deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-9683
Published: 2017-02-22
Description: The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI (/cgi-bin/extensionsettings) component responsible for handling some of the server's internal configurations. The CGI application doesn't properly escape the information it's passed when processing a particular multi-part form request involving scripts. The filename of the 'scriptname' variable is read in unsanitized before a call to system() is performed - allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account. This is SonicWall Issue ID 181195.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://documents.software.dell.com/sonicwall-sma-100-series/8.1.0.7/release-notes/resolved-issues?ParentProduct=868; http://pastebin.com/eJbeXgBr; http://www.securityfocus.com/bid/96375
CVE: CVE-2016-9684
Published: 2017-02-22
Description: The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI (/cgi-bin/viewcert) component responsible for processing SSL certificate information. The CGI application doesn't properly escape the information it's passed in the 'CERT' variable before a call to system() is performed - allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://documents.software.dell.com/sonicwall-sma-100-series/8.1.0.7/release-notes/resolved-issues?ParentProduct=868; http://pastebin.com/g1e2qU6N; http://www.securityfocus.com/bid/96375
CVE: CVE-2014-4677
Published: 2017-02-22
Description: The installPackage function in the installerHelper subcomponent in Libmacgpg in GPG Suite before 2015.06 allows local users to execute arbitrary commands with root privileges via shell metacharacters in the xmlPath argument.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://bierbaumer.net/security/cve-2014-4677/; https://gpgtools.org/releases/gpgsuite/2015.08/release-notes.html; https://bierbaumer.net/security/cve-2014-4677/
CVE: CVE-2016-8636
Published: 2017-02-22
Description: Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly have unspecified other impact via a write or read request involving the "RDMA protocol over infiniband" (aka Soft RoCE) technology.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=647bf3d8a8e5777319da92af672289b2a6c4dc66; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.10; http://www.openwall.com/lists/oss-security/2017/02/11/9
CVE: CVE-2016-9377
Published: 2017-02-22
Description: Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging IDT entry miscalculation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-682
References: http://www.securityfocus.com/bid/94475; http://www.securitytracker.com/id/1037345; http://xenbits.xen.org/xsa/advisory-196.html
CVE: CVE-2016-9378
Published: 2017-02-22
Description: Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging an incorrect choice for software interrupt delivery.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94475; http://www.securitytracker.com/id/1037345; http://xenbits.xen.org/xsa/advisory-196.html
CVE: CVE-2016-9384
Published: 2017-02-22
Description: Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94468; http://www.securitytracker.com/id/1037343; http://xenbits.xen.org/xsa/advisory-194.html
CVE: CVE-2016-9400
Published: 2017-02-22
Description: The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/11/16/8; http://www.openwall.com/lists/oss-security/2016/11/17/8; http://www.securityfocus.com/bid/94381
CVE: CVE-2016-9909
Published: 2017-02-22
Description: The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of the < (less than) character in attribute values.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2016/12/06/5; http://www.openwall.com/lists/oss-security/2016/12/08/8; http://www.securityfocus.com/bid/95132
CVE: CVE-2016-9910
Published: 2017-02-22
Description: The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2016/12/06/5; http://www.openwall.com/lists/oss-security/2016/12/08/8; http://www.securityfocus.com/bid/95132
CVE: CVE-2016-9956
Published: 2017-02-22
Description: The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://www.debian.org/security/2016/dsa-3742; http://www.openwall.com/lists/oss-security/2016/12/14/11; http://www.openwall.com/lists/oss-security/2016/12/15/10
CVE: CVE-2017-5585
Published: 2017-02-22
Description: OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and return_top_results_row_based config option is false, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and execute arbitrary DML or DDL commands via a crafted request.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2520.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: http://packetstormsecurity.com/files/141124/OpenText-Documentum-Content-Server-7.3-SQL-Injection.html; http://www.securityfocus.com/bid/96224; http://packetstormsecurity.com/files/141124/OpenText-Documentum-Content-Server-7.3-SQL-Injection.html
CVE: CVE-2017-5586
Published: 2017-02-22
Description: OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh) and Apache Commons Collections (ACC) libraries.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://packetstormsecurity.com/files/141105/OpenText-Documentum-D2-4.x-Remote-Code-Execution.html; http://www.securityfocus.com/bid/96216; https://www.exploit-db.com/exploits/41366/
CVE: CVE-2016-3013
Published: 2017-02-22
Description: IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling. IBM Reference #: 1998661.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-19
References: http://www.ibm.com/support/docview.wss?uid=swg21998661; http://www.securityfocus.com/bid/96394; http://www.ibm.com/support/docview.wss?uid=swg21998661
CVE: CVE-2016-3052
Published: 2017-02-22
Description: Under non-standard configurations, IBM WebSphere MQ might send password data in clear text over the network. This data could be intercepted using man in the middle techniques.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg21998660; http://www.securityfocus.com/bid/96400; http://www.ibm.com/support/docview.wss?uid=swg21998660
CVE: CVE-2016-8915
Published: 2017-02-22
Description: IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager and queue, to deny service to other channels running under the same process. IBM Reference #: 1998649.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://www.ibm.com/support/docview.wss?uid=swg21998649; http://www.securityfocus.com/bid/96403; http://www.ibm.com/support/docview.wss?uid=swg21998649
CVE: CVE-2016-8986
Published: 2017-02-22
Description: IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager to bring down MQ channels using specially crafted HTTP requests. IBM Reference #: 1998648.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://www.ibm.com/support/docview.wss?uid=swg21998648; http://www.securityfocus.com/bid/96412; http://www.ibm.com/support/docview.wss?uid=swg21998648
CVE: CVE-2017-6188
Published: 2017-02-22
Description: Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET parameters allows overwriting any file accessible to the www-data user.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/96399; https://bugs.debian.org/855705; https://github.com/munin-monitoring/munin/issues/721
CVE: CVE-2016-8536
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8537
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8538
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8539
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8540
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8541
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8542
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8543
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8544
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8545
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8546
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8547
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8548
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8549
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8550
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8551
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8552
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8553
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8554
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8555
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8556
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8557
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8558
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8559
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8560
Published: 2017-02-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-1245
Published: 2017-02-22
Description: It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery messages. The root cause was relying on BUFSIZ to be compatible with a message size; however, BUFSIZ is system-dependent.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2017-0794.html; http://www.gossamer-threads.com/lists/quagga/users/31952; http://www.securityfocus.com/bid/93775
CVE: CVE-2017-6077
Published: 2017-02-22
Description: ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: http://www.securityfocus.com/bid/96408; https://www.exploit-db.com/exploits/41394/; http://www.securityfocus.com/bid/96408
CVE: CVE-2017-6187
Published: 2017-02-22
Description: Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary code via a long URI in a GET request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96401; https://www.exploit-db.com/exploits/41436/; http://www.securityfocus.com/bid/96401
CVE: CVE-2017-6205
Published: 2017-02-23
Description: D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Command Bypass attacks via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
References: http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10070; http://www.securityfocus.com/bid/96397; http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10070
CVE: CVE-2017-6206
Published: 2017-02-23
Description: D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Information Disclosure attacks via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10070; http://www.securityfocus.com/bid/96393; https://github.com/varangamin/CVE-2017-6206
CVE: CVE-2017-6207
Published: 2017-02-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-9578.  Reason: This candidate is a reservation duplicate of CVE-2016-9578.  Notes: All CVE users should reference CVE-2016-9578 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2016-5883
Published: 2017-02-23
Description: IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1997010.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg21997010; http://www.securityfocus.com/bid/96168; http://www.securitytracker.com/id/1037790
CVE: CVE-2016-6055
Published: 2017-02-23
Description: IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1995515.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg21995515; http://www.ibm.com/support/docview.wss?uid=swg21995515
CVE: CVE-2016-8974
Published: 2017-02-23
Description: IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 1997798.
CVSS Score: 8.1 (HIGH)
CWE: CWE-611
References: http://www.ibm.com/support/docview.wss?uid=swg21997798; http://www.ibm.com/support/docview.wss?uid=swg21997798
CVE: CVE-2017-6214
Published: 2017-02-23
Description: The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a denial of service (infinite loop and soft lockup) via vectors involving a TCP packet with the URG flag.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ccf7abb93af09ad0868ae9033d1ca8108bdaec82; http://www.debian.org/security/2017/dsa-3804; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11
CVE: CVE-2017-6100
Published: 2017-02-23
Description: tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: http://www.openwall.com/lists/oss-security/2017/02/19/1; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=814030; https://sourceforge.net/p/tcpdf/bugs/1005/
CVE: CVE-2016-10109
Published: 2017-02-23
Description: Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://www.debian.org/security/2017/dsa-3752; http://www.openwall.com/lists/oss-security/2017/01/03/3; http://www.securityfocus.com/bid/95263
CVE: CVE-2014-9916
Published: 2017-02-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) tribe_name or (2) tags parameter in a tribes page request to user/ or the (3) user_id or (4) fullname parameter to signup.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.exploit-db.com/exploits/34089; http://www.exploit-db.com/exploits/34089
CVE: CVE-2017-6076
Published: 2017-02-24
Description: In versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key information for a malicious user who has access to view cache on a machine.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96422; https://github.com/wolfSSL/wolfssl/releases/tag/v3.10.2-stable; http://www.securityfocus.com/bid/96422
CVE: CVE-2017-6099
Published: 2017-02-24
Description: Cross-site scripting (XSS) vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK (aka merchant-sdk-php) 3.9.1 allows remote attackers to inject arbitrary web script or HTML via the token parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96432; https://github.com/paypal/merchant-sdk-php/issues/129; http://www.securityfocus.com/bid/96432
CVE: CVE-2017-6196
Published: 2017-02-24
Description: Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PostScript document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://git.ghostscript.com/?p=ghostpdl.git%3Bh=ecceafe3abba2714ef9b432035fe0739d9b1a283; http://www.securityfocus.com/bid/96428; http://www.securitytracker.com/id/1037899
CVE: CVE-2017-6197
Published: 2017-02-24
Description: The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by the r_read_le32 function.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/96433; https://github.com/radare/radare2/commit/1ea23bd6040441a21fbcfba69dce9a01af03f989; https://github.com/radare/radare2/issues/6816