CVE Vulnerability Catalog

The readelf.c in GNU Binutils as of 2017-04-12 has a 'cannot be represented in type long' issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.

Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view, add, and remove users via modification of the HTTP request.

Quick Emulator (Qemu) with VirtFS support and host directory sharing via Plan 9 File System (9pfs) has an access control vulnerability. This issue can occur when accessing virtfs metadata files in mapped-file security mode, allowing a guest user to escalate their privileges inside the guest.

The Codextrous B2J Contact extension before 2.1.13 for Joomla! allows a directory traversal attack that bypasses a uniqid protection mechanism, making it easier to read arbitrary uploaded files.

smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service.

KDE kdelibs before version 4.14.32 and KAuth before version 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app.

The Codextrous B2J Contact extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to read arbitrary uploaded files.

Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Zimbra Collaboration before 8.6.0 Patch 8 allow remote attackers to hijack the authentication of administrators for requests that (1) add, (2) modify, or (3) remove accounts. The issue arises from the failure to use a CSRF token and perform referer header checks.

A CSRF vulnerability has been identified in the OpenId Connect client registration service in Apache CXF Fediz prior to versions 1.4.0 and 1.3.2. A malicious web application could create new clients or reset secrets after an admin user has logged into the client registration service.

A CSRF vulnerability has been found in the Spring 2, Spring 3, Jetty 8, and Jetty 9 plugins in Apache CXF Fediz prior to versions 1.4.0, 1.3.2, and 1.2.4. This flaw may allow attackers to perform unauthorized actions on behalf of users.

Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. The size was off by one making it possible to read past the end of the array with an ether type of 0xFFFF.

CVE-2017-6657 concerns the mishandling of Ether Type Validation in Cisco Sourcefire Snort 3.0 before build 233. This allows for the crafting of packets with IP protocol numbers in the ether type field, potentially leading to a crash of the Snort++ decoder.

A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information about scheduled customer meetings. The issue is due to an incomplete configuration of the robots.txt file on customer-hosted WebEx solutions.

A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to improper handling of gRPC requests.

A vulnerability in the Plug-and-Play (PnP) subsystem of Cisco Aironet 1800, 2800, and 3800 Series Access Points could allow an unauthenticated attacker to execute arbitrary code with root privileges. The issue is due to insufficient validation of PnP server responses.

A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint software could allow an unauthenticated, remote attacker to cause the TelePresence endpoint to reload unexpectedly, resulting in a denial of service (DoS) condition. The issue is due to incomplete input validation for the size of a received ICMP packet.

A boundary error in the 'parse_tiff_ifd()' function in LibRaw versions before 0.18.2 can lead to memory corruption. Exploiting a specially crafted KDC file with the model set to 'DSLR-A100' and containing multiple sequences of 0x100 and 0x14A TAGs may allow an attack.

A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel.

The TrustZone access control policy in Android may be bypassed due to improper input validation, potentially leading to a buffer overflow and buffer over-read vulnerabilities.

In QSEE in all Android releases from CAF, access control may potentially be bypassed due to a page alignment issue.