deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-20861
Published: 2019-07-30
Description: libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00084.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00085.html; https://lib.openmpt.org/libopenmpt/2018/07/28/security-updates-0.3.11-0.2.10635-beta34-0.2.7561-beta20.5-p10-0.2.7386-beta20.3-p13/
CVE: CVE-2018-20871
Published: 2019-07-30
Description: In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on root_squash, weak file permissions ("other" write access) occur in certain cases (GE-6890).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-732
References: http://www.univa.com/resources/files/Release_Notes_Univa_Grid_Engine_8.6.6.pdf; http://www.univa.com/resources/files/Release_Notes_Univa_Grid_Engine_8.6.6.pdf
CVE: CVE-2019-14380
Published: 2019-07-30
Description: libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://lib.openmpt.org/libopenmpt/2019/05/27/security-update-0.4.5/; https://www.debian.org/security/2020/dsa-4729; https://lib.openmpt.org/libopenmpt/2019/05/27/security-update-0.4.5/
CVE: CVE-2019-14382
Published: 2019-07-30
Description: DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00084.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00085.html; https://lib.openmpt.org/libopenmpt/2019/01/22/security-updates-0.4.2-0.3.15-0.2.11253-beta37-0.2.7561-beta20.5-p13-0.2.7386-beta20.3-p16/
CVE: CVE-2019-14383
Published: 2019-07-30
Description: J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00084.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00085.html; https://lib.openmpt.org/libopenmpt/2019/01/22/security-updates-0.4.2-0.3.15-0.2.11253-beta37-0.2.7561-beta20.5-p13-0.2.7386-beta20.3-p16/
CVE: CVE-2019-13026
Published: 2019-07-30
Description: OXID eShop 6.0.x before 6.0.5 and 6.1.x before 6.1.4 allows SQL Injection via a crafted URL, leading to full access by an attacker. This includes all shopping cart options, customer data, and the database. No interaction between the attacker and the victim is necessary.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://oxidforge.org/en/security-bulletin-2019-001.html; https://oxidforge.org/en/security-bulletin-2019-001.html
CVE: CVE-2019-5448
Published: 2019-07-30
Description: Yarn before 1.17.3 is vulnerable to Missing Encryption of Sensitive Data due to HTTP URLs in lockfile causing unencrypted authentication data to be sent over the network.
CVSS Score: 8.1 (HIGH)
CWE: CWE-311, CWE-319
References: https://github.com/ChALkeR/notes/blob/master/Yarn-vuln.md; https://hackerone.com/reports/640904; https://yarnpkg.com/blog/2019/07/12/recommended-security-update/
CVE: CVE-2019-5449
Published: 2019-07-30
Description: A missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event names when adding or modifying confidential or private events.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287, CWE-862
References: https://hackerone.com/reports/476615; https://hackerone.com/reports/476615
CVE: CVE-2019-5450
Published: 2019-07-30
Description: Improper sanitization of HTML in directory names in the Nextcloud Android app prior to version 3.7.0 allowed to style the directory name in the header bar when using basic HTML.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://hackerone.com/reports/631227; https://hackerone.com/reports/631227
CVE: CVE-2019-5451
Published: 2019-07-30
Description: Bypass lock protection in the Nextcloud Android app prior to version 3.6.1 allows accessing the files when repeatedly opening and closing the app in a very short time.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-288, CWE-306
References: https://hackerone.com/reports/507172; https://hackerone.com/reports/507172
CVE: CVE-2019-5452
Published: 2019-07-30
Description: Bypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of thumbnails when requesting the Android content provider although the lock protection was not solved.
CVSS Score: 2.4 (LOW)
CWE: CWE-284
References: https://hackerone.com/reports/534541; https://hackerone.com/reports/534541
CVE: CVE-2019-5453
Published: 2019-07-30
Description: Bypass lock protection in the Nextcloud Android app prior to version 3.3.0 allowed access to files when being prompted for the lock protection and switching to the Nextcloud file provider.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-288, CWE-287
References: https://hackerone.com/reports/331489; https://hackerone.com/reports/331489
CVE: CVE-2019-5454
Published: 2019-07-30
Description: SQL Injection in the Nextcloud Android app prior to version 3.0.0 allows to destroy a local cache when a harmful query is executed requiring to resetup the account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://hackerone.com/reports/291764; https://hackerone.com/reports/291764
CVE: CVE-2019-5455
Published: 2019-07-30
Description: Bypassing lock protection exists in Nextcloud Android app 3.6.0 when creating a multi-account and aborting the process.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-288, CWE-287
References: https://hackerone.com/reports/490946; https://hackerone.com/reports/490946
CVE: CVE-2019-5456
Published: 2019-07-30
Description: SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use later.
CVSS Score: 8.1 (HIGH)
CWE: CWE-300, CWE-255
References: https://community.ui.com/releases/862b962b-55f6-4324-96be-610f647d5c1c; https://community.ui.com/releases/9f698d0b-8279-40d3-9f1a-d36db4813124; https://community.ui.com/releases/Security-Advisory-Bulletin-003-003/982bbaa8-2a07-4f81-a5f6-0bb84753f391
CVE: CVE-2019-5457
Published: 2019-07-30
Description: Cross-site scripting (XSS) vulnerability in min-http-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/570568; https://hackerone.com/reports/570568
CVE: CVE-2019-5458
Published: 2019-07-30
Description: Cross-site scripting (XSS) vulnerability in http-file-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/570563; https://hackerone.com/reports/570563
CVE: CVE-2019-5459
Published: 2019-07-30
Description: An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.
CVSS Score: 7.1 (HIGH)
CWE: CWE-191, CWE-191
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html
CVE: CVE-2019-5460
Published: 2019-07-30
Description: Double Free in VLC versions <= 3.0.6 leads to a crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-415, CWE-415
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00037.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00040.html
CVE: CVE-2019-7614
Published: 2019-07-30
Description: A race condition flaw was found in the response headers Elasticsearch versions before 7.2.1 and 6.8.2 returns to a request. On a system with multiple users submitting requests, it could be possible for an attacker to gain access to response header containing sensitive data from another user.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://www.elastic.co/community/security/; https://www.elastic.co/community/security/
CVE: CVE-2019-7615
Published: 2019-07-30
Description: A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. When specifying a trusted server CA certificate via the 'server_ca_cert' setting, the Ruby agent would not properly verify the certificate returned by the APM server. This could result in a man in the middle style attack against the Ruby agent.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295, CWE-295
References: https://www.elastic.co/community/security/; https://www.elastic.co/community/security/
CVE: CVE-2019-7616
Published: 2019-07-30
Description: Kibana versions before 6.8.2 and 7.2.1 contain a server side request forgery (SSRF) flaw in the graphite integration for Timelion visualizer. An attacker with administrative Kibana access could set the timelion:graphite.url configuration option to an arbitrary URL. This could possibly lead to an attacker accessing external URL resources as the Kibana process on the host system.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://www.elastic.co/community/security/; https://www.elastic.co/community/security/
CVE: CVE-2019-10152
Published: 2019-07-30
Description: A path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside containers. An attacker who has compromised an existing container can cause arbitrary files on the host filesystem to be read/written when an administrator tries to copy a file from/to the container.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22, CWE-59, CWE-22, CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00001.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10152; https://github.com/containers/libpod/blob/master/RELEASE_NOTES.md#140
CVE: CVE-2019-10153
Published: 2019-07-30
Description: A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-172
References: https://access.redhat.com/errata/RHSA-2019:2037; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10153; https://github.com/ClusterLabs/fence-agents/pull/255
CVE: CVE-2019-10156
Published: 2019-07-30
Description: A flaw was discovered in the way Ansible templating was implemented in versions before 2.6.18, 2.7.12 and 2.8.2, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://access.redhat.com/errata/RHSA-2019:3744; https://access.redhat.com/errata/RHSA-2019:3789; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10156
CVE: CVE-2019-10161
Published: 2019-07-30
Description: It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of arbitrary files, cause denial of service or cause libvirtd to execute arbitrary programs.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284, CWE-22, CWE-862
References: https://access.redhat.com/libvirt-privesc-vulnerabilities; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10161; https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=aed6a032cead4386472afb24b16196579e239580
CVE: CVE-2019-10162
Published: 2019-07-30
Description: A vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.10, 4.0.8 allowing an authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. The issue is due to the fact that the Authoritative Server will exit when it runs into a parsing error while looking up the NS/A/AAAA records it is about to use for an outgoing notify.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00036.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00054.html; https://blog.powerdns.com/2019/06/21/powerdns-authoritative-server-4-0-8-and-4-1-10-released/
CVE: CVE-2019-10163
Published: 2019-07-30
Description: A Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8 allowing a remote, authorized master server to cause a high CPU load or even prevent any further updates to any slave zone by sending a large number of NOTIFY messages. Note that only servers configured as slaves are affected by this issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770, CWE-770
References: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00036.html; http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00054.html; https://blog.powerdns.com/2019/06/21/powerdns-authoritative-server-4-0-8-and-4-1-10-released/
CVE: CVE-2019-10165
Published: 2019-07-30
Description: OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the Kubernetes API server and OpenShift API server. A user with sufficient privileges could recover OAuth tokens from these audit logs and use them to access other resources.
CVSS Score: 2.3 (LOW)
CWE: CWE-532, CWE-532
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10165; https://github.com/openshift/cluster-kube-apiserver-operator/pull/499/; https://github.com/openshift/cluster-openshift-apiserver-operator/pull/205
CVE: CVE-2019-14452
Published: 2019-07-31
Description: Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP archive entry that is mishandled during extraction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/Sigil-Ebook/Sigil/commit/04e2f280cc4a0766bedcc7b9eb56449ceecc2ad4; https://github.com/Sigil-Ebook/Sigil/commit/0979ba8d10c96ebca330715bfd4494ea0e019a8f; https://github.com/Sigil-Ebook/Sigil/commit/369eebe936e4a8c83cc54662a3412ce8bef189e4
CVE: CVE-2019-14361
Published: 2019-07-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-14439. Reason: This candidate is a reservation duplicate of CVE-2019-14439. Notes: All CVE users should reference CVE-2019-14439 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-10343
Published: 2019-07-31
Description: Jenkins Configuration as Code Plugin 1.24 and earlier did not properly apply masking to values expected to be hidden when logging the configuration being applied.
CVSS Score: 3.3 (LOW)
CWE: CWE-532
References: http://www.openwall.com/lists/oss-security/2019/07/31/1; https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1279; http://www.openwall.com/lists/oss-security/2019/07/31/1
CVE: CVE-2019-10344
Published: 2019-07-31
Description: Missing permission checks in Jenkins Configuration as Code Plugin 1.24 and earlier in various HTTP endpoints allowed users with Overall/Read access to access the generated schema and documentation for this plugin containing detailed information about installed plugins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/07/31/1; https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1290; http://www.openwall.com/lists/oss-security/2019/07/31/1
CVE: CVE-2019-10345
Published: 2019-07-31
Description: Jenkins Configuration as Code Plugin 1.20 and earlier did not treat the proxy password as a secret to be masked when logging or encrypted for export.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522, CWE-532
References: http://www.openwall.com/lists/oss-security/2019/07/31/1; https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1303; http://www.openwall.com/lists/oss-security/2019/07/31/1
CVE: CVE-2019-10355
Published: 2019-07-31
Description: A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of type casts allowed attackers to execute arbitrary code in sandboxed scripts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: http://www.openwall.com/lists/oss-security/2019/07/31/1; https://access.redhat.com/errata/RHSA-2019:2594; https://access.redhat.com/errata/RHSA-2019:2651
CVE: CVE-2019-10356
Published: 2019-07-31
Description: A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of method pointer expressions allowed attackers to execute arbitrary code in sandboxed scripts.
CVSS Score: 8.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2019/07/31/1; https://access.redhat.com/errata/RHSA-2019:2594; https://access.redhat.com/errata/RHSA-2019:2651
CVE: CVE-2019-10357
Published: 2019-07-31
Description: A missing permission check in Jenkins Pipeline: Shared Groovy Libraries Plugin 2.14 and earlier allowed users with Overall/Read access to obtain limited information about the content of SCM repositories referenced by global libraries.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/07/31/1; https://access.redhat.com/errata/RHSA-2019:2594; https://access.redhat.com/errata/RHSA-2019:2651
CVE: CVE-2019-10358
Published: 2019-07-31
Description: Jenkins Maven Integration Plugin 3.3 and earlier did not apply build log decorators to module builds, potentially revealing sensitive build variables in the build log.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: http://www.openwall.com/lists/oss-security/2019/07/31/1; https://jenkins.io/security/advisory/2019-07-31/#SECURITY-713; http://www.openwall.com/lists/oss-security/2019/07/31/1
CVE: CVE-2019-10359
Published: 2019-07-31
Description: A cross-site request forgery vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier in the M2ReleaseAction#doSubmit method allowed attackers to perform releases with attacker-specified options.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/07/31/1; https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1098; http://www.openwall.com/lists/oss-security/2019/07/31/1
CVE: CVE-2019-10360
Published: 2019-07-31
Description: A stored cross site scripting vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier allowed attackers to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/07/31/1; https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1184; http://www.openwall.com/lists/oss-security/2019/07/31/1
CVE: CVE-2019-10361
Published: 2019-07-31
Description: Jenkins Maven Release Plugin 0.14.0 and earlier stored credentials unencrypted on the Jenkins master where they could be viewed by users with access to the master file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/07/31/1; https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1435; https://www.zerodayinitiative.com/advisories/ZDI-19-835/
CVE: CVE-2019-10362
Published: 2019-07-31
Description: Jenkins Configuration as Code Plugin 1.24 and earlier did not escape values resulting in variable interpolation during configuration import when exporting, allowing attackers with permission to change Jenkins system configuration to obtain the values of environment variables.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-116
References: http://www.openwall.com/lists/oss-security/2019/07/31/1; https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1446; http://www.openwall.com/lists/oss-security/2019/07/31/1
CVE: CVE-2019-10363
Published: 2019-07-31
Description: Jenkins Configuration as Code Plugin 1.24 and earlier did not reliably identify sensitive values expected to be exported in their encrypted form.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-319
References: http://www.openwall.com/lists/oss-security/2019/07/31/1; https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1458; http://www.openwall.com/lists/oss-security/2019/07/31/1
CVE: CVE-2019-10364
Published: 2019-07-31
Description: Jenkins Amazon EC2 Plugin 1.43 and earlier wrote the beginning of private keys to the Jenkins system log.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: http://www.openwall.com/lists/oss-security/2019/07/31/1; https://jenkins.io/security/advisory/2019-07-31/#SECURITY-673; http://www.openwall.com/lists/oss-security/2019/07/31/1
CVE: CVE-2019-10365
Published: 2019-07-31
Description: Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token in the project workspace, where it could be accessed by users with Job/Read permission.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-668
References: http://www.openwall.com/lists/oss-security/2019/07/31/1; https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1345; http://www.openwall.com/lists/oss-security/2019/07/31/1
CVE: CVE-2019-10366
Published: 2019-07-31
Description: Jenkins Skytap Cloud CI Plugin 2.06 and earlier stored credentials unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2019/07/31/1; https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1429; https://www.zerodayinitiative.com/advisories/ZDI-19-833/
CVE: CVE-2019-14192
Published: 2019-07-31
Description: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191, CWE-787
References: https://blog.semmle.com/uboot-rce-nfs-vulnerability/; https://gitlab.com/u-boot/u-boot; https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE: CVE-2019-14193
Published: 2019-07-31
Description: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://blog.semmle.com/uboot-rce-nfs-vulnerability/; https://gitlab.com/u-boot/u-boot; https://web.archive.org/web/[PII_REDACTED]2117/https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE: CVE-2019-14194
Published: 2019-07-31
Description: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://blog.semmle.com/uboot-rce-nfs-vulnerability/; https://gitlab.com/u-boot/u-boot; https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE: CVE-2019-14195
Published: 2019-07-31
Description: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after calculating the new path length.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://blog.semmle.com/uboot-rce-nfs-vulnerability/; https://gitlab.com/u-boot/u-boot; https://blog.semmle.com/uboot-rce-nfs-vulnerability/
CVE: CVE-2019-14196
Published: 2019-07-31
Description: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://blog.semmle.com/uboot-rce-nfs-vulnerability/; https://gitlab.com/u-boot/u-boot; https://blog.semmle.com/uboot-rce-nfs-vulnerability/