deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-19139
Published: 2018-11-09
Description: An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html; http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html; http://www.securityfocus.com/bid/105956
CVE: CVE-2018-15796
Published: 2018-11-09
Description: Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs. A remote malicious user may obtain a signed URL and extract the signing key, allowing them complete read and write access to the the Bits Service storage.
CVSS Score: 8.1 (HIGH)
CWE: CWE-326
References: https://www.cloudfoundry.org/blog/cve-2018-15796; https://www.cloudfoundry.org/blog/cve-2018-15796
CVE: CVE-2018-19145
Published: 2018-11-09
Description: An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://kingflyme.blogspot.com/2018/11/the-poc-of-s-cmsxss.html; https://kingflyme.blogspot.com/2018/11/the-poc-of-s-cmsxss.html
CVE: CVE-2018-19084
Published: 2018-11-10
Description: RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E05C with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://downwithup.github.io/CVEPosts.html; https://downwithup.github.io/CVEPosts.html
CVE: CVE-2018-19085
Published: 2018-11-10
Description: RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E048 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://downwithup.github.io/CVEPosts.html; https://downwithup.github.io/CVEPosts.html
CVE: CVE-2018-19086
Published: 2018-11-10
Description: RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E040 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://downwithup.github.io/CVEPosts.html; https://downwithup.github.io/CVEPosts.html
CVE: CVE-2018-19087
Published: 2018-11-10
Description: RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E044 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://downwithup.github.io/CVEPosts.html; https://downwithup.github.io/CVEPosts.html
CVE: CVE-2018-19148
Published: 2018-11-10
Description: Caddy through 0.11.0 sends incorrect certificates for certain invalid requests, making it easier for attackers to enumerate hostnames. Specifically, when unable to match a Host header with a vhost in its configuration, it serves the X.509 certificate for a randomly selected vhost in its configuration. Repeated requests (with a nonexistent hostname in the Host header) permit full enumeration of all certificates on the server. This generally permits an attacker to easily and accurately discover the existence of and relationships among hostnames that weren't meant to be public, though this information could likely have been discovered via other methods with additional effort.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: https://github.com/mholt/caddy/issues/1303; https://github.com/mholt/caddy/issues/2334; https://github.com/mholt/caddy/pull/2015
CVE: CVE-2018-19149
Published: 2018-11-10
Description: Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/106031; https://access.redhat.com/errata/RHSA-2019:2022; https://gitlab.freedesktop.org/poppler/poppler/issues/664
CVE: CVE-2018-19150
Published: 2018-11-10
Description: Memory corruption in PDMODELProvidePDModelHFT in pdmodel.dll in pdfforge PDF Architect 6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because of a "Data from Faulting Address controls Code Flow" issue.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2018-09-19-pdf-architect-corruption.md; https://nafiez.github.io/security/integer/2018/09/18/pdf-architect-corruption.html; https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2018-09-19-pdf-architect-corruption.md
CVE: CVE-2017-17550
Published: 2018-11-10
Description: ZyXEL ZyWALL USG 2.12 AQQ.2 and 3.30 AQQ.7 devices are affected by a CSRF vulnerability via a cgi-bin/zysh-cgi cmd action to add a user account. This account's access could, for example, subsequently be used for stored XSS.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.shellcode.it/article/cve-2017-17550/; https://www.shellcode.it/article/cve-2017-17550/
CVE: CVE-2018-19168
Published: 2018-11-11
Description: Shell Metacharacter Injection in www/modules/save.php in FruityWifi (aka PatatasFritas/PatataWifi) through 2.4 allows remote attackers to execute arbitrary code with root privileges via a crafted mod_name parameter in a POST request. NOTE: unlike in CVE-2018-17317, the attacker does not need a valid session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/xtr4nge/FruityWifi/issues/250; https://github.com/xtr4nge/FruityWifi/issues/250
CVE: CVE-2018-19135
Published: 2018-11-11
Description: ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an attacker to perform actions for an admin (or any user with the file upload capability). With this vulnerability, one can automatically upload files (by default, it allows html, pdf, xml, zip, and many other file types). A file can be accessed publicly under the "/assets/files" directory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/ClipperCMS/ClipperCMS/issues/494; https://www.exploit-db.com/exploits/45839/; https://github.com/ClipperCMS/ClipperCMS/issues/494
CVE: CVE-2018-19141
Published: 2018-11-11
Description: Open Ticket Request System (OTRS) 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack via a modified URL because user and customer preferences are mishandled.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://community.otrs.com/security-advisory-2018-09-security-update-for-otrs-framework/; https://lists.debian.org/debian-lts-announce/2018/11/msg00028.html; https://community.otrs.com/security-advisory-2018-09-security-update-for-otrs-framework/
CVE: CVE-2018-19142
Published: 2018-11-11
Description: Open Ticket Request System (OTRS) 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://community.otrs.com/security-advisory-2018-08-security-update-for-otrs-framework/; https://community.otrs.com/security-advisory-2018-08-security-update-for-otrs-framework/
CVE: CVE-2018-19143
Published: 2018-11-11
Description: Open Ticket Request System (OTRS) 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified submission form because upload caching is mishandled.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-425
References: https://community.otrs.com/security-advisory-2018-07-security-update-for-otrs-framework/; https://lists.debian.org/debian-lts-announce/2018/11/msg00028.html; https://community.otrs.com/security-advisory-2018-07-security-update-for-otrs-framework/
CVE: CVE-2018-19170
Published: 2018-11-11
Description: In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setting URI, as demonstrated by the web_name parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/JpressProjects/jpress/issues/89; https://github.com/JpressProjects/jpress/issues/89
CVE: CVE-2018-19178
Published: 2018-11-11
Description: In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/zchuanzhao/jeesns/issues/6; https://github.com/zchuanzhao/jeesns/issues/6
CVE: CVE-2018-19180
Published: 2018-11-11
Description: statics/app/index/controller/Install.php in YUNUCMS 1.1.5 (if install.lock is not present) allows remote attackers to execute arbitrary PHP code by placing this code in the index.php?s=index/install/setup2 DB_PREFIX field, which is written to database.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/doublefast/yunucms/issues/1; https://github.com/doublefast/yunucms/issues/1
CVE: CVE-2018-19181
Published: 2018-11-11
Description: statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action=remove key parameter, as demonstrated by using directory traversal to delete the install.lock file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/doublefast/yunucms/issues/1; https://github.com/doublefast/yunucms/issues/1
CVE: CVE-2018-18920
Published: 2018-11-12
Description: Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100, 0]' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed indefinitely without gas being paid."
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/ethereum/py-evm/issues/1448; https://twitter.com/AlexanderFisher/status/[PII_REDACTED]41878019; https://twitter.com/NettaLab/status/[PII_REDACTED]02383617
CVE: CVE-2018-19183
Published: 2018-11-12
Description: ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my_code, 'hex')" attribute. NOTE: the vendor disputes this because REVERT is a normal bytecode that can be triggered from high-level source code, leading to a normal programmatic execution result.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/ethereumjs/ethereumjs-monorepo/issues/386#issuecomment-439372074; https://github.com/ethereumjs/ethereumjs-monorepo/issues/395#issuecomment-472449204; https://github.com/ethereumjs/ethereumjs-vm/issues/386
CVE: CVE-2018-19184
Published: 2018-11-12
Description: cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/ethereum/go-ethereum/issues/18069; https://github.com/ethereum/go-ethereum/issues/18069
CVE: CVE-2018-19185
Published: 2018-11-12
Description: An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoder_encodeOctetString in mms/asn1/ber_encoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/fouzhe/security/tree/master/libiec61850#another-heap-buffer-overflow-in-function-berencoder_encodeoctetstring; https://github.com/mz-automation/libiec61850/issues/87; https://github.com/fouzhe/security/tree/master/libiec61850#another-heap-buffer-overflow-in-function-berencoder_encodeoctetstring
CVE: CVE-2018-19192
Published: 2018-11-12
Description: An issue was discovered in XiaoCms 20141229. admin/index.php?c=content&a=add&catid=3 has CSRF, as demonstrated by entering news via the data[content] parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/AvaterXXX/XiaoCms/blob/master/CSRF.md; https://github.com/AvaterXXX/XiaoCms/blob/master/CSRF.md
CVE: CVE-2018-19193
Published: 2018-11-12
Description: An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/XiaoCms/blob/master/XSS.md#xss1; https://github.com/AvaterXXX/XiaoCms/blob/master/XSS.md#xss1
CVE: CVE-2018-19194
Published: 2018-11-12
Description: An issue was discovered in XiaoCms 20141229. /admin/index.php?c=database allows full path disclosure in a "failed to open stream" error message.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/AvaterXXX/XiaoCms/blob/master/INFO_EXP.md; https://github.com/AvaterXXX/XiaoCms/blob/master/INFO_EXP.md
CVE: CVE-2018-19195
Published: 2018-11-12
Description: An issue was discovered in XiaoCms 20141229. There is XSS related to the template\default\show_product.html file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/AvaterXXX/XiaoCms/blob/master/XSS.md#xss2; https://github.com/AvaterXXX/XiaoCms/blob/master/XSS.md#xss2
CVE: CVE-2018-19196
Published: 2018-11-12
Description: An issue was discovered in XiaoCms 20141229. It allows remote attackers to execute arbitrary code by using the type parameter to bypass the standard admin\controller\uploadfile.php restrictions on uploaded file types (jpg, jpeg, bmp, png, gif), as demonstrated by an admin/index.php?c=uploadfile&a=uploadify_upload&type=php URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/AvaterXXX/XiaoCms/blob/master/GETSHELL.md; https://www.patec.cn/newsshow.php?cid=24&id=136; https://github.com/AvaterXXX/XiaoCms/blob/master/GETSHELL.md
CVE: CVE-2018-19197
Published: 2018-11-12
Description: An issue was discovered in XiaoCms 20141229. admin\controller\database.php allows arbitrary directory deletion via admin/index.php?c=database&a=import&paths[]=../ directory traversal.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://github.com/AvaterXXX/XiaoCms/blob/master/DIR_DEL.md; https://www.patec.cn/newsshow.php?cid=24&id=136; https://github.com/AvaterXXX/XiaoCms/blob/master/DIR_DEL.md
CVE: CVE-2018-19198
Published: 2018-11-12
Description: An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an out-of-bounds write via a uriComposeQuery* or uriComposeQueryEx* function because the '&' character is mishandled in certain contexts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://access.redhat.com/errata/RHSA-2019:2280; https://github.com/uriparser/uriparser/blob/uriparser-0.9.0/ChangeLog; https://github.com/uriparser/uriparser/commit/864f5d4c127def386dd5cc926ad96934b297f04e
CVE: CVE-2018-19199
Published: 2018-11-12
Description: An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery* or uriComposeQueryEx* function because of an unchecked multiplication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://access.redhat.com/errata/RHSA-2019:2280; https://github.com/uriparser/uriparser/blob/uriparser-0.9.0/ChangeLog; https://github.com/uriparser/uriparser/commit/f76275d4a91b28d687250525d3a0c5509bbd666f
CVE: CVE-2018-19200
Published: 2018-11-12
Description: An issue was discovered in uriparser before 0.9.0. UriCommon.c allows attempted operations on NULL input via a uriResetUri* function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/uriparser/uriparser/blob/uriparser-0.9.0/ChangeLog; https://github.com/uriparser/uriparser/commit/f58c25069cf4a986fe17a80c5b38687e31feb539; https://lists.debian.org/debian-lts-announce/2018/11/msg00019.html
CVE: CVE-2018-1786
Published: 2018-11-12
Description: IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. This can cause TCP/IP resource leakage and may result in a denial of service. IBM X-Force ID: 148871.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: http://www.ibm.com/support/docview.wss?uid=ibm10738765; http://www.securityfocus.com/bid/105940; https://exchange.xforce.ibmcloud.com/vulnerabilities/148871
CVE: CVE-2018-1798
Published: 2018-11-12
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 149428.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=ibm10730703; http://www.securityfocus.com/bid/105945; http://www.securitytracker.com/id/1042053
CVE: CVE-2018-1884
Published: 2018-11-12
Description: IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a remote attacker to execute code using directory traversal techniques. IBM X-Force ID: 151970.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-22
References: http://www.ibm.com/support/docview.wss?uid=ibm10737897; http://www.securityfocus.com/bid/105946; https://exchange.xforce.ibmcloud.com/vulnerabilities/151970
CVE: CVE-2018-19203
Published: 2018-11-12
Description: PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTTP request.
CVSS Score: 7.5 (HIGH)
References: http://en.securitylab.ru/lab/PT-2018-22; https://www.paessler.com/prtg/history/stable#18.2.41.1652; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2018-22/
CVE: CVE-2018-19204
Published: 2018-11-12
Description: PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and OS commands with system privileges. When creating an HTTP Advanced Sensor, the user's input in the POST parameter 'proxyport_' is mishandled. The attacker can craft an HTTP request and override the 'writeresult' command-line parameter for HttpAdvancedSensor.exe to store arbitrary data in an arbitrary place on the file system. For example, the attacker can create an executable file in the \Custom Sensors\EXE directory and execute it by creating EXE/Script Sensor.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://en.securitylab.ru/lab/PT-2018-23; https://www.paessler.com/prtg/history/stable#18.3.44.2054; https://www.ptsecurity.com/ww-en/analytics/threatscape/pt-2018-23/
CVE: CVE-2018-19205
Published: 2018-11-12
Description: Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier for attackers to obtain sensitive information, a related issue to CVE-2017-17688. This is associated with plugins/enigma/lib/enigma_driver_gnupg.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/roundcube/roundcubemail/releases/tag/1.3.7; https://roundcube.net/news/2018/07/27/update-1.3.7-released; https://github.com/roundcube/roundcubemail/releases/tag/1.3.7
CVE: CVE-2018-19206
Published: 2018-11-12
Description: steps/mail/func.inc in Roundcube before 1.3.8 has XSS via crafted use of <svg><style>, as demonstrated by an onload attribute in a BODY element, within an HTML attachment.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/roundcube/roundcubemail/releases/tag/1.3.8; https://roundcube.net/news/2018/10/26/update-1.3.8-released; https://www.debian.org/security/2018/dsa-4344
CVE: CVE-2018-19207
Published: 2018-11-12
Description: The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb->prepare() input is mishandled, as exploited in the wild in November 2018.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-425
References: http://www.securityfocus.com/bid/105921; https://wordpress.org/plugins/wp-gdpr-compliance/#developers; https://wpvulndb.com/vulnerabilities/9144
CVE: CVE-2018-19208
Published: 2018-11-12
Description: In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack. This is related to WPXTable.h.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://access.redhat.com/errata/RHSA-2019:2126; https://bugzilla.redhat.com/show_bug.cgi?id=1643752; https://access.redhat.com/errata/RHSA-2019:2126
CVE: CVE-2018-19209
Published: 2018-11-12
Description: Netwide Assembler (NASM) 2.14rc15 has a NULL pointer dereference in the function find_label in asm/labels.c that will lead to a DoS attack.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.suse.com/show_bug.cgi?id=1115797; https://repo.or.cz/nasm.git/commitdiff/e996d28c70d[PII_REDACTED]2b442b44a[PII_REDACTED]; https://bugzilla.suse.com/show_bug.cgi?id=1115797
CVE: CVE-2018-19210
Published: 2018-11-12
Description: In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of service attack, as demonstrated by tiffset.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://bugzilla.maptools.org/show_bug.cgi?id=2820; http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00041.html; http://packetstormsecurity.com/files/155095/Slackware-Security-Advisory-libtiff-Updates.html
CVE: CVE-2018-19211
Published: 2018-11-12
Description: In ncurses 6.1, there is a NULL pointer dereference at function _nc_parse_entry in parse_entry.c that will lead to a denial of service attack. The product proceeds to the dereference code path even after a "dubious character `*' in name or alias field" detection.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=1643754; https://bugzilla.redhat.com/show_bug.cgi?id=1643754
CVE: CVE-2018-19212
Published: 2018-11-12
Description: In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser() that will lead to a DoS attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-670
References: https://bugzilla.redhat.com/show_bug.cgi?id=1644196; https://bugzilla.redhat.com/show_bug.cgi?id=1644196
CVE: CVE-2018-19213
Published: 2018-11-12
Description: Netwide Assembler (NASM) through 2.14rc16 has memory leaks that may lead to DoS, related to nasm_malloc in nasmlib/malloc.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392524; https://bugzilla.nasm.us/show_bug.cgi?id=3392524
CVE: CVE-2018-19214
Published: 2018-11-12
Description: Netwide Assembler (NASM) 2.14rc15 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for insufficient input.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html; https://bugzilla.nasm.us/show_bug.cgi?id=3392521
CVE: CVE-2018-19215
Published: 2018-11-12
Description: Netwide Assembler (NASM) 2.14rc16 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for the special cases of the % and $ and ! characters.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html; https://bugzilla.nasm.us/show_bug.cgi?id=3392525
CVE: CVE-2018-19216
Published: 2018-11-12
Description: Netwide Assembler (NASM) before 2.13.02 has a use-after-free in detoken at asm/preproc.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00017.html; https://bugzilla.nasm.us/show_bug.cgi?id=3392424