Hub 2.5.1 contains hard-coded credentials for the administrative account. An attacker could exploit this vulnerability to log in as an admin on any installation and gain unauthorized access to the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/147302; https://exchange.xforce.ibmcloud.com/vulnerabilities/147302
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-28
Description: Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the lack of requirement to change the default API key. An attacker could exploit this vulnerability using all available API functions containing an unchanged API key to gain unauthorized access to the system.
CVSS Score: 9.8 (CRITICAL)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/147303; https://exchange.xforce.ibmcloud.com/vulnerabilities/147303
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-28
Description: Battelle V2I Hub 2.5.1 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict access to the API key file. An attacker could exploit this vulnerability to obtain the current API key to gain unauthorized access to the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/147304; https://exchange.xforce.ibmcloud.com/vulnerabilities/147304
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-28
Description: Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a user-supplied value in PHP's GET global variable array using PHP's strcmp() function. By adding "[]" to the end of "key" in the URL when accessing API functions, an attacker could exploit this vulnerability to execute API functions.
CVSS Score: 9.8 (CRITICAL)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/147305; https://exchange.xforce.ibmcloud.com/vulnerabilities/147305
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-28
Description: Battelle V2I Hub 2.5.1 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by api/SystemConfigActions.php?action=add and the index.php script. A remote attacker could exploit this vulnerability using the parameterName or _login_username parameter in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/147306; https://exchange.xforce.ibmcloud.com/vulnerabilities/147306
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-28
Description: Battelle V2I Hub 2.5.1 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to /api/PluginStatusActions.php and /status/pluginStatus.php using the jtSorting or id parameter, which could allow the attacker to view, add, modify or delete information in the back-end database.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/147307; https://exchange.xforce.ibmcloud.com/vulnerabilities/147307
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-28
Description: Battelle V2I Hub 3.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the tmx/TmxCtl/src/lib/PluginStatus.cpp and TmxControl::user_info() function, which could allow the attacker to view, add, modify or delete information in the back-end database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/147308; https://exchange.xforce.ibmcloud.com/vulnerabilities/147308
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-28
Description: Peel shopping peel-shopping_9_1_0 version contains a Cross Site Scripting (XSS) vulnerability that can result in an authenticated user injecting java script code in the "Site Name EN" parameter. This attack appears to be exploitable if the malicious user has access to the administration account.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/advisto/peel-shopping/issues/1; https://github.com/advisto/peel-shopping/issues/1
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-28
Description: PEAR Archive_Tar version 1.4.3 and earlier contains a CWE-502, CWE-915 vulnerability in the Archive_Tar class. There are several file operations with `$v_header['filename']` as parameter (such as file_exists, is_file, is_dir, etc). When extract is called without a specific prefix path, we can trigger unserialization by crafting a tar file with `phar://[path_to_malicious_phar_file]` as path. Object injection can be used to trigger destruct in the loaded PHP classes, e.g. the Archive_Tar class itself. With Archive_Tar object injection, arbitrary file deletion can occur because `@unlink($this->_temp_tarname)` is called. If another class with useful gadget is loaded, it may possible to cause remote code execution that can result in files being deleted or possibly modified. This vulnerability appears to have been fixed in 1.4.4.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://blog.ripstech.com/2018/new-php-exploitation-technique/; https://cdn2.hubspot.net/hubfs/3853213/us-18-Thomas-It%27s-A-PHP-Unserialization-Vulnerability-Jim-But-Not-As-We-....pdf; https://lists.debian.org/debian-lts-announce/2019/02/msg00020.html
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-28
Description: Logisim Evolution version 2.14.3 and earlier contains an XML External Entity (XXE) vulnerability in Circuit file loading functionality (loadXmlFrom in src/com/cburch/logisim/file/XmlReader.java) that can result in information leak, possible RCE depending on system configuration. This attack appears to be exploitable via the victim opening a specially crafted circuit file. This vulnerability appears to have been fixed in 2.14.4.
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: https://github.com/reds-heig/logisim-evolution/pull/139; https://www.kvakil.me/posts/logisim/; https://github.com/reds-heig/logisim-evolution/pull/139
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-28
Description: FrontAccounting 2.4.5 contains a Time Based Blind SQL Injection vulnerability in the parameter "filterType" in /attachments.php that can allow the attacker to grab the entire database of the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/FrontAccountingERP/FA/issues/37; https://www.exploit-db.com/exploits/46037; https://github.com/FrontAccountingERP/FA/issues/37
CVE: CVE-2018-17539
Published: 2018-12-28
Description: The BGP daemon (bgpd) in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system (AS) path containing 8 or more autonomous system number (ASN) elements.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/106367; https://support.f5.com/csp/article/K17264695; http://www.securityfocus.com/bid/106367
CVE: CVE-2018-20528
Published: 2018-12-28
Description: JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: http://hacker.feiyulive.com/wordpress/index.php/116/; https://exchange.xforce.ibmcloud.com/vulnerabilities/154855; http://hacker.feiyulive.com/wordpress/index.php/116/
CVE: CVE-2018-20530
Published: 2018-12-28
Description: PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://suku90.wordpress.com/2018/12/27/php-scripts-mall-website-seller-script-2-0-5-stored-and-reflected-xss/; https://suku90.wordpress.com/2018/12/27/php-scripts-mall-website-seller-script-2-0-5-stored-and-reflected-xss/
CVE: CVE-2018-20532
Published: 2018-12-28
Description: There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00057.html; https://access.redhat.com/errata/RHSA-2019:2290; https://bugzilla.redhat.com/show_bug.cgi?id=1652605
CVE: CVE-2018-20533
Published: 2018-12-28
Description: There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00057.html; https://access.redhat.com/errata/RHSA-2019:2290; https://bugzilla.redhat.com/show_bug.cgi?id=1652599
CVE: CVE-2018-20534
Published: 2018-12-28
Description: There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00057.html; https://access.redhat.com/errata/RHSA-2019:2290; https://access.redhat.com/errata/RHSA-2019:3583
CVE: CVE-2018-20535
Published: 2018-12-28
Description: There is a use-after-free at asm/preproc.c (function pp_getline) in Netwide Assembler (NASM) 2.14rc16 that will cause a denial of service during a line-number increment attempt.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392530; https://bugzilla.nasm.us/show_bug.cgi?id=3392530
CVE: CVE-2018-20536
Published: 2018-12-28
Description: There is a heap-based buffer over-read at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1652610; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3TPVZSUWM5TEAMCBL3Y7QLGQSLCCJFIT/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFI3F3PRKPXOITWD47LF6ON4L5MJQQYM/
CVE: CVE-2018-20537
Published: 2018-12-28
Description: There is a NULL pointer dereference at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=1652611; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3TPVZSUWM5TEAMCBL3Y7QLGQSLCCJFIT/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFI3F3PRKPXOITWD47LF6ON4L5MJQQYM/