deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-9477
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]20a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]21a-CMCST) devices allows remote attackers to discover the CM MAC address by connecting to the device's xfinitywifi hotspot.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-19.wifi-dhcp-cm-mac-leak.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-19.wifi-dhcp-cm-mac-leak.txt
CVE: CVE-2017-9478
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]20a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]21a-CMCST) devices sets the CM MAC address to a value with a two-byte offset from the MTA/VoIP MAC address, which indirectly allows remote attackers to discover hidden Home Security Wi-Fi networks by leveraging the embedding of the MTA/VoIP MAC address into the DNS hostname.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-20.emta-reverse-dns.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-20.emta-reverse-dns.txt
CVE: CVE-2017-9479
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]21a-CMCST) devices allows remote attackers to execute arbitrary commands as root by leveraging local network access and connecting to the syseventd server, as demonstrated by copying configuration data into a readable filesystem.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-22.syseventd.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-22.syseventd.txt
CVE: CVE-2017-9480
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]21a-CMCST) devices allows local users (e.g., users who have command access as a consequence of CVE-2017-9479 exploitation) to read arbitrary files via UPnP access to /var/IGD/.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-23.upnp-directory-write.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-23.upnp-directory-write.txt
CVE: CVE-2017-9481
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]21a-CMCST) devices allows remote attackers to obtain unintended access to the Network Processor (NP) 169.254/16 IP network by adding a routing-table entry that specifies the LAN IP address as the router for that network.
CVSS Score: 7.5 (HIGH)
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-24.atom-ip-routing.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-24.atom-ip-routing.txt
CVE: CVE-2017-9482
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]21a-CMCST) devices allows remote attackers to obtain root access to the Network Processor (NP) Linux system by enabling a TELNET daemon (through CVE-2017-9479 exploitation) and then establishing a TELNET session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-25.atom-telnet.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-25.atom-telnet.txt
CVE: CVE-2017-9483
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]21a-CMCST) devices allows Network Processor (NP) Linux users to obtain root access to the Application Processor (AP) Linux system via shell metacharacters in commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-26.arbitrary-command-execution.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-26.arbitrary-command-execution.txt
CVE: CVE-2017-9484
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]20a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]21a-CMCST) devices allows remote attackers to discover a CM MAC address by sniffing Wi-Fi traffic and performing simple arithmetic calculations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-27.ipv6-cm-mac-leak.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-27.ipv6-cm-mac-leak.txt
CVE: CVE-2017-9485
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]21a-CMCST) devices allows remote attackers to write arbitrary data to a known /var/tmp/sess_* pathname by leveraging the device's operation in UI dev mode.
CVSS Score: 7.5 (HIGH)
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-28.session-cookie-write.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-28.session-cookie-write.txt
CVE: CVE-2017-9486
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]21a-CMCST) devices allows remote attackers to compute password-of-the-day values via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-29.password-of-the-day.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-29.password-of-the-day.txt
CVE: CVE-2017-9487
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]21a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to discover a WAN IPv6 IP address by leveraging knowledge of the CM MAC address.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-30.wan0-ipv6-cm-mac.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-30.wan0-ipv6-cm-mac.txt
CVE: CVE-2017-9488
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]21a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to access the web UI by establishing a session to the wan0 WAN IPv6 address and then entering unspecified hardcoded credentials. This wan0 interface cannot be accessed from the public Internet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-31.stb-remote-webui.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-31.stb-remote-webui.txt
CVE: CVE-2017-9489
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939B (firmware version dpc3939b-v303r[PII_REDACTED]21a-CMCST) devices allows configuration changes via CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-33.cross-site-request-forgery.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-33.cross-site-request-forgery.txt
CVE: CVE-2017-9490
Published: 2017-07-31
Description: The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows configuration changes via CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-33.cross-site-request-forgery.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-33.cross-site-request-forgery.txt
CVE: CVE-2017-9491
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]20a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]21a-CMCST); Cisco DPC3939B (firmware version dpc3939b-v303r[PII_REDACTED]21a-CMCST); Cisco DPC3941T (firmware version DPC3941_2.5s3_PROD_sey); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices does not set the secure flag for cookies in an https session to an administration application, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-35.improper-cookie-flags.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-35.improper-cookie-flags.txt
CVE: CVE-2017-9492
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]20a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]21a-CMCST); Cisco DPC3939B (firmware version dpc3939b-v303r[PII_REDACTED]21a-CMCST); Cisco DPC3941T (firmware version DPC3941_2.5s3_PROD_sey); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices does not include the HTTPOnly flag in a Set-Cookie header for administration applications, which makes it easier for remote attackers to obtain potentially sensitive information via script access to cookies.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-35.improper-cookie-flags.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-35.improper-cookie-flags.txt
CVE: CVE-2017-9493
Published: 2017-07-31
Description: The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows remote attackers to conduct successful forced-pairing attacks (between an RF4CE remote and a set-top box) by repeatedly transmitting the same pairing code.
CVSS Score: 6.3 (MEDIUM)
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-37.rf4ce-forced-pairing.vendor.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-37.rf4ce-forced-pairing.vendor.txt
CVE: CVE-2017-9494
Published: 2017-07-31
Description: The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows remote attackers to enable a Remote Web Inspector that is accessible from the public Internet.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-38.remote-web-inspector.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-38.remote-web-inspector.txt
CVE: CVE-2017-9495
Published: 2017-07-31
Description: The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to read arbitrary files by pressing "EXIT, Down, Down, 2" on an RF4CE remote to reach the diagnostic display, and then launching a Remote Web Inspector script.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-39.arbitrary-file-read.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-39.arbitrary-file-read.txt
CVE: CVE-2017-9496
Published: 2017-07-31
Description: The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to access an SNMP server by connecting a cable to the Ethernet port, and then establishing communication with the device's link-local IPv6 address.
CVSS Score: 6.8 (MEDIUM)
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-40.ethernet-snmp.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-40.ethernet-snmp.txt
CVE: CVE-2017-9497
Published: 2017-07-31
Description: The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to execute arbitrary commands as root by pulling up the diagnostics menu on the set-top box, and then posting to a Web Inspector route.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-41.root-command-execution.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-41.root-command-execution.txt
CVE: CVE-2017-9498
Published: 2017-07-31
Description: The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for the firmware.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-354
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-42.remote-OTA.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-42.remote-OTA.txt
CVE: CVE-2017-9521
Published: 2017-07-31
Description: The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]20a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20[PII_REDACTED]21a-CMCST); Cisco DPC3939B (firmware version dpc3939b-v303r[PII_REDACTED]21a-CMCST); Cisco DPC3941T (firmware version DPC3941_2.5s3_PROD_sey); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows remote attackers to execute arbitrary code via a specific (but unstated) exposed service. NOTE: the scope of this CVE does NOT include the concept of "Unnecessary Services" in general; the scope is only a single service that is unnecessarily exposed, leading to remote code execution. The details of that service might be disclosed at a later date.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-32.unnecessary-services.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-32.unnecessary-services.txt
CVE: CVE-2017-9522
Published: 2017-07-31
Description: The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which makes it easier for remote attackers to obtain network access by reading a beacon frame.
CVSS Score: 7.5 (HIGH)
References: https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-21.default-wifi-credentials.txt; https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-21.default-wifi-credentials.txt
CVE: CVE-2017-11114
Published: 2017-07-31
Description: The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a crafted HTML file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2017/Jul/76; http://seclists.org/fulldisclosure/2017/Jul/76
CVE: CVE-2017-11115
Published: 2017-07-31
Description: The ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted jpg file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2017/Jul/77; https://sourceforge.net/p/openexif/bugs/18/; http://seclists.org/fulldisclosure/2017/Jul/77
CVE: CVE-2017-11116
Published: 2017-07-31
Description: The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted jpg file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2017/Jul/77; https://sourceforge.net/p/openexif/bugs/18/; http://seclists.org/fulldisclosure/2017/Jul/77
CVE: CVE-2017-11117
Published: 2017-07-31
Description: The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted jpg file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2017/Jul/77; https://sourceforge.net/p/openexif/bugs/18/; http://seclists.org/fulldisclosure/2017/Jul/77
CVE: CVE-2017-11118
Published: 2017-07-31
Description: The ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted jpg file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://seclists.org/fulldisclosure/2017/Jul/77; https://sourceforge.net/p/openexif/bugs/18/; http://seclists.org/fulldisclosure/2017/Jul/77
CVE: CVE-2017-11119
Published: 2017-07-31
Description: The chk_mem_access function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted nsf file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2017/Jul/78; http://seclists.org/fulldisclosure/2017/Jul/78
CVE: CVE-2017-11330
Published: 2017-07-31
Description: The DivFixppCore::avi_header_fix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote attackers to cause a denial of service (invalid memory write and application crash) via a crafted avi file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2017/Jul/79; https://www.exploit-db.com/exploits/42396/; http://seclists.org/fulldisclosure/2017/Jul/79
CVE: CVE-2017-11331
Published: 2017-07-31
Description: The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocation error) via a crafted wav file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2017/Jul/80; https://www.exploit-db.com/exploits/42397/; http://seclists.org/fulldisclosure/2017/Jul/80
CVE: CVE-2017-11332
Published: 2017-07-31
Description: The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted wav file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://seclists.org/fulldisclosure/2017/Jul/81; https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html; https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html
CVE: CVE-2017-11333
Published: 2017-07-31
Description: The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://seclists.org/fulldisclosure/2017/Jul/82; https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html; https://lists.debian.org/debian-lts-announce/2019/12/msg00021.html
CVE: CVE-2017-11358
Published: 2017-07-31
Description: The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted hcom file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2017/Jul/81; http://www.openwall.com/lists/oss-security/2023/02/03/3; http://www.openwall.com/lists/oss-security/2023/02/04/2
CVE: CVE-2017-11359
Published: 2017-07-31
Description: The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted snd file, during conversion to a wav file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://seclists.org/fulldisclosure/2017/Jul/81; https://lists.debian.org/debian-lts-announce/2017/11/msg00043.html; https://lists.debian.org/debian-lts-announce/2019/03/msg00007.html
CVE: CVE-2017-11546
Published: 2017-07-31
Description: The insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mid file. NOTE: a crash might be relevant when using the --background option.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://seclists.org/fulldisclosure/2017/Jul/83; http://seclists.org/fulldisclosure/2017/Jul/83
CVE: CVE-2017-11547
Published: 2017-07-31
Description: The resample_gauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a setuid-root installation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2017/Jul/83; http://seclists.org/fulldisclosure/2017/Jul/83
CVE: CVE-2017-11548
Published: 2017-07-31
Description: The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory corruption) via a crafted MP3 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2017/Jul/84; https://www.exploit-db.com/exploits/42400/; http://seclists.org/fulldisclosure/2017/Jul/84
CVE: CVE-2017-11549
Published: 2017-07-31
Description: The play_midi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mid file. NOTE: CPU consumption might be relevant when using the --background option.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-834
References: http://seclists.org/fulldisclosure/2017/Jul/83; http://seclists.org/fulldisclosure/2017/Jul/83
CVE: CVE-2017-11550
Published: 2017-07-31
Description: The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application crash) via a crafted mp3 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://seclists.org/fulldisclosure/2017/Jul/85; http://seclists.org/fulldisclosure/2017/Jul/85
CVE: CVE-2017-11551
Published: 2017-07-31
Description: The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2017/Jul/85; http://seclists.org/fulldisclosure/2017/Jul/85
CVE: CVE-2017-11735
Published: 2017-07-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue in the originally named product.  Notes: none