deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-7112
Published: 2018-12-03
Description: The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of privileged information. This issue was resolved in previously provided firmware updates as follows. The HPE Windows firmware installer was updated in the system ROM updates which also addressed the original Spectre/Meltdown set of vulnerabilities. At that time, the Windows firmware installer was also updated in the versions of HPE Integrated Lights-Out 2, 3, and 4 (iLO 2, 3, and 4) listed in the security bulletin. The updated HPE Windows firmware installer was released in the system ROM and HPE Integrated Lights-Out (iLO) releases documented in earlier HPE Security Bulletins: HPESBHF03805, HPESBHF03835, HPESBHF03831. Windows-based systems that have already been updated to the system ROM or iLO versions described in these security bulletins require no further action.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securitytracker.com/id/1041984; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03805en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us
CVE: CVE-2018-7113
Published: 2018-12-03
Description: A security vulnerability in HPE Integrated Lights-Out 5 (iLO 5) prior to v1.37 could be locally exploited to bypass the security restrictions for firmware updates.
CVSS Score: 6.6 (MEDIUM)
References: http://www.securitytracker.com/id/1042010; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03894en_us; http://www.securitytracker.com/id/1042010
CVE: CVE-2018-7114
Published: 2018-12-03
Description: HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbman leading to code execution. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/106211; http://www.securitytracker.com/id/1042182; https://support.hpe.com/hpsc/doc/public/display?docId=hpesbhf03906en_us
CVE: CVE-2018-7115
Published: 2018-12-03
Description: HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote buffer overflow in dbman.exe opcode 10001 on Windows. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/106211; http://www.securitytracker.com/id/1042182; https://support.hpe.com/hpsc/doc/public/display?docId=hpesbhf03906en_us
CVE: CVE-2018-7116
Published: 2018-12-03
Description: HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This problem is resolved in IMC PLAT 7.3 (E0605P06) or subsequent versions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/106211; http://www.securitytracker.com/id/1042182; https://support.hpe.com/hpsc/doc/public/display?docId=hpesbhf03906en_us
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-03
Description: There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. There is an exploitable blind SQL injection vulnerability via the del_ids variable by POST request.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://www.vapidlabs.com/advisory.php?v=203; https://wordpress.org/plugins/bft-autoresponder/; https://www.exploit-db.com/exploits/45434/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-03
Description: There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.vapidlabs.com/advisory.php?v=203; https://wordpress.org/plugins/bft-autoresponder/; https://www.exploit-db.com/exploits/45434/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-03
Description: These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in bft_list.html.php:43: via the filter_signup_date parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.vapidlabs.com/advisory.php?v=203; https://wordpress.org/plugins/bft-autoresponder/; https://www.exploit-db.com/exploits/45434/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-03
Description: These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:14: via POST request variable classes
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.vapidlabs.com/advisory.php?v=203; https://wordpress.org/plugins/bft-autoresponder/; https://www.exploit-db.com/exploits/45434/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-03
Description: There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:15: via POST request variable html_id.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.vapidlabs.com/advisory.php?v=203; https://wordpress.org/plugins/bft-autoresponder/; https://www.exploit-db.com/exploits/45434/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-03
Description: There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in list-user.html.php:4: via GET request offset variable.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.vapidlabs.com/advisory.php?v=203; https://wordpress.org/plugins/bft-autoresponder/; https://www.exploit-db.com/exploits/45434/
CVE: CVE-2[PII_REDACTED]
Published: 2018-12-03
Description: There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in unsubscribe.html.php:3: via GET reuqest to the email variable.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.vapidlabs.com/advisory.php?v=203; https://wordpress.org/plugins/bft-autoresponder/; https://www.exploit-db.com/exploits/45434/
CVE: CVE-2018-16863
Published: 2018-12-03
Description: It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7.
CVSS Score: 7.3 (HIGH)
CWE: CWE-184, CWE-78
References: http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=520bb0ea7519; http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=5516c614dc33; http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=78911a01b67d
CVE: CVE-2018-19824
Published: 2018-12-03
Description: In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/106109; https://access.redhat.com/errata/RHSA-2019:2703; https://bugzilla.suse.com/show_bug.cgi?id=1118152
CVE: CVE-2018-19826
Published: 2018-12-03
Description: In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop (containing a Sass::Inspect::operator()(Sass::String_Quoted*) stack frame) may cause a Denial of Service via crafted sass input files with stray '&' or '/' characters. NOTE: Upstream comments indicate this issue is closed as "won't fix" and "works as intended" by design
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/sass/libsass/issues/2781; https://github.com/sass/libsass/issues/2781
CVE: CVE-2018-19827
Published: 2018-12-03
Description: In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that may cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE: CVE-2018-19835
Published: 2018-12-03
Description: Metinfo 6.1.3 has reflected XSS via the admin/column/move.php lang_columnerr4 parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/imagemlt/metinfo/tree/master/reflected_xss_bypass_chrome; https://github.com/imagemlt/metinfo/tree/master/reflected_xss_bypass_chrome
CVE: CVE-2018-19836
Published: 2018-12-03
Description: In Metinfo 6.1.3, include/interface/applogin.php allows setting arbitrary HTTP headers (including the Cookie header), and common.inc.php allows registering variables from the $_COOKIE value. This issue can, for example, be exploited in conjunction with CVE-2018-19835 to bypass many XSS filters such as the Chrome XSS filter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-732, CWE-913
References: https://github.com/imagemlt/metinfo/tree/master/reflected_xss_bypass_chrome; https://github.com/imagemlt/metinfo/tree/master/reflected_xss_bypass_chrome
CVE: CVE-2018-2515
Published: 2018-12-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-2815.  Reason: This candidate is a duplicate of CVE-2018-2815.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2018-2815 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-6439
Published: 2018-12-03
Description: A Vulnerability in the configdownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access.
CVSS Score: 7.8 (HIGH)
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-730; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-730
CVE: CVE-2018-6440
Published: 2018-12-03
Description: A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain sensitive information and possibly cause a denial of service attack.
CVSS Score: 9.1 (CRITICAL)
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-733; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-733
CVE: CVE-2018-14695
Published: 2018-12-03
Description: Incorrect access control in the /mysql/api/diags.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve diagnostic information via the "name" URL parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc; https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc
CVE: CVE-2018-14696
Published: 2018-12-03
Description: Incorrect access control in the /mysql/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve sensitive system information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc; https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc
CVE: CVE-2018-14697
Published: 2018-12-03
Description: Cross-site scripting in the /DroboAccess/enable_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to execute JavaScript via the username URL parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc; https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc
CVE: CVE-2018-14698
Published: 2018-12-03
Description: Cross-site scripting in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to execute JavaScript via the "username" URL parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc; https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc
CVE: CVE-2018-14699
Published: 2018-12-03
Description: System command injection in the /DroboAccess/enable_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to execute system commands via the "username" URL parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc; https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc
CVE: CVE-2018-14700
Published: 2018-12-03
Description: Incorrect access control in the /mysql/api/logfile.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve MySQL log files via the "name" URL parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc; https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc
CVE: CVE-2018-14701
Published: 2018-12-03
Description: System command injection in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to execute system commands via the "username" URL parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/156710/Drobo-5N2-4.1.1-Remote-Command-Injection.html; https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc; http://packetstormsecurity.com/files/156710/Drobo-5N2-4.1.1-Remote-Command-Injection.html
CVE: CVE-2018-14702
Published: 2018-12-03
Description: Incorrect access control in the /drobopix/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve sensitive system information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc; https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc
CVE: CVE-2018-14703
Published: 2018-12-03
Description: Incorrect access control in the /mysql/api/droboapp/data endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve the MySQL database root password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc; https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc
CVE: CVE-2018-14704
Published: 2018-12-03
Description: Cross-site scripting in the MySQL API error page in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to execute JavaScript via a malformed URL path.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc; https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc
CVE: CVE-2018-14706
Published: 2018-12-03
Description: System command injection in the /DroboPix/api/drobopix/demo endpoint on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to execute system commands via the payload in a POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc; https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc
CVE: CVE-2018-14707
Published: 2018-12-03
Description: Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload files to arbitrary locations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc; https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc
CVE: CVE-2018-14708
Published: 2018-12-03
Description: An insecure transport protocol used by Drobo Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to intercept network traffic.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc; https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc
CVE: CVE-2018-14709
Published: 2018-12-03
Description: Incorrect access control in the Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to bypass authentication due to insecure token generation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/156710/Drobo-5N2-4.1.1-Remote-Command-Injection.html; https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc; http://packetstormsecurity.com/files/156710/Drobo-5N2-4.1.1-Remote-Command-Injection.html
CVE: CVE-2018-3854
Published: 2018-12-03
Description: An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2018 for Mac version 5.2.2. A specially crafted sqlite3 request can cause the removal of the password protection, allowing an attacker to access and modify the data without knowing the password. An attacker needs to have access to the password-protected files to trigger this vulnerability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0537; https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0537
CVE: CVE-2018-4019
Published: 2018-12-03
Description: An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated POST requests to the administration web interface. Command injection is possible in the `powerd_normal_mode` parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0690; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0690
CVE: CVE-2018-4020
Published: 2018-12-03
Description: An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated POST requests to the administration web interface. Command injection is possible in the `powerd_ac_mode` POST parameter parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0690; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0690
CVE: CVE-2018-4021
Published: 2018-12-03
Description: An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the parameters of a specific POST request. The attacker can exploit this and gain the ability to execute arbitrary commands on the system. An attacker needs to be able to send authenticated POST requests to the administration web interface. Command injection is possible in the `powerd_battery_mode` POST parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0690; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0690
CVE: CVE-2018-19837
Published: 2018-12-04
Description: In LibSass prior to 3.5.5, Sass::Eval::operator()(Sass::Binary_Expression*) inside eval.cpp allows attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, because of certain incorrect parsing of '%' as a modulo operator in parser.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE: CVE-2018-19838
Published: 2018-12-04
Description: In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENT_AST_OPERATORS expansion allow attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, as demonstrated by recursive calls involving clone(), cloneChildren(), and copy().
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE: CVE-2018-19839
Published: 2018-12-04
Description: In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00047.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00027.html
CVE: CVE-2018-19840
Published: 2018-12-04
Description: The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resource exhaustion caused by an infinite loop) via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00029.html; http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html; https://github.com/dbry/WavPack/commit/070ef6f138956d9ea9612e[PII_REDACTED]9dbefe51
CVE: CVE-2018-19841
Published: 2018-12-04
Description: The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (out-of-bounds read and application crash) via a crafted WavPack Lossless Audio file, as demonstrated by wvunpack.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00029.html; http://packetstormsecurity.com/files/155743/Slackware-Security-Advisory-wavpack-Updates.html; https://github.com/dbry/WavPack/commit/bba5389dc598a92bdf2b297c3ea34620b6679b5b
CVE: CVE-2018-19842
Published: 2018-12-04
Description: getToken in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (stack-based buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/radare/radare2/commit/66191f780863ea8c66ace4040d0d04a8842e8432; https://github.com/radare/radare2/issues/12239; https://github.com/radare/radare2/commit/66191f780863ea8c66ace4040d0d04a8842e8432