[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0835?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-11-01'}, {'name': '101717', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/101717'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0835?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0836 mean in the context of cybersecurity?

[Assistant] CVE-2017-0836


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0836.

[Assistant] A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64893226.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0836?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-11-01'}, {'name': '101717', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/101717'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0836?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0837 mean in the context of cybersecurity?

[Assistant] CVE-2017-0837


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0837.

[Assistant] An elevation of privilege vulnerability in the Android media framework (libaudiopolicymanager). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64340921.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0837?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}, {'name': '102126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102126'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0837?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0838 mean in the context of cybersecurity?

[Assistant] CVE-2017-0838


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0838.

[Assistant] An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-63522818.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0838?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0838?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0839 mean in the context of cybersecurity?

[Assistant] CVE-2017-0839


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0839.

[Assistant] An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64478003.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0839?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-11-01'}, {'name': '101717', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/101717'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0839?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0840 mean in the context of cybersecurity?

[Assistant] CVE-2017-0840


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0840.

[Assistant] An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62948670.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0840?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-11-01'}, {'name': '101717', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/101717'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0840?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0841 mean in the context of cybersecurity?

[Assistant] CVE-2017-0841


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0841.

[Assistant] A remote code execution vulnerability in the Android system (libutils). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37723026.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0841?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-11-01'}, {'name': '101718', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/101718'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0841?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0842 mean in the context of cybersecurity?

[Assistant] CVE-2017-0842


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0842.

[Assistant] An elevation of privilege vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37502513.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0842?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-11-01'}, {'name': '101718', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/101718'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0842?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0843 mean in the context of cybersecurity?

[Assistant] CVE-2017-0843


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0843.

[Assistant] An elevation of privilege vulnerability in the MediaTek ccci. Product: Android. Versions: Android kernel. Android ID: A-62670819. References: M-ALPS03361488.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0843?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0843?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0845 mean in the context of cybersecurity?

[Assistant] CVE-2017-0845


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0845.

[Assistant] A denial of service vulnerability in the Android framework (syncstorageengine). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35028827.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0845?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0845?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0846 mean in the context of cybersecurity?

[Assistant] CVE-2017-0846


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0846.

[Assistant] An information disclosure vulnerability in the Android framework (clipboardservice). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64934810.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0846?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2018-01-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0846?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0847 mean in the context of cybersecurity?

[Assistant] CVE-2017-0847


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0847.

[Assistant] An elevation of privilege vulnerability in the Android media framework (mediaanalytics). Product: Android. Versions: 8.0. Android ID: A-65540999.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0847?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0847?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0848 mean in the context of cybersecurity?

[Assistant] CVE-2017-0848


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0848.

[Assistant] An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64477217.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0848?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0848?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0849 mean in the context of cybersecurity?

[Assistant] CVE-2017-0849


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0849.

[Assistant] An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62688399.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0849?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0849?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0850 mean in the context of cybersecurity?

[Assistant] CVE-2017-0850


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0850.

[Assistant] An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-64836941.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0850?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0850?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0851 mean in the context of cybersecurity?

[Assistant] CVE-2017-0851


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0851.

[Assistant] An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-35430570.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0851?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0851?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0852 mean in the context of cybersecurity?

[Assistant] CVE-2017-0852


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0852.

[Assistant] A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0. Android ID: A-62815506.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0852?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0852?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0853 mean in the context of cybersecurity?

[Assistant] CVE-2017-0853


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0853.

[Assistant] An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63121644.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0853?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0853?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0854 mean in the context of cybersecurity?

[Assistant] CVE-2017-0854


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0854.

[Assistant] An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63873837.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0854?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0854?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0855 mean in the context of cybersecurity?

[Assistant] CVE-2017-0855


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0855.

[Assistant] In MPEG4Extractor.cpp, there are several places where functions return early without cleaning up internal buffers which could lead to memory leaks. This could lead to remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64452857.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0855?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2018-01-01'}, {'name': '1040106', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040106'}, {'name': '102414', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102414'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0855?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0857 mean in the context of cybersecurity?

[Assistant] CVE-2017-0857


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0857.

[Assistant] Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65122447.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0857?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0857?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0858 mean in the context of cybersecurity?

[Assistant] CVE-2017-0858


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0858.

[Assistant] Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64836894.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0858?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0858?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0859 mean in the context of cybersecurity?

[Assistant] CVE-2017-0859


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0859.

[Assistant] Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36075131.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0859?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0859?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0860 mean in the context of cybersecurity?

[Assistant] CVE-2017-0860


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0860.

[Assistant] An elevation of privilege vulnerability in the Android system (inputdispatcher). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-31097064.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0860?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0860?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0861 mean in the context of cybersecurity?

[Assistant] CVE-2017-0861


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0861.

[Assistant] Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0861?

[Assistant] {'name': 'RHSA-2018:3083', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:3083'}, {'name': 'DSA-4187', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4187'}, {'name': 'USN-3617-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3617-1/'}, {'name': 'USN-3619-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3619-2/'}, {'name': 'USN-3617-3', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3617-3/'}, {'name': 'USN-3583-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3583-2/'}, {'name': 'USN-3632-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3632-1/'}, {'name': 'RHSA-2018:2390', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:2390'}, {'name': 'USN-3583-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3583-1/'}, {'name': '[secure-testing-commits] 20171206 r58306 - data/CVE', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.alioth.debian.org/pipermail/secure-testing-commits/2017-December/059967.html'}, {'name': '[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html'}, {'name': 'USN-3617-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3617-2/'}, {'name': 'RHSA-2018:3096', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:3096'}, {'name': 'USN-3619-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3619-1/'}, {'name': '102329', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102329'}, {'name': 'RHSA-2020:0036', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2020:0036'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpujul2020.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=362bca57f5d78220f8b5907b875961af9436e229'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0861'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0861?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0862 mean in the context of cybersecurity?

[Assistant] CVE-2017-0862


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0862.

[Assistant] An elevation of privilege vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-36006779.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0862?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0862?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0863 mean in the context of cybersecurity?

[Assistant] CVE-2017-0863


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0863.

[Assistant] An elevation of privilege vulnerability in the Upstream kernel video driver. Product: Android. Versions: Android kernel. Android ID: A-37950620.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0863?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0863?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0864 mean in the context of cybersecurity?

[Assistant] CVE-2017-0864


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0864.

[Assistant] An elevation of privilege vulnerability in the MediaTek ioctl (flashlight). Product: Android. Versions: Android kernel. Android ID: A-37277147. References: M-ALPS03394571.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0864?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0864?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0865 mean in the context of cybersecurity?

[Assistant] CVE-2017-0865


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0865.

[Assistant] An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Android kernel. Android ID: A-65025090. References: M-ALPS02973195.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0865?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0865?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0866 mean in the context of cybersecurity?

[Assistant] CVE-2017-0866


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0866.

[Assistant] An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspace is passed as a pointer to kfree. This could lead to kernel memory corruption and possible code execution. This issue is rated as moderate. Product: Pixel. Version: N/A. Android ID: A-38415808. References: N-CVE-2017-0866.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0866?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-11-01#announcements'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0866?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0869 mean in the context of cybersecurity?

[Assistant] CVE-2017-0869


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0869.

[Assistant] NVIDIA driver contains an integer overflow vulnerability which could cause a use after free and possibly lead to an elevation of privilege enabling code execution as a privileged process. This issue is rated as high. Version: N/A. Android ID: A-37776156. References: N-CVE-2017-0869.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0869?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2018-01-01'}, {'name': '102374', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102374'}, {'name': '1040106', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1040106'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0869?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0870 mean in the context of cybersecurity?

[Assistant] CVE-2017-0870


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0870.

[Assistant] An elevation of privilege vulnerability in the Android framework (libminikin). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-62134807.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0870?

[Assistant] {'name': '102131', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102131'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0870?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0871 mean in the context of cybersecurity?

[Assistant] CVE-2017-0871


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0871.

[Assistant] An elevation of privilege vulnerability in the Android framework (framework base). Product: Android. Versions: 8.0. Android ID A-65281159.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0871?

[Assistant] {'name': '102131', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102131'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0871?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0872 mean in the context of cybersecurity?

[Assistant] CVE-2017-0872


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0872.

[Assistant] A remote code execution vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65290323.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0872?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}, {'name': '102126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102126'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0872?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0873 mean in the context of cybersecurity?

[Assistant] CVE-2017-0873


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0873.

[Assistant] A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63316255.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0873?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}, {'name': '102126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102126'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0873?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0874 mean in the context of cybersecurity?

[Assistant] CVE-2017-0874


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0874.

[Assistant] A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63315932.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0874?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}, {'name': '102126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102126'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0874?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0876 mean in the context of cybersecurity?

[Assistant] CVE-2017-0876


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0876.

[Assistant] A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-64964675.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0876?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}, {'name': '102126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102126'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0876?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0877 mean in the context of cybersecurity?

[Assistant] CVE-2017-0877


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0877.

[Assistant] A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ID A-66372937.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0877?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}, {'name': '102126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102126'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0877?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0878 mean in the context of cybersecurity?

[Assistant] CVE-2017-0878


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0878.

[Assistant] A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 8.0. Android ID A-65186291.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0878?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}, {'name': '102126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102126'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0878?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0879 mean in the context of cybersecurity?

[Assistant] CVE-2017-0879


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0879.

[Assistant] An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65025028.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0879?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/pixel/2017-12-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0879?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0880 mean in the context of cybersecurity?

[Assistant] CVE-2017-0880


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0880.

[Assistant] A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID A-65646012.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0880?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-12-01'}, {'name': '102126', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/102126'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0880?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0881 mean in the context of cybersecurity?

[Assistant] CVE-2017-0881


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0881.

[Assistant] An error in the implementation of an autosubscribe feature in the check_stream_exists route of the Zulip group chat application server before 1.4.3 allowed an authenticated user to subscribe to a private stream that should have required an invitation from an existing member to join. The issue affects all previously released versions of the Zulip server.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0881?

[Assistant] {'name': '97159', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/97159'}, {'tags': ['x_refsource_MISC'], 'url': 'https://groups.google.com/d/msg/zulip-announce/VyawgRuoY34/NTBwnTArGwAJ'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/zulip/zulip/commit/7ecda1ac8e26d8fb3725e954b2dc4723dda2255f'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0881?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0882 mean in the context of cybersecurity?

[Assistant] CVE-2017-0882


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0882.

[Assistant] Multiple versions of GitLab expose sensitive user credentials when assigning a user to an issue or merge request. A fix was included in versions 8.15.8, 8.16.7, and 8.17.4, which were released on March 20th 2017 at 23:59 UTC.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0882?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab-ce/commit/cdf396f456472ef8decd9598daa8dc0097cd30c5'}, {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab-ce/commit/a70346fc6530aa28a98e4aa4cf0f40e2c3bcef6b'}, {'name': '97157', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/97157'}, {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab-ce/commit/43f5a2739dbf8f5c4c16a79f98e2630888f6b5d1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab-ce/issues/29661'}, {'tags': ['x_refsource_MISC'], 'url': 'https://about.gitlab.com/2017/03/20/gitlab-8-dot-17-dot-4-security-release/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0882?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0883 mean in the context of cybersecurity?

[Assistant] CVE-2017-0883


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0883.

[Assistant] Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit files in a share despite having only a 'read' permission set. Note that this only affects folders and files that the adversary has at least read-only permissions for.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0883?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-001'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/169680'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0883?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0884 mean in the context of cybersecurity?

[Assistant] CVE-2017-0884


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0884.

[Assistant] Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permissions issue. Due to a logical error in the file caching layer an authenticated adversary is able to create empty folders inside a shared folder. Note that this only affects folders and files that the adversary has at least read-only permissions for.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0884?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-002'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/169680'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0884?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0885 mean in the context of cybersecurity?

[Assistant] CVE-2017-0885


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0885.

[Assistant] Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. Due to an error in the application logic an adversary with access to a write-only share may enumerate the names of existing files and subfolders by comparing the exception messages.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0885?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-003'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/174524'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0885?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0886 mean in the context of cybersecurity?

[Assistant] CVE-2017-0886


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0886.

[Assistant] Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trigger an endless recursion in the application leading to a potential Denial of Service.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0886?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-004'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/174524'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0886?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0887 mean in the context of cybersecurity?

[Assistant] CVE-2017-0887


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0887.

[Assistant] Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the `OC-Total-Length` HTTP header an authenticated adversary may be able to exceed their configured user quota. Thus using more space than allowed by the administrator.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0887?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-005'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/173622'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0887?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0888 mean in the context of cybersecurity?

[Assistant] CVE-2017-0888


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0888.

[Assistant] Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list contained partially user-controllable input leading to a potential misrepresentation of information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0888?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/179073'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-006'}, {'name': '97491', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/97491'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0888?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0889 mean in the context of cybersecurity?

[Assistant] CVE-2017-0889


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0889.

[Assistant] Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0889?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/209430'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/thoughtbot/paperclip/pull/2435'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/713'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0889?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0890 mean in the context of cybersecurity?

[Assistant] CVE-2017-0890


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0890.

[Assistant] Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0890?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/213227'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-007'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0890?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0891 mean in the context of cybersecurity?

[Assistant] CVE-2017-0891


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0891.

[Assistant] Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple components.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0891?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-008'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/216812'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0891?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0892 mean in the context of cybersecurity?

[Assistant] CVE-2017-0892


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0892.

[Assistant] Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to the files access to the users file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0892?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/191979'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-009'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0892?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0893 mean in the context of cybersecurity?

[Assistant] CVE-2017-0893


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0893.

[Assistant] Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are shipping a vulnerable JavaScript library for sanitizing untrusted user-input which suffered from a XSS vulnerability caused by a behaviour change in Safari 10.1 and 10.2. Note that Nextcloud employs a strict Content-Security-Policy preventing exploitation of this XSS issue on modern web browsers.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0893?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-010'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/222838'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0893?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0894 mean in the context of cybersecurity?

[Assistant] CVE-2017-0894


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0894.

[Assistant] Nextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public calendars due to a logical error. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0894?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-011'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/218876'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0894?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0895 mean in the context of cybersecurity?

[Assistant] CVE-2017-0895


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0895.

[Assistant] Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users. Note that no actual content of the calendar and addressbook has been disclosed.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0895?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/203594'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://nextcloud.com/security/advisory/?id=nc-sa-2017-012'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0895?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0896 mean in the context of cybersecurity?

[Assistant] CVE-2017-0896


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0896.

[Assistant] Zulip Server 1.5.1 and below suffer from an error in the implementation of the invite_by_admins_only setting in the Zulip group chat application server that allowed an authenticated user to invite other users to join a Zulip organization even if the organization was configured to prevent this.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0896?

[Assistant] {'name': '[zulip-announce] 20170601 Zulip Server 1.5.2 released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://groups.google.com/forum/#%21msg/zulip-announce/sUYeJv-fFmg/2TU2TLmNAwAJ'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/224210'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/zulip/zulip/commit/1f48fa27672170bba3b9a97384905bb04c18761b'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0896?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0897 mean in the context of cybersecurity?

[Assistant] CVE-2017-0897


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0897.

[Assistant] ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with weak entropy. Successfully guessing the token can lead to remote code execution.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0897?

[Assistant] {'name': '99242', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/99242'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://docs.expressionengine.com/v2/about/changelog.html#version-2-11-8'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/215890'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://docs.expressionengine.com/latest/about/changelog.html#version-3-5-5'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://expressionengine.com/blog/expressionengine-3.5.5-and-2.11.8-released'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0897?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0898 mean in the context of cybersecurity?

[Assistant] CVE-2017-0898


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0898.

[Assistant] Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier (*) with a huge minus value. Such situation can lead to a buffer overrun, resulting in a heap memory corruption or an information disclosure from the heap.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0898?

[Assistant] {'name': 'USN-3685-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3685-1/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/212241'}, {'name': 'RHSA-2018:0585', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0585'}, {'name': 'RHSA-2018:0378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0378'}, {'name': 'DSA-4031', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2017/dsa-4031'}, {'name': '100862', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/100862'}, {'name': '1039363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1039363'}, {'name': 'RHSA-2017:3485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:3485'}, {'name': '[debian-lts-announce] 20180714 [SECURITY] [DLA 1421-1] ruby2.1 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html'}, {'name': 'RHSA-2018:0583', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0583'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/issues/3722'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.ruby-lang.org/en/news/2017/09/14/sprintf-buffer-underrun-cve-2017-0898/'}, {'name': 'GLSA-201710-18', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201710-18'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0898?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0899 mean in the context of cybersecurity?

[Assistant] CVE-2017-0899


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0899.

[Assistant] RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0899?

[Assistant] {'name': 'RHSA-2018:0585', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0585'}, {'name': 'DSA-3966', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2017/dsa-3966'}, {'name': 'RHSA-2018:0378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0378'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/226335'}, {'name': '1039249', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1039249'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/rubygems/rubygems/commit/1bcbc7fe637b03145401ec9c094066285934a7f1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/rubygems/rubygems/commit/ef0aa611effb5f54d40c7fba6e8235eb43c5a491'}, {'name': 'RHSA-2017:3485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:3485'}, {'name': '[debian-lts-announce] 20180714 [SECURITY] [DLA 1421-1] ruby2.1 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html'}, {'name': 'RHSA-2018:0583', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0583'}, {'name': 'GLSA-201710-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201710-01'}, {'name': '100576', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/100576'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.rubygems.org/2017/08/27/2.6.13-released.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0899?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0900 mean in the context of cybersecurity?

[Assistant] CVE-2017-0900


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0900.

[Assistant] RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query` command.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0900?

[Assistant] {'name': 'RHSA-2018:0585', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0585'}, {'name': 'DSA-3966', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2017/dsa-3966'}, {'name': 'RHSA-2018:0378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0378'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/243003'}, {'name': '1039249', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1039249'}, {'name': 'RHSA-2017:3485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:3485'}, {'name': '[debian-lts-announce] 20180714 [SECURITY] [DLA 1421-1] ruby2.1 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html'}, {'name': '100579', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/100579'}, {'name': 'RHSA-2018:0583', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0583'}, {'name': 'GLSA-201710-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201710-01'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.rubygems.org/2017/08/27/2.6.13-released.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/rubygems/rubygems/commit/8a38a4fc24c6591e6c8f43d1fadab6efeb4d6251'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0900?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0901 mean in the context of cybersecurity?

[Assistant] CVE-2017-0901


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0901.

[Assistant] RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0901?

[Assistant] {'name': 'USN-3685-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3685-1/'}, {'name': 'USN-3553-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3553-1/'}, {'name': 'RHSA-2018:0585', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0585'}, {'name': 'DSA-3966', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2017/dsa-3966'}, {'name': 'RHSA-2018:0378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0378'}, {'name': '42611', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/42611/'}, {'name': '1039249', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1039249'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/243156'}, {'name': 'RHSA-2017:3485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:3485'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/rubygems/rubygems/commit/ad5c0a53a86ca5b218c7976765c0365b91d22cb2'}, {'name': '[debian-lts-announce] 20180714 [SECURITY] [DLA 1421-1] ruby2.1 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html'}, {'name': 'RHSA-2018:0583', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0583'}, {'name': 'GLSA-201710-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201710-01'}, {'name': '100580', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/100580'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.rubygems.org/2017/08/27/2.6.13-released.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0901?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0902 mean in the context of cybersecurity?

[Assistant] CVE-2017-0902


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0902.

[Assistant] RubyGems version 2.6.12 and earlier is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client to download and install gems from a server that the attacker controls.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0902?

[Assistant] {'name': 'USN-3685-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3685-1/'}, {'name': 'USN-3553-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3553-1/'}, {'name': 'RHSA-2018:0585', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0585'}, {'name': 'DSA-3966', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2017/dsa-3966'}, {'name': 'RHSA-2018:0378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0378'}, {'name': '1039249', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1039249'}, {'name': 'RHSA-2017:3485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:3485'}, {'name': '[debian-lts-announce] 20180714 [SECURITY] [DLA 1421-1] ruby2.1 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html'}, {'name': 'RHSA-2018:0583', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0583'}, {'name': 'GLSA-201710-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201710-01'}, {'name': '100586', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/100586'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/rubygems/rubygems/commit/8d91516fb7037ecfb27622f605dc40245e0f8d32'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/218088'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.rubygems.org/2017/08/27/2.6.13-released.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0902?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0903 mean in the context of cybersecurity?

[Assistant] CVE-2017-0903


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0903.

[Assistant] RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0903?

[Assistant] {'name': 'USN-3685-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3685-1/'}, {'name': 'USN-3553-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/3553-1/'}, {'name': 'RHSA-2018:0585', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0585'}, {'name': 'RHSA-2018:0378', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0378'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/274990'}, {'name': 'DSA-4031', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2017/dsa-4031'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/rubygems/rubygems/commit/510b1638ac9bba3ceb7a5d73135dafff9e5bab49'}, {'name': 'RHSA-2017:3485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:3485'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.rubygems.org/2017/10/09/2.6.14-released.html'}, {'name': '[debian-lts-announce] 20180714 [SECURITY] [DLA 1421-1] ruby2.1 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html'}, {'name': 'RHSA-2018:0583', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2018:0583'}, {'name': '101275', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/101275'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.rubygems.org/2017/10/09/unsafe-object-deserialization-vulnerability.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0903?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0904 mean in the context of cybersecurity?

[Assistant] CVE-2017-0904


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0904.

[Assistant] The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not be relied upon for security measures, such as when used to blacklist private network addresses to prevent server-side request forgery.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0904?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/287245'}, {'tags': ['x_refsource_MISC'], 'url': 'https://edoverflow.com/2017/ruby-resolv-bug/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/jtdowney/private_address_check/issues/1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/287835'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/jtdowney/private_address_check/commit/58a0d7fe31de339c0117160567a5b33ad82b46af'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0904?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0905 mean in the context of cybersecurity?

[Assistant] CVE-2017-0905


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0905.

[Assistant] The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource#find" method that could result in compromise of API keys or other critical resources.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0905?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://dev.recurly.com/page/ruby-updates'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/288635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/recurly/recurly-client-ruby/commit/1bb0284d6e668b8b3d31167790ed6db1f6ccc4be'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0905?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0906 mean in the context of cybersecurity?

[Assistant] CVE-2017-0906


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0906.

[Assistant] The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0906?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/288635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/recurly/recurly-client-python/commit/049c74699ce93cf126feff06d632ea63fba36742'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://dev.recurly.com/page/python-updates'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0906?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0907 mean in the context of cybersecurity?

[Assistant] CVE-2017-0907


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0907.

[Assistant] The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery vulnerability due to incorrect use of "Uri.EscapeUriString" that could result in compromise of API keys or other critical resources.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0907?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/288635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/recurly/recurly-client-net/commit/9eef460c0084afd5c24d66220c8b7a381cf9a1f1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://dev.recurly.com/page/net-updates'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0907?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0908 mean in the context of cybersecurity?

[Assistant] CVE-2017-0908


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0908.

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0908?

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0908?

[Assistant] REJECTED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0909 mean in the context of cybersecurity?

[Assistant] CVE-2017-0909


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0909.

[Assistant] The private_address_check ruby gem before 0.4.1 is vulnerable to a bypass due to an incomplete blacklist of common private/local network addresses used to prevent server-side request forgery.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0909?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/288950'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/jtdowney/private_address_check/pull/3'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0909?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0910 mean in the context of cybersecurity?

[Assistant] CVE-2017-0910


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0910.

[Assistant] In Zulip Server before 1.7.1, on a server with multiple realms, a vulnerability in the invitation system lets an authorized user of one realm on the server create a user account on any other realm.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0910?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/zulip/zulip/commit/960d736e55cbb9386a68e4ee45f80581fd2a4e32'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blog.zulip.org/2017/11/23/zulip-1-7-1-released/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0910?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0911 mean in the context of cybersecurity?

[Assistant] CVE-2017-0911


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0911.

[Assistant] Twitter Kit for iOS versions 3.0 to 3.2.1 is vulnerable to a callback verification flaw in the "Login with Twitter" component allowing an attacker to provide alternate credentials. In the final step of "Login with Twitter" authentication information is passed back to the application using the registered custom URL scheme (typically twitterkit-<consumer-key>) on iOS. Because the callback handler did not verify the authenticity of the response, this step is vulnerable to forgery, potentially allowing attacker to associate a Twitter account with a third-party service.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0911?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/290229'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://blog.twitter.com/developer/en_us/topics/tips/2018/vulnerability-in-twitter-kit-for-ios.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/twitter/twitter-kit-ios/blob/b6eb49d149b056d826cbc4b53eaeb39a3ebd591e/TwitterKit/TwitterKit/TWTRTwitter.m#L411'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/twitter/twitter-kit-ios/wiki/Changelog#322-november-28-2017'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/twitter/twitter-kit-ios/blob/b6eb49d149b056d826cbc4b53eaeb39a3ebd591e/TwitterKit/TwitterKit/Social/Identity/TWTRMobileSSO.m#L71'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0911?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0912 mean in the context of cybersecurity?

[Assistant] CVE-2017-0912


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0912.

[Assistant] Ubiquiti UCRM versions 2.5.0 to 2.7.7 are vulnerable to Stored Cross-site Scripting. Due to the lack sanitization, it is possible to inject arbitrary HTML code by manipulating the uploaded filename. Successful exploitation requires valid credentials to an account with "Edit" access to "Scheduling".


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0912?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://community.ubnt.com/t5/UCRM/New-UCRM-upgrades-available-2-8-2-and-2-9-0-beta3/td-p/2211814'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0912?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0913 mean in the context of cybersecurity?

[Assistant] CVE-2017-0913


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0913.

[Assistant] Ubiquiti UCRM versions 2.3.0 to 2.7.7 allow an authenticated user to read arbitrary files in the local file system. Note that by default, the local file system is isolated in a docker container. Successful exploitation requires valid credentials to an account with "Edit" access to "System Customization".


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0913?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/301406'}, {'tags': ['x_refsource_MISC'], 'url': 'https://community.ubnt.com/t5/UCRM/New-UCRM-upgrades-available-2-8-2-and-2-9-0-beta3/td-p/2211814'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0913?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0914 mean in the context of cybersecurity?

[Assistant] CVE-2017-0914


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0914.

[Assistant] Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0914?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/298176'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0914?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0915 mean in the context of cybersecurity?

[Assistant] CVE-2017-0915


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0915.

[Assistant] Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execution.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0915?

[Assistant] {'name': 'DSA-4145', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4145'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/298873'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0915?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0916 mean in the context of cybersecurity?

[Assistant] CVE-2017-0916


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0916.

[Assistant] Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue through web hook component resulting in remote code execution.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0916?

[Assistant] {'name': 'DSA-4145', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4145'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/299473'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0916?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0917 mean in the context of cybersecurity?

[Assistant] CVE-2017-0917


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0917.

[Assistant] Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scripting.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0917?

[Assistant] {'name': 'DSA-4145', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4145'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/299525'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0917?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0918 mean in the context of cybersecurity?

[Assistant] CVE-2017-0918


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0918.

[Assistant] Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0918?

[Assistant] {'name': 'DSA-4145', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2018/dsa-4145'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/301432'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0918?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0919 mean in the context of cybersecurity?

[Assistant] CVE-2017-0919


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0919.

[Assistant] GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the GitLab import component resulting in an attacker being able to perform operations under a group in which they were previously unauthorized.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0919?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/301137'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0919?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0920 mean in the context of cybersecurity?

[Assistant] CVE-2017-0920


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0920.

[Assistant] GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the Projects::MergeRequests::CreationsController component resulting in an attacker to see every project name and their respective namespace on a GitLab instance.