Lucene search

[email protected]CVE-2017-5867

HistoryMar 03, 2017 - 3:59 p.m.

CVE-2017-5867

2017-03-0315:59:01

CWE-400

[email protected]

web.nvd.nist.gov

owncloud

server

denial of service

cve-2017-5867

file vulnerability

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.9%

JSON

ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to cause a denial of service (server hang and logfile flooding) via a one bit BMP file.

Affected configurations

NVD

Node

owncloudowncloudRange≤8.1.10

owncloudowncloudMatch8.2.0

owncloudowncloudMatch8.2.1

owncloudowncloudMatch8.2.2

owncloudowncloudMatch8.2.3

owncloudowncloudMatch8.2.4

owncloudowncloudMatch8.2.5

owncloudowncloudMatch8.2.6

owncloudowncloudMatch8.2.7

owncloudowncloudMatch8.2.8

owncloudowncloudMatch9.0.0

owncloudowncloudMatch9.0.1

owncloudowncloudMatch9.0.2

owncloudowncloudMatch9.0.3

owncloudowncloudMatch9.0.4

owncloudowncloudMatch9.0.5

owncloudowncloudMatch9.0.6

owncloudowncloudMatch9.1.0

owncloudowncloudMatch9.1.1

owncloudowncloudMatch9.1.2

CPENameOperatorVersion
owncloud:owncloudowncloudle8.1.10
owncloud:owncloudowncloudeq8.2.0
owncloud:owncloudowncloudeq8.2.1
owncloud:owncloudowncloudeq8.2.2
owncloud:owncloudowncloudeq8.2.3
owncloud:owncloudowncloudeq8.2.4
owncloud:owncloudowncloudeq8.2.5
owncloud:owncloudowncloudeq8.2.6
owncloud:owncloudowncloudeq8.2.7
owncloud:owncloudowncloudeq8.2.8

CPE	Name	Operator	Version
owncloud:owncloud	owncloud	le	8.1.10
owncloud:owncloud	owncloud	eq	8.2.0
owncloud:owncloud	owncloud	eq	8.2.1
owncloud:owncloud	owncloud	eq	8.2.2
owncloud:owncloud	owncloud	eq	8.2.3
owncloud:owncloud	owncloud	eq	8.2.4
owncloud:owncloud	owncloud	eq	8.2.5
owncloud:owncloud	owncloud	eq	8.2.6
owncloud:owncloud	owncloud	eq	8.2.7
owncloud:owncloud	owncloud	eq	8.2.8

Rows per page:

1-10 of 201

References

www.securityfocus.com/bid/96430

owncloud.org/security/advisory/?id=oc-sa-2017-003

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.9%

JSON

Related for CVE-2017-5867

ubuntucve1 cvelist1 nvd1 owncloud2 prion1 osv1 openvas2