deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-3296
Published: 2017-09-21
Description: Multiple cross-site scripting (XSS) vulnerabilities in NodeBB before 0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) javascript: or (2) data: URLs.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/04/10/10; http://www.securityfocus.com/bid/71824; https://github.com/julianlam/nodebb-plugin-markdown/commit/ab7f[PII_REDACTED]f7baefbfa31db8d5aac71e6ec3
CVE: CVE-2015-4706
Published: 2017-09-21
Description: Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2015/06/22/7; http://www.securityfocus.com/bid/75328; https://bugzilla.redhat.com/show_bug.cgi?id=1235688
CVE: CVE-2015-5284
Published: 2017-09-21
Description: ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://bugzilla.redhat.com/attachment.cgi?id=1075511; https://bugzilla.redhat.com/show_bug.cgi?id=1264790; https://pagure.io/freeipa/issue/5347
CVE: CVE-2015-8559
Published: 2017-09-21
Description: The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2015/12/14/14; https://discourse.chef.io/t/chef-infra-client-15-4-45-released/16081; https://github.com/chef/chef/issues/3871
CVE: CVE-2017-14160
Published: 2017-09-21
Description: The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a crafted mp4 file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://openwall.com/lists/oss-security/2017/09/21/2; http://www.securityfocus.com/bid/101045; https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html
CVE: CVE-2017-10996
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in c_show(), due to compat_hwcap_str[] not being NULL-terminated. This error is not fatal, however the device might crash/reboot with memory violation/out of bounds access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-10997
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause corruption of kernel memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-10998
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio_aio_ion_lookup_vaddr, the buffer length, which is user input, ends up being used to validate if the buffer is fully within the valid region. If the buffer length is large enough then the address + length operation could overflow and produce a result far below the valid region.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-10999
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL_ADD_MUX_CHANNEL in ipa wan driver may lead to memory corruption due to missing locks.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-11000
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentially lead to an out-of-bounds write.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-11001
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, the length of the MAC address is not checked which may cause out of bounds read.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-11002
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a buffer over-read can occur.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-11040
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information than it is allowed to.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-11041
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, an output buffer is accessed in one thread and can be potentially freed in another.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; https://source.android.com/security/bulletin/2018-02-01
CVE: CVE-2017-12153
Published: 2017-09-21
Description: A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-476, CWE-476
References: http://seclists.org/oss-sec/2017/q3/437; http://www.debian.org/security/2017/dsa-3981; http://www.securityfocus.com/bid/100855
CVE: CVE-2017-8247
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operation, the device may be opened more than once. This would lead to get_pid being called more than once, however put_pid being called only once in function "msm_close".
CVSS Score: 7.8 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-8250
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled variables "nr_cmds" and "nr_bos" number are passed across functions without any check. An integer overflow to buffer overflow (with a smaller buffer allocated) may occur when they are too large or negative.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-8251
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msm_isp_check_stream_cfg_cmd & msm_isp_stats_update_cgc_override, 'stream_cfg_cmd->num_streams' is not checked, and could overflow the array stream_cfg_cmd->stream_handle.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-8277
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function msm_dba_register_client, if the client registers failed, it would be freed. However the client was not removed from list. Use-after-free would occur when traversing the list next time.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-8278
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a buffer overflow or integer overflow could occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-190
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-8280
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operation, there are some potential race conditions which lead to a memory leak and a buffer overflow during the context switch.
CVSS Score: 7.0 (HIGH)
CWE: CWE-119, CWE-362, CWE-772
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-8281
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while querying event status via DCI.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200, CWE-362
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; https://source.android.com/security/bulletin/pixel/2017-12-01
CVE: CVE-2017-9676
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can occur when accessing global static variables without using a lock.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200, CWE-362, CWE-416
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-9677
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl_shared, variable "ddp->params_length" could be accessed and modified by multiple threads, while it is not protected with locks. If one thread is running, while another thread is setting data, race conditions will happen. If "ddp->params_length" is set to a big number, a buffer overflow will occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-362
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-9720
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera driver, an out-of-bounds read/write can occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-193
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-9724
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel memory, specifically the ION cache maintenance code is writing to a user supplied address.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://www.securityfocus.com/bid/100658; https://source.android.com/security/bulletin/2017-09-01; http://www.securityfocus.com/bid/100658
CVE: CVE-2017-9725
Published: 2017-09-21
Description: In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail.
CVSS Score: 7.8 (HIGH)
CWE: CWE-682
References: http://www.securityfocus.com/bid/100658; https://access.redhat.com/errata/RHSA-2018:0676; https://access.redhat.com/errata/RHSA-2018:1062
CVE: CVE-2015-1187
Published: 2017-09-21
Description: The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html; http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html; http://seclists.org/fulldisclosure/2015/Mar/15
CVE: CVE-2015-3887
Published: 2017-09-21
Description: Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referenced in the LD_PRELOAD path.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.openwall.com/lists/oss-security/2015/05/13/11; http://www.securityfocus.com/bid/74648; https://bugzilla.redhat.com/show_bug.cgi?id=1147013
CVE: CVE-2017-12928
Published: 2017-09-21
Description: A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versions) allows remote attackers to log in via SSH and escalate privileges to root access with the same credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://packetstormsecurity.com/files/144259/DlxSpot-Hardcoded-Password.html; http://packetstormsecurity.com/files/144259/DlxSpot-Hardcoded-Password.html
CVE: CVE-2017-12929
Published: 2017-09-21
Description: Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authenticated users to upload arbitrary files leading to Remote Command Execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/144258/DlxSpot-Shell-Upload.html; http://packetstormsecurity.com/files/144258/DlxSpot-Shell-Upload.html
CVE: CVE-2017-12930
Published: 2017-09-21
Description: SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/144257/DlxSpot-SQL-Injection.html; http://packetstormsecurity.com/files/144257/DlxSpot-SQL-Injection.html
CVE: CVE-2017-14320
Published: 2017-09-21
Description: Mirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by leveraging failure to filter uploaded files.
CVSS Score: 8.0 (HIGH)
CWE: CWE-20
References: https://www.webshield.hu/vulnerabilities-found-webshield.html; https://www.webshield.hu/vulnerabilities-found-webshield.html
CVE: CVE-2017-14321
Published: 2017-09-21
Description: Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) customer name or (2) subject in a ticket.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.webshield.hu/vulnerabilities-found-webshield.html; https://www.webshield.hu/vulnerabilities-found-webshield.html
CVE: CVE-2017-14638
Published: 2017-09-21
Description: AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, segmentation fault, and application crash in AP4_Atom::SetType in Core/Ap4Atom.h.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_atomsettype-ap4atom-h/; https://github.com/axiomatic-systems/Bento4/commit/be7185faf7f[PII_REDACTED]7dcf501c6039ff03aa5; https://github.com/axiomatic-systems/Bento4/issues/182
CVE: CVE-2017-14639
Published: 2017-09-21
Description: AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service (application crash) or possibly unspecified other impact.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://blogs.gentoo.org/ago/2017/09/14/bento4-stack-based-buffer-underflow-in-ap4_visualsampleentryreadfields-ap4sampleentry-cpp/; https://github.com/axiomatic-systems/Bento4/commit/03d1222ab9c2ce779cdf01bdb96cdd69cbdcfeda; https://github.com/axiomatic-systems/Bento4/issues/190
CVE: CVE-2017-14640
Published: 2017-09-21
Description: A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_atomsampletablegetsample-ap4atomsampletable-cpp/; https://github.com/axiomatic-systems/Bento4/commit/2f267f89f957088197f4b1fc254632d1645b415d; https://github.com/axiomatic-systems/Bento4/issues/183
CVE: CVE-2017-14641
Published: 2017-09-21
Description: A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_dataatomap4_dataatom-ap4metadata-cpp/; https://github.com/axiomatic-systems/Bento4/commit/41cad[PII_REDACTED]28f07b4c4f64e9ff7a611f687; https://github.com/axiomatic-systems/Bento4/issues/184
CVE: CVE-2017-14642
Published: 2017-09-21
Description: A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash in AP4_StdcFileByteStream::ReadPartial in System/StdC/Ap4StdCFileByteStream.cpp, which leads to remote denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://blogs.gentoo.org/ago/2017/09/14/bento4-null-pointer-dereference-in-ap4_stdcfilebytestreamreadpartial-ap4stdcfilebytestream-cpp/; https://github.com/axiomatic-systems/Bento4/commit/22192de5367fa0cee985917f092be4060b7c00b0; https://github.com/axiomatic-systems/Bento4/issues/185
CVE: CVE-2017-14643
Published: 2017-09-21
Description: The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based buffer over-read and application crash in AP4_BytesToUInt32BE in Core/Ap4Utils.h.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_bytestouint32be-ap4utils-h/; https://github.com/axiomatic-systems/Bento4/commit/5eb8cf89d724ccb0b4ce5f24171ec7c11f0a7647; https://github.com/axiomatic-systems/Bento4/issues/187
CVE: CVE-2017-14644
Published: 2017-09-21
Description: A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_hdlratomap4_hdlratom-ap4hdlratom-cpp/; https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_hdlratomap4_hdlratom-ap4hdlratom-cpp/
CVE: CVE-2017-14645
Published: 2017-09-21
Description: A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnerability causes an application crash, which leads to remote denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_bitstreamreadbytes-ap4bitstream-cpp/; https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_bitstreamreadbytes-ap4bitstream-cpp/
CVE: CVE-2017-14646
Published: 2017-09-21
Description: The AP4_AvccAtom and AP4_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer over-read and application crash in AP4_DataBuffer::SetData in Core/Ap4DataBuffer.cpp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://blogs.gentoo.org/ago/2017/09/14/bento4-heap-based-buffer-overflow-in-ap4_databuffersetdata-ap4databuffer-cpp/; https://github.com/axiomatic-systems/Bento4/commit/53499d8d4c69142137c7c7f0097a444783fdeb90; https://github.com/axiomatic-systems/Bento4/issues/188
CVE: CVE-2017-14647
Published: 2017-09-21
Description: A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://blogs.gentoo.org/ago/2017/09/14/bento4-stack-based-buffer-overflow-in-ap4_visualsampleentryreadfields-ap4sampleentry-cpp/; https://blogs.gentoo.org/ago/2017/09/14/bento4-stack-based-buffer-overflow-in-ap4_visualsampleentryreadfields-ap4sampleentry-cpp/
CVE: CVE-2017-14648
Published: 2017-09-21
Description: A global buffer overflow was discovered in the iteration_loop function in loop.c in BladeEnc version 0.94.2. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://blogs.gentoo.org/ago/2017/09/19/bladeenc-global-buffer-overflow-in-iteration_loop-loop-c/; https://security.gentoo.org/glsa/202107-18; https://blogs.gentoo.org/ago/2017/09/19/bladeenc-global-buffer-overflow-in-iteration_loop-loop-c/
CVE: CVE-2017-14649
Published: 2017-09-21
Description: ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assertion failure in magick/pixel_cache.c, and application crash).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617
References: http://hg.code.sf.net/p/graphicsmagick/code/rev/358608a46f0a; http://www.securityfocus.com/bid/100958; https://blogs.gentoo.org/ago/2017/09/19/graphicsmagick-assertion-failure-in-pixel_cache-c/
CVE: CVE-2017-14650
Published: 2017-09-21
Description: A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's not exploitable through any Horde application, because the code path to the vulnerability is not used by any Horde code. Custom applications using the Horde_Image library might be affected. This vulnerability affects all versions of Horde_Image from 2.0.0 to 2.5.1, and is fixed in 2.5.2. The problem is missing input validation of the index field in _raw() during construction of an ImageMagick command line.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2017/09/21/4; https://github.com/horde/horde/commit/eb3afd14c22c77ae0d29e2848f5ac726ef6e7c5b; https://marc.info/?l=horde-announce&m=[PII_REDACTED]8079&w=2
CVE: CVE-2017-14651
Published: 2017-09-21
Description: WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2017-14651-wso2.html; https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2017-0265; https://github.com/cybersecurityworks/Disclosed/issues/15