deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-15113
Published: 2018-07-27
Description: ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Only administrators can change the log level and only administrators can access the logs. This presents a risk when debug-level logs are shared with vendors or other parties to troubleshoot issues.
CVSS Score: 7.2 (HIGH)
CWE: CWE-212, CWE-532
References: http://www.securityfocus.com/bid/101933; https://access.redhat.com/errata/RHEA-2017:3138; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15113
CVE: CVE-2017-15119
Published: 2018-07-27
Description: The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-400, CWE-400
References: http://www.openwall.com/lists/oss-security/2017/11/28/9; http://www.securityfocus.com/bid/102011; https://access.redhat.com/errata/RHSA-2018:1104
CVE: CVE-2016-9595
Published: 2018-07-27
Description: A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.
CVSS Score: 7.3 (HIGH)
CWE: CWE-377, CWE-59
References: https://access.redhat.com/errata/RHSA-2018:0336; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9595; https://access.redhat.com/errata/RHSA-2018:0336
CVE: CVE-2017-2579
Published: 2018-07-27
Description: An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insufficient code value check, so that a maliciously crafted file could cause the application to crash or possibly allows code execution.
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00056.html; http://www.securityfocus.com/bid/96714; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2579
CVE: CVE-2017-2580
Published: 2018-07-27
Description: An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00056.html; http://www.securityfocus.com/bid/96712; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2580
CVE: CVE-2017-2581
Published: 2018-07-27
Description: An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the application to crash or possibly allow code execution.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: http://www.securityfocus.com/bid/96710; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2581; http://www.securityfocus.com/bid/96710
CVE: CVE-2017-2586
Published: 2018-07-27
Description: A null pointer dereference vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash.
CVSS Score: 3.3 (LOW)
CWE: CWE-476, CWE-476
References: http://www.securityfocus.com/bid/96708; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2586; http://www.securityfocus.com/bid/96708
CVE: CVE-2017-2587
Published: 2018-07-27
Description: A memory allocation vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to crash.
CVSS Score: 3.3 (LOW)
CWE: CWE-770, CWE-770
References: http://www.securityfocus.com/bid/96702; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2587; http://www.securityfocus.com/bid/96702
CVE: CVE-2017-2590
Published: 2018-07-27
Description: A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.
CVSS Score: 8.1 (HIGH)
CWE: CWE-732, CWE-275
References: http://rhn.redhat.com/errata/RHSA-2017-0388.html; http://www.securityfocus.com/bid/96557; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2590
CVE: CVE-2017-2614
Published: 2018-07-27
Description: When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for the current password if it is expired. This would allow access to an attacker with access to change the password on accounts with expired passwords, gaining access to those accounts.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20, CWE-640
References: http://rhn.redhat.com/errata/RHSA-2017-0257.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2614; http://rhn.redhat.com/errata/RHSA-2017-0257.html
CVE: CVE-2017-2621
Published: 2018-07-27
Description: An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-552, CWE-532
References: http://www.securityfocus.com/bid/96280; https://access.redhat.com/errata/RHSA-2017:1243; https://access.redhat.com/errata/RHSA-2017:1464
CVE: CVE-2017-2623
Published: 2018-07-27
Description: It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering. Packages with unsigned or badly signed content could fail to be rejected as expected. This issue is partially mitigated on RHEL Atomic Host, where certificate pinning is used by default.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-295, CWE-295
References: http://www.securityfocus.com/bid/96558; https://access.redhat.com/errata/RHSA-2017:0444; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2623
CVE: CVE-2017-2624
Published: 2018-07-27
Description: It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. If the cookie is correct, it is allowed to attach to the Xorg session. Since most memcmp() implementations return after an invalid byte is seen, this causes a time difference between a valid and invalid byte, which could allow an efficient brute force attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-385, CWE-200
References: http://www.securityfocus.com/bid/96480; http://www.securitytracker.com/id/1037919; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2624
CVE: CVE-2017-2625
Published: 2018-07-27
Description: It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-331, CWE-320
References: http://www.securityfocus.com/bid/96480; http://www.securitytracker.com/id/1037919; https://access.redhat.com/errata/RHSA-2017:1865
CVE: CVE-2017-2630
Published: 2018-07-27
Description: A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBD_OPT_LIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-121, CWE-119
References: http://www.openwall.com/lists/oss-security/2017/02/15/2; http://www.securityfocus.com/bid/96265; https://access.redhat.com/errata/RHSA-2017:2392
CVE: CVE-2017-2640
Published: 2018-07-27
Description: An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server could potentially use this flaw to crash Pidgin or execute arbitrary code in the context of the pidgin process.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: http://www.securityfocus.com/bid/96775; https://access.redhat.com/errata/RHSA-2017:1854; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2640
CVE: CVE-2017-2646
Published: 2018-07-27
Description: It was found that when Keycloak before 2.5.5 receives a Logout request with a Extensions in the middle of the request, the SAMLSloRequestParser.parse() method ends in a infinite loop. An attacker could use this flaw to conduct denial of service attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: http://www.securityfocus.com/bid/96882; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2646; http://www.securityfocus.com/bid/96882
CVE: CVE-2017-2651
Published: 2018-07-27
Description: jenkins-mailer-plugin before version 1.20 is vulnerable to an information disclosure while using the feature to send emails to a dynamically created list of users based on the changelogs. This could in some cases result in emails being sent to people who have no user account in Jenkins, and in rare cases even people who were not involved in whatever project was being built, due to some mapping based on the local-part of email addresses.
CVSS Score: 3.7 (LOW)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/96984; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2651; https://jenkins.io/security/advisory/2017-03-20/
CVE: CVE-2017-2653
Published: 2018-07-27
Description: A number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed via GET requests instead of just POST requests. This could allow an attacker to bypass the protect_from_forgery XSRF protection causing the routes to be used. This attack would require additional cross-site scripting or similar attacks in order to execute.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.securityfocus.com/bid/96964; https://access.redhat.com/errata/RHSA-2017:0898; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2653
CVE: CVE-2017-2658
Published: 2018-07-27
Description: It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a user into performing arbitrary actions in the Console (clickjacking).
CVSS Score: 2.6 (LOW)
CWE: CWE-20, CWE-20
References: http://rhn.redhat.com/errata/RHSA-2017-0557.html; http://www.securityfocus.com/bid/97025; https://access.redhat.com/errata/RHSA-2018:2243
CVE: CVE-2017-2674
Published: 2018-07-27
Description: JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central. The flaw is due to lack of sanitation of user input when creating new lists. Remote, authenticated attackers that have privileges to create lists can store scripts in them, which are not properly sanitized before showing to other users, including admins.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20, CWE-79
References: http://www.securityfocus.com/bid/98390; https://access.redhat.com/errata/RHSA-2017:1217; https://access.redhat.com/errata/RHSA-2017:1218
CVE: CVE-2017-7463
Published: 2018-07-27
Description: JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a reflected XSS via artifact upload. A malformed XML file, if uploaded, causes an error message to appear that includes part of the bad XML code verbatim without filtering out scripts. Successful exploitation would allow execution of script code within the context of the affected user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/98385; https://access.redhat.com/errata/RHSA-2017:1217; https://access.redhat.com/errata/RHSA-2017:1218
CVE: CVE-2018-1056
Published: 2018-07-27
Description: An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by tricking it into processing crafted ZIP files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-125
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889270; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1056; https://lists.debian.org/debian-lts-announce/2018/02/msg00016.html
CVE: CVE-2018-10882
Published: 2018-07-27
Description: A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound write in in fs/jbd2/transaction.c code, a denial of service, and a system crash by unmounting a crafted ext4 filesystem image.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-787, CWE-787
References: http://www.securityfocus.com/bid/106503; https://access.redhat.com/errata/RHSA-2018:2948; https://bugzilla.kernel.org/show_bug.cgi?id=200069
CVE: CVE-2017-2616
Published: 2018-07-27
Description: A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-267, CWE-362
References: http://rhn.redhat.com/errata/RHSA-2017-0654.html; http://www.securityfocus.com/bid/96404; http://www.securitytracker.com/id/1038271
CVE: CVE-2017-2618
Published: 2018-07-27
Description: A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty (null) write to this file can crash the system by causing the system to attempt to access unmapped kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-193, CWE-682
References: http://www.securityfocus.com/bid/96272; https://access.redhat.com/errata/RHSA-2017:0931; https://access.redhat.com/errata/RHSA-2017:0932
CVE: CVE-2017-2620
Published: 2018-07-27
Description: Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-125, CWE-787
References: http://rhn.redhat.com/errata/RHSA-2017-0328.html; http://rhn.redhat.com/errata/RHSA-2017-0329.html; http://rhn.redhat.com/errata/RHSA-2017-0330.html
CVE: CVE-2017-2626
Published: 2018-07-27
Description: It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-331, CWE-331
References: http://www.openwall.com/lists/oss-security/2019/07/14/3; http://www.securityfocus.com/bid/96480; http://www.securitytracker.com/id/1037919
CVE: CVE-2017-2629
Published: 2018-07-27
Description: curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server's certificate's validity in the code that checks for a test success or failure. It ends up always thinking there's valid proof, even when there is none or if the server doesn't support the TLS extension in question. This could lead to users not detecting when a server's certificate goes invalid or otherwise be mislead that the server is in a better shape than it is in reality. This flaw also exists in the command line tool (--cert-status).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-295, CWE-295
References: http://www.securityfocus.com/bid/96382; http://www.securitytracker.com/id/1037871; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2629
CVE: CVE-2017-2632
Published: 2018-07-27
Description: A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. This would allow an attacker with tenant administration access to elevate privileges.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-285, CWE-863
References: http://rhn.redhat.com/errata/RHSA-2017-0320.html; http://www.securityfocus.com/bid/96478; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2632
CVE: CVE-2017-2633
Published: 2018-07-27
Description: An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-120, CWE-125, CWE-787
References: http://www.openwall.com/lists/oss-security/2017/02/23/1; http://www.securityfocus.com/bid/96417; https://access.redhat.com/errata/RHSA-2017:1205
CVE: CVE-2017-2634
Published: 2018-07-27
Description: It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inet_sk_rebuild_header() function for both IPv4 and IPv6 DCCP connections, which could result in memory corruptions. A remote attacker could use this flaw to crash the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-119
References: http://rhn.redhat.com/errata/RHSA-2017-0323.html; http://rhn.redhat.com/errata/RHSA-2017-0346.html; http://rhn.redhat.com/errata/RHSA-2017-0347.html
CVE: CVE-2016-9577
Published: 2018-07-27
Description: A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-122, CWE-119
References: http://rhn.redhat.com/errata/RHSA-2017-0253.html; http://rhn.redhat.com/errata/RHSA-2017-0549.html; http://www.securityfocus.com/bid/96040
CVE: CVE-2017-15097
Published: 2018-07-27
Description: Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user account could use these flaws to obtain root access on the server machine.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-59, CWE-59
References: http://www.securitytracker.com/id/1039983; https://access.redhat.com/errata/RHSA-2017:3402; https://access.redhat.com/errata/RHSA-2017:3403
CVE: CVE-2017-15101
Published: 2018-07-27
Description: A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could cause a denial of service condition or potentially even arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-119
References: https://access.redhat.com/errata/RHSA-2017:3384; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15101; https://access.redhat.com/errata/RHSA-2017:3384
CVE: CVE-2017-2648
Published: 2018-07-27
Description: It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle attacks.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-295, CWE-295
References: http://www.securityfocus.com/bid/96985; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2648; https://jenkins.io/security/advisory/2017-03-20/
CVE: CVE-2017-2649
Published: 2018-07-27
Description: It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server, thereby enabling Man-in-the-Middle attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295, CWE-295
References: http://www.securityfocus.com/bid/96986; https://jenkins.io/security/advisory/2017-03-20/; http://www.securityfocus.com/bid/96986
CVE: CVE-2017-2650
Published: 2018-07-27
Description: It was found that the use of Pipeline: Classpath Step Jenkins plugin enables a bypass of the Script Security sandbox for users with SCM commit access, as well as users with e.g. Job/Configure permission in Jenkins.
CVSS Score: 8.5 (HIGH)
CWE: CWE-592
References: http://www.securityfocus.com/bid/96981; https://jenkins.io/security/advisory/2017-03-20/; http://www.securityfocus.com/bid/96981
CVE: CVE-2017-2652
Published: 2018-07-27
Description: It was found that there were no permission checks performed in the Distributed Fork plugin before and including 1.5.0 for Jenkins that provides the dist-fork CLI command beyond the basic check for Overall/Read permission, allowing anyone with that permission to run arbitrary shell commands on all connected nodes.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-287
References: http://www.securityfocus.com/bid/96980; https://jenkins.io/security/advisory/2017-03-20/; http://www.securityfocus.com/bid/96980
CVE: CVE-2017-2663
Published: 2018-07-27
Description: It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and com.redhat.RHSM1.Config.Set methods. An unprivileged local attacker could use these methods to gain access to private information, or launch a privilege escalation attack.
CVSS Score: 8.2 (HIGH)
CWE: CWE-270
References: http://www.securityfocus.com/bid/97015; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2663; https://github.com/candlepin/subscription-manager/commit/2aa48ef65
CVE: CVE-2016-9578
Published: 2018-07-27
Description: A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-770, CWE-20
References: http://rhn.redhat.com/errata/RHSA-2017-0253.html; http://rhn.redhat.com/errata/RHSA-2017-0549.html; http://www.securityfocus.com/bid/96118
CVE: CVE-2016-9603
Published: 2018-07-27
Description: A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-122, CWE-119
References: http://www.securityfocus.com/bid/96893; http://www.securitytracker.com/id/1038023; https://access.redhat.com/errata/RHSA-2017:0980
CVE: CVE-2017-15118
Published: 2018-07-27
Description: A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.
CVSS Score: 8.3 (HIGH)
CWE: CWE-121, CWE-787
References: http://www.openwall.com/lists/oss-security/2017/11/28/8; http://www.securityfocus.com/bid/101975; https://access.redhat.com/errata/RHSA-2018:1104
CVE: CVE-2018-0497
Published: 2018-07-28
Description: ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based ciphersuite) via a timing-based side-channel attack. This vulnerability exists because of an incorrect fix (with a wrong SHA-384 calculation) for CVE-2013-0169.
CVSS Score: 5.9 (MEDIUM)
References: https://lists.debian.org/debian-lts-announce/2018/09/msg00029.html; https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-02; https://usn.ubuntu.com/4267-1/
CVE: CVE-2018-0498
Published: 2018-07-28
Description: ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (for a CBC based ciphersuite) via a cache-based side-channel attack.
CVSS Score: 4.7 (MEDIUM)
References: https://lists.debian.org/debian-lts-announce/2018/09/msg00029.html; https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-02; https://usn.ubuntu.com/4267-1/