deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-28619
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_edge() eh->twin().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28620
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_edge() eh->center_vertex():.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28621
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_edge() eh->out_sedge().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28622
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_edge() eh->incident_sface().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28623
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_facet() fh->twin().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28624
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_facet() fh->boundary_entry_objects SEdge_of.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28625
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_facet() fh->boundary_entry_objects SLoop_of.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28626
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_facet() fh->incident_volume().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28627
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_volume() ch->shell_entry_objects().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28628
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_volume() seh->twin().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28629
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->sprev().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28630
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->snext().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28631
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->source().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28632
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->incident_sface().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28633
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->prev().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28634
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->next().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-28635
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->facet().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-35629
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sloop() slh->facet().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-35630
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() sfh->center_vertex().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-35631
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() SD.link_as_face_cycle().
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-35632
Published: 2022-04-18
Description: Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() sfh->boundary_entry_objects Edge_of.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-125, CWE-129
References: https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html; https://security.gentoo.org/glsa/202305-34; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225
CVE: CVE-2020-6099
Published: 2022-04-18
Description: An exploitable code execution vulnerability exists in the file format parsing functionality of Graphisoft BIMx Desktop Viewer 2019.2.2328. A specially crafted file can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-680, CWE-190
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1032; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1032
CVE: CVE-2021-20324
Published: 2022-04-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-23284
Published: 2022-04-18
Description: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to Stored Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0plus205 and prior versions.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-%28IPM%29-Infrastructure-Vulnerability-Advisory_1001c_V1.0.pdf; https://www.eaton.com/content/dam/eaton/products/backup-power-ups-surge-it-power-distribution/power-management-software-connectivity/eaton-intelligent-power-manager/software/ipm-understand-edition-emea/eaton-ipminfra-eolmemo-en-us.pdf.; https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-%28IPM%29-Infrastructure-Vulnerability-Advisory_1001c_V1.0.pdf
CVE: CVE-2021-23285
Published: 2022-04-18
Description: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to reflected Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0plus205 and prior versions.
CVSS Score: 3.1 (LOW)
CWE: CWE-79, CWE-79
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-%28IPM%29-Infrastructure-Vulnerability-Advisory_1001c_V1.0.pdf; https://www.eaton.com/content/dam/eaton/products/backup-power-ups-surge-it-power-distribution/power-management-software-connectivity/eaton-intelligent-power-manager/software/ipm-understand-edition-emea/eaton-ipminfra-eolmemo-en-us.pdf.; https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-%28IPM%29-Infrastructure-Vulnerability-Advisory_1001c_V1.0.pdf
CVE: CVE-2021-23286
Published: 2022-04-18
Description: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0plus205 and prior versions.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-1236, CWE-1236
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-%28IPM%29-Infrastructure-Vulnerability-Advisory_1001c_V1.0.pdf; https://www.eaton.com/content/dam/eaton/products/backup-power-ups-surge-it-power-distribution/power-management-software-connectivity/eaton-intelligent-power-manager/software/ipm-understand-edition-emea/eaton-ipminfra-eolmemo-en-us.pdf.; https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-%28IPM%29-Infrastructure-Vulnerability-Advisory_1001c_V1.0.pdf
CVE: CVE-2021-3503
Published: 2022-04-18
Description: A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. The highest threat from this vulnerability is to the confidentiality.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://access.redhat.com/security/cve/CVE-2021-3503; https://bugzilla.redhat.com/show_bug.cgi?id=1942693; https://github.com/advisories/GHSA-c4r5-xvgw-2942
CVE: CVE-2021-3624
Published: 2022-04-18
Description: There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed in the victim's system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-190
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=984761; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=984761
CVE: CVE-2021-3652
Published: 2022-04-18
Description: A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://bugzilla.redhat.com/show_bug.cgi?id=1982782; https://github.com/389ds/389-ds-base/issues/4817; https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html
CVE: CVE-2021-3681
Published: 2022-04-18
Description: A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directory that are not explicitly excluded via the ``build_ignore`` list in "galaxy.yml" include files in the ``.tar.gz`` file. This contains sensitive info, such as the user's Ansible Galaxy API key and any secrets in ``ansible`` or ``ansible-playbook`` verbose output without the``no_log`` redaction. Currently, there is no way to deprecate a Collection Or delete a Collection Version. Once published, anyone who downloads or installs the collection can view the secrets.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://bugzilla.redhat.com/show_bug.cgi?id=1989407; https://github.com/ansible/galaxy/issues/1977; https://bugzilla.redhat.com/show_bug.cgi?id=1989407
CVE: CVE-2021-42778
Published: 2022-04-18
Description: A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-672, CWE-415
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28185; https://bugzilla.redhat.com/show_bug.cgi?id=2016083; https://github.com/OpenSC/OpenSC/commit/f015746d
CVE: CVE-2021-42779
Published: 2022-04-18
Description: A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28843; https://bugzilla.redhat.com/show_bug.cgi?id=2016086; https://github.com/OpenSC/OpenSC/commit/1db88374
CVE: CVE-2021-42780
Published: 2022-04-18
Description: A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash programs using the library.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-252, CWE-252
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28383; https://bugzilla.redhat.com/show_bug.cgi?id=2016139; https://github.com/OpenSC/OpenSC/commit/5df913b7
CVE: CVE-2021-42781
Published: 2022-04-18
Description: Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=2016439; https://github.com/OpenSC/OpenSC/commit/05648b06; https://github.com/OpenSC/OpenSC/commit/17d8980c
CVE: CVE-2021-42782
Published: 2022-04-18
Description: Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=2016448; https://github.com/OpenSC/OpenSC/commit/1252aca9; https://github.com/OpenSC/OpenSC/commit/456ac566
CVE: CVE-2022-1341
Published: 2022-04-18
Description: An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in get_cmdln_options() function in src/options.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://github.com/vgropp/bwm-ng/commit/9774f23bf78a6e6d3ae4cfe3d73bad34f2fdcd17; https://github.com/vgropp/bwm-ng/issues/26; https://github.com/vgropp/bwm-ng/commit/9774f23bf78a6e6d3ae4cfe3d73bad34f2fdcd17