deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-6008
Published: 2017-09-13
Description: A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean) allows local users to escalate privileges via a malformed IOCTL call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://github.com/cbayet/Exploit-CVE-2017-6008; https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-10/; https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-7/
CVE: CVE-2017-7441
Published: 2017-09-13
Description: In Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean), a crafted IOCTL with code 0x22E1C0 might lead to kernel data leaks. Because the leak occurs at the driver level, an attacker can use this vulnerability to leak some critical information about the machine such as nt!ExpPoolQuotaCookie.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-10/; https://www.nuitduhack.com/fr/planning/talk_10; https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-10/
CVE: CVE-2017-6330
Published: 2017-09-13
Description: Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (resource consumption) via crafted web requests."
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/100552; https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170907_00; http://www.securityfocus.com/bid/100552
CVE: CVE-2015-2749
Published: 2017-09-13
Description: Open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://cgit.drupalcode.org/drupal/commit/?id=d2304f840c43c190c6e136ee9901ed9797b4c3ca; http://www.debian.org/security/2015/dsa-3200; http://www.openwall.com/lists/oss-security/2015/03/26/4
CVE: CVE-2015-2750
Published: 2017-09-13
Description: Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the "//" initial sequence.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://cgit.drupalcode.org/drupal/commit/includes/common.inc?h=7.x&id=b44056d2f8e8c71d35c85ec5c2fb8f7c8a02d8a8; http://cgit.drupalcode.org/drupal/commit/includes/menu.inc?h=6.x&id=8ffc5db3c0ab926f3d4b2cf8bc51714c8c0f3c93; http://www.debian.org/security/2015/dsa-3200
CVE: CVE-2015-5168
Published: 2017-09-13
Description: Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5206.
CVSS Score: 9.8 (CRITICAL)
References: http://mail-archives.us.apache.org/mod_mbox/www-announce/201509.mbox/%3CCABF6JR2j5vesvnjbm6sDPB_zAGj3kNgzzHEpLUh6dWG6t8mC2w%40mail.gmail.com%3E; http://mail-archives.us.apache.org/mod_mbox/www-announce/201509.mbox/%3CCABF6JR2j5vesvnjbm6sDPB_zAGj3kNgzzHEpLUh6dWG6t8mC2w%40mail.gmail.com%3E
CVE: CVE-2015-5206
Published: 2017-09-13
Description: Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168.
CVSS Score: 9.8 (CRITICAL)
References: http://mail-archives.us.apache.org/mod_mbox/www-announce/201509.mbox/%3CCABF6JR2j5vesvnjbm6sDPB_zAGj3kNgzzHEpLUh6dWG6t8mC2w%40mail.gmail.com%3E; http://mail-archives.us.apache.org/mod_mbox/www-announce/201509.mbox/%3CCABF6JR2j5vesvnjbm6sDPB_zAGj3kNgzzHEpLUh6dWG6t8mC2w%40mail.gmail.com%3E
CVE: CVE-2015-7880
Published: 2017-09-13
Description: The Entity Registration module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to obtain sensitive event registration information by leveraging the "Register other accounts" permission and knowledge of usernames.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2015/10/21/2; http://www.securityfocus.com/bid/77023; https://www.drupal.org/node/2582015
CVE: CVE-2016-8737
Published: 2017-09-13
Description: In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site request forgery (CSRF), which could permit a malicious web site to produce a link which, if clicked whilst a user is logged in to Brooklyn, would cause the server to execute the attacker's commands as the user. There is known to be a proof-of-concept exploit using this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/96228; https://brooklyn.apache.org/community/security/CVE-2016-8737.html; https://lists.apache.org/thread.html/877813aaaa0e636adbc36106b89a54e0e6918f0884e9c8b67d5d5953%40%3Cdev.brooklyn.apache.org%3E
CVE: CVE-2016-8744
Published: 2017-09-13
Description: Apache Brooklyn uses the SnakeYAML library for parsing YAML inputs. SnakeYAML allows the use of YAML tags to indicate that SnakeYAML should unmarshal data to a Java type. In the default configuration in Brooklyn before 0.10.0, SnakeYAML will allow unmarshalling to any Java type available on the classpath. This could provide an authenticated user with a means to cause the JVM running Brooklyn to load and run Java code without detection by Brooklyn. Such code would have the privileges of the Java process running Brooklyn, including the ability to open files and network connections, and execute system commands. There is known to be a proof-of-concept exploit using this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://brooklyn.apache.org/community/security/CVE-2016-8744.html; https://lists.apache.org/thread.html/3f4d09c1c1a3cdfd1da0a05c8362769b917c078eed5b6c2f8e37a761%40%3Cdev.brooklyn.apache.org%3E; https://brooklyn.apache.org/community/security/CVE-2016-8744.html
CVE: CVE-2017-11462
Published: 2017-09-13
Description: Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: http://krbdev.mit.edu/rt/Ticket/Display.html?id=8598; https://bugzilla.redhat.com/show_bug.cgi?id=1488873; https://github.com/krb5/krb5/commit/56f7b1bc95a2a3eeb420e069e7655fb181ade5cf
CVE: CVE-2017-12612
Published: 2017-09-13
Description: In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This makes applications launched programmatically using the launcher API potentially vulnerable to arbitrary code execution by an attacker with access to any user account on the local machine. It does not affect apps run by spark-submit or spark-shell. The attacker would be able to execute code as the user that ran the Spark application. Users are encouraged to update to version 2.2.0 or later.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: http://www.securityfocus.com/bid/100823; https://mail-archives.apache.org/mod_mbox/spark-dev/201709.mbox/%3CCAEccTyy-1yYuhdNgkBUg0sr9NeaZSrBKkBePdTNZbxXZNTAR-g%40mail.gmail.com%3E; http://www.securityfocus.com/bid/100823
CVE: CVE-2017-14124
Published: 2017-09-13
Description: In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start applications other than defined, even if the user does not have permissions to change application definitions.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-269
References: https://www.myelux.com/cvesingle.htm?cve_id=CVE-2017-14124; https://www.myelux.com/cvesingle.htm?cve_id=CVE-2017-14124
CVE: CVE-2017-3165
Published: 2017-09-13
Description: In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site scripting where one authenticated user can cause scripts to run in the browser of another user authorized to access the first user's resources. This is due to improper escaping of server-side content. There is known to be a proof-of-concept exploit using this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96228; https://brooklyn.apache.org/community/security/CVE-2017-3165.html; https://lists.apache.org/thread.html/5aa6b7583edbfc1f[PII_REDACTED]204326d9e27ef65e8af356c798b21c%40%3Cdev.brooklyn.apache.org%3E
CVE: CVE-2017-14413
Published: 2017-09-13
Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/web/wpsacts.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14414
Published: 2017-09-13
Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/web/shareport.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14415
Published: 2017-09-13
Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/web/sitesurvey.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14416
Published: 2017-09-13
Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/web/wandetect.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14417
Published: 2017-09-13
Description: register_send.php on D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices does not require authentication, which can result in unintended enrollment in mydlink Cloud Services.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14418
Published: 2017-09-13
Description: The D-Link NPAPI extension, as used in conjunction with D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices, sends the cleartext admin password over the Internet as part of interaction with mydlink Cloud Services.
CVSS Score: 8.1 (HIGH)
CWE: CWE-522
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14419
Published: 2017-09-13
Description: The D-Link NPAPI extension, as used on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices, participates in mydlink Cloud Services by establishing a TCP relay service for HTTP, even though a TCP relay service for HTTPS is also established.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14420
Published: 2017-09-13
Description: The D-Link NPAPI extension, as used on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14421
Published: 2017-09-13
Description: D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices have a hardcoded password of wrgac25_dlink.2013gui_dir850l for the Alphanetworks account upon device reset, which allows remote attackers to obtain root access via a TELNET session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14422
Published: 2017-09-13
Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices use the same hardcoded /etc/stunnel.key private key across different customers' installations, which allows remote attackers to defeat the HTTPS cryptographic protection mechanisms by leveraging knowledge of this key from another installation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14423
Published: 2017-09-13
Description: htdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices does not prevent unauthenticated nonce-guessing attacks, which makes it easier for remote attackers to change the DNS configuration via a series of requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-307
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14424
Published: 2017-09-13
Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/passwd permissions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14425
Published: 2017-09-13
Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/etc/hnapasswd permissions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14426
Published: 2017-09-13
Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0644 /var/etc/shadow (aka the /etc/shadow symlink target) permissions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-798
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14427
Published: 2017-09-13
Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/run/storage_account_root permissions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14428
Published: 2017-09-13
Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/run/hostapd* permissions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-798
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14429
Published: 2017-09-13
Description: The DHCP client on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices allows unauthenticated remote code execution as root because /etc/services/INET/inet_ipv4.php mishandles shell metacharacters, affecting generated files such as WAN-1-udhcpc.sh.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-14430
Published: 2017-09-13
Description: D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices allow remote attackers to cause a denial of service (daemon crash) via crafted LAN traffic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html; https://pierrekim.github.io/blog/2017-09-08-dlink-850l-mydlink-cloud-0days-vulnerabilities.html
CVE: CVE-2017-7560
Published: 2017-09-13
Description: It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-377, CWE-732
References: https://bugzilla.redhat.com/show_bug.cgi?id=1480550; https://bugzilla.redhat.com/show_bug.cgi?id=1480550
CVE: CVE-2017-7561
Published: 2017-09-13
Description: Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.
CVSS Score: 7.5 (HIGH)
CWE: CWE-346, CWE-444
References: http://www.securityfocus.com/bid/100465; https://access.redhat.com/errata/RHSA-2018:0002; https://access.redhat.com/errata/RHSA-2018:0003
CVE: CVE-2017-1508
Published: 2017-09-13
Description: IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges. IBM X-Force ID: 129620.
CVSS Score: 6.7 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=swg22006872; http://www.securityfocus.com/bid/100820; https://exchange.xforce.ibmcloud.com/vulnerabilities/129620
CVE: CVE-2017-1556
Published: 2017-09-13
Description: IBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that could allow an authenticated attacker to use a regex and cause the system to slow or hang. IBM X-Force ID: 131546.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg22008315; http://www.securityfocus.com/bid/100831; https://exchange.xforce.ibmcloud.com/vulnerabilities/131546
CVE: CVE-2017-2816
Published: 2017-09-13
Description: An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100828; https://lists.debian.org/debian-lts-announce/2017/11/msg00038.html; https://security.gentoo.org/glsa/201908-26
CVE: CVE-2017-12249
Published: 2017-09-13
Description: A vulnerability in the Traversal Using Relay NAT (TURN) server included with Cisco Meeting Server (CMS) could allow an authenticated, remote attacker to gain unauthenticated or unauthorized access to components of or sensitive information in an affected system. The vulnerability is due to an incorrect default configuration of the TURN server, which could expose internal interfaces and ports on the external interface of an affected system. An attacker could exploit this vulnerability by using a TURN server to perform an unauthorized connection to a Call Bridge, a Web Bridge, or a database cluster in an affected system, depending on the deployment model and CMS services in use. A successful exploit could allow the attacker to gain unauthenticated access to a Call Bridge or database cluster in an affected system or gain unauthorized access to sensitive meeting information in an affected system. To exploit this vulnerability, the attacker must have valid credentials for the TURN server of the affected system. This vulnerability affects Cisco Meeting Server (CMS) deployments that are running a CMS Software release prior to Release 2.0.16, 2.1.11, or 2.2.6. Cisco Bug IDs: CSCvf51127.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-16, CWE-668
References: http://www.securityfocus.com/bid/100821; http://www.securitytracker.com/id/1039357; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170913-cmsturn
CVE: CVE-2017-14431
Published: 2017-09-13
Description: Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: https://lists.debian.org/debian-lts-announce/2018/09/msg00006.html; https://xenbits.xen.org/xsa/advisory-207.html; https://lists.debian.org/debian-lts-announce/2018/09/msg00006.html
CVE: CVE-2017-12893
Published: 2017-09-14
Description: The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://www.debian.org/security/2017/dsa-3971; http://www.securitytracker.com/id/1039307; http://www.tcpdump.org/tcpdump-changes.txt
CVE: CVE-2017-12894
Published: 2017-09-14
Description: Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://www.debian.org/security/2017/dsa-3971; http://www.securitytracker.com/id/1039307; http://www.tcpdump.org/tcpdump-changes.txt
CVE: CVE-2017-12895
Published: 2017-09-14
Description: The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://www.debian.org/security/2017/dsa-3971; http://www.securitytracker.com/id/1039307; http://www.tcpdump.org/tcpdump-changes.txt
CVE: CVE-2017-12896
Published: 2017-09-14
Description: The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://www.debian.org/security/2017/dsa-3971; http://www.securitytracker.com/id/1039307; http://www.tcpdump.org/tcpdump-changes.txt
CVE: CVE-2017-12897
Published: 2017-09-14
Description: The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://www.debian.org/security/2017/dsa-3971; http://www.securitytracker.com/id/1039307; http://www.tcpdump.org/tcpdump-changes.txt
CVE: CVE-2017-12898
Published: 2017-09-14
Description: The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://www.debian.org/security/2017/dsa-3971; http://www.securitytracker.com/id/1039307; http://www.tcpdump.org/tcpdump-changes.txt