Apr 12, 2017

4/3週のCVE ... High Vulnerabilities


Primary
Vendor -- Product
Description
Published
CVSS Score
Source & Patch Info
adobe -- acrobat_reader
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the rendering engine. Successful exploitation could lead to arbitrary code execution.
2017-03-31
10.0
CVE-2017-3010
BID
CONFIRM
apple -- iphone_os
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
2017-04-01
9.3
CVE-2017-2398
BID
CONFIRM
CONFIRM
apple -- iphone_os
CVE-2017-2401  CVE-2017-2423  CVE-2017-2428 CVE-2017-2434  CVE-2017-2440  CVE-2017-2441 CVE-2017-2451  CVE-2017-2456  CVE-2017-2458 CVE-2017-2472  CVE-2017-2473  CVE-2017-2474 CVE-2017-2478  CVE-2017-2482  CVE-2017-2483 CVE-2017-2485  CVE-2017-2490  など、iphone_os 祭りにつき、割愛。
iOS 10.3未満、macOS 10.12.4未満は、アップデートを
2017-04-01
apple -- mac_os_x
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves mishandling of profile uninstall actions in the "MCX Client" component when a profile has multiple payloads. It allows remote attackers to bypass intended access restrictions by leveraging Active Directory certificate trust that should not have remained.
2017-04-01
7.5
CVE-2017-2402
BID
CONFIRM
apple -- mac_os_x
CVE-2017-2408　CVE-2017-2410  CVE-2017-2420 CVE-2017-2421  CVE-2017-2422  CVE-2017-2427 CVE-2017-2436  CVE-2017-2437  CVE-2017-2438 CVE-2017-2443  CVE-2017-2449  CVE-2017-2477 
など、CVSS Scoreは概ね9.3 … 任意のコード実行を含む、祭りにつき、割愛。
macOS 10.12.4未満は、アップデートを
2017-04-01
9.3
huawei -- campus_s9700_firmware
Huawei Campus S7700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300; S9300 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300; S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300 allow unauthorized users to upgrade the bootrom or bootload software, bypass a Menu protection mechanism, conduct a Menu compromise attack, or bypass a Menu/upgrade protection mechanism.

Ref: http://e.huawei.com/jp/products/enterprise-networking/switches/campus-switches/s7700
2017-04-02
7.5
CVE-2014-4707
CONFIRM
huawei -- cloudengine_5800_firmware
Huawei CloudEngine 12800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 5800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 6800 with software V100R002C00, V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 7800 with software V100R003C00, V100R003C10, V100R005C00, V100R005C10, V100R006C00; CloudEngine 8800 with software V100R006C00; and Secospace USG6600 with software V500R001C00 allow remote unauthenticated attackers to craft specific IPFPM packets to trigger an integer overflow and cause the device to reset.

Ref: http://e.huawei.com/jp/related-page/products/enterprise-network/switches/data-center-switches/ce12800/brochure/Switch_ce12800
2017-04-02
7.1
CVE-2016-8795
CONFIRM
BID
huawei -- fusionaccess
Huawei FusionAccess with software V100R005C10,V100R005C20 could allow attackers to craft and send a malformed HDP protocol packet to cause the virtual cloud desktop to be displaying an error and not usable.
2017-04-02
7.8
CVE-2015-7844
CONFIRM
huawei -- hisuite
Huawei PC client software HiSuite 4.0.5.300_OVE has a dynamic link library (DLL) hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code.
2017-04-02
7.2
CVE-2016-8274
CONFIRM
huawei -- mate_8_firmware
ION memory management module in Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, NXT-DL10C00B197 and earlier versions, NXT-TL10C00B197 and earlier versions, NXT-CL10C00B197 and earlier versions allows attackers to cause a denial of service (restart).
2017-04-02
7.1
CVE-2016-8756
CONFIRM
BID
huawei -- mate_8_firmware
ION memory management module in Huawei Mate8 phones with software NXT-AL10C00B561 and earlier versions, NXT-CL10C00B561 and earlier versions, NXT-DL10C00B561 and earlier versions, NXT-TL10C00B561 and earlier versions allows attackers to cause a denial of service (restart).
2017-04-02
7.1
CVE-2016-8758
CONFIRM
BID
huawei -- nem-al10_firmware
Touch Panel (TP) driver in Huawei NEM phones with software Versions before NEM-AL10C00B130, Versions before NEM-UL10C17B160, Versions before NEM-UL10C00B160, Versions before NEM-TL00C01B160 allows attackers to get root privilege or crash the system or execute arbitrary code, related to a buffer overflow.
2017-04-02
7.2
CVE-2016-8775
CONFIRM
BID
huawei -- oceanstor_5600_v3_firmware
Huawei OceanStor 5600 V3 with V300R003C00C10 and earlier versions allows attackers with administrator privilege to inject a command into a specific command's parameters, and run this injected command with root privilege.

Ref: http://e.huawei.com/ja/products/cloud-computing-dc/storage/unified-storage/mid-range
2017-04-02
9.0
CVE-2016-8801
CONFIRM
BID
huawei -- p8_lite_firmware
The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an improper resource release vulnerability, which allows attackers to cause a system restart or privilege elevation.
2017-04-02
9.3
CVE-2016-8763
CONFIRM
BID
huawei -- p9_plus_firmware
Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user privilege.

Ref: https://www.amazon.co.jp/s/?ie=UTF8&keywords=huawei+p9+sim%E3%83%95%E3%83%AA%E3%83%BC&tag=yahhyd-22&index=aps&jp-ad-ap=0&hvadid=186946027860&hvdev=c&ref=pd_sl_46dow18rmb_b
2017-04-02
9.3
CVE-2016-8759
CONFIRM
BID
huawei -- p9_plus_firmware
Touchscreen driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a heap overflow vulnerability, which allows attackers to crash the system or escalate user privilege.
2017-04-02
9.3
CVE-2016-8760
CONFIRM
BID
huawei -- p9_plus_firmware
Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user privilege.
2017-04-02
9.3
CVE-2016-8761
CONFIRM
BID
huawei -- quidway_s6700_firmware
Huawei Quidway S9700 V200R003C00SPC500, Quidway S9300 V200R003C00SPC500, Quidway S7700 V200R003C00SPC500, Quidway S6700 V200R003C00SPC300, Quidway S6300 V200R003C00SPC300, Quidway S5700 V200R003C00SPC300, Quidway S5300 V200R003C00SPC300 enable attackers to launch DoS attacks by crafting and sending malformed packets to these vulnerable products.

Ref: テラビットスイッチ
　https://www.alibaba.com/showroom/huawei-s9706.html
2017-04-02
7.8
CVE-2014-3224
CONFIRM
huawei -- s2750_firmware
Huawei Campus S3700HI with software V200R001C00SPC300; Campus S5700 with software V200R002C00SPC100; Campus S7700 with software V200R003C00SPC300,V200R003C00SPC500; LSW S9700 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S2350 with software V200R003C00SPC300; S2750 with software V200R003C00SPC300; S5300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S5700 with software V200R001C00SPC300,V200R003C00SPC300; S6300 with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S6700 S3300HI with software V200R001C00SPC300,V200R002C00SPC100,V200R003C00SPC300; S7700 with software V200R001C00SPC300; S9300 with software V200R001C00SPC300,V200R003C00SPC300,V200R003C00SPC500; S9300E with software V200R003C00SPC300,V200R003C00SPC500 allow attackers to keep sending malformed packets to cause a denial of service (DoS) attack, aka a heap overflow.
2017-04-02
7.8
CVE-2014-4706
CONFIRM
huawei -- s6300_firmware
Huawei S9300 with software before V100R006SPH013 and S2300,S3300,S5300,S6300 with software before V100R006SPH010 support Y.1731 and therefore have the Y.1731 vulnerability in processing special packets. The vulnerability causes the restart of switches.
2017-04-02
7.8
CVE-2014-3223
CONFIRM
huawei -- tecal_bh621_v2_firmware
Huawei Tecal RH1288 V2 V100R002C00SPC107 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285 V2 V100R002C00SPC115 and earlier versions, Tecal RH2265 V2 V100R002C00, Tecal RH2285H V2 V100R002C00SPC111 and earlier versions, Tecal RH2268 V2 V100R002C00, Tecal RH2288 V2 V100R002C00SPC117 and earlier versions, Tecal RH2288H V2 V100R002C00SPC115 and earlier versions, Tecal RH2485 V2 V100R002C00SPC502 and earlier versions, Tecal RH5885 V2 V100R001C02SPC109 and earlier versions, Tecal RH5885 V3 V100R003C01SPC102 and earlier versions, Tecal RH5885H V3 V100R003C00SPC102 and earlier versions, Tecal XH310 V2 V100R001C00SPC110 and earlier versions, Tecal XH311 V2 V100R001C00SPC110 and earlier versions, Tecal XH320 V2 V100R001C00SPC110 and earlier versions, Tecal XH621 V2 V100R001C00SPC106 and earlier versions, Tecal DH310 V2 V100R001C00SPC110 and earlier versions, Tecal DH320 V2 V100R001C00SPC106 and earlier versions, Tecal DH620 V2 V100R001C00SPC106 and earlier versions, Tecal DH621 V2 V100R001C00SPC107 and earlier versions, Tecal DH628 V2 V100R001C00SPC107 and earlier versions, Tecal BH620 V2 V100R002C00SPC107 and earlier versions, Tecal BH621 V2 V100R002C00SPC106 and earlier versions, Tecal BH622 V2 V100R002C00SPC110 and earlier versions, Tecal BH640 V2 V100R002C00SPC108 and earlier versions, Tecal CH121 V100R001C00SPC180 and earlier versions, Tecal CH140 V100R001C00SPC110 and earlier versions, Tecal CH220 V100R001C00SPC180 and earlier versions, Tecal CH221 V100R001C00SPC180 and earlier versions, Tecal CH222 V100R002C00SPC180 and earlier versions, Tecal CH240 V100R001C00SPC180 and earlier versions, Tecal CH242 V100R001C00SPC180 and earlier versions, Tecal CH242 V3 V100R001C00SPC110 and earlier versions could allow attackers to execute arbitrary code or restart the system via crafted DNS packets.
2017-04-02
7.5
CVE-2014-9693
CONFIRM
huawei -- usg5500_firmware
Huawei USG5500 with software V300R001C00 and V300R001C00 allows attackers to bypass the anti-DDoS module of the USGs to cause a denial of service condition on the backend server.
－＞4/13 追記
Ref: SG5500統合セキュリティ・ゲートウェイ
http://www.huawei.com/jpapp/1406/hw-u_312572.htm
2017-04-02
7.8
CVE-2016-8798
CONFIRM
BID
huawei -- usg9580_firmware
--> 4/13 追記
Ref: USG9500 Terabit-level Next-Generation Firewall
http://e.huawei.com/ja/products/enterprise-networking/security/firewall-gateway/usg9500
2017-04-02
7.8
CVE-2016-8796
CONFIRM
BID
ibm -- curam_social_program_management
IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000833.
2017-03-31
8.5
CVE-2016-6111
CONFIRM
BID
ibm -- rational_software_architect_design_manager
IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000784.
2017-03-31
7.5
CVE-2016-9707
BID
CONFIRM
illumos -- illumos
illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash.
2017-03-31
7.8
CVE-2016-6560
CONFIRM
CONFIRM
CONFIRM
illumos -- illumos
illumos smbsrv NULL pointer dereference allows system crash.
2017-03-31
7.8
CVE-2016-6561
CONFIRM
CONFIRM
CONFIRM
linux -- linux_kernel
The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c.
2017-03-31
7.2
CVE-2017-2647
CONFIRM
BID
CONFIRM
CONFIRM
linux -- linux_kernel
Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereference) or possibly gain privileges by revoking keyring keys being used for ext4, f2fs, or ubifs encryption, causing cryptographic transform objects to be freed prematurely.
2017-03-31
7.2
CVE-2017-7374
CONFIRM
BID
CONFIRM
CONFIRM
multi-router_looking_glass_project -- multi-router_looking_glass
fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption.
2017-03-31
7.5
CVE-2014-3931
CONFIRM
MISC
MISC
opensuse_project -- opensuse
Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.
2017-03-31
7.2
CVE-2014-9114
FEDORA
FEDORA
SUSE
MLIST
BID
XF
CONFIRM
CONFIRM
GENTOO
snoopy -- snoopy
The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.
2017-03-31
7.5
CVE-2008-7313
CONFIRM
MLIST
MLIST
MLIST
BID
CONFIRM
XF
REDHAT
REDHAT
REDHAT
REDHAT
GENTOO
MISC
snoopy -- snoopy
Snoopy allows remote attackers to execute arbitrary commands.
2017-03-31
7.5
CVE-2014-5008
REDHAT
REDHAT
REDHAT
REDHAT
CONFIRM
DEBIAN
MLIST
MLIST
MLIST
BID
CONFIRM
MISC
snoopy -- snoopy
Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists due to an incomplete fix for CVE-2014-5008.
2017-03-31
7.5
CVE-2014-5009
REDHAT
REDHAT
REDHAT
REDHAT
CONFIRM
MLIST
MLIST
MLIST
BID
XF
CONFIRM
MISC
MISC
Back to top

投稿者 時刻:

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)