deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-9051
Published: 2017-05-18
Description: libav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsv_read_chunk function in libavformat/nsvdec.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476
References: http://www.securityfocus.com/bid/98548; https://bugzilla.libav.org/show_bug.cgi?id=1039; https://github.com/libav/libav/commit/fe6eea99efac66839052af547426518efd970b24
CVE: CVE-2017-9052
Published: 2017-05-18
Description: An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarf_formsdata() is due to a failure to check a pointer for being in bounds (in a few places in this function) and a failure in a check in dwarf_attr_list().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-125
References: http://www.securityfocus.com/bid/98553; https://www.prevanders.net/dwarfbug.html; http://www.securityfocus.com/bid/98553
CVE: CVE-2017-9053
Published: 2017-05-18
Description: An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in _dwarf_read_loc_expr_op() is due to a failure to check a pointer for being in bounds (in a few places in this function).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://www.prevanders.net/dwarfbug.html; https://www.prevanders.net/dwarfbug.html
CVE: CVE-2017-9054
Published: 2017-05-18
Description: An issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21. In _dwarf_decode_s_leb128_chk() a byte pointer was dereferenced just before it was checked for being in bounds, leading to a heap-based buffer over-read.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://www.prevanders.net/dwarfbug.html; https://www.prevanders.net/dwarfbug.html
CVE: CVE-2017-9055
Published: 2017-05-18
Description: An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarf_formsdata() a few data types were not checked for being in bounds, leading to a heap-based buffer over-read.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://www.prevanders.net/dwarfbug.html; https://www.prevanders.net/dwarfbug.html
CVE: CVE-2017-9058
Published: 2017-05-18
Description: In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZECHECK macro in lib/ytnef.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862556; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFJWMUEUC4ILH2HEOCYVVLQT654ZMCGQ/; https://usn.ubuntu.com/3667-1/
CVE: CVE-2017-9059
Published: 2017-05-18
Description: The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service (resource consumption) by leveraging improper channel callback shutdown when unmounting an NFSv4 filesystem, aka a "module reference and kernel daemon" leak.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c70422f760c120480fee4de6c38804c72aa26bc1; http://www.securityfocus.com/bid/98551; https://bugzilla.redhat.com/show_bug.cgi?id=1451386
CVE: CVE-2017-7433
Published: 2017-05-18
Description: An absolute path traversal vulnerability (CWE-36) in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download arbitrary files from the server by submitting a specially crafted request to the viewFile endpoint. Note that the attack can be performed without authentication if Guest access is enabled (Guest access is disabled by default).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.novell.com/support/kb/doc.php?id=7019005; https://www.novell.com/support/kb/doc.php?id=7019005
CVE: CVE-2017-9061
Published: 2017-05-18
Description: In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability exists when attempting to upload very large files, because the error message does not properly restrict presentation of the filename.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2017/dsa-3870; http://www.securityfocus.com/bid/98509; http://www.securitytracker.com/id/1038520
CVE: CVE-2017-9062
Published: 2017-05-18
Description: In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API.
CVSS Score: 8.6 (HIGH)
CWE: CWE-79, CWE-352, CWE-601
References: http://www.debian.org/security/2017/dsa-3870; http://www.securityfocus.com/bid/98509; http://www.securitytracker.com/id/1038520
CVE: CVE-2017-9063
Published: 2017-05-18
Description: In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to the Customizer exists, involving an invalid customization session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2017/dsa-3870; http://www.securityfocus.com/bid/98509; http://www.securitytracker.com/id/1038520
CVE: CVE-2017-9064
Published: 2017-05-18
Description: In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is not required for updating credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.debian.org/security/2017/dsa-3870; http://www.securityfocus.com/bid/98509; http://www.securitytracker.com/id/1038520
CVE: CVE-2017-9065
Published: 2017-05-18
Description: In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.debian.org/security/2017/dsa-3870; http://www.securityfocus.com/bid/98509; http://www.securitytracker.com/id/1038520
CVE: CVE-2017-9066
Published: 2017-05-18
Description: In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: http://www.securityfocus.com/bid/98509; http://www.securitytracker.com/id/1038520; https://codex.wordpress.org/Version_4.7.5
CVE: CVE-2017-7503
Published: 2017-05-18
Description: It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE. An attacker could use this flaw to launch DoS or SSRF attacks, or read files from the server where EAP is deployed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://www.securityfocus.com/bid/98546; https://bugzilla.redhat.com/show_bug.cgi?id=1451960; http://www.securityfocus.com/bid/98546
CVE: CVE-2017-9067
Published: 2017-05-18
Description: In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient validation of the action parameter to setup/index.php, aka directory traversal.
CVSS Score: 7.0 (HIGH)
CWE: CWE-22
References: https://citadelo.com/en/2017/04/modx-revolution-cms/; https://github.com/modxcms/revolution/pull/13422; https://github.com/modxcms/revolution/pull/13428
CVE: CVE-2017-9068
Published: 2017-05-18
Description: In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by the database_type parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://citadelo.com/en/2017/04/modx-revolution-cms/; https://github.com/modxcms/revolution/pull/13424; https://citadelo.com/en/2017/04/modx-revolution-cms/
CVE: CVE-2017-9069
Published: 2017-05-18
Description: In MODX Revolution before 2.5.7, a user with file upload permissions is able to execute arbitrary code by uploading a file with the name .htaccess.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://citadelo.com/en/2017/04/modx-revolution-cms/; https://github.com/modxcms/revolution/pull/13423; https://citadelo.com/en/2017/04/modx-revolution-cms/
CVE: CVE-2017-9070
Published: 2017-05-18
Description: In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitle parameter to connectors/index.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://citadelo.com/en/2017/04/modx-revolution-cms/; https://github.com/modxcms/revolution/pull/13415; https://citadelo.com/en/2017/04/modx-revolution-cms/
CVE: CVE-2017-9071
Published: 2017-05-18
Description: In MODX Revolution before 2.5.7, an attacker might be able to trigger XSS by injecting a payload into the HTTP Host header of a request. This is exploitable only in conjunction with other issues such as Cache Poisoning.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://citadelo.com/en/2017/04/modx-revolution-cms/; https://github.com/modxcms/revolution/pull/13426; https://citadelo.com/en/2017/04/modx-revolution-cms/
CVE: CVE-2017-9072
Published: 2017-05-18
Description: Two CalendarXP products have XSS in common parts of HTML files. CalendarXP FlatCalendarXP through 9.9.290 has XSS in iflateng.htm and nflateng.htm. CalendarXP PopCalendarXP through 9.8.308 has XSS in ipopeng.htm and npopeng.htm.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.securityfocus.com/bid/102632; https://github.com/victorwon/calendarxp/issues/2
CVE: CVE-2017-3980
Published: 2017-05-18
Description: A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated users to execute a command of their choice via an authenticated ePO session.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/98559; https://kc.mcafee.com/corporate/index?page=content&id=SB10196; http://www.securityfocus.com/bid/98559
CVE: CVE-2017-6621
Published: 2017-05-18
Description: A vulnerability in the web interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to insufficient protection of sensitive data when responding to an HTTP request on the web interface. An attacker could exploit the vulnerability by sending a crafted HTTP request to the application to access specific system files. An exploit could allow the attacker to obtain sensitive information about the application which could include user credentials. This vulnerability affects Cisco Prime Collaboration Provisioning Software Releases 10.6 through 11.5. Cisco Bug IDs: CSCvc99626.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/98522; http://www.securitytracker.com/id/1038508; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp2
CVE: CVE-2017-6622
Published: 2017-05-18
Description: A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass authentication and perform command injection with root privileges. The vulnerability is due to missing security constraints in certain HTTP request methods, which could allow access to files via the web interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to the targeted application. This vulnerability affects Cisco Prime Collaboration Provisioning Software Releases prior to 12.1. Cisco Bug IDs: CSCvc98724.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264, CWE-862
References: http://www.securityfocus.com/bid/98520; http://www.securitytracker.com/id/1038507; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp1
CVE: CVE-2017-6623
Published: 2017-05-18
Description: A vulnerability in a script file that is installed as part of the Cisco Policy Suite (CPS) Software distribution for the CPS appliance could allow an authenticated, local attacker to escalate their privilege level to root. The vulnerability is due to incorrect sudoers permissions on the script file. An attacker could exploit this vulnerability by authenticating to the device and providing crafted user input at the CLI, using this script file to escalate their privilege level and execute commands as root. A successful exploit could allow the attacker to acquire root-level privileges and take full control of the appliance. The user has to be logged-in to the device with valid credentials for a specific set of users. The Cisco Policy Suite application is vulnerable when running software versions 10.0.0, 10.1.0, or 11.0.0. Cisco Bug IDs: CSCvc07366.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264, CWE-269
References: http://www.securityfocus.com/bid/98521; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-cps; http://www.securityfocus.com/bid/98521
CVE: CVE-2017-6652
Published: 2017-05-18
Description: A vulnerability in the web framework of the Cisco TelePresence IX5000 Series could allow an unauthenticated, remote attacker to access arbitrary files on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using directory traversal techniques to read files within the Cisco TelePresence IX5000 Series filesystem. This vulnerability affects Cisco TelePresence IX5000 Series devices running software version 8.2.0. Cisco Bug IDs: CSCvc52325.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-20, CWE-22
References: http://www.securityfocus.com/bid/98519; http://www.securitytracker.com/id/1038509; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-telepresence-ix5000
CVE: CVE-2017-9073
Published: 2017-05-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-0176.  Reason: This candidate is a reservation duplicate of CVE-2017-0176.  Notes: All CVE users should reference CVE-2017-0176 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-5173
Published: 2017-05-19
Description: An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An improper neutralization of special elements vulnerability has been identified. If special elements are not properly neutralized, an attacker can call multiple parameters that can allow access to the root level operating system which could allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: http://www.securityfocus.com/bid/96209; https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02; https://www.exploit-db.com/exploits/41360/
CVE: CVE-2017-5174
Published: 2017-05-19
Description: An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An authentication bypass vulnerability has been identified. The existing file system architecture could allow attackers to bypass the access control that may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: http://www.securityfocus.com/bid/96209; https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02; https://www.exploit-db.com/exploits/41360/
CVE: CVE-2017-5176
Published: 2017-05-19
Description: A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW). The following versions are affected: Connected Components Workbench - Developer Edition, v9.01.00 and earlier: 9328-CCWDEVENE, 9328-CCWDEVZHE, 9328-CCWDEVFRE, 9328-CCWDEVITE, 9328-CCWDEVDEE, 9328-CCWDEVESE, and 9328-CCWDEVPTE; and Connected Components Workbench - Free Standard Edition (All Supported Languages), v9.01.00 and earlier. Certain DLLs included with versions of CCW software can be potentially hijacked to allow an attacker to gain rights to a victim's affected personal computer. Such access rights can be at the same or potentially higher level of privileges as the compromised user account, including and up to computer administrator privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-427, CWE-427
References: http://www.securityfocus.com/bid/97000; https://ics-cert.us-cert.gov/advisories/ICSA-17-047-01; http://www.securityfocus.com/bid/97000
CVE: CVE-2017-5177
Published: 2017-05-19
Description: A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overflow vulnerability has been identified, where an attacker with a specially crafted packet could overflow the fixed length buffer. This could allow remote code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121, CWE-119
References: http://www.securityfocus.com/bid/96413; https://ics-cert.us-cert.gov/advisories/ICSA-17-054-01; https://www.exploit-db.com/exploits/42693/
CVE: CVE-2017-6016
Published: 2017-05-19
Description: An Improper Access Control issue was discovered in LCDS - Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA. The following versions are affected: Versions 4.1 and prior versions released before January 20, 2017. An Improper Access Control vulnerability has been identified, which may allow an authenticated user to modify application files to escalate privileges.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/96942; https://ics-cert.us-cert.gov/advisories/ICSA-17-075-01; http://www.securityfocus.com/bid/96942
CVE: CVE-2017-6025
Published: 2017-05-19
Description: A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A malicious user could overflow the stack buffer by providing overly long strings to functions that handle the XML. Because the function does not verify string size before copying to memory, the attacker may then be able to crash the application or run arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-119
References: http://www.securityfocus.com/bid/97174; https://ics-cert.us-cert.gov/advisories/ICSA-17-087-02; http://www.securityfocus.com/bid/97174
CVE: CVE-2017-6027
Published: 2017-05-19
Description: An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A specially crafted web server request may allow the upload of arbitrary files (with a dangerous type) to the CODESYS Web Server without authorization which may allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: http://www.securityfocus.com/bid/97174; https://ics-cert.us-cert.gov/advisories/ICSA-17-087-02; http://www.securityfocus.com/bid/97174
CVE: CVE-2017-6048
Published: 2017-05-19
Description: A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior. Successful exploitation of this vulnerability could result in the attacker breaking out of the jailed shell and gaining full access to the system.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-131-02; https://ics-cert.us-cert.gov/advisories/ICSA-17-131-02
CVE: CVE-2017-7907
Published: 2017-05-19
Description: An Improper XML Parser Configuration issue was discovered in Schneider Electric Wonderware Historian Client 2014 R2 SP1 and prior. An improperly restricted XML parser (with improper restriction of XML external entity reference, or XXE) may allow an attacker to enter malicious input through the application which could cause a denial of service or disclose file contents from a server or connected network.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-611, CWE-611
References: http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000120/; http://www.securityfocus.com/bid/98254; http://www.securitytracker.com/id/1038542
CVE: CVE-2017-7935
Published: 2017-05-19
Description: A Resource Exhaustion issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may compromise the device's availability by performing multiple initial VPN requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01; https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01
CVE: CVE-2017-7937
Published: 2017-05-19
Description: An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01; https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01
CVE: CVE-2017-9074
Published: 2017-05-19
Description: The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service (out-of-bounds read and BUG) or possibly have unspecified other impact via crafted socket and send system calls.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2423496af35d94a87156b063ea5cedffc10a70a1; http://www.debian.org/security/2017/dsa-3886; http://www.securityfocus.com/bid/98577
CVE: CVE-2017-9075
Published: 2017-05-19
Description: The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890.
CVSS Score: 7.8 (HIGH)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fdcee2cbb8438702ea1b328fb6e0ac5e9a40c7f8; http://www.debian.org/security/2017/dsa-3886; http://www.securityfocus.com/bid/98597
CVE: CVE-2017-9076
Published: 2017-05-19
Description: The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890.
CVSS Score: 7.8 (HIGH)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=83eaddab4378db256d00d295bda6ca997cd13a52; http://www.debian.org/security/2017/dsa-3886; http://www.securityfocus.com/bid/98586
CVE: CVE-2017-9077
Published: 2017-05-19
Description: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890.
CVSS Score: 7.8 (HIGH)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=83eaddab4378db256d00d295bda6ca997cd13a52; http://www.debian.org/security/2017/dsa-3886; http://www.securityfocus.com/bid/98583
CVE: CVE-2017-9078
Published: 2017-05-19
Description: The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP listeners when the -a option is enabled.
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2017q2/001985.html; http://www.debian.org/security/2017/dsa-3859; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2017-9079
Published: 2017-05-19
Description: Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option. This occurs because ~/.ssh/authorized_keys is read with root privileges and symlinks are followed.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-732
References: http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2017q2/001985.html; http://www.debian.org/security/2017/dsa-3859; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/