deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-10266
Published: 2017-03-24
Description: LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://www.debian.org/security/2017/dsa-3844; http://www.securityfocus.com/bid/97115; https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-divide-by-zero
CVE: CVE-2016-10267
Published: 2017-03-24
Description: LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://www.debian.org/security/2017/dsa-3844; http://www.securityfocus.com/bid/97117; https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-divide-by-zero
CVE: CVE-2016-10268
Published: 2017-03-24
Description: tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 78490" and libtiff/tif_unix.c:115:23.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: http://www.securityfocus.com/bid/97202; https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/; https://github.com/vadz/libtiff/commit/5397a417e61258c69209904e652a1f409ec3b9df
CVE: CVE-2016-10269
Published: 2017-03-24
Description: LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3844; http://www.securityfocus.com/bid/97201; https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/
CVE: CVE-2016-10270
Published: 2017-03-24
Description: LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 8" and libtiff/tif_read.c:523:22.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3844; http://www.securityfocus.com/bid/97200; https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/
CVE: CVE-2016-10271
Published: 2017-03-24
Description: tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tif_fax3.c:413:13.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97199; https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/; https://github.com/vadz/libtiff/commit/9657bbe3cdce4aaa90e07d50c1c70ae52da0ba6a
CVE: CVE-2016-10272
Published: 2017-03-24
Description: LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tif_next.c:64:9.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/97197; https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/; https://github.com/vadz/libtiff/commit/9657bbe3cdce4aaa90e07d50c1c70ae52da0ba6a
CVE: CVE-2017-7261
Published: 2017-03-24
Description: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.5 does not check for a zero value of certain levels data, which allows local users to cause a denial of service (ZERO_SIZE_PTR dereference, and GPF and possibly panic) via a crafted ioctl call for a /dev/dri/renderD* device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://marc.info/?t=[PII_REDACTED]0005&r=1&w=2; http://www.securityfocus.com/bid/97096; https://bugzilla.redhat.com/show_bug.cgi?id=1435719
CVE: CVE-2017-7262
Published: 2017-03-25
Description: The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service (system hang) via an application that makes a long series of FMA3 instructions, as demonstrated by the Flops test suite.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://forum.hwbot.org/showpost.php?p=480524; http://forum.hwbot.org/showthread.php?t=167605; http://www.securityfocus.com/bid/97098
CVE: CVE-2017-7259
Published: 2017-03-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2016-10273
Published: 2017-03-26
Description: Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary code or crash the web service via the (1) ateFunc, (2) ateGain, (3) ateTxCount, (4) ateChan, (5) ateRate, (6) ateMacID, (7) e2pTxPower1, (8) e2pTxPower2, (9) e2pTxPower3, (10) e2pTxPower4, (11) e2pTxPower5, (12) e2pTxPower6, (13) e2pTxPower7, (14) e2pTx2Power1, (15) e2pTx2Power2, (16) e2pTx2Power3, (17) e2pTx2Power4, (18) e2pTx2Power5, (19) e2pTx2Power6, (20) e2pTx2Power7, (21) ateTxFreqOffset, (22) ateMode, (23) ateBW, (24) ateAntenna, (25) e2pTxFreqOffset, (26) e2pTxPwDeltaB, (27) e2pTxPwDeltaG, (28) e2pTxPwDeltaMix, (29) e2pTxPwDeltaN, and (30) readE2P parameters of the /goform/formWlanMP endpoint.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://www.riskbasedsecurity.com/research/RBS-2016-004.pdf; https://www.riskbasedsecurity.com/research/RBS-2016-004.pdf
CVE: CVE-2017-7263
Published: 2017-03-26
Description: The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8698.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/97112; https://blogs.gentoo.org/ago/2017/03/03/potrace-heap-based-buffer-overflow-in-bm_readbody_bmp-bitmap_io-c-incomplete-fix-for-cve-2016-8698/; http://www.securityfocus.com/bid/97112
CVE: CVE-2017-7264
Published: 2017-03-26
Description: Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted document.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416
References: http://git.ghostscript.com/?p=mupdf.git%3Bh=2c4e5867ee699b1081527bc6c6ea0e99a35a5c27; http://www.securityfocus.com/bid/97111; https://blogs.gentoo.org/ago/2017/02/09/mupdf-use-after-free-in-fz_subsample_pixmap-pixmap-c/
CVE: CVE-2017-7266
Published: 2017-03-26
Description: Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/97088; https://github.com/Netflix/security_monkey/commit/3b4da13efabb05970c80f464a50d3c1c12262466; https://github.com/Netflix/security_monkey/pull/482
CVE: CVE-2017-2641
Published: 2017-03-26
Description: In Moodle 2.x and 3.x, SQL injection can occur via user preferences.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/96977; http://www.securitytracker.com/id/1038174; https://moodle.org/mod/forum/discuss.php?d=349419
CVE: CVE-2017-2643
Published: 2017-03-26
Description: In Moodle 3.2.x, global search displays user names for unauthenticated users.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96978; http://www.securitytracker.com/id/1038174; https://moodle.org/mod/forum/discuss.php?d=349420
CVE: CVE-2017-2644
Published: 2017-03-26
Description: In Moodle 3.x, XSS can occur via evidence of prior learning.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96979; http://www.securitytracker.com/id/1038174; https://moodle.org/mod/forum/discuss.php?d=349421
CVE: CVE-2017-2645
Published: 2017-03-26
Description: In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96982; http://www.securitytracker.com/id/1038174; https://moodle.org/mod/forum/discuss.php?d=349422
CVE: CVE-2017-5622
Published: 2017-03-26
Description: With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts with adbd enabled. Therefore, a malicious charger or a physical attacker can open up, without authorization, an ADB session with the device, in order to further exploit other vulnerabilities and/or exfiltrate sensitive information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-276
References: http://www.securityfocus.com/bid/97092; https://alephsecurity.com/vulns/aleph-2017004; http://www.securityfocus.com/bid/97092
CVE: CVE-2017-6002
Published: 2017-03-27
Description: Subrion CMS 4.0.5.10 has CSRF in admin/blog/add/. The attacker can add any blog entry, and can optionally insert XSS into that entry via the body parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.yiwang6.cn/Subrion.docx; http://www.yiwang6.cn/Subrion.docx
CVE: CVE-2017-6003
Published: 2017-03-27
Description: dotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/97089; http://www.yiwang6.cn/dotcms.docx; http://www.securityfocus.com/bid/97089
CVE: CVE-2017-6006
Published: 2017-03-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-6013
Published: 2017-03-27
Description: Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/97093; https://www.yiwang6.cn/SubrionSQL.docx; http://www.securityfocus.com/bid/97093
CVE: CVE-2017-6066
Published: 2017-03-27
Description: Subrion CMS 4.0.5 has CSRF in admin/languages/edit/1/. The attacker can perform any Edit Language action, and can optionally insert XSS via the title parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/97087; http://www.yiwang6.cn/Subrion-CSRF.docx; http://www.securityfocus.com/bid/97087
CVE: CVE-2017-6067
Published: 2017-03-27
Description: Symphony 2.6.9 has XSS in publish/notes/edit/##/saved/ via the bottom form field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/97101; https://www.yiwang6.cn/Symphony-XSS1.docx; http://www.securityfocus.com/bid/97101
CVE: CVE-2017-6068
Published: 2017-03-27
Description: Subrion CMS 4.0.5 has CSRF in admin/blocks/add/. The attacker can create any block, and can optionally insert XSS via the content parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/97091; https://www.yiwang6.cn/Subrion-CSRF1.docx; http://www.securityfocus.com/bid/97091
CVE: CVE-2017-6069
Published: 2017-03-27
Description: Subrion CMS 4.0.5 has CSRF in admin/blog/add/. The attacker can add any tag, and can optionally insert XSS via the tags parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/97196; https://www.yiwang6.cn/Subrion-CSRF2.docx; http://www.securityfocus.com/bid/97196
CVE: CVE-2017-7269
Published: 2017-03-27
Description: Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: http://www.securityfocus.com/bid/97127; http://www.securitytracker.com/id/1038168; https://0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html
CVE: CVE-2017-6957
Published: 2017-03-27
Description: Stack-based buffer overflow in the firmware in Broadcom Wi-Fi HardMAC SoC chips, when the firmware supports CCKM Fast and Secure Roaming and the feature is enabled in RAM, allows remote attackers to execute arbitrary code via a crafted reassociation response frame with a Cisco IE (156).
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/141803/Broadcom-Stack-Buffer-Overflow.html; http://www.securityfocus.com/bid/97054; https://bugs.chromium.org/p/project-zero/issues/detail?id=1051
CVE: CVE-2015-8026
Published: 2017-03-27
Description: Heap-based buffer overflow in the verify_vbr_checksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service (infinite loop) or possibly execute arbitrary code via a crafted filesystem.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2015/10/29/13; http://www.securityfocus.com/bid/77307; https://blog.fuzzing-project.org/25-Heap-overflow-and-endless-loop-in-exfatfsck-exfat-utils.html
CVE: CVE-2015-8309
Published: 2017-03-27
Description: Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://www.fomori.org/cherrymusic/Changes.html; http://www.securityfocus.com/bid/97149; https://github.com/devsnd/cherrymusic/commit/62dec34a1ea0741400dd6b6c660d303dcd651e86
CVE: CVE-2015-8310
Published: 2017-03-27
Description: Cross-site scripting (XSS) vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to inject arbitrary web script or HTML via the playlistname field when creating a new playlist.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.fomori.org/cherrymusic/Changes.html; http://www.securityfocus.com/bid/97148; https://github.com/devsnd/cherrymusic/commit/62dec34a1ea0741400dd6b6c660d303dcd651e86
CVE: CVE-2016-7474
Published: 2017-03-27
Description: In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally unrecoverable information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/97198; http://www.securitytracker.com/id/1038133; https://support.f5.com/csp/article/K52180214
CVE: CVE-2016-9922
Published: 2017-03-27
Description: The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=4299b90e9ba9ce5ca[PII_REDACTED]ba751aa1a7e70; http://www.openwall.com/lists/oss-security/2016/12/09/1; http://www.securityfocus.com/bid/94803
CVE: CVE-2017-5330
Published: 2017-03-27
Description: ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: http://www.openwall.com/lists/oss-security/2017/01/10/2; http://www.securityfocus.com/bid/95349; https://bugs.kde.org/show_bug.cgi?id=374572
CVE: CVE-2017-5850
Published: 2017-03-27
Description: httpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a series of requests for a large file using an HTTP Range header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: http://marc.info/?l=openbsd-cvs&m=[PII_REDACTED]0912&w=2; http://packetstormsecurity.com/files/140944/OpenBSD-HTTP-Server-6.0-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2017/Feb/15
CVE: CVE-2017-5899
Published: 2017-03-27
Description: Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows local users to write to arbitrary files and consequently gain root privileges via a .. (dot dot) in the randstr argument.
CVSS Score: 7.0 (HIGH)
CWE: CWE-22, CWE-362
References: http://www.openwall.com/lists/oss-security/2017/01/27/7; http://www.openwall.com/lists/oss-security/2017/02/07/4; http://www.securityfocus.com/bid/96138
CVE: CVE-2017-5931
Published: 2017-03-27
Description: Integer overflow in hw/virtio/virtio-crypto.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code on the host via a crafted virtio-crypto request, which triggers a heap-based buffer overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=a08aaff811fb194950f79711d2afe5a892ae03a4; http://www.openwall.com/lists/oss-security/2017/02/08/2; http://www.securityfocus.com/bid/96141
CVE: CVE-2017-5932
Published: 2017-03-27
Description: The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) character and a command substitution metacharacter.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://git.savannah.gnu.org/cgit/bash.git/commit/?id=4f747edc625815f449048579f6e65869914dd715; http://www.openwall.com/lists/oss-security/2017/02/08/3; http://www.securityfocus.com/bid/96136
CVE: CVE-2017-5973
Published: 2017-03-27
Description: The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=f89b60f6e5fee3923bedf80e82b4e5efc1bb156b; http://www.openwall.com/lists/oss-security/2017/02/13/11; http://www.securityfocus.com/bid/96220
CVE: CVE-2017-6878
Published: 2017-03-27
Description: Cross-site scripting (XSS) vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name_2 parameter to admin/column/delete.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/141689/MetInfo-5.3.15-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2017/Mar/49; http://www.securityfocus.com/bid/96974
CVE: CVE-2015-0863
Published: 2017-03-27
Description: GALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps) before 14120405.03.012 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code.
CVSS Score: 8.0 (HIGH)
CWE: CWE-264
References: https://www.nowsecure.com/blog/2015/01/26/samsung-account-and-galaxy-apps-technical-breakdown-cve-2015-0863-and-cve-2015-0864/; https://www.nowsecure.com/blog/2015/01/26/samsung-account-and-galaxy-apps-technical-breakdown-cve-2015-0863-and-cve-2015-0864/
CVE: CVE-2015-0864
Published: 2017-03-27
Description: Samsung Account (AKA com.osp.app.signin) before 1.6.0069 and 2.x before 2.1.0069 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code.
CVSS Score: 8.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/97207; https://www.nowsecure.com/blog/2015/01/26/samsung-account-and-galaxy-apps-technical-breakdown-cve-2015-0863-and-cve-2015-0864/; http://www.securityfocus.com/bid/97207
CVE: CVE-2015-8010
Published: 2017-03-27
Description: Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00019.html; http://www.openwall.com/lists/oss-security/2015/10/23/15; http://www.openwall.com/lists/oss-security/2015/10/29/15
CVE: CVE-2015-8762
Published: 2017-03-27
Description: The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a zero-length EAP-PWD packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476
References: http://freeradius.org/security.html#eap-pwd-2015; http://www.openwall.com/lists/oss-security/2016/01/08/7; http://freeradius.org/security.html#eap-pwd-2015
CVE: CVE-2015-8763
Published: 2017-03-27
Description: The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted (1) commit or (2) confirm message, which triggers an out-of-bounds read.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: http://freeradius.org/security.html#eap-pwd-2015; http://www.openwall.com/lists/oss-security/2016/01/08/7; http://freeradius.org/security.html#eap-pwd-2015
CVE: CVE-2015-8764
Published: 2017-03-27
Description: Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: http://freeradius.org/security.html#eap-pwd-2015; http://www.openwall.com/lists/oss-security/2016/01/08/7; http://freeradius.org/security.html#eap-pwd-2015
CVE: CVE-2016-10225
Published: 2017-03-27
Description: The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain root privileges by sending "rootmydevice" to /proc/sunxi_debug/sunxi_debug.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2016/10/05/16; http://www.openwall.com/lists/oss-security/2017/02/15/9; http://www.securityfocus.com/bid/93442
CVE: CVE-2016-4912
Published: 2017-03-27
Description: The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a large number of crafted packets, which triggers a memory allocation failure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2016/05/18/6; http://www.securitytracker.com/id/1035916; https://bugzilla.redhat.com/show_bug.cgi?id=1329295
CVE: CVE-2016-9243
Published: 2017-03-27
Description: HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2016/11/09/2; http://www.securityfocus.com/bid/94216; http://www.ubuntu.com/usn/USN-3138-1
CVE: CVE-2017-6451
Published: 2017-03-27
Description: The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://support.ntp.org/bin/view/Main/NtpBug3378; http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu; http://www.securityfocus.com/bid/97058
CVE: CVE-2017-6452
Published: 2017-03-27
Description: Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via an application path on the command line.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://support.ntp.org/bin/view/Main/NtpBug3383; http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu; http://www.securityfocus.com/bid/97078