rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-14540 
IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000001f23e."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14541 
XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at CADImage+0x000000000001f23e."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14542 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .epub file, related to a "Read Access Violation on Block Data Move starting at STDUEPubFile!DllUnregisterServer+0x0000000000010262."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14543 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x0000000000039335."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14544 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at STDUEPubFile!DllUnregisterServer+0x000000000003fff1."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14545 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to "Data from Faulting Address controls Branch Selection starting at STDUEPubFile!DllUnregisterServer+0x0000000000010332."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14546 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .epub file, related to an "Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x000000000000001d."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14547 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mobi file, related to a "Read Access Violation starting at STDUMOBIFile!DllUnregisterServer+0x000000000002efc0."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14548 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000854d."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14549 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "Heap Corruption starting at wow64!Wow64NotifyDebugger+0x000000000000001d."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14550 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a "Possible Stack Corruption starting at STDUDjVuFile!DllUnregisterServer+0x000000000000e8b8."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14551 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address controls Branch Selection starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d9f2."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14552 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d9a9."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14553 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x00000000000085f5."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14554 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to a "Possible Stack Corruption starting at STDUDjVuFile!DllUnregisterServer+0x000000000000d908."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14555 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at STDUDjVuFile!DllUnregisterServer+0x000000000000ec6e."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14556 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000da27."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14557 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x000000000000dd3f."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14558 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, related to a "User Mode Write AV starting at STDUDjVuFile!DllUnregisterServer+0x0000000000018cc2."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14559 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at STDUXPSFile!DllUnregisterServer+0x0000000000005af2."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14560 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at STDUXPSFile!DllUnregisterServer+0x0000000000005bd2."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14561 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000048c024d called from STDUXPSFile!DllUnregisterServer+0x0000000000025638."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14562 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to an "Error Code (0xe06d7363) starting at wow64!Wow64NotifyDebugger+0x000000000000001d."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14563 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Block Data Move starting at STDUXPSFile!DllUnregisterServer+0x0000000000005311."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14564 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at STDUXPSFile!DllUnregisterServer+0x0000000000028657."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14565 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a "Possible Stack Corruption starting at Unknown Symbol @ 0x00000000038f2fbf called from image00000000_00400000+0x0000000000240065."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14566 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV starting at Unknown Symbol @ 0x00000000039d76c4 called from Unknown Symbol @ 0x0000000000049d2c."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14567 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000028c024d called from STDUXPSFile!DllUnregisterServer+0x000000000002e77b."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14568 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x000000000297024c called from STDUXPSFile!DllUnregisterServer+0x0000000000025630."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14569 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a "Read Access Violation starting at STDUXPSFile!DllUnregisterServer+0x0000000000005bd5."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14570 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV near NULL starting at wow64!Wow64LdrpInitialize+0x00000000000008e1."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14571 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000049c024c called from STDUXPSFile!DllUnregisterServer+0x0000000000025706."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14572 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV starting at Unknown Symbol @ 0x000000000479049b called from Unknown Symbol @ 0x000000000d89645b."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14573 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x00000000030c024c called from STDUXPSFile!DllUnregisterServer+0x000000000002566a."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14574 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV starting at Unknown Symbol @ 0x0000000004940490."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14575 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to an "Illegal Instruction Violation starting at Unknown Symbol @ 0x0000000002d8024c called from STDUXPSFile!DllUnregisterServer+0x000000000002566c."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14576 
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to a "Possible Stack Corruption starting at Unknown Symbol @ 0x00000000049f0281."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14577 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Read Access Violation on Control Flow starting at Unknown Symbol @ 0x0000000003aa7cef called from Unknown Symbol @ 0x0000000004aa024d."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14578 
IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ani file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77130000!RtlpCoalesceFreeBlocks+0x00000000000004b4."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14579 
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "Read Access Violation on Control Flow starting at STDUJBIG2File!DllGetClassObject+0x0000000000005b70."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14580 
XnView Classic for Windows Version 2.41 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at jbig2dec+0x000000000000870f."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-18T17:00:00.000Z
CVE-2017-14581 
The Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to cause a denial of service (service crash) via a crafted request, aka SAP Security Note 2389181.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T16:00:00.000Z
CVE-2017-14582 
The Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a self-signed certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-29T20:00:00.000Z
CVE-2017-14583 
NetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 are susceptible to a vulnerability which allows an attacker to cause a Denial of Service (DoS) in SMB environments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-12-18T14:00:00.000Z
CVE-2017-14585 
A Server Side Request Forgery (SSRF) vulnerability could lead to remote code execution for authenticated administrators. This issue was introduced in version 2.2.0 of Hipchat Server and version 3.0.0 of Hipchat Data Center. Versions of Hipchat Server starting with 2.2.0 and before 2.2.6 are affected by this vulnerability. Versions of Hipchat Data Center starting with 3.0.0 and before 3.1.0 are affected.
Problem types: description: Remote Code Execution
Affected products: vendor: Atlassian
product: Hipchat Server
vendor: Atlassian
product: Hipchat Data Center
Published: 2017-11-27T16:00:00.000Z
CVE-2017-14586 
The Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video call link parsing. Hipchat for Mac desktop clients at or above version 4.0 and before version 4.30 are affected by this vulnerability.
Problem types: description: Client Side Remote Code Execution
Affected products: vendor: Atlassian
product: Hipchat for Mac desktop client
Published: 2017-11-27T16:00:00.000Z
CVE-2017-14587 
The administration user deletion resource in Atlassian Fisheye and Crucible before version 4.4.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the uname parameter.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Atlassian Fisheye and Crucible
Published: 2017-10-11T18:00:00.000Z
CVE-2017-14588 
Various resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the dialog parameter.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Atlassian Fisheye and Crucible
Published: 2017-10-11T18:00:00.000Z
CVE-2017-14589 
It was possible for double OGNL evaluation in FreeMarker templates through Struts FreeMarker tags to occur. An attacker who has restricted administration rights to Bamboo or who hosts a website that a Bamboo administrator visits, is able to exploit this vulnerability to execute Java code of their choice on systems that run a vulnerable version of Bamboo. All versions of Bamboo before 6.1.6 (the fixed version for 6.1.x) and from 6.2.0 before 6.2.5 (the fixed version for 6.2.x) are affected by this vulnerability.
Problem types: description: Remote Code Execution
Affected products: vendor: Atlassian
product: Bamboo
Published: 2017-12-13T15:00:00.000Z
CVE-2017-14590 
Bamboo did not check that the name of a branch in a Mercurial repository contained argument parameters. An attacker who has permission to create a repository in Bamboo, edit an existing plan that has a non-linked Mercurialrepository, create or edit a plan when there is at least one linked Mercurial repository that the attacker has permission to use, or commit to a Mercurial repository used by a Bamboo plan which has branch detection enabled can execute code of their choice on systems that run a vulnerable version of Bamboo Server. Versions of Bamboo starting with 2.7.0 before 6.1.6 (the fixed version for 6.1.x) and from 6.2.0 before 6.2.5 (the fixed version for 6.2.x) are affected by this vulnerability.
Problem types: description: Remote Code Execution
Affected products: vendor: Atlassian
product: Bamboo
Published: 2017-12-13T15:00:00.000Z
CVE-2017-14591 
Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to argument injection through filenames in Mercurial repositories, allowing attackers to execute arbitrary code on a system running the impacted software.
Problem types: description: Arbitrary Code Execution
Affected products: vendor: Atlassian
product: Fisheye and Crucible
Published: 2017-11-29T21:00:00.000Z
CVE-2017-14592 
Sourcetree for macOS had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system. From version 1.4.0 of Sourcetree for macOS, this vulnerability can be triggered from a webpage through the use of the Sourcetree URI handler. Versions of Sourcetree for macOS starting with 1.0b2 before version 2.7.0 are affected by this vulnerability.
Problem types: description: OS Command Injection
Affected products: vendor: Atlassian
product: Sourcetree for macOS
Published: 2018-01-26T02:00:00.000Z
CVE-2017-14593 
Sourcetree for Windows had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. From version 0.8.4b of Sourcetree for Windows, this vulnerability can be triggered from a webpage through the use of the Sourcetree URI handler. Versions of Sourcetree for Windows starting with 0.5.1.0 before version 2.4.7.0 are affected by this vulnerability
Problem types: description: OS Command Injection
Affected products: vendor: Atlassian
product: Sourcetree for Windows
Published: 2018-01-26T02:00:00.000Z
CVE-2017-14594 
The printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and from version 7.3.0 before 7.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the jqlQuery query parameter.
Problem types: description: Cross Site Scripting (XSS)
Affected products: vendor: Atlassian
product: Jira
Published: 2018-01-12T14:00:00.000Z
CVE-2017-14595 
In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T18:00:00.000Z
CVE-2017-14596 
In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T18:00:00.000Z
CVE-2017-14597 
AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T07:00:00.000Z
CVE-2017-14600 
Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $_GET['del_black'], resulting in Information Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T07:00:00.000Z
CVE-2017-14601 
Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via $_GET['forwhat'], resulting in Information Disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-19T07:00:00.000Z
CVE-2017-14602 
A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13 (except for build 41.24) that, if exploited, could allow an attacker with access to the NetScaler management interface to gain administrative access to the appliance.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-26T14:00:00.000Z
CVE-2017-14603 
In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cert18 and 13.x before 13.13-cert6, insufficient RTCP packet validation could allow reading stale buffer contents and when combined with the "nat" and "symmetric_rtp" options allow redirecting where Asterisk sends the next RTCP report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-09T14:00:00.000Z