deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-9847
Published: 2017-06-24
Description: The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/arvidn/libtorrent/issues/2099; https://github.com/arvidn/libtorrent/issues/2099
CVE: CVE-2017-9848
Published: 2017-06-24
Description: SQL injection vulnerability in C_InfoService.asmx in WebServices in Easysite 7.0 could allow remote attackers to execute arbitrary SQL commands via an XML document containing a crafted ArticleIDs element within a GetArticleHitsArray element.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.2cto.com/article/201409/338712.html; http://www.huilan.com/zkhl/resource/cms/2015/09/[PII_REDACTED]311792443.pdf; https://github.com/Akityo/TOPSEC/issues/1
CVE: CVE-2017-9840
Published: 2017-06-25
Description: Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-009; https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2017-009
CVE: CVE-2017-9865
Published: 2017-06-25
Description: The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted PDF document, related to missing color-map validation in ImageOutputDev.cc.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://somevulnsofadlab.blogspot.com/2017/06/popplerstack-buffer-overflow-in.html; https://bugs.freedesktop.org/show_bug.cgi?id=100774; https://security.gentoo.org/glsa/201801-17
CVE: CVE-2017-9868
Published: 2017-06-25
Description: In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/eclipse/mosquitto/issues/468; https://lists.debian.org/debian-lts-announce/2018/09/msg00036.html; https://github.com/eclipse/mosquitto/issues/468
CVE: CVE-2015-9099
Published: 2017-06-25
Description: The lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file with a negative sample rate.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/99279; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775959; http://www.securityfocus.com/bid/99279
CVE: CVE-2015-9100
Published: 2017-06-25
Description: The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/99278; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777160; http://www.securityfocus.com/bid/99278
CVE: CVE-2015-9101
Published: 2017-06-25
Description: The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4 and 3.99.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99269; https://blogs.gentoo.org/ago/2017/06/17/lame-heap-based-buffer-overflow-in-fill_buffer_resample-util-c/; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777161
CVE: CVE-2017-9869
Published: 2017-06-25
Description: The II_step_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/99272; https://blogs.gentoo.org/ago/2017/06/17/lame-global-buffer-overflow-in-ii_step_one-layer2-c/; https://www.exploit-db.com/exploits/42258/
CVE: CVE-2017-9870
Published: 2017-06-25
Description: The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the "block_type == 2" case, a similar issue to CVE-2017-11126.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/99287; https://blogs.gentoo.org/ago/2017/06/17/lame-global-buffer-overflow-in-iii_i_stereo-layer3-c/; http://www.securityfocus.com/bid/99287
CVE: CVE-2017-9871
Published: 2017-06-25
Description: The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99289; https://blogs.gentoo.org/ago/2017/06/17/lame-stack-based-buffer-overflow-in-iii_i_stereo-layer3-c/; http://www.securityfocus.com/bid/99289
CVE: CVE-2017-9872
Published: 2017-06-25
Description: The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99270; https://blogs.gentoo.org/ago/2017/06/17/lame-stack-based-buffer-overflow-in-iii_dequantize_sample-layer3-c/; https://www.exploit-db.com/exploits/42259/
CVE: CVE-2017-6662
Published: 2017-06-26
Description: A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker read and write access to information stored in the affected system as well as perform remote code execution. The attacker must have valid user credentials. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing an XML file. An attacker could exploit this vulnerability by convincing the administrator of an affected system to import a crafted XML file with malicious entries which could allow the attacker to read and write files and execute remote code within the application, aka XML Injection. Cisco Prime Infrastructure software releases 1.1 through 3.1.6 are vulnerable. Cisco EPNM software releases 1.2, 2.0, and 2.1 are vulnerable. Cisco Bug IDs: CSCvc23894 CSCvc49561.
CVSS Score: 8.0 (HIGH)
CWE: CWE-20, CWE-611
References: http://www.securityfocus.com/bid/99194; http://www.securitytracker.com/id/1038750; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm1
CVE: CVE-2017-6669
Published: 2017-06-26
Description: Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files. An attacker could exploit these vulnerabilities by providing a user with a malicious ARF file via email or URL and convincing the user to launch the file. Exploitation of these vulnerabilities could cause an affected player to crash and, in some cases, could allow arbitrary code execution on the system of a targeted user. The Cisco WebEx Network Recording Player is an application that is used to play back WebEx meeting recordings that have been recorded on the computer of an online meeting attendee. The player can be automatically installed when the user accesses a recording file that is hosted on a WebEx server. The following client builds are affected by this vulnerability: Cisco WebEx Business Suite (WBS29) client builds prior to T29.13.130, Cisco WebEx Business Suite (WBS30) client builds prior to T30.17, Cisco WebEx Business Suite (WBS31) client builds prior to T31.10. Cisco Bug IDs: CSCvc47758 CSCvc51227 CSCvc51242.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: http://www.securityfocus.com/bid/99196; http://www.securitytracker.com/id/1038737; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-wnrp
CVE: CVE-2017-6678
Published: 2017-06-26
Description: A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software 19.2 through 21.0 could allow an unauthenticated, remote attacker to cause both control function (CF) instances on an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient handling of user-supplied data by the affected software. An attacker could exploit this vulnerability by sending crafted UDP packets to the distributed instance (DI) network addresses of both CF instances on an affected system. A successful exploit could allow the attacker to cause an unhandled error condition on the affected system, which would cause the CF instances to reload and consequently cause the entire VPC to reload, resulting in the disconnection of all subscribers and a DoS condition on the affected system. This vulnerability can be exploited via IPv4 traffic only. Cisco Bug IDs: CSCvc01665 CSCvc35565.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399, CWE-755
References: http://www.securityfocus.com/bid/99195; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-vpc; http://www.securityfocus.com/bid/99195
CVE: CVE-2017-7416
Published: 2017-06-26
Description: ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ntop/ntopng/blob/3.0/CHANGELOG.md; https://github.com/ntop/ntopng/blob/3.0/CHANGELOG.md
CVE: CVE-2017-7459
Published: 2017-06-26
Description: ntopng before 3.0 allows HTTP Response Splitting.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://github.com/ntop/ntopng/blob/3.0/CHANGELOG.md; https://github.com/ntop/ntopng/blob/3.0/CHANGELOG.md
CVE: CVE-2017-9466
Published: 2017-06-26
Description: The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use of DES for block encryption. This resulted in incorrect access control, which allowed attackers to gain read-write access to system settings through the protected router configuration service tddp via the LAN and Ath0 (Wi-Fi) interfaces.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-327
References: http://blog.senr.io/blog/cve-2017-9466-why-is-my-router-blinking-morse-code; http://blog.senr.io/blog/cve-2017-9466-why-is-my-router-blinking-morse-code
CVE: CVE-2017-9615
Published: 2017-06-26
Description: Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all data, because verbose logging writes the administrator password to a world-readable file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532, CWE-732
References: http://cognito.co.nz/mwcommunity/viewtopic.php?f=1&t=3542; https://gist.github.com/ari/e0dd74c12d84f102e3bcb365118e8c30; http://cognito.co.nz/mwcommunity/viewtopic.php?f=1&t=3542
CVE: CVE-2017-9928
Published: 2017-06-26
Description: In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://somevulnsofadlab.blogspot.com/2017/06/lrzipstack-buffer-overflow-in.html; https://github.com/ckolivas/lrzip/issues/74; https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html
CVE: CVE-2017-9929
Published: 2017-06-26
Description: In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://somevulnsofadlab.blogspot.com/2017/06/lrzipstack-buffer-overflow-in_24.html; https://github.com/ckolivas/lrzip/issues/75; https://lists.debian.org/debian-lts-announce/2021/08/msg00001.html
CVE: CVE-2017-9935
Published: 2017-06-26
Description: In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2p_free, memory corruption in t2p_readwrite_pdf_image, or a double free in t2p_free. Given these possibilities, it probably could cause arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://bugzilla.maptools.org/show_bug.cgi?id=2704; http://www.securityfocus.com/bid/99296; https://lists.debian.org/debian-lts-announce/2017/12/msg00008.html
CVE: CVE-2017-9936
Published: 2017-06-26
Description: In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a remote denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://bugzilla.maptools.org/show_bug.cgi?id=2706; http://www.debian.org/security/2017/dsa-3903; http://www.securityfocus.com/bid/99300
CVE: CVE-2017-9937
Published: 2017-06-26
Description: In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://bugzilla.maptools.org/show_bug.cgi?id=2707; http://www.securityfocus.com/bid/99304; https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE: CVE-2017-6383
Published: 2017-06-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-7855.  Reason: This candidate is a reservation duplicate of CVE-2017-7855.  Notes: All CVE users should reference CVE-2017-7855 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-9145
Published: 2017-06-26
Description: TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sourceforge.net/p/tikiwiki/code/62386; https://sourceforge.net/p/tikiwiki/code/62386
CVE: CVE-2017-9504
Published: 2017-06-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-9741.  Reason: This candidate is a reservation duplicate of CVE-2017-9741.  Notes: All CVE users should reference CVE-2017-9741 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-7496
Published: 2017-06-26
Description: fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories.
CVSS Score: 7.0 (HIGH)
CWE: CWE-391, CWE-755
References: https://pagure.io/arm-image-installer/pull-request/10; https://pagure.io/arm-image-installer/pull-request/10
CVE: CVE-2017-9948
Published: 2017-06-26
Description: A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishandling of remote RDP clipboard content within the message box.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99281; https://www.vulnerability-db.com/?q=articles/2017/05/28/stack-buffer-overflow-zero-day-vulnerability-uncovered-microsoft-skype-v72-v735; https://www.vulnerability-lab.com/get_content.php?id=2071
CVE: CVE-2014-8127
Published: 2017-06-26
Description: LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2) compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5) tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7) TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://bugzilla.maptools.org/show_bug.cgi?id=2484; http://bugzilla.maptools.org/show_bug.cgi?id=2485; http://bugzilla.maptools.org/show_bug.cgi?id=2486
CVE: CVE-2015-1870
Published: 2017-06-26
Description: The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2015-1083.html; http://rhn.redhat.com/errata/RHSA-2015-1210.html; http://www.securityfocus.com/bid/75119
CVE: CVE-2015-3142
Published: 2017-06-26
Description: The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2015-1083.html; http://rhn.redhat.com/errata/RHSA-2015-1210.html; http://www.openwall.com/lists/oss-security/2015/04/17/5
CVE: CVE-2015-3215
Published: 2017-06-26
Description: The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted length value in an IP packet, as demonstrated by a value that does not account for the size of the IP options.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2015-1043.html; http://rhn.redhat.com/errata/RHSA-2015-1044.html; https://github.com/YanVugenfirer/kvm-guest-drivers-windows/commit/723416fa4210b7464b28eab89cc76252e6193ac1
CVE: CVE-2015-3315
Published: 2017-06-26
Description: Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: http://rhn.redhat.com/errata/RHSA-2015-1083.html; http://rhn.redhat.com/errata/RHSA-2015-1210.html; http://www.openwall.com/lists/oss-security/2015/04/14/4
CVE: CVE-2016-8493
Published: 2017-06-26
Description: In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/101682; https://fortiguard.com/psirt/FG-IR-16-095; http://www.securityfocus.com/bid/101682
CVE: CVE-2016-8498
Published: 2017-06-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none
CVE: CVE-2017-9949
Published: 2017-06-26
Description: The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted binary file, possibly related to a buffer underflow in fs/ext2.c in GNU GRUB 2.02.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/99305; https://github.com/radare/radare2/commit/796dd28aaa6b9fa76d99c42c4d5ff8b257cc2191; https://github.com/radare/radare2/issues/7683
CVE: CVE-2017-6324
Published: 2017-06-26
Description: The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially malicious macro through despite the administrator having the 'disarm' functionality enabled. This constitutes a 'bypass' of the disarm functionality resident to the application.
CVSS Score: 7.3 (HIGH)
References: http://www.securityfocus.com/bid/98889; http://www.securitytracker.com/id/1038785; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170621_00
CVE: CVE-2017-6325
Published: 2017-06-26
Description: The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found to affect web applications that rely on a scripting run time. This issue is caused when an application builds a path to executable code using an attacker-controlled variable in a way that allows the attacker to control which file is executed at run time. This file inclusion vulnerability subverts how an application loads code for execution. Successful exploitation of a file inclusion vulnerability will result in remote code execution on the web server that runs the affected web application.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-94
References: http://www.securityfocus.com/bid/98890; http://www.securitytracker.com/id/1038785; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170621_00
CVE: CVE-2017-6326
Published: 2017-06-26
Description: The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process.
CVSS Score: 10.0 (CRITICAL)
References: http://www.securityfocus.com/bid/98893; http://www.securitytracker.com/id/1038785; https://www.exploit-db.com/exploits/42251/
CVE: CVE-2017-7458
Published: 2017-06-26
Description: The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty field that should have contained a hostname or IP address.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/ntop/ntopng/blob/3.0/CHANGELOG.md; https://github.com/ntop/ntopng/commit/01f47e04fd7c8d54399c9e465f823f0017069f8f; https://github.com/ntop/ntopng/blob/3.0/CHANGELOG.md
CVE: CVE-2017-9953
Published: 2017-06-26
Description: There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=1465061; https://bugzilla.redhat.com/show_bug.cgi?id=1465061
CVE: CVE-2017-9954
Published: 2017-06-26
Description: The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted tekhex file, as demonstrated by mishandling within the nm program.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/99307; https://security.gentoo.org/glsa/201709-02; https://sourceware.org/bugzilla/show_bug.cgi?id=21670
CVE: CVE-2017-9955
Published: 2017-06-26
Description: The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file in which a certain size field is larger than a corresponding data field, as demonstrated by mishandling within the objdump program.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/99573; https://sourceware.org/bugzilla/show_bug.cgi?id=21665; http://www.securityfocus.com/bid/99573