deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-1518
Published: 2017-04-21
Description: The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data and consequently modify device functionality, obtain sensitive information from system logs, and have unspecified other impact by leveraging failure to use an HTTPS session for downloading configuration files from http://fm.grandstream.com/gs/.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: http://packetstormsecurity.com/files/136280/Grandstream-Wave-1.0.1.26-Man-In-The-Middle.html; http://www.securityfocus.com/archive/1/537818/100/0/threaded; https://rt-solutions.de/wp-content/uploads/2016/04/CVE-2016-1518-insecure-provisioning.pdf
CVE: CVE-2016-1519
Published: 2017-04-21
Description: The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows man-in-the-middle attackers to spoof the Grandstream provisioning server via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://packetstormsecurity.com/files/136290/Grandstream-Wave-1.0.1.26-TLS-Man-In-The-Middle.html; http://www.securityfocus.com/archive/1/537819/100/0/threaded; https://rt-solutions.de/wp-content/uploads/2016/04/CVE-2016-1519-gswave-tls-mitm.pdf
CVE: CVE-2016-1520
Published: 2017-04-21
Description: The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-254
References: http://packetstormsecurity.com/files/136291/Grandstream-Wave-1.0.1.26-Update-Redirection.html; http://www.securityfocus.com/archive/1/537821/100/0/threaded; https://rt-solutions.de/wp-content/uploads/2016/04/CVE-2016-1520-app-update-redirection.pdf
CVE: CVE-2016-1560
Published: 2017-04-21
Description: ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://packetstormsecurity.com/files/136634/ExaGrid-Known-SSH-Key-Default-Password.html; http://www.rapid7.com/db/modules/exploit/linux/ssh/exagrid_known_privkey; https://community.rapid7.com/community/infosec/blog/2016/04/07/r7-2016-04-exagrid-backdoor-ssh-keys-and-hardcoded-credentials
CVE: CVE-2016-1561
Published: 2017-04-21
Description: ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, which allows remote attackers to obtain SSH access by leveraging knowledge of a private key from another installation or a firmware image.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/136634/ExaGrid-Known-SSH-Key-Default-Password.html; http://www.rapid7.com/db/modules/exploit/linux/ssh/exagrid_known_privkey; https://community.rapid7.com/community/infosec/blog/2016/04/07/r7-2016-04-exagrid-backdoor-ssh-keys-and-hardcoded-credentials
CVE: CVE-2016-2173
Published: 2017-04-21
Description: org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182551.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182850.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182959.html
CVE: CVE-2016-2347
Published: 2017-04-21
Description: Integer underflow in the decode_level3_header function in lib/lha_file_header.c in Lhasa before 0.3.1 allows remote attackers to execute arbitrary code via a crafted archive.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-updates/2016-04/msg00038.html; http://lists.opensuse.org/opensuse-updates/2016-04/msg00039.html; http://www.debian.org/security/2016/dsa-3540
CVE: CVE-2016-2433
Published: 2017-04-21
Description: The Broadcom Wi-Fi driver for Android, as used by BlackBerry smartphones before Build AAE570, allows remote attackers to execute arbitrary code in the context of the kernel.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://support.blackberry.com/kb/articleDetail?articleNumber=000038167; http://www.securityfocus.com/bid/98034; http://support.blackberry.com/kb/articleDetail?articleNumber=000038167
CVE: CVE-2016-3067
Published: 2017-04-21
Description: Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: https://cygwin.com/ml/cygwin-announce/2016-02/msg00023.html; https://cygwin.com/ml/cygwin-announce/2016-04/msg00020.html; https://cygwin.com/ml/cygwin-announce/2016-04/msg00054.html
CVE: CVE-2016-3109
Published: 2017-04-21
Description: The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://packetstormsecurity.com/files/136781/Shopware-Remote-Code-Execution.html; http://www.securityfocus.com/archive/1/538173/100/0/threaded; http://www.securityfocus.com/bid/97979
CVE: CVE-2016-3702
Published: 2017-04-21
Description: Padding oracle flaw in CloudForms Management Engine (aka CFME) 5 allows remote attackers to obtain sensitive cleartext information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=1330179; https://bugzilla.redhat.com/show_bug.cgi?id=1330179
CVE: CVE-2016-5168
Published: 2017-04-21
Description: Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-346
References: http://www.securityfocus.com/bid/89106; https://bugs.chromium.org/p/chromium/issues/detail?id=586820; https://chromereleases.googleblog.com/2016/04/stable-channel-update_28.html
CVE: CVE-2016-5399
Published: 2017-04-21
Description: The bzread function in ext/bz2/bz2.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted bz2 archive.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/137998/PHP-7.0.8-5.6.23-5.5.37-bzread-OOB-Write.html; http://php.net/ChangeLog-5.php; http://php.net/ChangeLog-7.php
CVE: CVE-2016-9954
Published: 2017-04-21
Description: The backtrack compilation code in the Irregex package (aka IrRegular Expressions) before 0.9.6 for Scheme allows remote attackers to cause a denial of service (memory consumption) via a crafted regular expression with a repeating pattern.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.openwall.com/lists/oss-security/2016/12/15/8; http://www.securityfocus.com/bid/94942; https://bugzilla.redhat.com/show_bug.cgi?id=1413990
CVE: CVE-2017-7991
Published: 2017-04-22
Description: Exponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key (apikey parameter) in the api function of framework/modules/eaas/controllers/eaasController.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2017/Apr/78; https://gist.github.com/404notf0und/ab59234d71fbf35b4926ffd646324f29; https://github.com/exponentcms/exponent-cms/commit/67a9c2f0229de120431f3eecb0f[PII_REDACTED]105
CVE: CVE-2017-8052
Published: 2017-04-22
Description: Craft CMS before 2.6.2974 allows XSS attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://craftcms.com/changelog#2-6-2974; https://twitter.com/CraftCMS/status/[PII_REDACTED]78112256; https://craftcms.com/changelog#2-6-2974
CVE: CVE-2017-8053
Published: 2017-04-22
Description: PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://openwall.com/lists/oss-security/2017/04/22/1; http://www.evernote.com/l/AnGe5jS_MvNDaZvZW-fzvV37H4ggSf5IkQo/; http://openwall.com/lists/oss-security/2017/04/22/1
CVE: CVE-2017-8054
Published: 2017-04-22
Description: The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted PDF document.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://qwertwwwe.github.io/2017/04/22/PoDoFo-0-9-5-allows-remote-attackers-to-cause-a-denial-of-service-infinit-loop/; http://qwertwwwe.github.io/2017/04/22/PoDoFo-0-9-5-allows-remote-attackers-to-cause-a-denial-of-service-infinit-loop/
CVE: CVE-2017-8055
Published: 2017-04-22
Description: WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler. A login request that contains a blank password sent to the XML-RPC agent in Fireware v11.12.1 and earlier returns different responses for valid and invalid usernames. An attacker could exploit this vulnerability to enumerate valid usernames on an affected Firebox.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: http://watchguardsupport.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000KlGSAU; https://packetstormsecurity.com/files/142177/watchguardfbxtm-xxeinject.txt; https://www.sidertia.com/Home/Community/Blog/2017/04/17/Fixed-the-Fireware-Vulnerabilities-discovered-by-Sidertia
CVE: CVE-2017-8056
Published: 2017-04-22
Description: WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC agent. This causes the Firebox wgagent process to crash. This process crash ends all authenticated sessions to the Firebox, including management connections, and prevents new authenticated sessions until the process has recovered. The Firebox may also experience an overall degradation in performance while the wgagent process recovers. An attacker could continuously send XML-RPC requests that contain references to external entities to perform a limited Denial of Service (DoS) attack against an affected Firebox.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-611
References: http://watchguardsupport.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000KlBSAU; https://packetstormsecurity.com/files/142177/watchguardfbxtm-xxeinject.txt; https://www.sidertia.com/Home/Community/Blog/2017/04/17/Fixed-the-Fireware-Vulnerabilities-discovered-by-Sidertia
CVE: CVE-2017-8061
Published: 2017-04-23
Description: drivers/media/usb/dvb-usb/dvb-usb-firmware.c in the Linux kernel 4.9.x and 4.10.x before 4.10.7 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.7; http://www.openwall.com/lists/oss-security/2017/04/16/4; http://www.securityfocus.com/bid/97972
CVE: CVE-2017-8062
Published: 2017-04-23
Description: drivers/media/usb/dvb-usb/dw2102.c in the Linux kernel 4.9.x and 4.10.x before 4.10.4 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.4; http://www.openwall.com/lists/oss-security/2017/04/16/4; http://www.securityfocus.com/bid/97973
CVE: CVE-2017-8063
Published: 2017-04-23
Description: drivers/media/usb/dvb-usb/cxusb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.12; http://www.openwall.com/lists/oss-security/2017/04/16/4; http://www.securityfocus.com/bid/97974
CVE: CVE-2017-8064
Published: 2017-04-23
Description: drivers/media/usb/dvb-usb-v2/dvb_usb_core.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3886; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.12; http://www.openwall.com/lists/oss-security/2017/04/16/4
CVE: CVE-2017-8065
Published: 2017-04-23
Description: crypto/ccm.c in the Linux kernel 4.9.x and 4.10.x through 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2017/04/16/4; http://www.securityfocus.com/bid/97994; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b30460c5b0ed762be75a004e924ec3f8711e032
CVE: CVE-2017-8066
Published: 2017-04-23
Description: drivers/net/can/usb/gs_usb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.2 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.2; http://www.openwall.com/lists/oss-security/2017/04/16/4; http://www.securityfocus.com/bid/97992
CVE: CVE-2017-8067
Published: 2017-04-23
Description: drivers/char/virtio_console.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.12; http://www.openwall.com/lists/oss-security/2017/04/16/4; http://www.securityfocus.com/bid/97997
CVE: CVE-2017-8068
Published: 2017-04-23
Description: drivers/net/usb/pegasus.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11; http://www.openwall.com/lists/oss-security/2017/04/16/4; http://www.securityfocus.com/bid/98000
CVE: CVE-2017-8069
Published: 2017-04-23
Description: drivers/net/usb/rtl8150.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11; http://www.openwall.com/lists/oss-security/2017/04/16/4; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7926aff5c57b577ab0f43364ff0c59d968f6a414
CVE: CVE-2017-8070
Published: 2017-04-23
Description: drivers/net/usb/catc.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11; http://www.openwall.com/lists/oss-security/2017/04/16/4; http://www.securityfocus.com/bid/98011
CVE: CVE-2017-8071
Published: 2017-04-23
Description: drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID request callback, which allows local users to cause a denial of service (deadlock) via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404
References: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9; http://www.openwall.com/lists/oss-security/2017/04/16/4; http://www.securityfocus.com/bid/97991
CVE: CVE-2017-8072
Published: 2017-04-23
Description: The cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO error status for a zero-length report, which allows local users to have an unspecified impact via unknown vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-388
References: http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9; http://www.openwall.com/lists/oss-security/2017/04/16/4; http://www.securityfocus.com/bid/98010
CVE: CVE-2016-2564
Published: 2017-04-23
Description: Invision Power Services (IPS) Community Suite before 4.1.9 makes session hijack easier by relying on the PHP uniqid function without the more_entropy flag. Attackers can guess an Invision Power Board session cookie if they can predict the exact time of cookie generation.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-331
References: https://invisionpower.com/release-notes/419-r37/; https://medium.com/%40iancarroll/bypassing-authentication-in-invision-power-board-with-cve-2016-2564-9a24ea3655f9; https://invisionpower.com/release-notes/419-r37/
CVE: CVE-2017-8073
Published: 2017-04-23
Description: WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3836; http://www.securityfocus.com/bid/97987; https://github.com/weechat/weechat/commit/2fb346f25f79e412cf0ed314fdf791763c19b70b
CVE: CVE-2017-8074
Published: 2017-04-23
Description: On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log lines where passwords are encoded in hexadecimal. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532
References: http://www.securityfocus.com/bid/97981; https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/; http://www.securityfocus.com/bid/97981
CVE: CVE-2017-8075
Published: 2017-04-23
Description: On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log lines where passwords are in cleartext. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532
References: http://www.securityfocus.com/bid/97983; https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/; http://www.securityfocus.com/bid/97983
CVE: CVE-2017-8076
Published: 2017-04-23
Description: On the TP-Link TL-SG108E 1.0, admin network communications are RC4 encoded, even though RC4 is deprecated. This affects the 1.1.2 Build 20141017 Rel.50749 firmware.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-326
References: https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/; https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/
CVE: CVE-2017-8077
Published: 2017-04-23
Description: On the TP-Link TL-SG108E 1.0, there is a hard-coded ciphering key (a long string beginning with Ei2HNryt). This affects the 1.1.2 Build 20141017 Rel.50749 firmware.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/; https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/
CVE: CVE-2017-8078
Published: 2017-04-23
Description: On the TP-Link TL-SG108E 1.0, the upgrade process can be requested remotely without authentication (httpupg.cgi with a parameter called cmd). This affects the 1.1.2 Build 20141017 Rel.50749 firmware.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: http://www.securityfocus.com/bid/97985; https://chmod750.com/2017/04/23/vulnerability-disclosure-tp-link/; http://www.securityfocus.com/bid/97985
CVE: CVE-2014-9681
Published: 2017-04-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2007-6761
Published: 2017-04-24
Description: drivers/media/video/videobuf-vmalloc.c in the Linux kernel before 2.6.24 does not initialize videobuf_mapping data structures, which allows local users to trigger an incorrect count value and videobuf leak via unspecified vectors, a different vulnerability than CVE-2010-5321.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.linuxgrill.com/anonymous/kernel/v2.6/ChangeLog-2.6.24; http://www.securityfocus.com/bid/98001; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=827340
CVE: CVE-2010-5321
Published: 2017-04-24
Description: Memory leak in drivers/media/video/videobuf-core.c in the videobuf subsystem in the Linux kernel 2.6.x through 4.x allows local users to cause a denial of service (memory consumption) by leveraging /dev/video access for a series of mmap calls that require new allocations, a different vulnerability than CVE-2007-6761.  NOTE: as of 2016-06-18, this affects only 11 drivers that have not been updated to use videobuf2 instead of videobuf.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-772
References: http://linuxtv.org/irc/v4l/index.php?date=2010-07-29; http://www.openwall.com/lists/oss-security/2015/02/08/4; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=827340
CVE: CVE-2010-5329
Published: 2017-04-24
Description: The video_usercopy function in drivers/media/video/v4l2-ioctl.c in the Linux kernel before 2.6.39 relies on the count value of a v4l2_ext_controls data structure to determine a kmalloc size, which might allow local users to cause a denial of service (memory consumption) via a large value.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: http://linuxtv.org/irc/v4l/index.php?date=2010-07-29; http://www.openwall.com/lists/oss-security/2015/02/08/4; http://www.securityfocus.com/bid/97986
CVE: CVE-2014-9654
Published: 2017-04-24
Description: The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring that they can be represented in a 24-bit field, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted string, a related issue to CVE-2014-7923.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://bugs.icu-project.org/trac/changeset/36801; http://bugs.icu-project.org/trac/ticket/11371; http://openwall.com/lists/oss-security/2015/02/05/15
CVE: CVE-2014-9680
Published: 2017-04-24
Description: sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not view file contents) by running a program within an sudo session, as demonstrated by interfering with terminal output, discarding kernel-log messages, or repositioning tape drives.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://openwall.com/lists/oss-security/2014/10/15/24; http://rhn.redhat.com/errata/RHSA-2015-1409.html; http://www.securitytracker.com/id/1033158