deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-14558
Published: 2018-10-30
Description: An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request. This occurs because the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/zsjevilhex/iot/blob/master/route/tenda/tenda-01/Tenda.md; https://github.com/zsjevilhex/iot/blob/master/route/tenda/tenda-01/Tenda.md; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14558
CVE: CVE-2018-17782
Published: 2018-10-30
Description: A cross-site scripting (XSS) vulnerability in the Manage Filters page (manage_filter_page.php) in MantisBT 2.1.0 through 2.17.1 allows remote attackers (if access rights permit it) to inject arbitrary code (if CSP settings permit it) through a crafted project name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://mantisbt.org/blog/archives/mantisbt/613; https://mantisbt.org/bugs/view.php?id=24813; https://mantisbt.org/blog/archives/mantisbt/613
CVE: CVE-2018-17783
Published: 2018-10-30
Description: A cross-site scripting (XSS) vulnerability in the Edit Filter page (manage_filter_edit page.php) in MantisBT 2.1.0 through 2.17.1 allows remote attackers (if access rights permit it) to inject arbitrary code (if CSP settings permit it) through a crafted project name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://mantisbt.org/blog/archives/mantisbt/613; https://mantisbt.org/bugs/view.php?id=24814; https://mantisbt.org/blog/archives/mantisbt/613
CVE: CVE-2018-18281
Published: 2018-10-30
Description: Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. This is fixed in the following kernel versions: 4.9.135, 4.14.78, 4.18.16, 4.19.
CVSS Score: 7.8 (HIGH)
CWE: CWE-459
References: http://packetstormsecurity.com/files/150001/Linux-mremap-TLB-Flush-Too-Late.html; http://www.openwall.com/lists/oss-security/2018/10/29/5; http://www.securityfocus.com/bid/105761
CVE: CVE-2017-8931
Published: 2018-10-30
Description: Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
References: https://www.bitdefender.com/support/bitdefender-gravityzone-6-2-1-35-release-notes-1909.html; https://www.bitdefender.com/support/bitdefender-gravityzone-6-2-1-35-release-notes-1909.html
CVE: CVE-2018-16461
Published: 2018-10-30
Description: A command injection vulnerability in libnmapp package for versions <0.4.16 allows arbitrary commands to be executed via arguments to the range options.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-78
References: https://hackerone.com/reports/390865; https://hackerone.com/reports/390865
CVE: CVE-2018-16462
Published: 2018-10-30
Description: A command injection vulnerability in the apex-publish-static-files npm module version <2.0.1 which allows arbitrary shell command execution through a maliciously crafted argument.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-77, CWE-78
References: https://hackerone.com/reports/405694; https://hackerone.com/reports/405694
CVE: CVE-2018-16463
Published: 2018-10-30
Description: A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password protected shares.
CVSS Score: 3.1 (LOW)
CWE: CWE-384, CWE-384
References: https://hackerone.com/reports/237184; https://nextcloud.com/security/advisory/?id=NC-SA-2018-013; https://hackerone.com/reports/237184
CVE: CVE-2018-16464
Published: 2018-10-30
Description: A missing access check in Nextcloud Server prior to 14.0.0 could lead to continued access to password protected link shares when the owner had changed the password.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://hackerone.com/reports/146133; https://nextcloud.com/security/advisory/?id=NC-SA-2018-012; https://hackerone.com/reports/146133
CVE: CVE-2018-16465
Published: 2018-10-30
Description: Missing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at login if the the provider of the second factor failed to load.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://hackerone.com/reports/317711; https://nextcloud.com/security/advisory/?id=NC-SA-2018-011; https://hackerone.com/reports/317711
CVE: CVE-2018-16466
Published: 2018-10-30
Description: Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284, CWE-273
References: https://hackerone.com/reports/388515; https://nextcloud.com/security/advisory/?id=NC-SA-2018-010; https://hackerone.com/reports/388515
CVE: CVE-2018-16467
Published: 2018-10-30
Description: A missing check in Nextcloud Server prior to 14.0.0 could give unauthorized access to the previews of single file password protected shares.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-287
References: https://hackerone.com/reports/231917; https://nextcloud.com/security/advisory/?id=NC-SA-2018-014; https://hackerone.com/reports/231917
CVE: CVE-2018-16468
Published: 2018-10-30
Description: In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/flavorjones/loofah/issues/154; https://www.debian.org/security/2019/dsa-4364; https://github.com/flavorjones/loofah/issues/154
CVE: CVE-2018-16469
Published: 2018-10-30
Description: The merge.recursive function in the merge package <1.2.1 can be tricked into adding or modifying properties of the Object prototype. These properties will be present on all objects allowing for a denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-20
References: https://hackerone.com/reports/381194; https://hackerone.com/reports/381194
CVE: CVE-2018-17931
Published: 2018-10-30
Description: If an attacker has physical access to the VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) they may be able to alter scripts, which may allow code execution with root privileges.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284, CWE-284
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01; https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01
CVE: CVE-2018-17933
Published: 2018-10-30
Description: VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) connected to the VGo XAMPP. User accounts may be able to execute commands that are outside the scope of their privileges and within the scope of an admin account. If an attacker has access to VGo XAMPP Client credentials, they may be able to execute admin commands on the connected robot.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01; https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01
CVE: CVE-2018-8858
Published: 2018-10-30
Description: If an attacker has access to the firmware from the VGo Robot (Versions 3.0.3.52164 and 3.0.3.53662. Prior versions may also be affected) they may be able to extract credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01; https://ics-cert.us-cert.gov/advisories/ICSA-18-114-01
CVE: CVE-2018-18850
Published: 2018-10-31
Description: In Octopus Deploy 2018.8.0 through 2018.9.x before 2018.9.1, an authenticated user with permission to modify deployment processes could upload a maliciously crafted YAML configuration, potentially allowing for remote execution of arbitrary code, running in the same context as the Octopus Server (for self-hosted installations by default, SYSTEM).
CVSS Score: 8.8 (HIGH)
References: https://github.com/OctopusDeploy/Issues/issues/5042; https://github.com/OctopusDeploy/Issues/issues/5042
CVE: CVE-2018-18853
Published: 2018-10-31
Description: Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of a field composed of many decimal digits.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/spray/spray-json/issues/278; https://github.com/spray/spray-json/issues/278
CVE: CVE-2018-18854
Published: 2018-10-31
Description: Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of many JSON object fields (with keys that have the same hash code).
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/spray/spray-json/issues/277; https://github.com/spray/spray-json/issues/277
CVE: CVE-2018-18867
Published: 2018-10-31
Description: An SSRF issue was discovered in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-15495.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: https://github.com/trippo/ResponsiveFilemanager/issues/506; https://github.com/trippo/ResponsiveFilemanager/issues/506
CVE: CVE-2018-18868
Published: 2018-10-31
Description: No-CMS 1.1.3 is prone to Persistent XSS via a contact_us name parameter, as demonstrated by the VG48Z5PqVWname parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/s-kustm/Subodh/blob/master/CVE-2018-18868.pdf; https://github.com/s-kustm/Subodh/blob/master/CVE-2018-18868.pdf
CVE: CVE-2018-18869
Published: 2018-10-31
Description: EmpireCMS V7.5 allows remote attackers to upload and execute arbitrary code via ..%2F directory traversal in a .php filename in the upload/e/admin/ecmscom.php path parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://qclover.github.io/2018/10/10/EmpireCMS_V7.5%E7%9A%84%E4%B8%80%E6%AC%A1%E5%AE%A1%E8%AE%A1.html; https://qclover.github.io/2018/10/10/EmpireCMS_V7.5%E7%9A%84%E4%B8%80%E6%AC%A1%E5%AE%A1%E8%AE%A1.html
CVE: CVE-2016-2121
Published: 2018-10-31
Description: A permissions flaw was found in redis, which sets weak permissions on certain files and directories that could potentially contain sensitive information. A local, unprivileged user could possibly use this flaw to access unauthorized system information.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-732, CWE-264
References: http://www.securityfocus.com/bid/94111; https://access.redhat.com/errata/RHSA-2017:3226; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2121
CVE: CVE-2016-5402
Published: 2018-10-31
Description: A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could use this flaw to execute arbitrary code as the user CFME runs as.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: http://rhn.redhat.com/errata/RHSA-2016-2839.html; http://www.securityfocus.com/bid/94612; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-5402
CVE: CVE-2016-6343
Published: 2018-10-31
Description: JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder (usually admins) to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of script code within the context of the affected user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://rhn.redhat.com/errata/RHSA-2017-0557.html; http://www.securityfocus.com/bid/96987; https://access.redhat.com/errata/RHSA-2018:0296
CVE: CVE-2018-1851
Published: 2018-10-31
Description: IBM WebSphere Application Server Liberty OpenID Connect could allow a remote attacker to execute arbitrary code on the system, caused by improper deserialization. By sending a specially-crafted request to the RP service, an attacker could exploit this vulnerability to execute arbitrary code. IBM X-Force ID: 150999.
CVSS Score: 7.3 (HIGH)
CWE: CWE-502
References: http://www.securityfocus.com/bid/105839; https://exchange.xforce.ibmcloud.com/vulnerabilities/150999; https://www.ibm.com/support/docview.wss?uid=ibm10735105
CVE: CVE-2018-15317
Published: 2018-10-31
Description: In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker sending specially crafted SSL records to a SSL Virtual Server will cause corruption in the SSL data structures leading to intermittent decrypt BAD_RECORD_MAC errors. Clients will be unable to access the application load balanced by a virtual server with an SSL profile until tmm is restarted.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K43625118; https://support.f5.com/csp/article/K43625118?utm_source=f5support&amp%3Butm_medium=RSS; https://support.f5.com/csp/article/K43625118
CVE: CVE-2018-15318
Published: 2018-10-31
Description: In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal while the initial flow is not the primary flow, the initial flow will remain after the closing procedure is complete. TMM may restart and produce a core file as a result of this condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://support.f5.com/csp/article/K16248201; https://support.f5.com/csp/article/K16248201
CVE: CVE-2018-15319
Published: 2018-10-31
Description: On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with the non-default "normalize URI" configuration options used in iRules and/or BIG-IP LTM policies.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/107052; https://support.f5.com/csp/article/K64208870; http://www.securityfocus.com/bid/107052
CVE: CVE-2018-15320
Published: 2018-10-31
Description: On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, undisclosed traffic patterns may lead to denial of service conditions for the BIG-IP system. The configuration which exposes this condition is the BIG-IP self IP address which is part of a VLAN group and has the Port Lockdown setting configured with anything other than "allow-all".
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K72442354; https://support.f5.com/csp/article/K72442354
CVE: CVE-2018-15321
Published: 2018-10-31
Description: When BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, iWorkflow 2.1.0-2.3.0, or Enterprise Manager 3.1.1 is licensed for Appliance Mode, Admin and Resource administrator roles can by-pass BIG-IP Appliance Mode restrictions to overwrite critical system files. Attackers of high privilege level are able to overwrite critical system files which bypasses security controls in place to limit TMSH commands. This is possible with an administrator or resource administrator roles when granted TMSH. Resource administrator roles must have TMSH access in order to perform this attack.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-269
References: https://support.f5.com/csp/article/K01067037; https://support.f5.com/csp/article/K01067037
CVE: CVE-2018-15322
Published: 2018-10-31
Description: On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 6.0.0-6.0.1, 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, iWorkflow 2.0.1-2.3.0, or Enterprise Manager 3.1.1 a BIG-IP user granted with tmsh access may cause the BIG-IP system to experience denial-of-service (DoS) when the BIG-IP user uses the tmsh utility to run the edit cli preference command and proceeds to save the changes to another filename repeatedly. This action utilises storage space on the /var partition and when performed repeatedly causes the /var partition to be full.
CVSS Score: 6.5 (MEDIUM)
References: https://support.f5.com/csp/article/K28003839; https://support.f5.com/csp/article/K28003839
CVE: CVE-2018-15323
Published: 2018-10-31
Description: On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, in certain circumstances, when processing traffic through a Virtual Server with an associated MQTT profile, the TMM process may produce a core file and take the configured HA action.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: https://support.f5.com/csp/article/K26583415; https://support.f5.com/csp/article/K26583415
CVE: CVE-2018-15324
Published: 2018-10-31
Description: On BIG-IP APM 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, TMM may restart when processing a specially crafted request with APM portal access.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: https://support.f5.com/csp/article/K52206731; https://support.f5.com/csp/article/K52206731
CVE: CVE-2018-15325
Published: 2018-10-31
Description: In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, iControl and TMSH usage by authenticated users may leak a small amount of memory when executing commands
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400
References: https://support.f5.com/csp/article/K77313277; https://support.f5.com/csp/article/K77313277
CVE: CVE-2018-15326
Published: 2018-10-31
Description: In some situations on BIG-IP APM 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.2, the CRLDP Auth access policy agent may treat revoked certificates as valid when the BIG-IP APM system fails to download a new Certificate Revocation List.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://www.securityfocus.com/bid/106180; https://support.f5.com/csp/article/K34652116; http://www.securityfocus.com/bid/106180
CVE: CVE-2018-15327
Published: 2018-10-31
Description: In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1 or Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced.
CVSS Score: 7.2 (HIGH)
CWE: CWE-862
References: https://support.f5.com/csp/article/K20222812; https://support.f5.com/csp/article/K20222812
CVE: CVE-2018-13281
Published: 2018-10-31
Description: Information exposure vulnerability in SYNO.Core.ACL in Synology DiskStation Manager (DSM) before 6.2-23739-2 allows remote authenticated users to determine the existence and obtain the metadata of arbitrary files via the file_path parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://www.synology.com/en-global/support/security/Synology_SA_18_36; https://www.synology.com/en-global/support/security/Synology_SA_18_36
CVE: CVE-2018-13282
Published: 2018-10-31
Description: Session fixation vulnerability in SYNO.PhotoStation.Auth in Synology Photo Station before 6.8.7-3481 allows remote attackers to hijack web sessions via the PHPSESSID parameter.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-384, CWE-384
References: https://www.synology.com/en-global/support/security/Synology_SA_18_37; https://www.synology.com/en-global/support/security/Synology_SA_18_37
CVE: CVE-2018-18873
Published: 2018-10-31
Description: An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras_enc.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html; https://github.com/mdadams/jasper/issues/184
CVE: CVE-2018-18874
Published: 2018-10-31
Description: nc-cms through 2017-03-10 allows remote attackers to execute arbitrary PHP code via the "Upload File or Image" feature, with a .php filename and "Content-Type: application/octet-stream" to the index.php?action=file_manager_upload URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/gnat/nc-cms/issues/11; https://github.com/gnat/nc-cms/issues/11
CVE: CVE-2018-16839
Published: 2018-10-31
Description: Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-122, CWE-190, CWE-119
References: http://www.securitytracker.com/id/1042012; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16839; https://curl.haxx.se/docs/CVE-2018-16839.html
CVE: CVE-2018-16840
Published: 2018-10-31
Description: A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in the `Curl_close()` function, the library code first frees a struct (without nulling the pointer) and might then subsequently erroneously write to a struct field within that already freed struct.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-416
References: http://www.securitytracker.com/id/1042013; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16840; https://curl.haxx.se/docs/CVE-2018-16840.html
CVE: CVE-2018-14652
Published: 2018-10-31
Description: The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120, CWE-119
References: https://access.redhat.com/errata/RHSA-2018:3431; https://access.redhat.com/errata/RHSA-2018:3432; https://access.redhat.com/errata/RHSA-2018:3470
CVE: CVE-2018-14653
Published: 2018-10-31
Description: The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://access.redhat.com/errata/RHSA-2018:3431; https://access.redhat.com/errata/RHSA-2018:3432; https://access.redhat.com/errata/RHSA-2018:3470
CVE: CVE-2018-14654
Published: 2018-10-31
Description: The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could exploit this via the 'GF_XATTROP_ENTRY_IN_KEY' xattrop to create arbitrary, empty files on the target server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://access.redhat.com/errata/RHSA-2018:3431; https://access.redhat.com/errata/RHSA-2018:3432; https://access.redhat.com/errata/RHSA-2018:3470
CVE: CVE-2018-14659
Published: 2018-10-31
Description: The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://access.redhat.com/errata/RHSA-2018:3431; https://access.redhat.com/errata/RHSA-2018:3432; https://access.redhat.com/errata/RHSA-2018:3470
CVE: CVE-2018-16842
Published: 2018-10-31
Description: Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://www.securitytracker.com/id/1042014; https://access.redhat.com/errata/RHSA-2019:2181; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16842