rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-7972 
The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl_dom.c in Xen 3.4.x through 4.6.x do not properly calculate the balloon size when using the populate-on-demand (PoD) system, which allows local HVM guest users to cause a denial of service (guest crash) via unspecified vectors related to "heavy memory pressure."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-30T15:00:00.000Z
CVE-2015-7973 
NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T21:00:00.000Z
CVE-2015-7974 
NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-26T19:00:00.000Z
CVE-2015-7975 
The nextvar function in NTP before 4.2.8p6 and 4.3.x before 4.3.90 does not properly validate the length of its input, which allows an attacker to cause a denial of service (application crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T21:00:00.000Z
CVE-2015-7976 
The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T21:00:00.000Z
CVE-2015-7977 
ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T21:00:00.000Z
CVE-2015-7978 
NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversal of the restriction list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T21:00:00.000Z
CVE-2015-7979 
NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T21:00:00.000Z
CVE-2015-7980 
Cross-site scripting (XSS) vulnerability in the Compass Rose module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "embedding a JavaScript library from an external source that was not reliable."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T18:00:00.000Z
CVE-2015-7981 
The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-24T20:00:00.000Z
CVE-2015-7984 
Multiple cross-site request forgery (CSRF) vulnerabilities in Horde before 5.2.8, Horde Groupware before 5.2.11, and Horde Groupware Webmail Edition before 5.2.11 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary (1) commands via the cmd parameter to admin/cmdshell.php, (2) SQL queries via the sql parameter to admin/sqlshell.php, or (3) PHP code via the php parameter to admin/phpshell.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-19T20:00:00.000Z
CVE-2015-7985 
Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-24T20:00:00.000Z
CVE-2015-7986 
The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTTP request, aka SAP Security Note 2197428.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-27T16:00:00.000Z
CVE-2015-7987 
Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueForMACAddr, (3) rfc3110_import, or (4) CopyNSEC3ResourceRecord function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-26T01:00:00.000Z
CVE-2015-7988 
The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-06-26T01:00:00.000Z
CVE-2015-7989 
Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-22T01:00:00.000Z
CVE-2015-7990 
Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6937.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-28T11:00:00.000Z
CVE-2015-7991 
The Web Dispatcher service in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to read web dispatcher and security trace files and possibly obtain passwords via unspecified vectors, aka SAP Security Note 2148854.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-10T16:00:00.000Z
CVE-2015-7992 
SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to cause a denial of service (memory corruption and indexserver crash) via unspecified vectors to the EXECUTE_SEARCH_RULE_SET stored procedure, aka SAP Security Note 2175928.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-10T16:00:00.000Z
CVE-2015-7993 
The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to execute arbitrary code via unspecified vectors related to "HTTP Login," aka SAP Security Note 2197397.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-10T16:00:00.000Z
CVE-2015-7994 
The SQL interface in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to execute arbitrary code via unspecified vectors related to "SQL Login," aka SAP Security Note 2197428.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-10T16:00:00.000Z
CVE-2015-7995 
The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-17T15:00:00.000Z
CVE-2015-7996 
The Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allow attackers to obtain credentials via the browser cache.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-17T15:00:00.000Z
CVE-2015-7997 
Multiple cross-site scripting (XSS) vulnerabilities in the Nitro API in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-17T15:00:00.000Z
CVE-2015-7998 
The administration UI in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM (SVM) devices allows attackers to obtain sensitive information via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-17T15:00:00.000Z
CVE-2015-7999 
Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 36.7 and 5.2 before Build 44.11 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-14T14:00:00.000Z
CVE-2015-8000 
db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-16T15:00:00.000Z
CVE-2015-8001 
The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not restrict the uploaded data to the claimed file size, which allows remote authenticated users to cause a denial of service via a chunk that exceeds the file size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-09T18:00:00.000Z
CVE-2015-8002 
The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 allows remote authenticated users to cause a denial of service (disk consumption) via a file upload using one byte chunks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-09T18:00:00.000Z
CVE-2015-8003 
MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not throttle file uploads, which allows remote authenticated users to have unspecified impact via multiple file uploads.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-09T18:00:00.000Z
CVE-2015-8004 
MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not properly restrict access to revisions, which allows remote authenticated users with the viewsuppressed user right to remove revision suppressions via a crafted revisiondelete action, which returns a valid a change form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-09T18:00:00.000Z
CVE-2015-8005 
MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail ImageMagick command line argument, which allows remote attackers to obtain the installation path by reading the metadata of a PNG thumbnail file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-09T18:00:00.000Z
CVE-2015-8006 
Cross-site scripting (XSS) vulnerability in the PageTriage toolbar in the PageTriage extension for MediWiki allows remote attackers to inject arbitrary web script or HTML via the page title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-09T18:00:00.000Z
CVE-2015-8007 
The Echo extension for MediWiki does not properly implement the hideuser functionality, which allows remote authenticated users to see hidden usernames in "non-revision based" notifications, as demonstrated by viewing a hidden username in a Thanks notification.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-09T18:00:00.000Z
CVE-2015-8008 
The OAuth extension for MediaWiki improperly negotiates a new client token only over Special:OAuth/initiate, which allows attackers to bypass intended IP address access restrictions by making an API request with an existing token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-29T22:00:00.000Z
CVE-2015-8009 
The MWOAuthDataStore::lookup_token function in Extension:OAuth for MediaWiki 1.25.x before 1.25.3, 1.24.x before 1.24.4, and before 1.23.11 does not properly validate the signature when checking the authorization signature, which allows remote registered Consumers to use another Consumer's credentials by leveraging knowledge of the credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T14:00:00.000Z
CVE-2015-8010 
Cross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject arbitrary web script or HTML via the query string to cgi-bin/status.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-27T17:00:00.000Z
CVE-2015-8011 
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-28T18:15:08.000Z
CVE-2015-8012 
lldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via a malformed packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-28T18:15:04.000Z
CVE-2015-8013 
s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of passphrase for crafted PGP keys which allows remote attackers to bypass authentication if message decryption is used as an authentication mechanism via a crafted symmetrically encrypted PGP message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T18:00:00.000Z
CVE-2015-8019 
The skb_copy_and_csum_datagram_iovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a write system call followed by a recvmsg system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-02T10:00:00.000Z
CVE-2015-8020 
Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions can be used for unauthorized information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-11T16:00:00.000Z
CVE-2015-8021 
Incomplete blacklist vulnerability in the Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, Link Controller, and PSM 11.x before 11.2.1 HF11, 11.3.x, 11.4.0 before HF8, and 11.4.1 before HF6; BIG-IP AAM 11.4.0 before HF8 and 11.4.1 before HF6; BIG-IP AFM and PEM 11.3.x, 11.4.0 before HF8, and 11.4.1 before HF6; and BIG-IP Edge Gateway, WebAccelerator, and WOM 11.x before 11.2.1 HF11 and 11.3.0 allows remote authenticated users to upload files via uploadImage.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-04-12T14:00:00.000Z
CVE-2015-8022 
The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP AAM 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP AFM and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.x before 11.2.1 HF16 and 11.3.0; and BIG-IP PSM 11.x before 11.2.1 HF16, 11.3.x, and 11.4.x before 11.4.1 HF10 allows remote authenticated users with certain permissions to gain privileges by leveraging an Access Policy Manager customization configuration section that allows file uploads.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-08-19T21:00:00.000Z
CVE-2015-8023 
The server implementation of the EAP-MSCHAPv2 protocol in the eap-mschapv2 plugin in strongSwan 4.2.12 through 5.x before 5.3.4 does not properly validate local state, which allows remote attackers to bypass authentication via an empty Success message in response to an initial Challenge message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-18T16:00:00.000Z
CVE-2015-8024 
McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) 9.3.x before 9.3.2MR19, 9.4.x before 9.4.2MR9, and 9.5.x before 9.5.0MR8, when configured to use Active Directory or LDAP authentication sources, allow remote attackers to bypass authentication by logging in with the username "NGCP|NGCP|NGCP;" and any password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-02T16:00:00.000Z
CVE-2015-8025 
driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-10T16:00:00.000Z
CVE-2015-8026 
Heap-based buffer overflow in the verify_vbr_checksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service (infinite loop) or possibly execute arbitrary code via a crafted filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-27T15:00:00.000Z
CVE-2015-8027 
Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service (uncaughtException and service outage) via a pipelined HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-02T21:00:00.000Z
CVE-2015-8028 
Multiple buffer overflows in SAP 3D Visual Enterprise Viewer (VEV) allow remote attackers to execute arbitrary code via a crafted (1) 3DM or (2) Flic Animation file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-30T16:00:00.000Z
CVE-2015-8029 
SAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a crafted Filmbox document, which triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-30T16:00:00.000Z
CVE-2015-8030 
SAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a crafted (1) U3D, (2) LWO, (3) JPEG2000, or (4) FBX file, aka "Out-Of-Bounds Indexing" vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-30T16:00:00.000Z
CVE-2015-8031 
Hudson (aka org.jvnet.hudson.main:hudson-core) before 3.3.2 allows XXE attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-18T20:29:05.000Z
CVE-2015-8032 
In Textpattern 4.5.7, an unprivileged author can change an article's markup setting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-14T18:55:11.000Z
CVE-2015-8033 
In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-14T18:58:50.000Z
CVE-2015-8034 
The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-01-30T22:00:00.000Z
CVE-2015-8035 
The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-18T16:00:00.000Z
CVE-2015-8036 
Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long session ticket name to the session ticket extension, which is not properly handled when creating a ClientHello message to resume a session.  NOTE: this identifier was SPLIT from CVE-2015-5291 per ADT3 due to different affected version ranges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-02T19:00:00.000Z
CVE-2015-8037 
Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SOMVpnSSLPortalDialog or (2) FGDMngUpdHistory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-02T19:00:00.000Z
CVE-2015-8038 
Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) sharedjobmanager or (2) SOMServiceObjDialog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-02T19:00:00.000Z
CVE-2015-8039 
Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the (1) DVRSetupSave method in the STWAxConfig control or (2) SendCustomPacket method in the STWAxConfigNVR control, which trigger an untrusted pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-02T19:00:00.000Z
CVE-2015-8040 
The rtsp_getdlsendtime method in the CNC_Ctrl control in Samsung SmartViewer allows remote attackers to execute arbitrary code via an index value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-02T19:00:00.000Z
CVE-2015-8041 
Multiple integer overflows in the NDEF record parser in hostapd before 2.5 and wpa_supplicant before 2.5 allow remote attackers to cause a denial of service (process crash or infinite loop) via a large payload length field value in an (1) WPS or (2) P2P NFC NDEF record, which triggers an out-of-bounds read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-09T16:00:00.000Z