deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-9748
Published: 2017-06-19
Description: The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99110; https://sourceware.org/bugzilla/show_bug.cgi?id=21582; https://www.exploit-db.com/exploits/42202/
CVE: CVE-2017-9749
Published: 2017-06-19
Description: The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99113; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=21586
CVE: CVE-2017-9750
Published: 2017-06-19
Description: opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99118; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=21587
CVE: CVE-2017-9751
Published: 2017-06-19
Description: opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99111; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=21588
CVE: CVE-2017-9752
Published: 2017-06-19
Description: bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file in the _bfd_vms_get_value and _bfd_vms_slurp_etir functions during "objdump -D" execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99122; https://sourceware.org/bugzilla/show_bug.cgi?id=21589; http://www.securityfocus.com/bid/99122
CVE: CVE-2017-9753
Published: 2017-06-19
Description: The versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not initialize a certain data structure, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99116; https://sourceware.org/bugzilla/show_bug.cgi?id=21591; http://www.securityfocus.com/bid/99116
CVE: CVE-2017-9754
Published: 2017-06-19
Description: The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99125; https://sourceware.org/bugzilla/show_bug.cgi?id=21591; http://www.securityfocus.com/bid/99125
CVE: CVE-2017-9755
Published: 2017-06-19
Description: opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99124; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=21594
CVE: CVE-2017-9756
Published: 2017-06-19
Description: The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99103; https://security.gentoo.org/glsa/201801-01; https://sourceware.org/bugzilla/show_bug.cgi?id=21595
CVE: CVE-2017-4984
Published: 2017-06-19
Description: In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, an unauthenticated remote attacker may be able to elevate their permissions to root through a command injection. This may potentially be exploited by an attacker to run arbitrary code with root-level privileges on the targeted VNX Control Station system, aka remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.securityfocus.com/archive/1/540738/30/0/threaded; http://www.securityfocus.com/bid/99039; http://www.securityfocus.com/archive/1/540738/30/0/threaded
CVE: CVE-2017-4985
Published: 2017-06-19
Description: In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user may potentially escalate their privileges to root due to authorization checks not being performed on certain perl scripts. This may potentially be exploited by an attacker to run arbitrary commands as root on the targeted VNX Control Station system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: http://www.securityfocus.com/archive/1/540738/30/0/threaded; http://www.securityfocus.com/bid/99037; http://www.securityfocus.com/archive/1/540738/30/0/threaded
CVE: CVE-2017-4987
Published: 2017-06-19
Description: In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user can load a maliciously crafted file in the search path which may potentially allow the attacker to execute arbitrary code on the targeted VNX Control Station system, aka an uncontrolled search path vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: http://www.securityfocus.com/archive/1/540738/30/0/threaded; http://www.securityfocus.com/bid/99045; http://www.securityfocus.com/archive/1/540738/30/0/threaded
CVE: CVE-2017-9730
Published: 2017-06-19
Description: SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the "r" parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/42193/; https://www.exploit-db.com/exploits/42193/
CVE: CVE-2017-9757
Published: 2017-06-19
Description: IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell. This can be exploited directly by authenticated users, or through CSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/99173; https://twitter.com/0x09AL/status/[PII_REDACTED]52256768; https://www.exploit-db.com/exploits/42149/
CVE: CVE-2017-9759
Published: 2017-06-19
Description: SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/99147; https://www.vulnerability-lab.com/get_content.php?id=2073; http://www.securityfocus.com/bid/99147
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-19
Description: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).
CVSS Score: 7.4 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3886; http://www.securityfocus.com/bid/99130; http://www.securitytracker.com/id/1038724
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-19
Description: The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but does not take the argument and environment pointers into account, which allows attackers to bypass this limitation. This affects Linux Kernel versions 4.11.5 and earlier. It appears that this feature was introduced in the Linux Kernel version 2.6.23.
CVSS Score: 7.8 (HIGH)
References: http://www.debian.org/security/2017/dsa-3927; http://www.debian.org/security/2017/dsa-3945; http://www.securityfocus.com/bid/99156
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-19
Description: glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html; http://seclists.org/fulldisclosure/2019/Sep/7; http://www.debian.org/security/2017/dsa-3887
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-19
Description: Exim supports the use of multiple "-p" command line arguments which are malloc()'ed and never free()'ed, used in conjunction with other issues allows attackers to cause arbitrary code execution. This affects exim version 4.89 and earlier. Please note that at this time upstream has released a patch (commit 65e061b76867a9ea7aeeb535341b790b90ae6c21), but it is not known if a new point release is available that addresses this issue at this time.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-404
References: http://www.debian.org/security/2017/dsa-3888; http://www.securityfocus.com/bid/99252; http://www.securitytracker.com/id/1038779
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-19
Description: The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed with 1GB of arguments or environmental strings then the stack occupies the address 0x80000000 and the PIE binary is mapped above 0x40000000 nullifying the protection of the offset2lib patch. This affects Linux Kernel version 4.11.5 and earlier. This is a different issue than CVE-2[PII_REDACTED]. This issue appears to be limited to i386 based systems.
CVSS Score: 7.8 (HIGH)
References: http://www.debian.org/security/2017/dsa-3981; http://www.securityfocus.com/bid/99149; https://access.redhat.com/security/cve/CVE-2[PII_REDACTED]
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-19
Description: The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1 Gigabyte of memory is allocated (the maximum under the 1/4 restriction) then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimum distance between the end of the PIE binary's read-write segment and the start of the stack becomes small enough that the stack guard page can be jumped over by an attacker. This affects Linux Kernel version 4.11.5. This is a different issue than CVE-2[PII_REDACTED] and CVE-2[PII_REDACTED]. This issue appears to be limited to i386 based systems.
CVSS Score: 7.8 (HIGH)
References: http://www.debian.org/security/2017/dsa-3981; http://www.securityfocus.com/bid/99131; https://access.redhat.com/security/cve/CVE-2[PII_REDACTED]
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-19
Description: A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/99172; https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/008_exec_subr.patch.sig; https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-19
Description: The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort() to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in arbitrary code execution attacks. This affects OpenBSD 6.1 and possibly earlier versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://www.securityfocus.com/bid/99177; http://www.securitytracker.com/id/1039427; https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libc/stdlib/qsort.c?rev=1.15&content-type=text/x-cvsweb-markup
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-19
Description: A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/99176; https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt; http://www.securityfocus.com/bid/99176
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-19
Description: NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This affects NetBSD 7.1 and possibly earlier versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99257; https://www.exploit-db.com/exploits/42272/; https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-19
Description: libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries. It was previously stated that this affects libffi version 3.2.1 but this appears to be incorrect. libffi prior to version 3.1 on 32 bit x86 systems was vulnerable, and upstream is believed to have fixed this issue in version 3.1.
CVSS Score: 7.0 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3889; https://access.redhat.com/security/cve/CVE-2[PII_REDACTED]; https://www.oracle.com/security-alerts/cpujan2020.html
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-19
Description: An issue was discovered in the size of the default stack guard page on PAX Linux (originally from GRSecurity but shipped by other Linux vendors), specifically the default stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects PAX Linux Kernel versions as of June 19, 2017 (specific version information is not available at this time).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99129; https://access.redhat.com/security/cve/CVE-2[PII_REDACTED]; https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-19
Description: The NetBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort() to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in arbitrary code execution attacks. This affects NetBSD 7.1 and possibly earlier versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-400
References: http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/stdlib/qsort.c?rev=1.23&content-type=text/x-cvsweb-markup; http://www.securityfocus.com/bid/99255; https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt
CVE: CVE-2[PII_REDACTED]
Published: 2017-06-19
Description: The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack. Linux Kernel version 4.11.5 is affected.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/99284; https://access.redhat.com/errata/RHSA-2017:1482; https://access.redhat.com/errata/RHSA-2017:1484
CVE: CVE-2017-9761
Published: 2017-06-19
Description: The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/99138; https://github.com/radare/radare2/commit/00e8f205475332d7842d0f0d1481eeab4e83017c; https://github.com/radare/radare2/issues/7727
CVE: CVE-2017-9762
Published: 2017-06-19
Description: The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted binary file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: http://www.securityfocus.com/bid/99140; https://github.com/radare/radare2/issues/7726; http://www.securityfocus.com/bid/99140
CVE: CVE-2017-9763
Published: 2017-06-19
Description: The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service (excessive stack use and application crash) via a crafted binary file, related to use of a variable-size stack array.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://git.savannah.gnu.org/cgit/grub.git/commit/grub-core/fs/ext2.c?id=ac8cac1dac50daaf1c390d701cca3b55e16ee768; http://www.securityfocus.com/bid/99141; https://github.com/radare/radare2/commit/65000a7fd9eea62359e6d6714f17b94a99a82edd
CVE: CVE-2017-3214
Published: 2017-06-20
Description: The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312, CWE-312, CWE-522
References: https://duo.com/blog/bug-hunting-drilling-into-the-internet-of-things-iot; https://duo.com/blog/bug-hunting-drilling-into-the-internet-of-things-iot
CVE: CVE-2017-3215
Published: 2017-06-20
Description: The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year. This bearer token, in combination with a user_id can be used to perform user actions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-613, CWE-613
References: https://duo.com/blog/bug-hunting-drilling-into-the-internet-of-things-iot; https://duo.com/blog/bug-hunting-drilling-into-the-internet-of-things-iot
CVE: CVE-2017-3216
Published: 2017-06-20
Description: WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change on the device via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: http://blog.sec-consult.com/2017/06/ghosts-from-past-authentication-bypass.html; http://www.kb.cert.org/vuls/id/350135; https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170607-0_Various_WiMAX_CPEs_Authentication_Bypass_v10.txt
CVE: CVE-2017-3743
Published: 2017-06-20
Description: If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility (ASU), UpdateXpress System Pack Installer (UXSPI) or Dynamic System Analysis (DSA) to a second machine, the other users may be able to see the user ID and clear text password that were used to access the second machine during the time the command is processing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://support.lenovo.com/us/en/product_security/LEN-10810; https://support.lenovo.com/us/en/product_security/LEN-10810
CVE: CVE-2017-3744
Published: 2017-06-20
Description: In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in the First Failure Data Capture (FFDC) service log if the service log is generated when that remote command is running. Captured command data may contain clear text login information. Authorized users that can capture and export FFDC service log data may have access to these remote commands.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: https://support.lenovo.com/product_security/LEN-14054; https://support.lenovo.com/product_security/LEN-14054
CVE: CVE-2017-3745
Published: 2017-06-20
Description: In Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a non-administrative user may have access to password information for users that have previously authenticated to the LXCA's internal LDAP server, including administrative accounts and service accounts with administrative privileges. This is an issue only for users who have used local authentication with LXCA and not remote authentication against external LDAP or ADFS servers.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: https://support.lenovo.com/us/en/product_security/LEN-13671; https://support.lenovo.com/us/en/product_security/LEN-13671
CVE: CVE-2017-3167
Published: 2017-06-20
Description: In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://www.debian.org/security/2017/dsa-3896; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/99135
CVE: CVE-2017-3169
Published: 2017-06-20
Description: In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-476, CWE-476
References: http://www.debian.org/security/2017/dsa-3896; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/99134
CVE: CVE-2017-7668
Published: 2017-06-20
Description: The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: http://www.debian.org/security/2017/dsa-3896; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/99137
CVE: CVE-2017-7679
Published: 2017-06-20
Description: In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-126, CWE-119
References: http://www.debian.org/security/2017/dsa-3896; http://www.oracle.com/technetwork/security-advisory/cpuoct2[PII_REDACTED].html; http://www.securityfocus.com/bid/99170