deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-8497
Published: 2017-05-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none
CVE: CVE-2017-3126
Published: 2017-05-27
Description: An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to execute unauthorized code or commands via the next parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/98557; http://www.securitytracker.com/id/1038539; http://www.securitytracker.com/id/1038540
CVE: CVE-2017-3129
Published: 2017-05-27
Description: A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/98382; https://fortiguard.com/psirt/FG-IR-17-076; http://www.securityfocus.com/bid/98382
CVE: CVE-2017-3134
Published: 2017-05-27
Description: An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root access via the CLI command 'copy running-config'.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/97603; https://fortiguard.com/psirt/FG-IR-17-097; http://www.securityfocus.com/bid/97603
CVE: CVE-2017-7337
Published: 2017-05-27
Description: An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interact with unauthorized VDOMs or enumerate other ADOMs via another user's stolen session and CSRF tokens or the adomName parameter in the /fpc/sec/customer/policy/getAdomVersion request.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-732
References: https://fortiguard.com/psirt/FG-IR-17-114; https://fortiguard.com/psirt/FG-IR-17-114
CVE: CVE-2017-7338
Published: 2017-05-27
Description: A password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to carry out information disclosure via the FortiAnalyzer Management View.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://fortiguard.com/psirt/FG-IR-17-114; https://fortiguard.com/psirt/FG-IR-17-114
CVE: CVE-2017-7339
Published: 2017-05-27
Description: A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the 'Name' and 'Description' inputs in the 'Add Revision Backup' functionality.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/psirt/FG-IR-17-114; https://fortiguard.com/psirt/FG-IR-17-114
CVE: CVE-2017-7343
Published: 2017-05-27
Description: An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://fortiguard.com/psirt/FG-IR-17-114; https://fortiguard.com/psirt/FG-IR-17-114
CVE: CVE-2017-7731
Published: 2017-05-27
Description: A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature.
CVSS Score: 7.5 (HIGH)
CWE: CWE-640
References: https://fortiguard.com/psirt/FG-IR-17-114; https://fortiguard.com/psirt/FG-IR-17-114
CVE: CVE-2017-9242
Published: 2017-05-27
Description: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too late in checking whether an overwrite of an skb data structure may occur, which allows local users to cause a denial of service (system crash) via crafted system calls.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=232cd35d0804cc241eb887bb8d4d9b3b9881c64a; http://www.debian.org/security/2017/dsa-3886; http://www.securityfocus.com/bid/98731
CVE: CVE-2015-9059
Published: 2017-05-28
Description: picocom before 2.0 has a command injection vulnerability in the 'send and receive file' command because the command line is executed by /bin/sh unsafely.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/npat-efault/picocom/commit/1ebc60b20fbe9a02436d5cbbf8951714e749ddb1; https://lists.debian.org/debian-lts-announce/2020/06/msg00030.html; https://github.com/npat-efault/picocom/commit/1ebc60b20fbe9a02436d5cbbf8951714e749ddb1
CVE: CVE-2016-10376
Published: 2017-05-28
Description: Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension. This can be abused by malicious XMPP servers to, for example, extract plaintext from OTR encrypted sessions.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-310
References: http://www.debian.org/security/2017/dsa-3943; https://bugs.debian.org/863445; https://dev.gajim.org/gajim/gajim/commit/cb65cfc5aed9efe05208ebbb7fb2d41fcf7253cc
CVE: CVE-2017-7295
Published: 2017-05-28
Description: An issue was discovered in Contiki Operating System 3.0. A use-after-free vulnerability exists in httpd-simple.c in cc26xx-web-demo httpd, where upon a connection close event, the http_state structure was not deallocated properly, resulting in a NULL pointer dereference in the output processing function. This resulted in a board crash, which can be used to perform denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://gist.github.com/jackmcbride/c9328627f1ee104ce84f3fb7eff42f1e; https://gist.github.com/jackmcbride/c9328627f1ee104ce84f3fb7eff42f1e
CVE: CVE-2017-7296
Published: 2017-05-28
Description: An issue was discovered in Contiki Operating System 3.0. A Persistent XSS vulnerability is present in the MQTT/IBM Cloud Config page (aka mqtt.html) of cc26xx-web-demo. The cc26xx-web-demo features a webserver that runs on a constrained device. That particular page allows a user to remotely configure that device's operation by sending HTTP POST requests. The vulnerability consists of improper input sanitisation of the text fields on the MQTT/IBM Cloud config page, allowing for JavaScript code injection.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/98790; https://gist.github.com/jackmcbride/c9328627f1ee104ce84f3fb7eff42f1e; http://www.securityfocus.com/bid/98790
CVE: CVE-2017-9232
Published: 2017-05-28
Description: Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: http://www.securityfocus.com/bid/98737; https://bugs.launchpad.net/juju/+bug/1682411; https://www.exploit-db.com/exploits/44023/
CVE: CVE-2017-9243
Published: 2017-05-28
Description: Aries QWR-1104 Wireless-N Router with Firmware Version WRC.253.2.0913 has XSS on the Wireless Site Survey page, exploitable with the name of an access point.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://touhidshaikh.com/blog/poc/qwr-1104-wireless-n-router-xss/; https://www.exploit-db.com/exploits/42075/; http://touhidshaikh.com/blog/poc/qwr-1104-wireless-n-router-xss/
CVE: CVE-2017-9249
Published: 2017-05-28
Description: Cross-site scripting (XSS) vulnerability in Allen Disk 1.6 allows remote authenticated users to inject arbitrary web script or HTML persistently by uploading a crafted HTML file. The attack vector is the content of this file, and the filename must be specified in the PATH_INFO to readfile.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/98743; https://github.com/s3131212/allendisk/issues/21; http://www.securityfocus.com/bid/98743
CVE: CVE-2017-9250
Published: 2017-05-28
Description: The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via malformed JavaScript source code, related to the jmem_heap_free_block function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.securitytracker.com/id/1038413; https://github.com/jerryscript-project/jerryscript/commit/e58f2880df608652aff7fd35c45b242467ec0e79; https://github.com/jerryscript-project/jerryscript/issues/1821
CVE: CVE-2017-9251
Published: 2017-05-28
Description: andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the sitename parameter to admin.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://sebao.me/index.php/post/13.html; http://sebao.me/index.php/post/13.html
CVE: CVE-2017-9252
Published: 2017-05-28
Description: andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the search page via the text-search parameter to index.php in a route=search action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.sebao.me/index.php/post/14.html; http://www.sebao.me/index.php/post/14.html
CVE: CVE-2016-10377
Published: 2017-05-29
Description: In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of the packet buffer due to an unsigned integer underflow in `lib/flow.c` in the function `miniflow_extract`, permitting remote bypass of the access control list enforced by the switch.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://mail.openvswitch.org/pipermail/ovs-dev/2016-July/319503.html; https://mail.openvswitch.org/pipermail/ovs-dev/2016-July/319503.html
CVE: CVE-2017-9261
Published: 2017-05-29
Description: In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/98730; https://github.com/ImageMagick/ImageMagick/issues/476; http://www.securityfocus.com/bid/98730
CVE: CVE-2017-9262
Published: 2017-05-29
Description: In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/98735; https://github.com/ImageMagick/ImageMagick/issues/475; http://www.securityfocus.com/bid/98735
CVE: CVE-2017-9263
Published: 2017-05-29
Description: In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://access.redhat.com/errata/RHSA-2017:2418; https://access.redhat.com/errata/RHSA-2017:2553; https://access.redhat.com/errata/RHSA-2017:2648
CVE: CVE-2017-9264
Published: 2017-05-29
Description: In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extract_l4_tcp`, and `extract_l4_udp` that can be triggered remotely.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://access.redhat.com/errata/RHSA-2017:2418; https://access.redhat.com/errata/RHSA-2017:2648; https://access.redhat.com/errata/RHSA-2017:2727
CVE: CVE-2017-9265
Published: 2017-05-29
Description: In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://access.redhat.com/errata/RHSA-2017:2418; https://access.redhat.com/errata/RHSA-2017:2553; https://access.redhat.com/errata/RHSA-2017:2648
CVE: CVE-2017-7913
Published: 2017-05-29
Description: A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application's configuration file contains parameters that represent passwords in plaintext.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-256, CWE-522
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01; https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01
CVE: CVE-2017-7915
Published: 2017-05-29
Description: An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. An attacker can freely use brute force to determine parameters needed to bypass authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307, CWE-307
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01; https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01
CVE: CVE-2017-7917
Published: 2017-05-29
Description: A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request, which could allow an attacker to modify the configuration of the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01; https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01
CVE: CVE-2017-9287
Published: 2017-05-29
Description: servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-415
References: http://www.debian.org/security/2017/dsa-3868; http://www.openldap.org/its/?findid=8655; http://www.securityfocus.com/bid/98736
CVE: CVE-2017-9288
Published: 2017-05-29
Description: The Raygun4WP plugin 1.8.0 for WordPress is vulnerable to a reflected XSS in sendtesterror.php (backurl parameter).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jgj212.blogspot.kr/2017/05/a-reflected-xss-vulnerability-in.html; https://github.com/MindscapeHQ/raygun4wordpress/issues/16; https://github.com/MindscapeHQ/raygun4wordpress/pull/17
CVE: CVE-2017-9148
Published: 2017-05-29
Description: The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://freeradius.org/security.html; http://seclists.org/oss-sec/2017/q2/422; http://www.securityfocus.com/bid/98734
CVE: CVE-2017-9289
Published: 2017-05-29
Description: Bram Korsten Note through 1.2.0 is vulnerable to a reflected XSS in note-source\ui\editor.php (edit parameter).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bramkorsten/Note/issues/11; https://github.com/bramkorsten/Note/issues/11
CVE: CVE-2017-9292
Published: 2017-05-29
Description: Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://backbox.org/membership/lansweeper-v6-0-0-63-xss-vulnerability/; https://www.lansweeper.com/changelog.aspx; https://backbox.org/membership/lansweeper-v6-0-0-63-xss-vulnerability/
CVE: CVE-2017-9294
Published: 2017-05-29
Description: RMI vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to execute internal commands without authentication via RMI ports.
CVSS Score: 9.8 (CRITICAL)
References: http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/; http://www.securityfocus.com/bid/98765; http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/
CVE: CVE-2017-9295
Published: 2017-05-29
Description: XXE vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to read arbitrary files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/; http://www.securityfocus.com/bid/98761; http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/
CVE: CVE-2017-9296
Published: 2017-05-29
Description: Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Tuning Manager before 8.5.2-00 allows remote attackers to redirect authenticated users to arbitrary web sites.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/; http://www.securityfocus.com/bid/98774; http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/
CVE: CVE-2017-9297
Published: 2017-05-29
Description: Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to redirect users to arbitrary web sites.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/; http://www.securityfocus.com/bid/98775; http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/
CVE: CVE-2017-9298
Published: 2017-05-29
Description: Cross-site scripting vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to execute arbitrary JavaScript code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/; http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-114/
CVE: CVE-2016-10378
Published: 2017-05-29
Description: e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107_admin/menus.php, related to the menuSaveVisibility function.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://code610.blogspot.com/2016/09/sql-injection-in-latest-e107-cms.html; http://code610.blogspot.com/2016/09/sql-injection-in-latest-e107-cms.html
CVE: CVE-2016-10379
Published: 2017-05-29
Description: The VirtueMart com_virtuemart component 3.0.14 for Joomla! allows SQL injection by remote authenticated administrators via the virtuemart_paymentmethod_id or virtuemart_shipmentmethod_id parameter to administrator/index.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://code610.blogspot.com/2016/08/testing-sql-injections-in-comvirtuemart.html; http://www.securityfocus.com/bid/98753; http://code610.blogspot.com/2016/08/testing-sql-injections-in-comvirtuemart.html
CVE: CVE-2017-9299
Published: 2017-05-29
Description: Open Ticket Request System (OTRS) 3.3.9 has XSS in index.pl?Action=AgentStats requests, as demonstrated by OrderBy=[XSS] and Direction=[XSS] attacks. NOTE: this CVE may have limited relevance because it represents a 2017 discovery of an issue in software from 2014. The 3.3.20 release, for example, is not affected.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://code610.blogspot.com/2017/05/turnkey-feat-otrs.html; http://code610.blogspot.com/2017/05/turnkey-feat-otrs.html
CVE: CVE-2017-9300
Published: 2017-05-29
Description: plugins\codec\libflac_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly have unspecified other impact via a crafted FLAC file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://code610.blogspot.com/2017/04/multiple-crashes-in-vlc-224.html; http://www.securityfocus.com/bid/98747; https://www.debian.org/security/2017/dsa-4045
CVE: CVE-2017-9301
Published: 2017-05-29
Description: plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service (invalid read and application crash) or possibly have unspecified other impact via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://code610.blogspot.com/2017/04/multiple-crashes-in-vlc-224.html; http://www.securityfocus.com/bid/98746; http://code610.blogspot.com/2017/04/multiple-crashes-in-vlc-224.html
CVE: CVE-2017-9302
Published: 2017-05-29
Description: RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp4 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://code610.blogspot.com/2017/05/divided-realplayer-160232.html; http://www.securityfocus.com/bid/98754; http://code610.blogspot.com/2017/05/divided-realplayer-160232.html
CVE: CVE-2017-9303
Published: 2017-05-29
Description: Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote attackers to conduct phishing attacks by specifying an attacker-controlled host.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/98776; https://laravel-news.com/laravel-5-4-22-is-now-released-and-includes-a-security-fix; http://www.securityfocus.com/bid/98776
CVE: CVE-2016-3083
Published: 2017-05-30
Description: Apache Hive (JDBC + HiveServer2) implements SSL for plain TCP and HTTP connections (it supports both transport modes). While validating the server's certificate during the connection setup, the client in Apache Hive before 1.2.2 and 2.0.x before 2.0.1 doesn't seem to be verifying the common name attribute of the certificate. In this way, if a JDBC client sends an SSL request to server abc.com, and the server responds with a valid certificate (certified by CA) but issued to xyz.com, the client will accept that as a valid certificate and the SSL handshake will go through.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://www.securityfocus.com/bid/98669; https://lists.apache.org/thread.html/0851bcf85635385f94cdaa008053802d92b4aab0a3075e30ed171192%40%3Cdev.hive.apache.org%3E; http://www.securityfocus.com/bid/98669
CVE: CVE-2017-2300
Published: 2017-05-30
Description: On Juniper Networks SRX Series Services Gateways chassis clusters running Junos OS 12.1X46 prior to 12.1X46-D65, 12.3X48 prior to 12.3X48-D40, 12.3X48 prior to 12.3X48-D60, flowd daemon on the primary node of an SRX Series chassis cluster may crash and restart when attempting to synchronize a multicast session created via crafted multicast packets.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/95400; http://www.securitytracker.com/id/1037597; https://kb.juniper.net/JSA10768
CVE: CVE-2017-2301
Published: 2017-05-30
Description: On Juniper Networks products or platforms running Junos OS 11.4 prior to 11.4R13-S3, 12.1X46 prior to 12.1X46-D60, 12.3 prior to 12.3R12-S2 or 12.3R13, 12.3X48 prior to 12.3X48-D40, 13.2X51 prior to 13.2X51-D40, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D12 or 14.1X53-D35, 14.1X55 prior to 14.1X55-D35, 14.2 prior to 14.2R7, 15.1 prior to 15.1F6 or 15.1R3, 15.1X49 prior to 15.1X49-D60, 15.1X53 prior to 15.1X53-D30 and DHCPv6 enabled, when a crafted DHCPv6 packet is received from a subscriber, jdhcpd daemon crashes and restarts. Repeated crashes of the jdhcpd process may constitute an extended denial of service condition for subscribers attempting to obtain IPv6 addresses.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/95396; http://www.securitytracker.com/id/1037596; https://kb.juniper.net/JSA10769