lighttpd < 1.4.16 Multiple Vulnerabilities

According to its banner, the version of lighttpd running on the remote host is prior to 1.4.16. It is, therefore, affected by multiple vulnerabilities : - modauth allows remote attackers to cause a denial of service via unspecified vectors involving 1 a memory leak, 2 use of md5-sess without a...

CVE-2017-7516

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-1197. Reason: This candidate is a duplicate of CVE-2015-1197. Notes: All CVE users should reference CVE-2015-1197 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

UBUNTU-CVE-2017-7516

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-1197. Reason: This candidate is a duplicate of CVE-2015-1197. Notes: All CVE users should reference CVE-2015-1197 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2017-7516

CVE-2017-7516 is a duplicate of CVE-2015-1197 and has been superseded; the related issue affects the cpio tool. The connected documents describe a path traversal vulnerability introduced by reverting patches affecting --no-absolute-filenames, enabling an attacker to write to arbitrary files via a...

CVE-2017-7516

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-1197. Reason: This candidate is a duplicate of CVE-2015-1197. Notes: All CVE users should reference CVE-2015-1197 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usag...

PT-2018-8395 · Canonical +2 · Cpio

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific issue. It appears to be related to the management of vulnerability identifiers, indicating that a particula...

CVE-2017-1000500

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-12161. Reason: This candidate is a reservation duplicate of CVE-2017-12161. Notes: All CVE users should reference CVE-2017-12161 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2018-5191

CVE-2018-5191 is a reservation duplicate of CVE-2017-1000479 and not a separate vulnerability entry. CVE-2017-1000479 affects pfSense versions 2.4.1 and lower, exposing a clickjacking vulnerability in the CSRF error page that can lead to privileged code execution because the check occurs before a...

CVE-2017-1000436

CVE-2017-1000436 is a reservation duplicate of CVE-2017-14975. The connected records show CVE-2017-14975 as a NULL pointer dereference in FoFiType1C.cc in Poppler 0.59.0 (CVE-2017-14975), exploitable via a crafted PDF and capable of causing a denial of service. Public advisories (openSUSE-2018-64...

CVE-2017-1000440

CVE-2017-14976 is a Poppler vulnerability: a heap-based buffer over-read in FoFiType1C.cc occurs when an out-of-bounds font dictionary index is encountered, potentially enabling a DoS. Public-fix notes in openSUSE/SUSE advisories show this CVE fixed in the Poppler updates (e.g., openSUSE-2018-648...

CVE-2017-1000435

The CVE-2017-16227 issue concerns the Quagga routing suite (bgpd) where the AS_PATH UPDATE length is miscalculated due to an flaw in aspath_put. This allows a remote attacker to craft BGP UPDATE messages that can crash bgpd, terminating existing BGP sessions and causing denial of service. Public ...

CVE-2017-1000446

This CVE-2017-1000446 entry is rejected/not used; reference CVE-2017-15954 instead.

CVE-2017-1000447

CVE-2017-1000447 is a reservation duplicate of CVE-2017-15955. Connected references describe bchunk (BinChunker) vulnerabilities in versions 1.2.0–1.2.1: heap-based buffer overflow and an access-violation crash when processing malformed CUE files, enabling potential denial of service. The issue i...

CVE-2017-1000384

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-16355. Reason: This candidate is a reservation duplicate of CVE-2017-16355. Notes: All CVE users should reference CVE-2017-16355 instead of this candidate. All references and descriptions in this candidate have been removed t...

UBUNTU-CVE-2017-1000384

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-16355. Reason: This candidate is a reservation duplicate of CVE-2017-16355. Notes: All CVE users should reference CVE-2017-16355 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2017-17456

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14245. Reason: This candidate is a duplicate of CVE-2017-14245. Notes: All CVE users should reference CVE-2017-14245 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

CVE-2017-17457

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

CVE-2017-17456

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14245. Reason: This candidate is a duplicate of CVE-2017-14245. Notes: All CVE users should reference CVE-2017-14245 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

ALPINE-CVE-2017-17456

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14245. Reason: This candidate is a duplicate of CVE-2017-14245. Notes: All CVE users should reference CVE-2017-14245 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

ALPINE-CVE-2017-17457

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...