huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2017-1000487: plexus-utils: Mishandled strings in Commandline class allow for command injection
Component: plexus-utils
Severity: Moderate
CWE: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))
CVSS v3: 7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2013-10-09T00:00:00+00:00

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

Statement: This issue affects the versions of plexus-utils as shipped with Red Hat Enterprise Linux 7 as well as Red Hat Satellite 6.0 and 6.1. Red Hat Satellite 6.2 and later do not ship plexus-utils, as such they are not affected by this vulnerability. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: plexus-utils-3.0.16
Upstream repository: https://github.com/codehaus-plexus/plexus-utils
Upstream fix commit: b38a1b3a4352303e4312b2bb601a0d7ec6e28f41
CVE-2017-10661: kernel: Handling of might_cancel queueing is not properly pretected against race
Component: kernel
Severity: Moderate
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
CVSS v3: 5.3 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H)
Public date: 2017-02-10T00:00:00+00:00

A race condition was found in the Linux kernel before version 4.11-rc1 in 'fs/timerfd.c' file which allows a local user to cause a kernel list corruption or use-after-free via simultaneous operations with a file descriptor which leverage improper 'might_cancel' queuing.  An unprivileged local user could use this flaw to cause a denial of service of the system. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.

Statement: This issue does not affect Red Hat Enterprise Linux 5 as the code with the flaw is not present in the products listed.

This issue affects Red Hat Enterprise Linux 6 and 7. Future updates for the respective releases may address this issue.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux MRG-2. This flaw is not currently planned to be addressed in future updates due to MRG-2 being an EUS release. For additional information, refer to the Extended Update Support (EUS) Guide: https://access.redhat.com/articles/rhel-eus.

Affected upstream versions: n/a
Fixed upstream versions: v4.11
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 1e38da300e1e395a15048b0af1e5305bd91402f6
CVE-2017-11143: php: Incorrect WDDX deserialization of boolean parameters leads to DoS
Component: php
Severity: Moderate
CVSS v3: 5.9 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-02-22T00:00:00+00:00

In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able to inject XML for deserialization to crash the PHP interpreter, related to an invalid free for an empty boolean element in ext/wddx/wddx.c.


Affected upstream versions: n/a
Fixed upstream versions: php-5.6.31
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 2aae60461c2ff7b7fbcdd194c789ac841d0747d7
CVE-2017-11144: php: Incorrect return value check of OpenSSL sealing function leads to crash
Component: php
Severity: Moderate
CWE: CWE-253 (Incorrect Check of Function Return Value)
CVSS v3: 5.9 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-05-25T00:00:00+00:00

In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in ext/openssl/openssl.c, and an OpenSSL documentation omission.

Statement: Red Hat Product Security has rated this issue as having Moderate security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: php-5.6.31
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 89637c6b41b510c20d262c17483f582f115c66d6
CVE-2017-11145: php: wddx_deserialize() heap out-of-bound read via php_parse_date()
Component: php
Severity: Low
CVSS v3: 5.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Public date: 2017-06-27T00:00:00+00:00

In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: the correct fix is in the e8b7698f5ee757ce2c8bd10a192a491a498f891c commit, not the bd77ac90d3bdf31ce2a5251ad92e9e75 gist.


Affected upstream versions: n/a
Fixed upstream versions: php-5.6.31
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: e8b7698f5ee757ce2c8bd10a192a491a498f891c
CVE-2017-11147: php: Out-of-bounds read in phar_parse_pharfile
Component: php
Severity: Moderate
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H)
Public date: 2016-12-17T00:00:00+00:00

In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the phar_parse_pharfile function in ext/phar/phar.c.

Statement: Red Hat Product Security has rated this issue as having Moderate security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: php-5.6.30
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: e5246580a85f031e1a3b8064edbaa55c1643a451
CVE-2017-11176: kernel: Use-after-free in sys_mq_notify()
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2017-07-09T00:00:00+00:00

A use-after-free flaw was found in the Netlink functionality of the Linux kernel networking subsystem. Due to the insufficient cleanup in the mq_notify function, a local attacker could potentially use this flaw to escalate their privileges on the system.

Statement: This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5,6,7 and MRG-2.  Future Linux kernel updates for the respective releases may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v4.13
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: f991af3daabaecff34684fd51fac80319d1baad1
CVE-2017-11368: krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure
Component: krb5
Severity: Moderate
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-07-13T00:00:00+00:00

A denial of service flaw was found in MIT Kerberos krb5kdc service. An authenticated attacker could use this flaw to cause krb5kdc to exit with an assertion failure by making an invalid S4U2Self or S4U2Proxy request.


Affected upstream versions: n/a
Fixed upstream versions: krb5-1.16-final
Upstream repository: https://github.com/krb5/krb5
Upstream fix commit: ffb35baac6981f9e8914f8f3bffd37f284b85970
CVE-2017-11473: kernel: Buffer overflow in mp_override_legacy_irq()
Component: kernel
Severity: Low
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 6.4 (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Public date: 2017-07-18T00:00:00+00:00

Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 4.12.2 allows local users to gain privileges via a crafted ACPI table.

Statement: Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates of the Red Hat products. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

This attack requires 

- An attacker to be able to write to the ACPI tables ( local, privileged operation and non generalized attacks)
- The ability for the attacker to reboot the system  ( local, privileged operation )
- The ACPI table changes to persist through reboots  ( not common on cloud/serverless platforms )
- This modification to the table alone is able to possibly corrupt memory, but the corruption will not be enough alone, the corrupted affected memory will be overwritten with valid acpi struct data which also has to corrupt the memory in which a way the flaw can create abuse (HARD).
- The attacker will find it significantly difficult to abuse this a flaw in early-boot as injecting code/controlled execution at this point would require privileges.  If an attacker had this specific privilege, there are easier ways to gain privilege escalation.

Affected upstream versions: n/a
Fixed upstream versions: v4.13
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git
Upstream fix commit: dad5ab0db8deac535d03e3fe3d8f2892173fa6a4
CVE-2017-11628: php: Stack based 1-byte buffer over-write in zend_ini_do_op() function Zend/zend_ini_parser.c
Component: php
Severity: Moderate
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 4 (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Public date: 2017-07-25T00:00:00+00:00

In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zend_ini_do_op() function in Zend/zend_ini_parser.c could cause a denial of service or potentially allow executing code. NOTE: this is only relevant for PHP applications that accept untrusted input (instead of the system's php.ini file) for the parse_ini_string or parse_ini_file function, e.g., a web application for syntax validation of php.ini directives.


Affected upstream versions: n/a
Fixed upstream versions: php-7.0.22
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 05255749139b3686c8a6a58ee01131ac0047465e
CVE-2017-12146: kernel: Race condition in driver_override implementation
Component: kernel
Severity: Moderate
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
CVSS v3: 7 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2017-05-25T00:00:00+00:00

It was found that the driver_override implementation in base/platform.c in the Linux kernel is susceptible to race condition when different threads are reading vs storing a different driver override.

Statement: This issue does not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5, 6, 7 and MRG-2 as the code with the flaw is not present in the products listed.

Affected upstream versions: n/a
Fixed upstream versions: v4.13
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 6265539776a0810b7ce6398c27866ddb9c6bd154
CVE-2017-12154: Kernel: kvm: nVMX: L2 guest could access hardware(L0) CR8 register
Component: Kernel
Severity: Important
CWE: CWE-284 (Improper Access Control)
CVSS v3: 5.8 (CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H)
Public date: 2017-09-12T00:00:00+00:00

Linux kernel built with the KVM visualization support (CONFIG_KVM), with nested visualization (nVMX) feature enabled (nested=1), is vulnerable to a crash due to disabled external interrupts. As L2 guest could access (r/w) hardware CR8 register of the host(L0). In a nested visualization setup, L2 guest user could use this flaw to potentially crash the host(L0) resulting in DoS.

Statement: This issue does not affect the versions of the kernel package as shipped with
Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2.

Affected upstream versions: Linux kernel through 4.13.3
Fixed upstream versions: v4.14
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 51aa68e7d57e3217192d88ce90fd5b8ef29ec94f
CVE-2017-12168: Kernel: kvm: ARM64: assert failure when accessing PMCCNTR register
Component: Kernel
Severity: Moderate
CWE: CWE-617 (Reachable Assertion)
CVSS v3: 6.2 (CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Public date: 2016-11-18T00:00:00+00:00

An assertion failure issue was found in the Linux kernel's KVM hypervisor module built to support visualization on ARM64 architecture platforms. The failure could occur while accessing Performance Monitors Cycle Count Register (PMCCNTR) from a guest. A privileged guest user could use this flaw to crash the host kernel resulting in denial of service.

Statement: This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2.

Affected upstream versions: Linux kernel before 4.9
Fixed upstream versions: v4.9
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 9e3f7a29694049edd728e2400ab57ad7553e5aa9
CVE-2017-12190: kernel: memory leak when merging buffers in SCSI IO vectors
Component: kernel
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 6.2 (CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Public date: 2017-09-21T00:00:00+00:00

It was found that in the Linux kernel through v4.14-rc5, bio_map_user_iov() and bio_unmap_user() in 'block/bio.c' do unbalanced pages refcounting if IO vector has small consecutive buffers belonging to the same page. bio_add_pc_page() merges them into one, but the page reference is never dropped, causing a memory leak and possible system lockup due to out-of-memory condition.

Statement: This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5. This is not currently planned to be addressed in future updates of the product due to its life cycle. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7 and MRG-2. Future updates for the respective releases may address this issue.

Affected upstream versions: Linux kernel through v4.14-rc5
Fixed upstream versions: v4.14
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 2b04e8f6bbb196cab4b232af0f8d48ff2c7a8058
CVE-2017-12192: kernel: NULL pointer dereference due to KEYCTL_READ on negative key
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-09-18T00:00:00+00:00

A vulnerability was found in the Key Management sub component of the Linux kernel, where when trying to issue a KEYTCL_READ on a negative key would lead to a NULL pointer dereference. A local attacker could use this flaw to crash the kernel.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7 and MRG-2.

Future Linux kernel updates for the respective releases will address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v4.14
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 37863c43b2c6464f252862bf2e9768264e961678
CVE-2017-12193: kernel: Null pointer dereference due to incorrect node-splitting in assoc_array implementation
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 4.7 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-11-02T00:00:00+00:00

A flaw was found in the Linux kernel's implementation of associative arrays introduced in 3.13. This functionality was backported to the 3.10 kernels in Red Hat Enterprise Linux 7. The flaw involved a null pointer dereference in assoc_array_apply_edit() due to incorrect node-splitting in assoc_array implementation.  This affects the keyring key type and thus key addition and link creation operations may cause the kernel to panic.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7,MRG-2 and realtime kernels. Future Linux kernel updates for the respective releases may address this issue.

Affected upstream versions: Linux kernel since 3.13 up to 4.14 (not including)
Fixed upstream versions: v4.14
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: ea6789980fdaa610d7eb63602c746bf6ec70cd2b
CVE-2017-12652: libpng: does not check length of chunks against user limit
Component: libpng
Severity: Low
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 3.7 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Public date: 2019-07-10T00:00:00+00:00

libpng before 1.6.32 does not properly check the length of chunks against the user limit.


Affected upstream versions: n/a
Fixed upstream versions: v1.6.32
Upstream repository: https://github.com/pnggroup/libpng
Upstream fix commit: 347538efbdc21b8df684ebd92d37400b3ce85d55
CVE-2017-12893: tcpdump: Buffer over-read in smbutil.c:name_len() in SMB/CIFS parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 6f5ba2b651cd9d4b7fa8ee5c4f94460645877c45
CVE-2017-12894: tcpdump: Buffer over-read in addrtoname.c:lookup_bytestring()
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 730fc35968c5433b9e2a829779057f4f9495dc51
CVE-2017-12895: tcpdump: Buffer over-read in print-icmp.c:icmp_print() in ICMP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 2b62d1dda41590db29368ec7ba5f4faf3464765a
CVE-2017-12896: tcpdump: Buffer over-read in print-isakmp.c:isakmp_rfc3948_print() in ISAKMP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: f76e7feb41a4327d2b0978449bbdafe98d4a3771
CVE-2017-12897: tcpdump: Buffer over-read in print-isoclns.c:isoclns_print() in ISO CLNS parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 1dcd10aceabbc03bf571ea32b892c522cbe923de
CVE-2017-12898: tcpdump: Buffer over-read in print-nfs.c:interp_reply() in NFS parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 19d25dd8781620cd41bf178a5e2e27fc1cf242d0
CVE-2017-12899: tcpdump: Buffer over-read in print-decnet.c:decnet_print() in DECnet parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: c6e0531b5def26ecf912e8de6ade86cbdaed3751
CVE-2017-12900: tcpdump: Buffer over-read in util-print.c:tok2strbuf()
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 0318fa8b61bd6c837641129d585f1a73c652b1e0
CVE-2017-12901: tcpdump: Buffer over-read in print-eigrp.c:eigrp_print() in EIGRP parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print().


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: de981e6070d168b58ec1bb0713ded77ed4ad87f4
CVE-2017-12902: tcpdump: Buffer over-read in print-zephyr.c, several functions in Zephyr parser
Component: tcpdump
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2017-09-13T00:00:00+00:00

The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions.


Affected upstream versions: n/a
Fixed upstream versions: tcpdump-4.99.0
Upstream repository: https://github.com/the-tcpdump-group/tcpdump
Upstream fix commit: 6ec0c6fa63412c7a07a5bcb790a529c3563b4173
CVE-2017-12932: php: Heap use after free in ext/standard/var_unserializer.re
Component: php
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 8.1 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2017-02-20T00:00:00+00:00

ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing untrusted data, related to improper use of the hash API for key deletion in a situation with an invalid array size. Exploitation of this issue can have an unspecified impact on the integrity of PHP.


Affected upstream versions: n/a
Fixed upstream versions: php-7.0.23
Upstream repository: https://github.com/php/php-src
Upstream fix commit: 1a23ebc1fff59bf480ca92963b36eba5c1b904c4