rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-18147 
In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in MMCP, a downlink message is not being properly validated.
Problem types: description: Improper Input Validation in MMCP
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-04-03T17:00:00.000Z
CVE-2017-18153 Use After Free in WLAN
A race condition exists in a driver potentially leading to a use-after-free condition.
Problem types: cwe_id: CWE-416
description: CWE-416 Use After Free
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-11-26T08:55:19.175Z
CVE-2017-18154 
A crafted binder request can cause an arbitrary unmap in MediaServer in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
Problem types: description: Use of Out-of-range Pointer Offset in Display
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-06-06T21:00:00.000Z
CVE-2017-18155 
While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, an uninitialized variable can be used leading to a kernel fault.
Problem types: description: Use of Unitialized Variable in Video
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Automobile, Snapdragon Mobile
Published: 2018-07-12T14:00:00.000Z
CVE-2017-18156 
While processing camera buffers in camera driver, a use after free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 625, SD 820, SD 820A, SD 835, SDX20.
Problem types: description: CWE416: Use After Free
Affected products: vendor: Qualcomm Technologies, Inc.
product: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Published: 2019-05-06T22:28:03.000Z
CVE-2017-18157 
A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDX20.
Problem types: description: CWE416: Use After Free
Affected products: vendor: Qualcomm Technologies, Inc.
product: Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
Published: 2019-05-06T22:31:47.000Z
CVE-2017-18158 
Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05 while flashing images.
Problem types: description: Buffer Copy Without Checking Size of Input in Boot
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T17:00:00.000Z
CVE-2017-18159 
In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, while processing a StrHwPlatform with length smaller than EFICHIPINFO_MAX_ID_LENGTH, an array out of bounds access may occur.
Problem types: description: Improper Restriction of Operations Within the Bounds of a memory Buffer in Boot
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-07-06T17:00:00.000Z
CVE-2017-18160 
AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845, SD 850
Problem types: description: Cryptographic Issues in GPS
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile, Snapdragon Wear
Published: 2019-01-18T22:00:00.000Z
CVE-2017-18169 
User process can perform the kernel DOS in ashmem when doing cache maintenance operation in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
Problem types: description: Reachable Assertion in Kernel
Affected products: vendor: Qualcomm, Inc.
product: Android for MSM, Firefox OS for MSM, QRD Android
Published: 2018-06-15T20:00:00.000Z
CVE-2017-18170 
Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, SDM630, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016.
Problem types: description: Integer Underflow vulnerability in Bluetooth controller
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile
Published: 2018-10-23T13:00:00.000Z
CVE-2017-18171 
Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, SDM630, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016.
Problem types: description: Improper Input Validation in Bluetooth Controller
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Mobile
Published: 2018-10-23T13:00:00.000Z
CVE-2017-18172 
In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile, Snapdragon Mobile in version MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016.
Problem types: description: Integer Overflow or Wraparound in SUI
Affected products: vendor: Qualcomm, Inc.
product: Snapdragon Automobile, Snapdragon Mobile
Published: 2018-10-23T13:00:00.000Z
CVE-2017-18173 
In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016.
Problem types: description: CWE190: Integer Overflow or Wraparound
Affected products: vendor: Qualcomm Technologies, Inc.
product: Snapdragon Mobile
Published: 2019-05-06T22:34:44.000Z
CVE-2017-18174 
In the Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls the pinctrl_unregister function, leading to a double free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-11T18:00:00.000Z
CVE-2017-18175 
Progress Sitefinity 9.1 has XSS via the Content Management Template Configuration (aka Templateconfiguration), as demonstrated by the src attribute of an IMG element. This is fixed in 10.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T14:00:00.000Z
CVE-2017-18176 
Progress Sitefinity 9.1 has XSS via file upload, because JavaScript code in an HTML file has the same origin as the application's own code. This is fixed in 10.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T14:00:00.000Z
CVE-2017-18177 
Progress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User Creation Page. This is fixed in 10.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T14:00:00.000Z
CVE-2017-18178 
Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the redirection target, if the target is specified using a certain %40 syntax. This is fixed in 10.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T14:00:00.000Z
CVE-2017-18179 
Progress Sitefinity 9.1 uses wrap_access_token as a non-expiring authentication token that remains valid after a password change or a session termination. Also, it is transmitted as a GET parameter. This is fixed in 10.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-12T14:00:00.000Z
CVE-2017-18183 
An issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter::enqueueObject() function in libqpdf/QPDFWriter.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-13T19:00:00.000Z
CVE-2017-18184 
An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iterate_rc4 in QPDF_encryption.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-13T19:00:00.000Z
CVE-2017-18185 
An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the Pl_Buffer::write function in Pl_Buffer.cc. It is caused by an integer overflow in the PNG filter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-13T19:00:00.000Z
CVE-2017-18186 
An issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref tables in QPDF.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-13T19:00:00.000Z
CVE-2017-18187 
In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_psk_identity() function in library/ssl_srv.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-14T17:00:00.000Z
CVE-2017-18188 
OpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sysctl is turned off, allows local users to obtain ownership of arbitrary files by creating a hard link inside a directory on which "chown -R" will be run.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-14T20:00:00.000Z
CVE-2017-18189 
In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-15T10:00:00.000Z
CVE-2017-18190 
A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS server (neither the OS nor the web browser is responsible for ensuring that localhost.localdomain is 127.0.0.1).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-16T17:00:00.000Z
CVE-2017-18191 
An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. (The same code error also results in data loss, but that is not a vulnerability because the user loses their own data.) All Nova setups supporting encrypted volumes are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-19T17:00:00.000Z
CVE-2017-18192 
smart/calculator/gallerylock/CalculatorActivity.java in the "Photo,Video Locker-Calculator" application through 18 for Android allows attackers to access files via the backdoor 17621762 PIN.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-20T06:00:00.000Z
CVE-2017-18193 
fs/f2fs/extent_cache.c in the Linux kernel before 4.13 mishandles extent trees, which allows local users to cause a denial of service (BUG) via an application with multiple threads.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-22T15:00:00.000Z
CVE-2017-18194 
SQL injection vulnerability in users/signup.php in the "signup" component in HamayeshNegar CMS allows a remote attacker to execute arbitrary SQL commands via the "utype" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-22T16:00:00.000Z
CVE-2017-18195 
An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0. An unauthenticated user can enumerate comments from all blog posts by POSTing requests to /index.php/tools/required/conversations/view_ajax with incremental 'cnvID' integers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-26T17:00:00.000Z
CVE-2017-18196 
Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories, which might allow local users to bypass intended file restrictions by leveraging access to a directory located deeper within the /tmp directory tree, as demonstrated by /tmp/ANY/PATH/ANY/PATH/input.tif.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-23T21:00:00.000Z
CVE-2017-18197 
In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by /ServerView.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-24T02:00:00.000Z
CVE-2017-18198 
print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted iso file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-24T06:00:00.000Z
CVE-2017-18199 
realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-24T06:00:00.000Z
CVE-2017-18200 
The f2fs implementation in the Linux kernel before 4.14 mishandles reference counts associated with f2fs_wait_discard_bios calls, which allows local users to cause a denial of service (BUG), as demonstrated by fstrim.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-26T03:00:00.000Z
CVE-2017-18201 
An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-26T14:00:00.000Z
CVE-2017-18202 
The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-27T06:00:00.000Z
CVE-2017-18203 
The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-27T20:00:00.000Z
CVE-2017-18204 
The ocfs2_setattr function in fs/ocfs2/file.c in the Linux kernel before 4.14.2 allows local users to cause a denial of service (deadlock) via DIO requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-27T20:00:00.000Z
CVE-2017-18205 
In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-27T22:00:00.000Z
CVE-2017-18206 
In utils.c in zsh before 5.4, symlink expansion had a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-27T22:00:00.000Z
CVE-2017-18207 
The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications "need to be prepared to handle a wide variety of exceptions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T05:00:00.000Z
CVE-2017-18208 
The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of service (infinite loop) by triggering use of MADVISE_WILLNEED for a DAX mapping.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T05:00:00.000Z
CVE-2017-18209 
In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulnerability occurs because a memory allocation result is not checked, related to GetOpenCLCacheDirectory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T20:00:00.000Z
CVE-2017-18210 
In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T20:00:00.000Z
CVE-2017-18211 
In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/opencl.c because a program-lookup result is not checked, related to CacheOpenCLKernel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T20:00:00.000Z
CVE-2017-18212 
An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_hex function in lit/lit-char-helpers.c via a RegExp("[\x0"); payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-01T21:00:00.000Z
CVE-2017-18213 
In Exponent CMS before 2.4.1 Patch #6, certain admin users can elevate their privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-04T02:00:00.000Z
CVE-2017-18214 
The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-04T21:00:00.000Z
CVE-2017-18215 
xvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields, leading to crashes or potentially code execution, because it uses an incorrect length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T18:00:00.000Z
CVE-2017-18216 
In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service (NULL pointer dereference and BUG) because a required mutex is not used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T18:00:00.000Z
CVE-2017-18217 
An issue was discovered in InvoicePlane before 1.5.5. It was observed that the Email address and Web address parameters are vulnerable to Cross Site Scripting, related to application/modules/clients/views/view.php, application/modules/invoices/views/view.php, and application/modules/quotes/views/view.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T20:00:00.000Z
CVE-2017-18218 
In drivers/net/ethernet/hisilicon/hns/hns_enet.c in the Linux kernel before 4.13, local users can cause a denial of service (use-after-free and BUG) or possibly have unspecified other impact by leveraging differences in skb handling between hns_nic_net_xmit_hw and hns_nic_net_xmit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T20:00:00.000Z
CVE-2017-18219 
An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large png_pixels array allocation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T22:00:00.000Z
CVE-2017-18220 
The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service (magick/blob.c CloseBlob use-after-free) or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-05T22:00:00.000Z
CVE-2017-18221 
The __munlock_pagevec function in mm/mlock.c in the Linux kernel before 4.11.4 allows local users to cause a denial of service (NR_MLOCK accounting corruption) via crafted use of mlockall and munlockall system calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-07T08:00:00.000Z
CVE-2017-18222 
In the Linux kernel before 4.12, Hisilicon Network Subsystem (HNS) does not consider the ETH_SS_PRIV_FLAGS case when retrieving sset_count data, which allows local users to cause a denial of service (buffer overflow and memory corruption) or possibly have unspecified other impact, as demonstrated by incompatibility between hns_get_sset_count and ethtool_get_strings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-08T14:00:00.000Z
CVE-2017-18223 
BMC Remedy AR System before 9.1 SP3, when Remedy AR Authentication is enabled, allows attackers to obtain administrative access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-10T22:00:00.000Z
CVE-2017-18224 
In the Linux kernel before 4.15, fs/ocfs2/aops.c omits use of a semaphore and consequently has a race condition for access to the extent tree during read operations in DIRECT mode, which allows local users to cause a denial of service (BUG) by modifying a certain e_cpos field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-12T03:00:00.000Z
CVE-2017-18225 
The Gentoo net-im/jabberd2 package through 2.6.1 installs jabberd, jabberd2-c2s, jabberd2-router, jabberd2-s2s, and jabberd2-sm in /usr/bin owned by the jabber account, which might allow local users to gain privileges by leveraging access to this account and then waiting for root to execute one of these programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-12T04:00:00.000Z
CVE-2017-18226 
The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script executes a "kill -TERM `cat /var/run/jabber/filename.pid`" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-03-12T04:00:00.000Z