rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-14505 
mitmweb in mitmproxy v4.0.3 allows DNS Rebinding attacks, related to tools/web/app.py.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-22T18:00:00.000Z
CVE-2018-14512 
An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[nickname] parameter to the index.php?m=core&f=set&v=sendmail URI. When the administrator accesses the "system settings - mail server" screen, the XSS payload is triggered.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14513 
An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[content] parameter to the index.php?m=feedback&f=index&v=contact URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14514 
An SSRF vulnerability was discovered in idreamsoft iCMS V7.0.9 that allows attackers to read sensitive files, access an intranet, or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14515 
A SQL injection was discovered in WUZHI CMS 4.1.0 that allows remote attackers to inject a malicious SQL statement via the index.php?m=promote&f=index&v=search keywords parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14517 
SeaCMS 6.61 has two XSS issues in the admin_config.php file via certain form fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14519 
An issue was discovered in Kirby 2.5.12. The delete page functionality suffers from a CSRF flaw. A remote attacker can craft a malicious CSRF page and force the user to delete a page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-24T19:43:11.000Z
CVE-2018-14520 
An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-24T19:43:07.000Z
CVE-2018-14521 
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_source_avcodec_readframe in io/source_avcodec.c, as demonstrated by aubiomfcc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14522 
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_pitch_set_unit in pitch/pitch.c, as demonstrated by aubionotes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14523 
An issue was discovered in aubio 0.4.6. A buffer over-read can occur in new_aubio_pitchyinfft in pitch/pitchyinfft.c, as demonstrated by aubionotes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14524 
dwg_decode_eed in decode.c in GNU LibreDWG before 0.6 leads to a double free (in dwg_free_eed in free.c) because it does not properly manage the obj->eed value after a free occurs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14526 
An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-08T19:00:00.000Z
CVE-2018-14527 
Feedback.asp in Xiao5uCompany 1.7 has XSS because the XSS protection mechanism in Safe.asp is insufficient (for example, it considers SCRIPT and IMG elements, but does not consider VIDEO elements).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14528 
Invoxia NVX220 devices allow TELNET access as admin with a default password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T19:48:51.000Z
CVE-2018-14529 
Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-05T19:51:33.000Z
CVE-2018-14531 
An issue was discovered in Bento4 1.5.1-624. There is an unspecified "heap-buffer-overflow" crash in the AP4_HvccAtom class in Core/Ap4HvccAtom.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14532 
An issue was discovered in Bento4 1.5.1-624. There is a heap-based buffer over-read in AP4_Mpeg2TsVideoSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp after a call from Mp42Hls.cpp, a related issue to CVE-2018-13846.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14533 
read_tmp and write_tmp in Inteno IOPSYS allow attackers to gain privileges after writing to /tmp/etc/smb.conf because /var is a symlink to /tmp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-31T14:00:00.000Z
CVE-2018-14541 
PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T16:00:00.000Z
CVE-2018-14543 
There exists one NULL pointer dereference vulnerability in AP4_JsonInspector::AddField in Ap4Atom.cpp in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp4dump.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14544 
There exists one invalid memory read bug in AP4_SampleDescription::GetFormat() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14545 
There exists one invalid memory read bug in AP4_SampleDescription::GetType() in Ap4SampleDescription.h in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp42ts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14549 
An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_write in libwav.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14550 
An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T00:00:00.000Z
CVE-2018-14551 
The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T08:00:00.000Z
CVE-2018-14553 
gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-11T00:00:00.000Z
CVE-2018-14557 
An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A buffer overflow vulnerability exists in the router's web server (httpd). When processing the page parameters for a post request, the value is directly written with sprintf to a local variable placed on the stack, which overrides the return address of the function, a causing buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-25T19:42:41.000Z
CVE-2018-14558 
An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request. This occurs because the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-10-30T18:00:00.000Z
CVE-2018-14559 
An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A buffer overflow vulnerability exists in the router's web server (httpd). When processing the list parameters for a post request, the value is directly written with sprintf to a local variable placed on the stack, which overrides the return address of the function, causing a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-25T19:44:46.000Z
CVE-2018-14562 
An issue was discovered in libthulac.so in THULAC through 2018-02-25. A NULL pointer dereference can occur in the BasicModel class in include/cb_model.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T14:00:00.000Z
CVE-2018-14563 
An issue was discovered in libthulac.so in THULAC through 2018-02-25. "operator delete" is used with "operator new[]" in the TaggingLearner class in include/cb_tagging_learner.h, possibly leading to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T14:00:00.000Z
CVE-2018-14564 
An issue was discovered in libthulac.so in THULAC through 2018-02-25. A SEGV can occur in NGramFeature::find_bases in include/cb_ngram_feature.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T14:00:00.000Z
CVE-2018-14565 
An issue was discovered in libthulac.so in THULAC through 2018-02-25. A heap-based buffer over-read can occur in NGramFeature::find_bases in include/cb_ngram_feature.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T14:00:00.000Z
CVE-2018-14567 
libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035 and CVE-2018-9251.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-16T20:00:00.000Z
CVE-2018-14568 
Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with normal processing of TCP data that arrives shortly after an RST (i.e., they act as if the RST had not yet been received).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T20:00:00.000Z
CVE-2018-14570 
A file upload vulnerability in application/shop/controller/member.php in Niushop B2B2C Multi-business basic version V1.11 allows any remote member to upload a .php file to the web server via a profile avatar field, by using an image Content-Type (e.g., image/jpeg) with a modified filename and file content. This results in arbitrary code execution by requesting that .php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T20:00:00.000Z
CVE-2018-14572 
In conference-scheduler-cli, a pickle.load call on imported data allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-28T19:00:00.000Z
CVE-2018-14573 
A Local File Inclusion (LFI) vulnerability exists in the Web Interface API of TightRope Media Carousel Digital Signage before 7.3.5. The RenderingFetch API allows for the downloading of arbitrary files through the use of directory traversal sequences, aka CSL-1683.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-23T23:00:00.000Z
CVE-2018-14574 
django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T17:00:00.000Z
CVE-2018-14575 
Trash Bin plugin 1.1.3 for MyBB has cross-site scripting (XSS) via a thread subject and a cross-site request forgery (CSRF) via a post subject.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T21:19:31.000Z
CVE-2018-14576 
The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the _amount variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T18:00:00.000Z
CVE-2018-14579 
GolemCMS through 2008-12-24, if the install/ directory remains active after an installation, allows remote attackers to execute arbitrary PHP code by inserting this code into the "Database Information" "Table prefix" form field, or obtain sensitive information via a direct request for install/install.sql.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-24T14:00:00.000Z
CVE-2018-14581 
Redgate .NET Reflector before 10.0.7.774 and SmartAssembly before 6.12.5 allow attackers to execute code by decompiling a compiled .NET object (such as a DLL or EXE file) with a specific embedded resource file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-31T14:00:00.000Z
CVE-2018-14582 
index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-24T16:00:00.000Z
CVE-2018-14583 
xyhai.php?s=/Auth/addUser in XYHCMS 3.5 allows CSRF to add a background administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-24T16:00:00.000Z
CVE-2018-14584 
An issue has been discovered in Bento4 1.5.1-624. AP4_AvccAtom::Create in Core/Ap4AvccAtom.cpp has a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-24T16:00:00.000Z
CVE-2018-14585 
An issue has been discovered in Bento4 1.5.1-624. AP4_BytesToUInt16BE in Core/Ap4Utils.h has a heap-based buffer over-read after a call from the AP4_Stz2Atom class.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-24T16:00:00.000Z
CVE-2018-14586 
An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Mpeg2TsAudioSampleStream::WriteSample in Core/Ap4Mpeg2Ts.cpp, a different vulnerability than CVE-2018-14532.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-24T16:00:00.000Z
CVE-2018-14587 
An issue has been discovered in Bento4 1.5.1-624. AP4_MemoryByteStream::WritePartial in Core/Ap4ByteStream.cpp has a buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-24T16:00:00.000Z
CVE-2018-14588 
An issue has been discovered in Bento4 1.5.1-624. A NULL pointer dereference can occur in AP4_DataBuffer::SetData in Core/Ap4DataBuffer.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-24T16:00:00.000Z
CVE-2018-14589 
An issue has been discovered in Bento4 1.5.1-624. AP4_Mp4AudioDsiParser::ReadBits in Codecs/Ap4Mp4AudioInfo.cpp has a heap-based buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-24T16:00:00.000Z
CVE-2018-14590 
An issue has been discovered in Bento4 1.5.1-624. A SEGV can occur in AP4_Processor::ProcessFragments in Core/Ap4Processor.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-24T16:00:00.000Z
CVE-2018-14592 
The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla! allow SQL Injection within download.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-20T20:00:00.000Z
CVE-2018-14593 
An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5.0.28, and 4.0.x through 4.0.30. An attacker who is logged into OTRS as an agent may escalate their privileges by accessing a specially crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-03T16:00:00.000Z
CVE-2018-14596 
wancms 1.0 through 5.0 allows remote attackers to cause a denial of service (resource consumption) via a checkcode (aka verification code) URI in which the values of font_size, width, and height are large numbers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-25T04:00:00.000Z
CVE-2018-14597 
CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling error messages that may allow remote attackers to enumerate account names.
Problem types: cwe_id: CWE-203
description: CWE-203: Information Exposure Through Discrepancy
Affected products: vendor: CA Technologies
product: CA Identity Governance
Published: 2018-10-17T21:00:00.000Z
CVE-2018-14598 
An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-24T19:00:00.000Z
CVE-2018-14599 
An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-24T19:00:00.000Z
CVE-2018-14600 
An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-08-24T19:00:00.000Z
CVE-2018-14601 
An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2. A Denial of Service can occur because Markdown rendering times are slow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T02:00:00.000Z
CVE-2018-14602 
An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. Information Disclosure can occur because the Prometheus metrics feature discloses private project pathnames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T02:00:00.000Z
CVE-2018-14603 
An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. CSRF can occur in the Test feature of the System Hooks component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T02:00:00.000Z
CVE-2018-14604 
An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur in the tooltip of the job inside the CI/CD pipeline.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T02:00:00.000Z
CVE-2018-14605 
An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur in the branch name during a Web IDE file commit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T02:00:00.000Z
CVE-2018-14606 
An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur via a Milestone name during a promotion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T02:00:00.000Z
CVE-2018-14607 
Thomson Reuters UltraTax CS 2017 on Windows, in a client/server configuration, transfers customer records and bank account numbers in cleartext over SMBv2, which allows attackers to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks via unspecified vectors. The customer record transferred in cleartext contains: Client ID, Full Name, Spouse's Full Name, Social Security Number, Spouse's Social Security Number, Occupation, Spouse's Occupation, Daytime Phone, Home Phone, Tax Preparer, Federal and State Taxes to File, Bank Name, Bank Account Number, and possibly other sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-26T22:00:00.000Z
CVE-2018-14608 
Thomson Reuters UltraTax CS 2017 on Windows has a password protection option; however, the level of protection might be inconsistent with some customers' expectations because the data is directly accessible in cleartext. Specifically, it stores customer data in unique directories (%install_path%\WinCSI\UT17DATA\client_ID\file_name.XX17) that can be bypassed without authentication by examining the strings of the .XX17 file. The strings stored in the .XX17 file contain each customer's: Full Name, Spouse's Name, Social Security Number, Date of Birth, Occupation, Home Address, Daytime Phone Number, Home Phone Number, Spouse's Address, Spouse's Daytime Phone Number, Spouse's Social Security Number, Spouse's Home Phone Number, Spouse's Occupation, Spouse's Date of Birth, and Spouse's Filing Status.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-26T22:00:00.000Z
CVE-2018-14609 
An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in __del_reloc_root() in fs/btrfs/relocation.c when mounting a crafted btrfs image, related to removing reloc rb_trees when reloc control has not been initialized.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T04:00:00.000Z
CVE-2018-14610 
An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in write_extent_buffer() when mounting and operating a crafted btrfs image, because of a lack of verification that each block group has a corresponding chunk at mount time, within btrfs_read_block_groups in fs/btrfs/extent-tree.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T04:00:00.000Z