CVE-2018-4074

CVE-2018-4074 is rejected/not used; this CVE entry does not represent an active vulnerability.

CVE-2018-4079

CVE-2018-4079 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-4076

CVE-2018-4076 is rejected and does not represent an active vulnerability entry.

CVE-2017-16989

CVE-2017-16989 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-16971

CVE-2017-16971 is rejected/not used per the Initial Description.

CVE-2016-9047

CVE-2016-9047 is rejected/not used; this candidate was not assigned to any issues.

CVE-2017-16991

CVE-2017-16991 is rejected/not used per the initial description.

CVE-2017-16990

CVE-2017-16990 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-5733

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2018-3630

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none...

CVE-2017-5735

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2017-5732

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2017-5733

CVE-2017-5733 is referenced in connected MiracleLinux advisory AXSA:2019-4031:02 as a vulnerability in edk2: heap-based buffer overflow in MakeTable() within EDK II firmware (ovmf). The affected component is the ovmf package in MiracleLinux 7; the issue is described as a privilege escalation risk...

PYSEC-2019-241

GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogrexpat.cpp when the 10MB threshold is exceeded...

GDAL Double Release Vulnerability

GDAL is an open source software library for manipulating various raster and vector geospatial data formats. A poolDestroy double-release vulnerability exists in OGRExpatRealloc in ogr/ogrexpat.cpp in GDAL 3.0.1 and earlier when the 10MB threshold is exceeded, and no detailed vulnerability details...

CVE-2018-10841

A flaw was found in glusterfs which can lead to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to...

Windows Kernel - win32k.sys TTF Font Processing Pool Corruption in win32k!ulClearTypeFilter

Windows Kernel - win32k.sys TTF Font Processing Pool Corruption in win32k!ulClearTypeFilter We have encountered a Windows kernel crash in the win32k.sys driver while processing a corrupted TTF font file. An example crash log excerpt generated after triggering the bug is shown below: --- cut ---...

Code injection

This issue only affects devices with three 3 or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First OSPF states to transition to Down, resulting in a...

CVE-2019-0056: Insufficient Resource Pool

This issue only affects devices with three 3 or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First OSPF states to transition to Down, resulting in a...

CVE-2017-5732

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...