deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-6924
Published: 2019-01-15
Description: In Drupal 8 prior to 8.3.7; When using the REST API, users without the correct permission can post comments via REST that are approved even if the user does not have permission to post approved comments. This issue only affects sites that have the RESTful Web Services (rest) module enabled, the comment entity REST resource enabled, and where an attacker can access a user account on the site with permissions to post comments, or where anonymous users can post comments.
CVSS Score: 7.4 (HIGH)
CWE: CWE-269
References: http://www.securityfocus.com/bid/100368; http://www.securitytracker.com/id/1039200; https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-08-16/drupal-core-multiple
CVE: CVE-2018-15463
Published: 2019-01-15
Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient input validation of some parameters passed to the web-based management interface of an affected device. An attacker could exploit this vulnerability by convincing a user of the interface to click a specific link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web-based management interface or allow the attacker to access sensitive browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/106513; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-ise-multi-xss; http://www.securityfocus.com/bid/106513
CVE: CVE-2017-6921
Published: 2019-01-15
Description: In Drupal 8 prior to 8.3.4; The file REST resource does not properly validate some fields when manipulating files. A site is only affected by this if the site has the RESTful Web Services (rest) module enabled, the file REST resource is enabled and allows PATCH requests, and an attacker can get or register a user account on the site with permissions to upload files and to modify the file resource.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/99222; http://www.securitytracker.com/id/1038781; https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-06-21/drupal-core-multiple
CVE: CVE-2018-14662
Published: 2019-01-15
Description: It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-285, CWE-732
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.html; https://access.redhat.com/errata/RHSA-2019:2538; https://access.redhat.com/errata/RHSA-2019:2541
CVE: CVE-2019-0001
Published: 2019-01-15
Description: Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon (bbe-smgd), and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result in an extended denial of service condition for the device. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S1; 16.2 versions prior to 16.2R2-S7; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S1; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674, CWE-674
References: http://www.securityfocus.com/bid/106541; https://kb.juniper.net/JSA10900; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RMKFSHPMOZL7MDWU5RYOTIBTRWSZ4Z6X/
CVE: CVE-2019-0002
Published: 2019-01-15
Description: On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will not show the entry for: RACL group Affected releases are Junos OS on EX2300 and EX3400 series: 15.1X53 versions prior to 15.1X53-D590; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2. This issue affect both IPv4 and IPv6 firewall filter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-794
References: http://www.securityfocus.com/bid/106669; https://kb.juniper.net/JSA10901; https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/show-pfe-filter.html
CVE: CVE-2019-0003
Published: 2019-01-15
Description: When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon (rpd) process to crash with a core file being generated. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D70 on SRX Series; 14.1X53 versions prior to 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 15.1 versions prior to 15.1R3; 15.1F versions prior to 15.1F3; 15.1X49 versions prior to 15.1X49-D140 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-617, CWE-617
References: http://www.securityfocus.com/bid/106544; https://kb.juniper.net/JSA10902; http://www.securityfocus.com/bid/106544
CVE: CVE-2019-0004
Published: 2019-01-15
Description: On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys are used for performing critical operations on the WebUI interface. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://kb.juniper.net/JSA10918; https://kb.juniper.net/JSA10918
CVE: CVE-2019-0005
Published: 2019-01-15
Description: On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This issue may allow IPv6 packets that should have been blocked to be forwarded. IPv4 packet filtering is unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS on EX and QFX series;: 14.1X53 versions prior to 14.1X53-D47; 15.1 versions prior to 15.1R7; 15.1X53 versions prior to 15.1X53-D234 on QFX5200/QFX5110 series; 15.1X53 versions prior to 15.1X53-D591 on EX2300/EX3400 series; 16.1 versions prior to 16.1R7; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: http://www.securityfocus.com/bid/106665; https://kb.juniper.net/JSA10905; http://www.securityfocus.com/bid/106665
CVE: CVE-2019-0006
Published: 2019-01-15
Description: A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager (fxpc) on all EX, QFX and MX Series devices in a Virtual Chassis configuration. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution. This issue only occurs when the crafted packet it destined to the device. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D47 on EX and QFX Virtual Chassis Platforms; 15.1 versions prior to 15.1R7-S3 all Virtual Chassis Platforms 15.1X53 versions prior to 15.1X53-D50 on EX and QFX Virtual Chassis Platforms.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-908, CWE-908
References: http://www.securityfocus.com/bid/106666; https://kb.juniper.net/JSA10906; http://www.securityfocus.com/bid/106666
CVE: CVE-2019-0007
Published: 2019-01-15
Description: The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F5 on vMX Series.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-330
References: http://www.securityfocus.com/bid/106564; https://kb.juniper.net/JSA10903; http://www.securityfocus.com/bid/106564
CVE: CVE-2019-0009
Published: 2019-01-15
Description: On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine (RE) and the packet forwarding engine (PFE). In a virtual chassis (VC) deployment, this issue disrupts communication between the VC members. This issue does not affect other Junos platforms. Affected releases are Junos OS on EX2300 and EX3400 series: 15.1X53 versions prior to 15.1X53-D590; 18.1 versions prior to 18.1R2-S2, 18.1R3; 18.2 versions prior to 18.2R2.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106548; https://kb.juniper.net/JSA10909; http://www.securityfocus.com/bid/106548
CVE: CVE-2019-0010
Published: 2019-01-15
Description: An SRX Series Service Gateway configured for Unified Threat Management (UTM) may experience a system crash with the error message "mbuf exceed" -- an indication of memory buffer exhaustion -- due to the receipt of crafted HTTP traffic. Each crafted HTTP packet inspected by UTM consumes mbufs which can be identified through the following log messages: all_logs.0:Jun 8 03:25:03 srx1 node0.fpc4 : SPU3 jmpi mbuf stall 50%. all_logs.0:Jun 8 03:25:13 srx1 node0.fpc4 : SPU3 jmpi mbuf stall 51%. all_logs.0:Jun 8 03:25:24 srx1 node0.fpc4 : SPU3 jmpi mbuf stall 52%. ... Eventually the system runs out of mbufs and the system crashes (fails over) with the error "mbuf exceed". This issue only occurs when HTTP AV inspection is configured. Devices configured for Web Filtering alone are unaffected by this issue. Affected releases are Junos OS on SRX Series: 12.1X46 versions prior to 12.1X46-D81; 12.3X48 versions prior to 12.3X48-D77; 15.1X49 versions prior to 15.1X49-D101, 15.1X49-D110.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: http://www.securityfocus.com/bid/106535; https://kb.juniper.net/JSA10910; http://www.securityfocus.com/bid/106535
CVE: CVE-2019-0011
Published: 2019-01-15
Description: The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface (such as fxp0, me0, em0, vme0) destined for another address. By continuously sending this type of packet, an attacker can repeatedly crash the kernel causing a sustained Denial of Service. Affected releases are Juniper Networks Junos OS: 17.2 versions prior to 17.2R1-S7, 17.2R3; 17.3 versions prior to 17.3R3-S3; 17.4 versions prior to 17.4R1-S4, 17.4R2; 17.2X75 versions prior to 17.2X75-D110; 18.1 versions prior to 18.1R2.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/106534; https://kb.juniper.net/JSA10911; http://www.securityfocus.com/bid/106534
CVE: CVE-2019-0012
Published: 2019-01-15
Description: A Denial of Service (DoS) vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an attacker to craft a specific BGP message to cause the routing protocol daemon (rpd) process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended DoS condition. This issue only affects PE routers configured with BGP Auto discovery for LDP VPLS. Other BGP configurations are unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D81; 12.3 versions prior to 12.3R12-S12; 12.3X48 versions prior to 12.3X48-D76; 14.1X53 versions prior to 14.1X53-D48; 15.1 versions prior to 15.1F6-S12, 15.1R7-S2; 15.1X49 versions prior to 15.1X49-D150; 15.1X53 versions prior to 15.1X53-D235, 15.1X53-D495, 15.1X53-D590, 15.1X53-D68; 16.1 versions prior to 16.1R3-S10, 16.1R4-S12, 16.1R6-S6, 16.1R7-S1; 16.2 versions prior to 16.2R2-S7; 17.1 versions prior to 17.1R2-S9, 17.1R3; 17.2 versions prior to 17.2R1-S7, 17.2R2-S6, 17.2R3; 17.3 versions prior to 17.3R2-S4, 17.3R3; 17.4 versions prior to 17.4R1-S5, 17.4R2; 18.1 versions prior to 18.1R2-S3, 18.1R3.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/106536; https://kb.juniper.net/JSA10912; http://www.securityfocus.com/bid/106536
CVE: CVE-2019-0013
Published: 2019-01-15
Description: The routing protocol daemon (RPD) process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated crashes can result in an extended Denial of Service (DoS) condition. This issue only affects IPv4 PIM. IPv6 PIM is unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77; 12.3X48 versions prior to 12.3X48-D77; 15.1 versions prior to 15.1F6-S10, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D150; 15.1X53 versions prior to 15.1X53-D233, 15.1X53-D59; 16.1 versions prior to 16.1R3-S8, 16.1R4-S8, 16.1R7; 16.2 versions prior to 16.2R2-S6; 17.1 versions prior to 17.1R2-S6, 17.1R3; 17.2 versions prior to 17.2R2-S3, 17.2R3; 17.3 versions prior to 17.3R2-S4, 17.3R3; 17.4 versions prior to 17.4R2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-19
References: http://www.securityfocus.com/bid/106519; https://kb.juniper.net/JSA10913; http://www.securityfocus.com/bid/106519
CVE: CVE-2019-0014
Published: 2019-01-15
Description: On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC (Flexible PIC Concentrator) process which causes all interfaces to go down. By continuously sending the offending packet, an attacker can repeatedly crash the FPC process causing a sustained Denial of Service (DoS). This issue affects both IPv4 and IPv6 packet processing. Affected releases are Juniper Networks Junos OS on QFX and PTX Series: 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1; 18.2 versions prior to 18.2R1-S3, 18.2R2; 17.2X75 versions prior to 17.2X75-D91, 17.2X75-D100.
CVSS Score: 7.5 (HIGH)
CWE: CWE-19
References: http://www.securityfocus.com/bid/106556; https://kb.juniper.net/JSA10914; http://www.securityfocus.com/bid/106556
CVE: CVE-2019-0015
Published: 2019-01-15
Description: A vulnerability in the SRX Series Service Gateway allows deleted dynamic VPN users to establish dynamic VPN connections until the device is rebooted. A deleted dynamic VPN connection should be immediately disallowed from establishing new VPN connections. Due to an error in token caching, deleted users are allowed to connect once a previously successful dynamic VPN connection has been established. A reboot is required to clear the cached authentication token. Affected releases are Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D75; 15.1X49 versions prior to 15.1X49-D150; 17.3 versions prior to 17.3R3; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-613
References: http://www.securityfocus.com/bid/106668; https://kb.juniper.net/JSA10915; http://www.securityfocus.com/bid/106668
CVE: CVE-2019-0016
Published: 2019-01-15
Description: A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
CVSS Score: 6.5 (MEDIUM)
References: https://kb.juniper.net/JSA10917; https://kb.juniper.net/JSA10917
CVE: CVE-2019-0017
Published: 2019-01-15
Description: The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434
References: https://kb.juniper.net/JSA10917; https://kb.juniper.net/JSA10917
CVE: CVE-2019-0018
Published: 2019-01-15
Description: A persistent cross-site scripting (XSS) vulnerability in the file upload menu of Juniper ATP may allow an authenticated user to inject arbitrary scripts and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://kb.juniper.net/JSA10918; https://kb.juniper.net/JSA10918
CVE: CVE-2019-0020
Published: 2019-01-15
Description: Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://kb.juniper.net/JSA10918; https://kb.juniper.net/JSA10918
CVE: CVE-2019-0021
Published: 2019-01-15
Description: On Juniper ATP, secret passphrase CLI inputs, such as "set mcm", are logged to /var/log/syslog in clear text, allowing authenticated local user to be able to view these secret information. This issue affects Juniper ATP 5.0 versions prior to 5.0.4.
CVSS Score: 7.1 (HIGH)
CWE: CWE-532, CWE-532
References: https://kb.juniper.net/JSA10918; https://kb.juniper.net/JSA10918
CVE: CVE-2019-0022
Published: 2019-01-15
Description: Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://kb.juniper.net/JSA10918; https://kb.juniper.net/JSA10918
CVE: CVE-2019-0023
Published: 2019-01-15
Description: A persistent cross-site scripting (XSS) vulnerability in the Golden VM menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://kb.juniper.net/JSA10918; https://kb.juniper.net/JSA10918
CVE: CVE-2019-0024
Published: 2019-01-15
Description: A persistent cross-site scripting (XSS) vulnerability in the Email Collectors menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://kb.juniper.net/JSA10918; https://kb.juniper.net/JSA10918
CVE: CVE-2019-0025
Published: 2019-01-15
Description: A persistent cross-site scripting (XSS) vulnerability in RADIUS configuration menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://kb.juniper.net/JSA10918; https://kb.juniper.net/JSA10918
CVE: CVE-2019-0026
Published: 2019-01-15
Description: A persistent cross-site scripting (XSS) vulnerability in the Zone configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://kb.juniper.net/JSA10918; https://kb.juniper.net/JSA10918
CVE: CVE-2019-0027
Published: 2019-01-15
Description: A persistent cross-site scripting (XSS) vulnerability in the Snort Rules configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://kb.juniper.net/JSA10918; https://kb.juniper.net/JSA10918
CVE: CVE-2019-0029
Published: 2019-01-15
Description: Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk server. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-532
References: https://kb.juniper.net/JSA10918; https://kb.juniper.net/JSA10918
CVE: CVE-2019-0030
Published: 2019-01-15
Description: Juniper ATP uses DES and a hardcoded salt for password hashing, allowing for trivial de-hashing of the password file contents. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.
CVSS Score: 7.2 (HIGH)
CWE: CWE-327, CWE-916
References: https://kb.juniper.net/JSA10918; https://kb.juniper.net/JSA10918
CVE: CVE-2018-6345
Published: 2019-01-15
Description: The function number_format is vulnerable to a heap overflow issue when its second argument ($dec_points) is excessively large. The internal implementation of the function will cause a string to be created with an invalid length, which can then interact poorly with other functions. This affects all supported versions of HHVM (3.30.1 and 3.27.5 and below).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://github.com/facebook/hhvm/commit/190ffdf6c8b1ec443be202c7d69e63a7e3da25e3; https://hhvm.com/blog/2019/01/14/hhvm-3.30.2.html; https://github.com/facebook/hhvm/commit/190ffdf6c8b1ec443be202c7d69e63a7e3da25e3
CVE: CVE-2018-7603
Published: 2019-01-15
Description: In Drupal's 3rd party module search auto complete prior to versions 7.x-4.8 there is a Cross Site Scripting vulnerability. This Search Autocomplete module enables you to autocomplete textfield using data from your website (nodes, comments, etc.). The module doesn't sufficiently filter user-entered text among the autocompletion items leading to a Cross Site Scripting (XSS) vulnerability. This vulnerability can be exploited by any user allowed to create one of the autocompletion item, for instance, nodes, users, comments.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.drupal.org/sa-contrib-2018-070; https://www.drupal.org/sa-contrib-2018-070
CVE: CVE-2019-3554
Published: 2019-01-15
Description: Wangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection, leading to a potential denial of service attack against systems accepting such connections. This affects versions of Wangle prior to v2019.01.14.00
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400, CWE-19
References: https://github.com/facebook/wangle/commit/3b17ba10a82c71e7808760e027ac6af687e06074; https://github.com/facebook/wangle/commit/3b17ba10a82c71e7808760e027ac6af687e06074
CVE: CVE-2019-3557
Published: 2019-01-15
Description: The implementations of streams for bz2 and php://output improperly implemented their readImpl functions, returning -1 consistently. This behavior caused some stream functions, such as stream_get_line, to trigger an out-of-bounds read when operating on such malformed streams. The implementations were updated to return valid values consistently. This affects all supported versions of HHVM (3.30 and 3.27.4 and below).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://github.com/facebook/hhvm/commit/6e4dd9ec3f14b48170fc45dc9d13a3261765f994; https://hhvm.com/blog/2019/01/14/hhvm-3.30.2.html; https://github.com/facebook/hhvm/commit/6e4dd9ec3f14b48170fc45dc9d13a3261765f994