deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-11009
Published: 2019-04-08
Description: In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c, which allows attackers to cause a denial of service or information disclosure via a crafted image file.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/7cff2b1792de; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00093.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00107.html
CVE: CVE-2019-11010
Published: 2019-04-08
Description: In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a memory leak in the function ReadMPCImage of coders/mpc.c, which allows attackers to cause a denial of service via a crafted image file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/a348d9661019; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00093.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00107.html
CVE: CVE-2019-1785
Published: 2019-04-08
Description: A vulnerability in the RAR file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of proper error-handling mechanisms when processing nested RAR files sent to an affected device. An attacker could exploit this vulnerability by sending a crafted RAR file to an affected device. An exploit could allow the attacker to view or create arbitrary files on the targeted system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-22
References: https://bugzilla.clamav.net/show_bug.cgi?id=12284; https://security.gentoo.org/glsa/201904-12; https://bugzilla.clamav.net/show_bug.cgi?id=12284
CVE: CVE-2019-1786
Published: 2019-04-08
Description: A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of proper data handling mechanisms within the device buffer while indexing remaining file data on an affected device. An attacker could exploit this vulnerability by sending crafted PDF files to an affected device. A successful exploit could allow the attacker to cause an out-of-bounds read condition, resulting in a crash that could result in a denial of service condition on an affected device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-125
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12149; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12168; https://security.gentoo.org/glsa/201904-12
CVE: CVE-2019-1787
Published: 2019-04-08
Description: A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of proper data handling mechanisms within the device buffer while indexing remaining file data on an affected device. An attacker could exploit this vulnerability by sending crafted PDF files to an affected device. A successful exploit could allow the attacker to cause a heap buffer out-of-bounds read condition, resulting in a crash that could result in a denial of service condition on an affected device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00062.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00064.html; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12181
CVE: CVE-2019-0215
Published: 2019-04-08
Description: In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a client to bypass configured access control restrictions.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2019/04/02/4; http://www.securityfocus.com/bid/107667; https://access.redhat.com/errata/RHSA-2019:0980
CVE: CVE-2019-11014
Published: 2019-04-08
Description: The VStarCam vstc.vscam.client library and vstc.vscam shared object, as used in the Eye4 application (for Android, iOS, and Windows), do not prevent spoofing of the camera server. An attacker can create a fake camera server that listens for the client looking for a camera on the local network. When the camera responds to the client, it responds via the broadcast address, giving all information necessary to impersonate the camera. The attacker then floods the client with responses, causing the original camera to be denied service from the client, and thus causing the client to then communicate exclusively with the attacker's fake camera server. When connecting to the fake camera server, the client sends all details necessary to login to the camera (username and password).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://blog.0x42424242.in/2019/03/vstarcam-investigational-security.html; http://blog.0x42424242.in/2019/03/vstarcam-investigational-security_22.html; http://blog.0x42424242.in/2019/03/vstarcam-investigational-security.html
CVE: CVE-2019-1788
Published: 2019-04-08
Description: A vulnerability in the Object Linking & Embedding (OLE2) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms for OLE2 files sent an affected device. An attacker could exploit this vulnerability by sending malformed OLE2 files to the device running an affected version ClamAV Software. An exploit could allow the attacker to cause an out-of-bounds write condition, resulting in a crash that could result in a denial of service condition on an affected device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00062.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00064.html; https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12166
CVE: CVE-2019-1798
Published: 2019-04-08
Description: A vulnerability in the Portable Executable (PE) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms for PE files sent an affected device. An attacker could exploit this vulnerability by sending malformed PE files to the device running an affected version ClamAV Software. An exploit could allow the attacker to cause an out-of-bounds read condition, resulting in a crash that could result in a denial of service condition on an affected device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-125
References: https://bugzilla.clamav.net/show_bug.cgi?id=12262; https://security.gentoo.org/glsa/201904-12; https://bugzilla.clamav.net/show_bug.cgi?id=12262
CVE: CVE-2019-0217
Published: 2019-04-08
Description: In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html
CVE: CVE-2019-11016
Published: 2019-04-08
Description: Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://elgg.org/blog/view/2913744/security-release-elgg-11218-and-2311; https://github.com/Elgg/Elgg/releases/tag/1.12.18; https://github.com/Elgg/Elgg/releases/tag/2.3.11
CVE: CVE-2019-11018
Published: 2019-04-08
Description: application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/zoujingli/ThinkAdmin/issues/173; https://github.com/zoujingli/ThinkAdmin/issues/173
CVE: CVE-2019-0211
Published: 2019-04-08
Description: In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html
CVE: CVE-2019-0592
Published: 2019-04-08
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0611.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0592; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0592
CVE: CVE-2019-0603
Published: 2019-04-08
Description: A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with elevated permissions on a target system. To exploit the vulnerability, an attacker could create a specially crafted request, causing Windows to execute arbitrary code with elevated permissions. The security update addresses the vulnerability by correcting how Windows Deployment Services TFTP Server handles objects in memory, aka 'Windows Deployment Services TFTP Server Remote Code Execution Vulnerability'.
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0603; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0603
CVE: CVE-2019-0609
Published: 2019-04-08
Description: A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0609; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0609
CVE: CVE-2019-0611
Published: 2019-04-08
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0592.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0611; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0611
CVE: CVE-2019-0612
Published: 2019-04-08
Description: A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerability does not allow arbitrary code execution, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.
CVSS Score: 5.3 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0612; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0612
CVE: CVE-2019-0614
Published: 2019-04-08
Description: An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0774.
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0614; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0614
CVE: CVE-2019-0617
Published: 2019-04-08
Description: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0617; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0617
CVE: CVE-2019-0639
Published: 2019-04-08
Description: A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0680, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0639; https://www.zerodayinitiative.com/advisories/ZDI-20-122/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0639
CVE: CVE-2019-0665
Published: 2019-04-08
Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0666, CVE-2019-0667, CVE-2019-0772.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0665; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0665
CVE: CVE-2019-0666
Published: 2019-04-08
Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0665, CVE-2019-0667, CVE-2019-0772.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0666; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0666
CVE: CVE-2019-0667
Published: 2019-04-08
Description: A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0665, CVE-2019-0666, CVE-2019-0772.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0667; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0667
CVE: CVE-2019-11023
Published: 2019-04-08
Description: The agroot() function in cgraph\obj.c in libcgraph.a in Graphviz 2.39.20[PII_REDACTED] has a NULL pointer dereference, as demonstrated by graphml2gv.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00054.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00065.html; http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00056.html
CVE: CVE-2019-11024
Published: 2019-04-08
Description: The load_pnm function in frompnm.c in libsixel.a in libsixel 1.8.2 has infinite recursion.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/saitoha/libsixel/issues/85; https://research.loginsoft.com/bugs/1501/; https://github.com/saitoha/libsixel/issues/85
CVE: CVE-2019-11025
Published: 2019-04-08
Description: In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string (SNMP Options) in the View poller cache, leading to XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Cacti/cacti/compare/6ea486a...99995bb; https://github.com/Cacti/cacti/issues/2581; https://lists.debian.org/debian-lts-announce/2019/04/msg00017.html
CVE: CVE-2019-11026
Published: 2019-04-08
Description: FontInfoScanner::scanFonts in FontInfo.cc in Poppler 0.75.0 has infinite recursion, leading to a call to the error function in Error.cc.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-674
References: https://gitlab.freedesktop.org/poppler/poppler/issues/752; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5JWQE2WP4W4F2FEYPYJQBPQIOG75MVH/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XGYLZZ4DZUDBQEGCNDWSZPSFNNZJF4S6/
CVE: CVE-2019-0678
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-863
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0678; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0678
CVE: CVE-2019-0680
Published: 2019-04-09
Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0769, CVE-2019-0770, CVE-2019-0771, CVE-2019-0773, CVE-2019-0783.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0680; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0680
CVE: CVE-2019-0682
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0689, CVE-2019-0692, CVE-2019-0693, CVE-2019-0694.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0682; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0682
CVE: CVE-2019-0683
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-276
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0683; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0683
CVE: CVE-2019-0689
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0682, CVE-2019-0692, CVE-2019-0693, CVE-2019-0694.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0689; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0689
CVE: CVE-2019-0690
Published: 2019-04-09
Description: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0695, CVE-2019-0701.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0690; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0690
CVE: CVE-2019-0692
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0682, CVE-2019-0689, CVE-2019-0693, CVE-2019-0694.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0692; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0692
CVE: CVE-2019-0693
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0682, CVE-2019-0689, CVE-2019-0692, CVE-2019-0694.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0693; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0693
CVE: CVE-2019-0694
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0682, CVE-2019-0689, CVE-2019-0692, CVE-2019-0693.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0694; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0694
CVE: CVE-2019-0695
Published: 2019-04-09
Description: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0690, CVE-2019-0701.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0695; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0695
CVE: CVE-2019-0696
Published: 2019-04-09
Description: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0696; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0696
CVE: CVE-2019-0697
Published: 2019-04-09
Description: A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0698, CVE-2019-0726.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0697; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0697
CVE: CVE-2019-0698
Published: 2019-04-09
Description: A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0726.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0698; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0698