deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-5944
Published: 2017-07-03
Description: The dashboard subscription interface in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 might allow remote authenticated users with certain privileges to execute arbitrary code via a crafted saved search name.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://www.debian.org/security/2017/dsa-3882; http://www.securityfocus.com/bid/99381; https://forum.bestpractical.com/t/security-vulnerabilities-in-rt-2017-06-15/32016
CVE: CVE-2017-8116
Published: 2017-07-03
Description: The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote attackers to execute arbitrary commands with root privileges via shell metacharacters in the username parameter in a login request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/nettitude/metasploit-modules/blob/master/teltonika_add_user.rb; https://github.com/nettitude/metasploit-modules/blob/master/teltonika_cmd_exec.rb; https://labs.nettitude.com/blog/cve-2017-8116-teltonika-router-unauthenticated-remote-code-execution/
CVE: CVE-2017-7919
Published: 2017-07-03
Description: An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator (URL).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/99291; https://ics-cert.us-cert.gov/advisories/ICSA-17-178-01; http://www.securityfocus.com/bid/99291
CVE: CVE-2017-9248
Published: 2017-07-03
Description: Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leading to a MachineKey leak, arbitrary file uploads or downloads, XSS, or ASP.NET ViewState compromise.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522, CWE-522
References: http://www.securityfocus.com/bid/99965; http://www.telerik.com/blogs/security-alert-for-telerik-ui-for-asp.net-ajax-and-progress-sitefinity; http://www.telerik.com/support/kb/aspnet-ajax/details/cryptographic-weakness
CVE: CVE-2017-3865
Published: 2017-07-04
Description: A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from establishing, resulting in a denial of service (DoS) condition. Affected Products: ASR 5000 Series Routers, Virtualized Packet Core (VPC) Software. More Information: CSCvc21129. Known Affected Releases: 21.1.0 21.1.M0.65601 21.1.v0. Known Fixed Releases: 21.2.A0.65754 21.1.b0.66164 21.1.V0.66014 21.1.R0.65759 21.1.M0.65749 21.1.0.66030 21.1.0.
CVSS Score: 5.8 (MEDIUM)
References: http://www.securityfocus.com/bid/99218; http://www.securitytracker.com/id/1038748; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-asr
CVE: CVE-2017-6605
Published: 2017-07-04
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a reflective cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc85415. Known Affected Releases: 2.1(0.800).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99207; http://www.securitytracker.com/id/1038740; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ise1
CVE: CVE-2017-6698
Published: 2017-07-04
Description: A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc23892 CSCvc35270 CSCvc35626 CSCvc35630 CSCvc49568. Known Affected Releases: 3.1(1) 2.0(4.0.45B).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: http://www.securityfocus.com/bid/99214; http://www.securitytracker.com/id/1038751; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm2
CVE: CVE-2017-6699
Published: 2017-07-04
Description: A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc24616 CSCvc35363 CSCvc49574. Known Affected Releases: 3.1(1) 2.0(4.0.45B).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99221; http://www.securitytracker.com/id/1038751; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm3
CVE: CVE-2017-6700
Published: 2017-07-04
Description: A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a Document Object Model (DOM) based (environment or client-side) cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc24620 CSCvc49586. Known Affected Releases: 3.1(1) 2.0(4.0.45B).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99216; http://www.securitytracker.com/id/1038751; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm4
CVE: CVE-2017-6701
Published: 2017-07-04
Description: A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvd49141. Known Affected Releases: 2.1(102.101).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99208; http://www.securitytracker.com/id/1038740; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ise
CVE: CVE-2017-6702
Published: 2017-07-04
Description: A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCve15285. Known Affected Releases: 11.5(1).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99205; http://www.securitytracker.com/id/1038738; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-csm
CVE: CVE-2017-6703
Published: 2017-07-04
Description: A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another user's session. More Information: CSCvc90346. Known Affected Releases: 12.1.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: http://www.securityfocus.com/bid/99224; http://www.securitytracker.com/id/1038744; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp1
CVE: CVE-2017-6704
Published: 2017-07-04
Description: A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. More Information: CSCvc90335. Known Affected Releases: 12.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/99223; http://www.securitytracker.com/id/1038744; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp2
CVE: CVE-2017-6705
Published: 2017-07-04
Description: A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive information. More Information: CSCvc82973. Known Affected Releases: 12.1.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/99206; http://www.securitytracker.com/id/1038744; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp3
CVE: CVE-2017-6706
Published: 2017-07-04
Description: A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive information. More Information: CSCvd07260. Known Affected Releases: 12.1.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/99204; http://www.securitytracker.com/id/1038744; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-pcp4
CVE: CVE-2017-6715
Published: 2017-07-04
Description: A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface. Affected Products: Cisco Firepower Management Center Releases 5.4.1.x and prior. More Information: CSCuy88951. Known Affected Releases: 5.4.1.6.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99209; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-fmc1; http://www.securityfocus.com/bid/99209
CVE: CVE-2017-6716
Published: 2017-07-04
Description: A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. Affected Products: Cisco Firepower Management Center Software Releases prior to 6.0.0.0. More Information: CSCuy88785. Known Affected Releases: 5.4.1.6.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99220; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-fmc2; http://www.securityfocus.com/bid/99220
CVE: CVE-2017-6717
Published: 2017-07-04
Description: A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface. More Information: CSCvc38801. Known Affected Releases: 6.0.1.3 6.2.1. Known Fixed Releases: 6.2.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99217; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-fpmc; http://www.securityfocus.com/bid/99217
CVE: CVE-2017-6718
Published: 2017-07-04
Description: A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level. More Information: CSCvb99384. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.2.11.3i.ROUT 6.2.1.29i.ROUT 6.2.1.26i.ROUT.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99226; http://www.securitytracker.com/id/1038741; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ios1
CVE: CVE-2017-6719
Published: 2017-07-04
Description: A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with root privileges, aka Command Injection. More Information: CSCvb99406. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.2.1.28i.BASE 6.2.1.22i.BASE 6.1.32.8i.BASE 6.1.31.3i.BASE 6.1.3.10i.BASE.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99213; http://www.securitytracker.com/id/1038741; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ios
CVE: CVE-2017-6721
Published: 2017-07-04
Description: A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause the WAASNET process to restart unexpectedly, causing a denial of service (DoS) condition. More Information: CSCvc57428. Known Affected Releases: 6.3(1). Known Fixed Releases: 6.3(0.143) 6.2(3c)6 6.2(3.22).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99200; http://www.securitytracker.com/id/1038747; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-waas
CVE: CVE-2017-6722
Published: 2017-07-04
Description: A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow an unauthenticated, remote attacker to masquerade as a legitimate user, aka a Clear Text Authentication Vulnerability. More Information: CSCuw86638. Known Affected Releases: 10.6(1). Known Fixed Releases: 11.5(1.10000.61).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-287
References: http://www.securityfocus.com/bid/99201; http://www.securitytracker.com/id/1038749; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ucce
CVE: CVE-2017-6724
Published: 2017-07-04
Description: A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCuw65843. Known Affected Releases: 3.1(0.0).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99203; http://www.securitytracker.com/id/1038751; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piwf
CVE: CVE-2017-6725
Published: 2017-07-04
Description: A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCuw65833 CSCuw65837. Known Affected Releases: 2.2(2).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99202; http://www.securitytracker.com/id/1038751; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piwf1
CVE: CVE-2017-7315
Published: 2017-07-04
Description: An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-522
References: http://seclists.org/fulldisclosure/2017/Jun/45; http://seclists.org/fulldisclosure/2017/Jun/45
CVE: CVE-2017-7316
Published: 2017-07-04
Description: An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2017/Jun/45; http://seclists.org/fulldisclosure/2017/Jun/45
CVE: CVE-2017-7317
Published: 2017-07-04
Description: An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2017/Jun/45; http://seclists.org/fulldisclosure/2017/Jun/45
CVE: CVE-2017-9313
Published: 2017-07-04
Description: Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter to view_man.cgi, the referers parameter to change_referers.cgi, or the name parameter to save_user.cgi. NOTE: these issues were not fixed in 1.840.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/bugtraq/2017/Jul/3; http://www.securityfocus.com/bid/99373; http://www.securitytracker.com/id/1038814
CVE: CVE-2017-10807
Published: 2017-07-04
Description: JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.debian.org/security/2017/dsa-3902; http://www.securityfocus.com/bid/99511; https://bugs.debian.org/867032
CVE: CVE-2017-10803
Published: 2017-07-04
Description: In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the Database Anonymization module allows remote authenticated privileged users to execute arbitrary Python code, because unpickle is used.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-502
References: https://github.com/odoo/odoo/issues/17898; https://github.com/odoo/odoo/issues/17898
CVE: CVE-2017-10804
Published: 2017-07-04
Description: In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication under certain circumstances because parameters containing 0x00 characters are truncated before reaching the database layer. This occurs because Psycopg 2.x before 2.6.3 is used.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://initd.org/psycopg/docs/news.html#what-s-new-in-psycopg-2-6-3; https://github.com/odoo/odoo/issues/17914; https://github.com/psycopg/psycopg2/issues/420
CVE: CVE-2017-10805
Published: 2017-07-04
Description: In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the OAuth module allows remote authenticated users to hijack OAuth sessions of other users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://github.com/odoo/odoo/issues/17921; https://github.com/odoo/odoo/issues/17921
CVE: CVE-2017-7276
Published: 2017-07-04
Description: There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://page.topdesk.com/cve-2017-7276; http://page.topdesk.com/cve-2017-7276
CVE: CVE-2017-10810
Published: 2017-07-04
Description: Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel through 4.11.8 allows attackers to cause a denial of service (memory consumption) by triggering object-initialization failures.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=385aee965b4e4c36551c362a334378d2985b722a; http://www.debian.org/security/2017/dsa-3927; http://www.securityfocus.com/bid/99433
CVE: CVE-2017-10911
Published: 2017-07-05
Description: The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures, aka XSA-216.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=089bc0143f489bd3a4578bdff5f4ca68fb26f341; http://www.debian.org/security/2017/dsa-3920; http://www.debian.org/security/2017/dsa-3927
CVE: CVE-2017-10912
Published: 2017-07-05
Description: Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217.
CVSS Score: 10.0 (CRITICAL)
References: http://www.debian.org/security/2017/dsa-3969; http://www.securityfocus.com/bid/99158; http://www.securitytracker.com/id/1038721
CVE: CVE-2017-10913
Published: 2017-07-05
Description: The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1.
CVSS Score: 9.8 (CRITICAL)
References: http://www.debian.org/security/2017/dsa-3969; http://www.securityfocus.com/bid/99411; http://www.securitytracker.com/id/1038722
CVE: CVE-2017-10914
Published: 2017-07-05
Description: The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory consumption), or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362, CWE-415
References: http://www.debian.org/security/2017/dsa-3969; http://www.securityfocus.com/bid/99411; http://www.securitytracker.com/id/1038722
CVE: CVE-2017-10915
Published: 2017-07-05
Description: The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka XSA-219.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-362
References: http://www.debian.org/security/2017/dsa-3969; http://www.securityfocus.com/bid/99174; https://security.gentoo.org/glsa/201708-03
CVE: CVE-2017-10916
Published: 2017-07-05
Description: The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it easier for guest OS users to defeat ASLR and other protection mechanisms, aka XSA-220.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.debian.org/security/2017/dsa-3969; http://www.securityfocus.com/bid/99167; http://www.securitytracker.com/id/1038730
CVE: CVE-2017-10917
Published: 2017-07-05
Description: Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly obtain sensitive information, aka XSA-221.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-476
References: http://www.debian.org/security/2017/dsa-3969; http://www.securityfocus.com/bid/99157; http://www.securitytracker.com/id/1038731
CVE: CVE-2017-10918
Published: 2017-07-05
Description: Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-20
References: http://www.debian.org/security/2017/dsa-3969; http://www.securityfocus.com/bid/99161; http://www.securitytracker.com/id/1038732
CVE: CVE-2017-10919
Published: 2017-07-05
Description: Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-223.
CVSS Score: 6.5 (MEDIUM)
References: http://www.debian.org/security/2017/dsa-3969; http://www.securityfocus.com/bid/99159; http://www.securitytracker.com/id/1038733
CVE: CVE-2017-10920
Published: 2017-07-05
Description: The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 1.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3969; http://www.securitytracker.com/id/1038734; https://security.gentoo.org/glsa/201708-03
CVE: CVE-2017-10921
Published: 2017-07-05
Description: The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 2.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3969; http://www.securitytracker.com/id/1038734; https://security.gentoo.org/glsa/201708-03