rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-12132 
The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-01T16:00:00.000Z
CVE-2017-12133 
Use-after-free vulnerability in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) before 2.26 allows remote attackers to have unspecified impact via vectors related to error path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-07T13:00:00.000Z
CVE-2017-12134 
The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block IO merge-ability calculation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-24T14:00:00.000Z
CVE-2017-12135 
Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-24T14:00:00.000Z
CVE-2017-12136 
Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the host via vectors involving maptrack free list handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-24T14:00:00.000Z
CVE-2017-12137 
arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-24T14:00:00.000Z
CVE-2017-12138 
XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T05:00:00.000Z
CVE-2017-12139 
XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T05:00:00.000Z
CVE-2017-12140 
The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T05:00:00.000Z
CVE-2017-12141 
In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T05:00:00.000Z
CVE-2017-12142 
In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T05:00:00.000Z
CVE-2017-12143 
In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_info in lqt_quicktime.c, which allows attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T05:00:00.000Z
CVE-2017-12144 
In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T05:00:00.000Z
CVE-2017-12145 
In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_ftyp in ftyp.c, which allows attackers to cause a denial of service via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-02T05:00:00.000Z
CVE-2017-12146 
The driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1 allows local users to gain privileges by leveraging a race condition between a read operation and a store operation that involve different overrides.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-08T19:00:00.000Z
CVE-2017-12148 
A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repository) definition does not have the 'delete before update' flag set, an attacker with commit access to the upstream playbook source repository could create a Trojan playbook that, when executed by Tower, modifies the checked out SCM repository to add git hooks. These git hooks could, in turn, cause arbitrary command and code execution as the user Tower runs as.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: Red Hat
product: Ansible Tower
Published: 2018-07-27T16:00:00.000Z
CVE-2017-12149 
In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.
Problem types: cwe_id: CWE-502
description: CWE-502
Affected products: vendor: Red Hat, Inc.
product: jbossas
Published: 2017-10-04T20:00:00.000Z
CVE-2017-12150 
It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.
Problem types: cwe_id: CWE-300
description: CWE-300
Affected products: vendor: Samba
product: samba
Published: 2018-07-26T18:00:00.000Z
CVE-2017-12151 
A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
Problem types: cwe_id: CWE-300
description: CWE-300
Affected products: vendor: Samba
product: samba
Published: 2018-07-27T12:00:00.000Z
CVE-2017-12153 
A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: n/a
product: kernel since v3.1-rc1 through v4.13
Published: 2017-09-21T15:00:00.000Z
CVE-2017-12154 
The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load exiting" and "CR8-store exiting" L0 vmcs02 controls exist in cases where L1 omits the "use TPR shadow" vmcs12 control, which allows KVM L2 guest OS users to obtain read and write access to the hardware CR8 register.
Problem types: description: incorrect access control
Affected products: vendor: n/a
product: Linux kernel through 4.13.3
Published: 2017-09-26T05:00:00.000Z
CVE-2017-12155 
A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local attacker with access to the key could read or modify data on Ceph cluster pools for OpenStack as though the attacker were the OpenStack service, thus potentially reading or modifying data in an OpenStack Block Storage volume.
Problem types: description: Incorrect Permission Assignment for Critical Resource
Affected products: vendor: OpenStack
product: openstack-tripleo-heat-templates
Published: 2017-12-12T20:00:00.000Z
CVE-2017-12156 
Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback.
Problem types: description: XSS
Affected products: vendor: n/a
product: Moodle 3.x
Published: 2017-09-18T04:00:00.000Z
CVE-2017-12157 
In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access.
Problem types: description: improper authorization
Affected products: vendor: n/a
product: Moodle 3.x
Published: 2017-09-18T04:00:00.000Z
CVE-2017-12158 
It was found that Keycloak would accept a HOST header URL in the admin console and use it to determine web resource locations. An attacker could use this flaw against an authenticated user to attain reflected XSS via a malicious server.
Problem types: cwe_id: CWE-444
description: CWE-444
Affected products: vendor: Red Hat, Inc.
product: keycloak
Published: 2017-10-26T17:00:00.000Z
CVE-2017-12159 
It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session. An attacker could use this flaw to gain access to an authenticated user session, leading to possible information disclosure or further attacks.
Problem types: cwe_id: CWE-613
description: CWE-613
Affected products: vendor: Red Hat, Inc.
product: keycloak
Published: 2017-10-26T17:00:00.000Z
CVE-2017-12160 
It was found that Keycloak oauth would permit an authenticated resource to obtain an access/refresh token pair from the authentication server, permitting indefinite usage in the case of permission revocation. An attacker on an already compromised resource could use this flaw to grant himself continued permissions and possibly conduct further attacks.
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: Red Hat, Inc.
product: keycloak
Published: 2017-10-26T17:00:00.000Z
CVE-2017-12161 
It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset request. An attacker could use this flaw to craft a malicious password reset request and gain a valid reset token, leading to information disclosure or further attacks.
Problem types: cwe_id: CWE-602
description: CWE-602
Affected products: vendor: Red Hat, Inc.
product: Keycloak
Published: 2018-02-21T18:00:00.000Z
CVE-2017-12163 
An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Samba
product: Samba
Published: 2018-07-26T16:00:00.000Z
CVE-2017-12164 
A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If autologin was enabled for a victim, an attacker could simply select 'login as another user' to unlock their screen.
Problem types: cwe_id: CWE-592
description: CWE-592
Affected products: vendor: GNOME
product: gdm
Published: 2018-07-26T16:00:00.000Z
CVE-2017-12165 
It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause possible http request smuggling.
Problem types: cwe_id: CWE-444
description: CWE-444
Affected products: vendor: Red Hat
product: undertow
Published: 2018-07-27T15:00:00.000Z
CVE-2017-12166 
OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly resulting in code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-03T19:00:00.000Z
CVE-2017-12167 
It was found in EAP 7 before 7.0.9 that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system.
Problem types: cwe_id: CWE-732
description: CWE-732
Affected products: vendor: Red Hat
product: EAP-7
Published: 2018-07-26T17:00:00.000Z
CVE-2017-12168 
The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service (assertion failure and host OS crash) by accessing the Performance Monitors Cycle Count Register (PMCCNTR).
Problem types: cwe_id: CWE-617
description: assert failure CWE-617
Affected products: vendor: n/a
product: Linux kernel before 4.9
Published: 2017-09-20T08:00:00.000Z
CVE-2017-12169 
It was found that FreeIPA 4.2.0 and later could disclose password hashes to users having the 'System: Read Stage Users' permission. A remote, authenticated attacker could potentially use this flaw to disclose the password hashes belonging to Stage Users. This security issue does not result in disclosure of password hashes belonging to active standard users. NOTE: some developers feel that this report is a suggestion for a design change to Stage User activation, not a statement of a vulnerability.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: FreeIPA
product: ipa
Published: 2018-01-10T15:00:00.000Z
CVE-2017-12170 
Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related configuration. This issue doesn't affect upstream version of pure-ftpd.
Problem types: description: unsafe configuration
Affected products: vendor: Red Hat, Inc.
product: pure-ftpd
Published: 2017-09-21T20:00:00.000Z
CVE-2017-12171 
A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource.
Problem types: cwe_id: CWE-284
description: CWE-284
Affected products: vendor: Red Hat
product: httpd
Published: 2018-07-26T17:00:00.000Z
CVE-2017-12172 
PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server.
Problem types: cwe_id: CWE-59
description: CWE-59
Affected products: vendor: Red Hat, Inc.
product: postgresql
Published: 2017-11-22T19:00:00.000Z
CVE-2017-12173 
It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized login environment, if a password hash was locally cached for a given user, an authenticated attacker could use this flaw to retrieve it.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: SSSD
product: sssd
Published: 2018-07-27T16:00:00.000Z
CVE-2017-12174 
It was found that when Artemis and HornetQ before 2.4.0 are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: Red Hat, Inc.
product: HornetQ/Artemis
Published: 2018-03-07T22:00:00.000Z
CVE-2017-12175 
Red Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering filter and you use autocomplete functionality.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Red Hat
product: Satellite
Published: 2018-07-26T17:00:00.000Z
CVE-2017-12176 
xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
Problem types: cwe_id: CWE-391
description: CWE-391
Affected products: vendor: The X.Org Foundation
product: xorg-x11-server
Published: 2018-01-24T15:00:00.000Z
CVE-2017-12177 
xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
Problem types: cwe_id: CWE-391
description: CWE-391
Affected products: vendor: The X.Org Foundation
product: xorg-x11-server
Published: 2018-01-24T15:00:00.000Z
CVE-2017-12178 
xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
Problem types: cwe_id: CWE-391
description: CWE-391
Affected products: vendor: The X.Org Foundation
product: xorg-x11-server
Published: 2018-01-24T15:00:00.000Z
CVE-2017-12179 
xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
Problem types: cwe_id: CWE-391
description: CWE-391
Affected products: vendor: The X.Org Foundation
product: xorg-x11-server
Published: 2018-01-24T15:00:00.000Z
CVE-2017-12180 
xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
Problem types: cwe_id: CWE-391
description: CWE-391
Affected products: vendor: The X.Org Foundation
product: xorg-x11-server
Published: 2018-01-24T15:00:00.000Z
CVE-2017-12181 
xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
Problem types: cwe_id: CWE-391
description: CWE-391
Affected products: vendor: The X.Org Foundation
product: xorg-x11-server
Published: 2018-01-24T15:00:00.000Z
CVE-2017-12182 
xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
Problem types: cwe_id: CWE-391
description: CWE-391
Affected products: vendor: The X.Org Foundation
product: xorg-x11-server
Published: 2018-01-24T15:00:00.000Z
CVE-2017-12183 
xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
Problem types: cwe_id: CWE-391
description: CWE-391
Affected products: vendor: The X.Org Foundation
product: xorg-x11-server
Published: 2018-01-24T15:00:00.000Z
CVE-2017-12184 
xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
Problem types: cwe_id: CWE-391
description: CWE-391
Affected products: vendor: The X.Org Foundation
product: xorg-x11-server
Published: 2018-01-24T15:00:00.000Z
CVE-2017-12185 
xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
Problem types: cwe_id: CWE-391
description: CWE-391
Affected products: vendor: n/a
product: n/a
Published: 2018-01-24T15:00:00.000Z
CVE-2017-12186 
xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
Problem types: cwe_id: CWE-391
description: CWE-391
Affected products: vendor: The X.Org Foundation
product: xorg-x11-server
Published: 2018-01-24T15:00:00.000Z
CVE-2017-12187 
xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.
Problem types: cwe_id: CWE-391
description: CWE-391
Affected products: vendor: The X.Org Foundation
product: xorg-x11-server
Published: 2018-01-24T15:00:00.000Z
CVE-2017-12188 
arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse guest pagetable entries to resolve a guest virtual address, which allows L1 guest OS users to execute arbitrary code on the host OS or cause a denial of service (incorrect index during page walking, and host OS crash), aka an "MMU potential stack buffer overrun."
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: n/a
product: Linux kernel
Published: 2017-10-11T15:00:00.000Z
CVE-2017-12189 
It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application Platform 7.0.7.GA performed unsafe file handling which could result in local privilege escalation. This issue is a result of an incomplete fix for CVE-2016-8656.
Problem types: cwe_id: CWE-282
description: CWE-282
Affected products: vendor: Red Hat, Inc.
product: Red Hat JBoss Enterprise Application Platform
Published: 2018-01-10T19:00:00.000Z
CVE-2017-12190 
The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers belonging to the same page. The bio_add_pc_page function merges them into one, but the page reference is never dropped. This causes a memory leak and possible system lockup (exploitable against the host OS by a guest OS user, if a SCSI disk is passed through to a virtual machine) due to an out-of-memory condition.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: n/a
product: Linux kernel through v4.14-rc5
Published: 2017-11-22T18:00:00.000Z
CVE-2017-12191 
A flaw was found in the CloudForms account configuration when using VMware. By default, a shared account is used that has privileged access to VMRC (VMWare Remote Console) functions that may not be appropriate for users of CloudForms (and thus this account). An attacker could use this vulnerability to view and make changes to settings in the VMRC and virtual machines controlled by it that they should not have access to.
Problem types: cwe_id: CWE-284
description: Improper Access Control (CWE-284)
Affected products: vendor: Red Hat, Inc.
product: CloudForms
Published: 2018-02-28T13:00:00.000Z
CVE-2017-12192 
The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows local users to cause a denial of service (OOPS and system crash) via a crafted KEYCTL_READ operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-12T00:00:00.000Z
CVE-2017-12193 
The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: n/a
product: Linux kernel since 3.13 up to 4.14 (not including)
Published: 2017-11-22T18:00:00.000Z