rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-14611 
An issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in try_merge_free_space() when mounting a crafted btrfs image, because of a lack of chunk type flag checks in btrfs_check_chunk_valid in fs/btrfs/volumes.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T04:00:00.000Z
CVE-2018-14612 
An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image, because of a lack of chunk block group mapping validation in btrfs_read_block_groups in fs/btrfs/extent-tree.c, and a lack of empty-tree checks in check_leaf in fs/btrfs/tree-checker.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T04:00:00.000Z
CVE-2018-14613 
An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in io_ctl_map_page() when mounting and operating a crafted btrfs image, because of a lack of block group item validation in check_leaf_item in fs/btrfs/tree-checker.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T04:00:00.000Z
CVE-2018-14614 
An issue was discovered in the Linux kernel through 4.17.10. There is an out-of-bounds access in __remove_dirty_segment() in fs/f2fs/segment.c when mounting an f2fs image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T04:00:00.000Z
CVE-2018-14615 
An issue was discovered in the Linux kernel through 4.17.10. There is a buffer overflow in truncate_inline_inode() in fs/f2fs/inline.c when umounting an f2fs image, because a length value may be negative.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T04:00:00.000Z
CVE-2018-14616 
An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference in fscrypt_do_page_crypto() in fs/crypto/crypto.c when operating on a file in a corrupted f2fs image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T04:00:00.000Z
CVE-2018-14617 
An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-27T04:00:00.000Z
CVE-2018-14618 
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31 bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is almost identical to CVE-2017-8816.)
Problem types: cwe_id: CWE-131
description: CWE-131
cwe_id: CWE-122
description: CWE-122
Affected products: vendor: [UNKNOWN]
product: curl
Published: 2018-09-05T19:00:00.000Z
CVE-2018-14619 
A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was freed. This can cause the null skcipher to be freed while it is still in use leading to a local user being able to crash the system or possibly escalate privileges.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: [UNKNOWN]
product: kernel
Published: 2018-08-30T12:00:00.000Z
CVE-2018-14620 
The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially allow an attacker to serve malicious code to the image builder and install in the resultant container image. Version of openstack-rabbitmq-container and openstack-containers as shipped with Red Hat Openstack 12, 13, 14 are believed to be vulnerable.
Problem types: cwe_id: CWE-494
description: CWE-494
Affected products: vendor: Red Hat
product: openstack-rabbitmq-container
Published: 2018-09-10T19:00:00.000Z
CVE-2018-14621 
An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to using poll rather than select, exhaustion of file descriptors would cause the server to enter an infinite loop, consuming a large amount of CPU time and denying service to other clients until restarted.
Problem types: cwe_id: CWE-835
description: CWE-835
Affected products: vendor: [UNKNOWN]
product: libtirpc
Published: 2018-08-30T13:00:00.000Z
CVE-2018-14622 
A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an rpc-based application to crash by flooding it with new connections.
Problem types: cwe_id: CWE-252
description: CWE-252
Affected products: vendor: [UNKNOWN]
product: libtirpc
Published: 2018-08-30T13:00:00.000Z
CVE-2018-14623 
A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is vulnerable.
Problem types: cwe_id: CWE-89
description: CWE-89
cwe_id: CWE-209
description: CWE-209
Affected products: vendor: The Foreman Project
product: katello
Published: 2018-12-13T22:00:00.000Z
CVE-2018-14624 
A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. The lock controlling the error log was not correctly used when re-opening the log file in log__error_emergency(). An attacker could send a flood of modifications to a very large DN, which would cause slapd to crash.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: [UNKNOWN]
product: 389-ds-base
Published: 2018-09-06T13:00:00.000Z
CVE-2018-14625 
A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may allow an attacker using the AF_VSOCK protocol to gather a 4 byte information leak or possibly intercept or corrupt AF_VSOCK messages destined to other clients.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: [UNKNOWN]
product: kernel
Published: 2018-09-10T13:00:00.000Z
CVE-2018-14626 
PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4 inclusive are vulnerable to a packet cache pollution via crafted query that can lead to denial of service.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: The PowerDNS Project
product: pdns
vendor: The PowerDNS Project
product: pdns-recursor
Published: 2018-11-29T18:00:00.000Z
CVE-2018-14627 
The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections: <transport-config confidentiality="required" trust-in-target="supported"/>
Problem types: cwe_id: CWE-319
description: CWE-319
Affected products: vendor: [UNKNOWN]
product: JBoss/WildFly
Published: 2018-09-04T12:00:00.000Z
CVE-2018-14628 
An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: n/a
product: Samba
Published: 2023-01-17T00:00:00.000Z
CVE-2018-14629 
A denial of service vulnerability was discovered in Samba's LDAP server before versions 4.7.12, 4.8.7, and 4.9.3. A CNAME loop could lead to infinite recursion in the server. An unprivileged local attacker could create such an entry, leading to denial of service.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: [UNKNOWN]
product: samba
Published: 2018-11-28T14:00:00.000Z
CVE-2018-14630 
moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulnerable to an XML import of ddwtos could lead to intentional remote code execution. When importing legacy 'drag and drop into text' (ddwtos) type quiz questions, it was possible to inject and execute PHP code from within the imported questions, either intentionally or by importing questions from an untrusted source.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: [UNKNOWN]
product: moodle
Published: 2018-09-17T18:00:00.000Z
CVE-2018-14631 
moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered. The breadcrumb navigation provided by Boost theme when displaying search results of a blog were insufficiently filtered, which could result in reflected XSS if a user followed a malicious link containing JavaScript in the search parameter.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: [UNKNOWN]
product: moodle
Published: 2018-09-17T20:00:00.000Z
CVE-2018-14632 
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: Red Hat
product: atomic-openshift
Published: 2018-09-06T13:00:00.000Z
CVE-2018-14633 
A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is processed. An unauthenticated remote attacker can cause a stack buffer overflow and smash up to 17 bytes of the stack. The attack requires the iSCSI target to be enabled on the victim host. Depending on how the target's code was built (i.e. depending on a compiler, compile flags and hardware architecture) an attack may lead to a system crash and thus to a denial-of-service or possibly to a non-authorized access to data exported by an iSCSI target. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is highly unlikely. Kernel versions 4.18.x, 4.14.x and 3.10.x are believed to be vulnerable.
Problem types: cwe_id: CWE-121
description: CWE-121
Affected products: vendor: The Linux Foundation
product: kernel
Published: 2018-09-25T00:00:00.000Z
CVE-2018-14634 
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
Problem types: cwe_id: CWE-190
description: CWE-190
Affected products: vendor: The Linux Foundation
product: kernel
Published: 2018-09-25T21:00:00.000Z
CVE-2018-14635 
When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from outside of the allowed allocation pool. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3 and 11.0.5 are vulnerable.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: The Openstack Project
product: openstack-neutron
Published: 2018-09-10T19:00:00.000Z
CVE-2018-14636 
Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is set administratively down prior to live-migration and kept down after the migration is complete. This is possible due to the Open vSwitch integration bridge being connected to the instance during migration. When connected to the integration bridge, all traffic for instances using the same Open vSwitch instance would potentially be visible to the migrated guest, as the required Open vSwitch VLAN filters are only applied post-migration. Versions of openstack-neutron before 13.0.0.0b2, 12.0.3, 11.0.5 are vulnerable.
Problem types: cwe_id: CWE-300
description: CWE-300
Affected products: vendor: The Openstack Project
product: openstack-neutron
Published: 2018-09-10T19:00:00.000Z
CVE-2018-14637 
The SAML broker consumer endpoint in Keycloak before version 4.6.0.Final ignores expiration conditions on SAML assertions. An attacker can exploit this vulnerability to perform a replay attack.
Problem types: cwe_id: CWE-287
description: CWE-287
cwe_id: CWE-285
description: CWE-285
Affected products: vendor: [UNKNOWN]
product: keycloak
Published: 2018-11-30T13:00:00.000Z
CVE-2018-14638 
A flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in delete_passwdPolicy function when persistent search connections are terminated unexpectedly leading to remote denial of service.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: Fedora Project
product: 389-ds-base
Published: 2018-09-14T19:00:00.000Z
CVE-2018-14641 
A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive, which can cause a later system crash in ip_do_fragment(). With certain non-default, but non-rare, configuration of a victim host, an attacker can trigger this crash remotely, thus leading to a remote denial-of-service.
Problem types: cwe_id: CWE-456
description: CWE-456
Affected products: vendor: The Linux Foundation
product: kernel
Published: 2018-09-18T13:00:00.000Z
CVE-2018-14642 
An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: Red Hat
product: undertow
Published: 2018-09-18T13:00:00.000Z
CVE-2018-14643 
An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A malicious attacker can use this flaw to remotely execute arbitrary commands on machines managed by vulnerable Foreman instances, in a highly privileged context.
Problem types: cwe_id: CWE-592
description: CWE-592
Affected products: vendor: [UNKNOWN]
product: smart_proxy_dynflow
Published: 2018-09-21T13:00:00.000Z
CVE-2018-14644 
An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote attacker sending a DNS query for a meta-type like OPT can lead to a zone being wrongly cached as failing DNSSEC validation. It only arises if the parent zone is signed, and all the authoritative servers for that parent zone answer with FORMERR to a query for at least one of the meta-types. As a result, subsequent queries from clients requesting DNSSEC validation will be answered with a ServFail.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: [UNKNOWN]
product: pdns
Published: 2018-11-09T19:00:00.000Z
CVE-2018-14645 
A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: [UNKNOWN]
product: haproxy
Published: 2018-09-21T13:00:00.000Z
CVE-2018-14646 
The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netlink.c file. A local attacker could exploit this when a net namespace with a netnsid is assigned to cause a kernel panic and a denial of service.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: [UNKNOWN]
product: kernel:
Published: 2018-11-26T19:00:00.000Z
CVE-2018-14647 
Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming large amounts CPU and RAM. The vulnerability exists in Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15.
Problem types: cwe_id: CWE-665
description: CWE-665
cwe_id: CWE-335
description: CWE-335
Affected products: vendor: The Python Project
product: Python
Published: 2018-09-25T00:00:00.000Z
CVE-2018-14648 
A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in the do_search() function. An unauthenticated attacker could use this flaw to provoke a denial of service.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: [UNKNOWN]
product: 389-ds-base:
Published: 2018-09-28T13:00:00.000Z
CVE-2018-14649 
It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode. This is done by setting debug=True in file /usr/bin/rbd-target-api provided by ceph-isci-cli package. This allows unauthenticated attackers to access this debug shell and escalate privileges. Once an attacker has successfully connected to this debug shell they will be able to execute arbitrary commands remotely. These commands will run with the same privileges as of user executing the application which is using python-werkzeug with debug shell mode enabled. In - Red Hat Ceph Storage 2 and 3, ceph-isci-cli package runs python-werkzeug library with root level permissions.
Problem types: cwe_id: CWE-77
description: CWE-77
Affected products: vendor: [UNKNOWN]
product: ceph-iscsi-cli
Published: 2018-10-09T17:00:00.000Z
CVE-2018-14650 
It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user. A local attacker may use this flaw by waiting for a legit user to run sos-collector and steal the collected data in the /var/tmp directory.
Problem types: cwe_id: CWE-732
description: CWE-732
Affected products: vendor: [UNKNOWN]
product: sos-collector
Published: 2018-09-27T20:00:00.000Z
CVE-2018-14651 
It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was incomplete. A remote, authenticated attacker could use one of these flaws to execute arbitrary code, create arbitrary files, or cause denial of service on glusterfs server nodes via symlinks to relative paths.
Problem types: cwe_id: CWE-59
description: CWE-59
Affected products: vendor: [UNKNOWN]
product: glusterfs
Published: 2018-10-31T21:00:00.000Z
CVE-2018-14652 
The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.
Problem types: cwe_id: CWE-120
description: CWE-120
Affected products: vendor: The Gluster Project
product: glusterfs
Published: 2018-10-31T19:00:00.000Z
CVE-2018-14653 
The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact.
Problem types: cwe_id: CWE-122
description: CWE-122
Affected products: vendor: The Gluster Project
product: glusterfs
Published: 2018-10-31T19:00:00.000Z
CVE-2018-14654 
The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could exploit this via the 'GF_XATTROP_ENTRY_IN_KEY' xattrop to create arbitrary, empty files on the target server.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: The Gluster Project
product: glusterfs
Published: 2018-10-31T19:00:00.000Z
CVE-2018-14655 
A flaw was found in Keycloak 3.4.3.Final, 4.0.0.Beta2, 4.3.0.Final. When using 'response_mode=form_post' it is possible to inject arbitrary Javascript-Code via the 'state'-parameter in the authentication URL. This allows an XSS-Attack upon succesfully login.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: Red Hat
product: keycloak
Published: 2018-11-13T19:00:00.000Z
CVE-2018-14656 
A missing address check in the callers of the show_opcodes() in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: [UNKNOWN]
product: kernel
Published: 2018-10-08T22:00:00.000Z
CVE-2018-14657 
A flaw was found in Keycloak 4.2.1.Final, 4.3.0.Final. When TOPT enabled, an improper implementation of the Brute Force detection algorithm will not enforce its protection measures.
Problem types: cwe_id: CWE-307
description: CWE-307
Affected products: vendor: Red Hat
product: keycloak
Published: 2018-11-13T19:00:00.000Z
CVE-2018-14658 
A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils before the redirect url is verified. This can lead to an Open Redirection attack
Problem types: cwe_id: CWE-601
description: CWE-601
Affected products: vendor: Red Hat
product: keycloak
Published: 2018-11-13T19:00:00.000Z
CVE-2018-14659 
The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: The Gluster Project
product: glusterfs
Published: 2018-10-31T19:00:00.000Z
CVE-2018-14660 
A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY xattr. A remote, authenticated attacker could use this flaw to create multiple locks for single inode by using setxattr repetitively resulting in memory exhaustion of glusterfs server node.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: [UNKNOWN]
product: glusterfs
Published: 2018-11-01T14:00:00.000Z
CVE-2018-14661 
It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: The Gluster Project
product: glusterfs-server
Published: 2018-10-31T20:00:00.000Z
CVE-2018-14662 
It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: [UNKNOWN]
product: ceph
Published: 2019-01-15T21:00:00.000Z