huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2017-13027: tcpdump: Buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print() in LLDP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: a77ff09c46560bc895dea11dc9fe643486b056ac
CVE-2017-13028: tcpdump: Buffer over-read in print-bootp.c:bootp_print() in BOOTP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 29e5470e6ab84badbc31f4532bb7554a796d9d52
CVE-2017-13029: tcpdump: Buffer over-read in print-ppp.c:print_ccp_config_options() in PPP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 7029d15f148ef24bb7c6668bc640f5470d085e5a
CVE-2017-13030: tcpdump: Buffer over-read in print-pim.c, several functions in PIM parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions.


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 5dc1860d8267b1e0cb78c9ffa2a40bea2fdb3ddc
CVE-2017-13031: tcpdump: Buffer over-read in print-frag6.c:frag6_print() in IPv6 fragmentation header parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 2d669862df7cd17f539129049f6fb70d17174125
CVE-2017-13032: tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 1bc78d795cd5cad5525498658f414a11ea0a7e9c
CVE-2017-13033: tcpdump: Buffer over-read in print-vtp.c:vtp_print() in VTP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: ae83295915d08a854de27a88efac5dd7353e6d3f
CVE-2017-13034: tcpdump: Buffer over-read in print-pgm.c:pgm_print() in PGM parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: da6f1a677bfa4476abaeaf9b1afe1c4390f51b41
CVE-2017-13035: tcpdump: Buffer over-read in print-isoclns.c:isis_print_id() in ISO IS-IS parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 571a6f33f47e7a2394fa08f925e534135c29cf1e
CVE-2017-13036: tcpdump: Buffer over-read in print-ospf6.c:ospf6_decode_v3() in OSPFv3 parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 88b2dac837e81cf56dce05e6e7b5989332c0092d
CVE-2017-13037: tcpdump: Buffer over-read in print-ip.c:ip_printts() in IP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 2c2cfbd2b771ac888bc5c4a6d922f749d3822538
CVE-2017-13038: tcpdump: Buffer over-read in print-ppp.c:handle_mlppp() in PPP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 7335163a6ef82d46ff18f3e6099a157747241629
CVE-2017-13039: tcpdump: Buffer over-read in print-isakmp.c, several functions in ISAKMP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: e0a5a02b0fc1900a69d6c37ed0aab36fb8494e6d
CVE-2017-13040: tcpdump: Buffer over-read in print-mptcp.c, several functions in MPTCP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 4c3aee4bb0294c232d56b6d34e9eeb74f630fe8c
CVE-2017-13041: tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: f4b9e24c7384d882a7f434cc7413925bf871d63e
CVE-2017-13042: tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 39582c04cc5e34054b2936b423072fb9df2ff6ef
CVE-2017-13043: tcpdump: Buffer over-read in print-bgp.c:decode_multicast_vpn() in BGP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: d515b4b4a300479cdf1a6e0d1bb95bc1f9fee514
CVE-2017-13044: tcpdump: Buffer over-read in print-hncp.c:dhcpv4_print() in HNCP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: c2f6833dddecf2d5fb89c9c898eee9981da342ed
CVE-2017-13045: tcpdump: Buffer over-read in print-vqp.c:vqp_print() in VQP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 3b36ec4e713dea9266db11975066c425aa669b6c
CVE-2017-13046: tcpdump: Buffer over-read in print-bgp.c:bgp_attr_print() in BGP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: d10a0f980fe8f9407ab1ffbd612641433ebe175e
CVE-2017-13047: tcpdump: Buffer over-read in print-isoclns.c:esis_print() in ISO ES-IS parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 331530a4076c69bbd2e3214db6ccbe834fb75640
CVE-2017-13048: tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 3c8a2b0e91d8d8947e89384dacf6b54673083e71
CVE-2017-13049: tcpdump: Buffer over-read in print-rx.c:ubik_print() in Rx protocol parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: aa0858100096a3490edf93034a80e66a4d61aad5
CVE-2017-13050: tcpdump: Buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print() in RPKI-Router parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 83c64fce3a5226b080e535f5131a8a318f30e79b
CVE-2017-13051: tcpdump: Buffer over-read in print-rsvp.c:rsvp_obj_print() in RSVP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 289c672020280529fd382f3502efab7100d638ec
CVE-2017-13052: tcpdump: Buffer over-read in print-cfm.c:cfm_print() in CFM parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 5d340a5ca6e420a70297cdbdf777333f18bfdab7
CVE-2017-13053: tcpdump: Buffer over-read in print-bgp.c:decode_rt_routing_info() in BGP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: bd4e697ebd6c8457efa8f28f6831fc929b88a014
CVE-2017-13054: tcpdump: Buffer over-read in print-lldp.c:lldp_private_8023_print() in LLDP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: e6511cc1a950fe1566b2236329d6b4bd0826cc7a
CVE-2017-13055: tcpdump: Buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv() in ISO IS-IS parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 5d0d76e88ee2d3236d7e032589d6f1d4ec5f7b1e
CVE-2017-13089: wget: Stack-based buffer overflow in HTTP protocol handling
Component: wget
Severity: Important
CWE: CWE-121 (Stack-based Buffer Overflow)
CVSS v3: 7.8 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2017-10-26T15:00:00+00:00

A stack-based buffer overflow when processing chunked, encoded HTTP responses was found in wget. By tricking an unsuspecting user into connecting to a malicious HTTP server, an attacker could exploit this flaw to potentially execute arbitrary code.

Statement: This issue affects the versions of wget as shipped with Red Hat Enterprise Linux 7. This issue did not affect the versions of wget as shipped with Red Hat Enterprise Linux 5 and 6.

Affected upstream versions: prior to 1.19.2
Upstream repository: https://git.savannah.gnu.org/cgit/wget.git
Upstream fix commit: d892291fb8ace4c3b734ea5125770989c215df3f
CVE-2017-13090: wget: Heap-based buffer overflow in HTTP protocol handling
Component: wget
Severity: Important
CWE: CWE-122 (Heap-based Buffer Overflow)
CVSS v3: 7.8 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2017-10-26T15:00:00+00:00

A heap-based buffer overflow, when processing chunked encoded HTTP responses, was found in wget. By tricking an unsuspecting user into connecting to a malicious HTTP server, an attacker could exploit this flaw to potentially execute arbitrary code.

Statement: This issue affects the versions of wget as shipped with Red Hat Enterprise Linux 7. This issue did not affect the versions of wget as shipped with Red Hat Enterprise Linux 5 and 6.

Affected upstream versions: prior to 1.19.2
Upstream repository: https://git.savannah.gnu.org/cgit/wget.git
Upstream fix commit: ba6b44f6745b14dce414761a8e4b35d31b176bba
CVE-2017-13673: QEMU: VGA: reachable assert failure during display update
Component: QEMU
Severity: Low
CWE: CWE-617 (Reachable Assertion)
CVSS v3: 3 (CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L)
Public date: 2017-08-24T00:00:00+00:00

An assert failure issue was found in the VGA display emulator built into the Quick emulator (QEMU). It could occur while updating graphics display, due to miscalculating region for dirty bitmap snapshot in split screen mode. A privileged user/process inside guest could use this flaw to crash the QEMU process on the host resulting in denial of service.


Affected upstream versions: n/a
Fixed upstream versions: v2.10.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: bfc56535f793c557aa754c50213fc5f882e6482d
CVE-2017-13687: tcpdump: Buffer over-read in print-chdlc.c:chdlc_print() in Cisco HDLC parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: a1eefe986065846b6c69dbc09afd9fa1a02c4a3d
CVE-2017-13688: tcpdump: Buffer over-read in print-olsr.c:olsr_print() in OLSR parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 0cb1b8a434b599b8d636db029aadb757c24e39d6
CVE-2017-13689: tcpdump: Buffer over-read in print-isakmp.c:ikev1_id_print() in IKEv1 parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 061e7371a944588f231cb1b66d6fb070b646e376
CVE-2017-13690: tcpdump: Buffer over-read in print-isakmp.c, several functions in IKEv2 parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions.


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 8dca25d26c7ca2caf6138267f6f17111212c156e
CVE-2017-13725: tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: c7c515ee03c285cc51376328de4ae9d549e501a5
CVE-2017-14064: ruby: Arbitrary heap exposure during a JSON.generate call
Component: ruby
Severity: Low
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
CVSS v3: 5.9 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Public date: 2017-03-02T00:00:00+00:00

A buffer overflow vulnerability was found in the JSON extension of ruby. An attacker with the ability to pass a specially crafted JSON input to the extension could use this flaw to expose the interpreter's heap memory.

Statement: This issue did not affect the versions of ruby as shipped with Red Hat Enterprise Linux 5, and 6. These versions do not include the JSON module.

This issue affects the versions of ruby as shipped with Red Hat Enterprise Linux 7, as well as the versions of rh-ruby22-ruby and rh-ruby23-ruby as shipped with Red Hat Software Collections. Red Hat Product Security has rated this issue as having Low security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: v2.1.0
Upstream repository: https://github.com/flori/json
Upstream fix commit: 8f782fd8e181d9cfe9387ded43a5ca9692266b85
CVE-2017-14106: kernel: Divide-by-zero in __tcp_select_window
Component: kernel
Severity: Moderate
CWE: CWE-369 (Divide By Zero)
CVSS v3: 5.5 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-09-01T00:00:00+00:00

A divide-by-zero vulnerability was found in the __tcp_select_window function in the Linux kernel. This can result in a kernel panic causing a local denial of service.

Statement: This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6 and 7 and MRG-2. Future Linux kernel updates for the respective releases may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v4.12
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 499350a5a6e7512d9ed369ed63a4244b6536f4f8
CVE-2017-14140: kernel: Missing permission check in move_pages system call
Component: kernel
Severity: Low
CWE: CWE-863 (Incorrect Authorization)
CVSS v3: 3.3 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Public date: 2017-08-20T00:00:00+00:00

The move_pages system call in mm/migrate.c in the Linux kernel doesn't check the effective uid of the target process. This enables a local attacker to learn the memory layout of a setuid executable allowing mitigation of ASLR.


Affected upstream versions: n/a
Fixed upstream versions: v4.13
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 197e7e521384a23b9e585178f3f11c9fa08274b9