[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0343.

[Assistant] All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) where user can trigger a race condition due to lack of synchronization in two functions leading to a denial of service or potential escalation of privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0343?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/4462'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0343?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0344 mean in the context of cybersecurity?

[Assistant] CVE-2017-0344


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0344.

[Assistant] All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape may allow users to gain access to arbitrary physical memory, leading to escalation of privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0344?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/4462'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0344?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0345 mean in the context of cybersecurity?

[Assistant] CVE-2017-0345


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0345.

[Assistant] All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where user provided input used as an array size is not correctly validated allows out of bound access in kernel memory and may lead to denial of service or potential escalation of privileges


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0345?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/4462'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0345?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0346 mean in the context of cybersecurity?

[Assistant] CVE-2017-0346


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0346.

[Assistant] All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0346?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/4462'}, {'name': '98503', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/98503'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0346?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0347 mean in the context of cybersecurity?

[Assistant] CVE-2017-0347


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0347.

[Assistant] All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array, which may lead to denial of service or potential escalation of privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0347?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/4462'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0347?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0348 mean in the context of cybersecurity?

[Assistant] CVE-2017-0348


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0348.

[Assistant] All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0348?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/4462'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0348?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0349 mean in the context of cybersecurity?

[Assistant] CVE-2017-0349


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0349.

[Assistant] All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from a user to the driver is not correctly validated before it is dereferenced for a write operation, may lead to denial of service or potential escalation of privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0349?

[Assistant] {'name': '98513', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/98513'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/4462'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0349?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0350 mean in the context of cybersecurity?

[Assistant] CVE-2017-0350


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0350.

[Assistant] All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used in an offset calculation may lead to denial of service or potential escalation of privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0350?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/4462'}, {'name': '98490', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/98490'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0350?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0351 mean in the context of cybersecurity?

[Assistant] CVE-2017-0351


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0351.

[Assistant] All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0351?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/4462'}, {'name': '98497', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/98497'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0351?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0352 mean in the context of cybersecurity?

[Assistant] CVE-2017-0352


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0352.

[Assistant] All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where incorrect access control may allow CPU access sensitive GPU control registers, leading to an escalation of privileges


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0352?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/4462'}, {'name': '98517', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/98517'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0352?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0353 mean in the context of cybersecurity?

[Assistant] CVE-2017-0353


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0353.

[Assistant] All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where due to improper locking on certain conditions may lead to a denial of service


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0353?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/4462'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0353?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0354 mean in the context of cybersecurity?

[Assistant] CVE-2017-0354


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0354.

[Assistant] All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where a call to certain function requiring lower IRQL can be made under raised IRQL which may lead to a denial of service.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0354?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/4462'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0354?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0355 mean in the context of cybersecurity?

[Assistant] CVE-2017-0355


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0355.

[Assistant] All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where it may access paged memory while holding a spinlock, leading to a denial of service.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0355?

[Assistant] {'name': '98516', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/98516'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/4462'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0355?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0356 mean in the context of cybersecurity?

[Assistant] CVE-2017-0356


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0356.

[Assistant] A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0356?

[Assistant] {'name': 'DSA-3760', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2017/dsa-3760'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://ikiwiki.info/security/#cve-2017-0356'}, {'name': '[oss-security] 20170112 ikiwiki: CVE-2017-0356: Authentication bypass via repeated parameters', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://marc.info/?l=oss-security&m=148418234314276&w=2'}, {'name': '95420', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95420'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0356?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0357 mean in the context of cybersecurity?

[Assistant] CVE-2017-0357


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0357.

[Assistant] A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading to SIGSEGV, or heap corruption.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0357?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0357'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/iucode-tool/iucode-tool/issues/3'}, {'name': '95432', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95432'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0357?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0358 mean in the context of cybersecurity?

[Assistant] CVE-2017-0358


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0358.

[Assistant] Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0358?

[Assistant] {'name': 'GLSA-201702-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201702-10'}, {'name': 'DSA-3780', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2017/dsa-3780'}, {'name': '41240', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/41240/'}, {'name': '41356', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/41356/'}, {'name': '95987', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95987'}, {'name': '[oss-security] 20170201 CVE-2017-0358 ntfs-3g: modprobe influence vulnerability via environment variables', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://marc.info/?l=oss-security&m=148594671929354&w=2'}, {'name': '[oss-security] 20170203 Re: CVE-2017-0358 ntfs-3g: modprobe influence vulnerability via environment variables', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2017/02/04/1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0358?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0359 mean in the context of cybersecurity?

[Assistant] CVE-2017-0359


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0359.

[Assistant] diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0359?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/854723'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0359'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0359?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0360 mean in the context of cybersecurity?

[Assistant] CVE-2017-0360


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0360.

[Assistant] file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0360?

[Assistant] {'name': 'DSA-3826', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2017/dsa-3826'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.tryton.org/trytond?cmd=changeset%3Bnode=472510fdc6f8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://lists.debian.org/debian-security-announce/2017/msg00084.html'}, {'name': '97489', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/97489'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0360?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0361 mean in the context of cybersecurity?

[Assistant] CVE-2017-0361


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0361.

[Assistant] Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an information disclosure flaw, where the api.log might contain passwords in plaintext.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0361?

[Assistant] {'name': '[mediawiki-announce] 20170406 Security Release: 1.28.1 / 1.27.2 / 1.23.16', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0361'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://phabricator.wikimedia.org/T125177'}, {'name': '1039812', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1039812'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0361?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0362 mean in the context of cybersecurity?

[Assistant] CVE-2017-0362


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0362.

[Assistant] Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where the "Mark all pages visited" on the watchlist does not require a CSRF token.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0362?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://phabricator.wikimedia.org/T150044'}, {'name': '[mediawiki-announce] 20170406 Security Release: 1.28.1 / 1.27.2 / 1.23.16', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0362'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0362?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0363 mean in the context of cybersecurity?

[Assistant] CVE-2017-0363


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0363.

[Assistant] Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 has a flaw where Special:UserLogin?returnto=interwiki:foo will redirect to external sites.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0363?

[Assistant] {'name': '[mediawiki-announce] 20170406 Security Release: 1.28.1 / 1.27.2 / 1.23.16', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://phabricator.wikimedia.org/T109140'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0363'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0363?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0364 mean in the context of cybersecurity?

[Assistant] CVE-2017-0364


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0364.

[Assistant] Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where Special:Search allows redirects to any interwiki link.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0364?

[Assistant] {'name': '[mediawiki-announce] 20170406 Security Release: 1.28.1 / 1.27.2 / 1.23.16', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0364'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://phabricator.wikimedia.org/T122209'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0364?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0365 mean in the context of cybersecurity?

[Assistant] CVE-2017-0365


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0365.

[Assistant] Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a XSS vulnerability in SearchHighlighter::highlightText() with non-default configurations.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0365?

[Assistant] {'name': '[mediawiki-announce] 20170406 Security Release: 1.28.1 / 1.27.2 / 1.23.16', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://phabricator.wikimedia.org/T144845'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0365'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0365?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0366 mean in the context of cybersecurity?

[Assistant] CVE-2017-0366


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0366.

[Assistant] Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG filter using default attribute values in DTD declaration.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0366?

[Assistant] {'name': '[mediawiki-announce] 20170406 Security Release: 1.28.1 / 1.27.2 / 1.23.16', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://phabricator.wikimedia.org/T151735'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0366'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0366?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0367 mean in the context of cybersecurity?

[Assistant] CVE-2017-0367


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0367.

[Assistant] Mediawiki before 1.28.1 / 1.27.2 contains an unsafe use of temporary directory, where having LocalisationCache directory default to system tmp directory is insecure.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0367?

[Assistant] {'name': '[mediawiki-announce] 20170406 Security Release: 1.28.1 / 1.27.2 / 1.23.16', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://phabricator.wikimedia.org/T161453'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0367'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0367?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0368 mean in the context of cybersecurity?

[Assistant] CVE-2017-0368


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0368.

[Assistant] Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw making rawHTML mode apply to system messages.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0368?

[Assistant] {'name': '[mediawiki-announce] 20170406 Security Release: 1.28.1 / 1.27.2 / 1.23.16', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://phabricator.wikimedia.org/T156184'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0368'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0368?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0369 mean in the context of cybersecurity?

[Assistant] CVE-2017-0369


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0369.

[Assistant] Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw, allowing a sysops to undelete pages, although the page is protected against it.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0369?

[Assistant] {'name': '[mediawiki-announce] 20170406 Security Release: 1.28.1 / 1.27.2 / 1.23.16', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0369'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://phabricator.wikimedia.org/T108138'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0369?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0370 mean in the context of cybersecurity?

[Assistant] CVE-2017-0370


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0370.

[Assistant] Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0370?

[Assistant] {'name': '[mediawiki-announce] 20170406 Security Release: 1.28.1 / 1.27.2 / 1.23.16', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0370'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://phabricator.wikimedia.org/T48143'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0370?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0371 mean in the context of cybersecurity?

[Assistant] CVE-2017-0371


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0371.

[Assistant] MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors via a style="background-image: attr(title url);" attack within a DIV element that has an attacker-controlled URL in the title attribute.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0371?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://phabricator.wikimedia.org/T140591'}, {'tags': ['x_refsource_MISC'], 'url': 'https://phabricator.wikimedia.org/T68404'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0371?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0372 mean in the context of cybersecurity?

[Assistant] CVE-2017-0372


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0372.

[Assistant] Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0372?

[Assistant] {'name': '[mediawiki-announce] 20170406 Security Release: 1.28.1 / 1.27.2 / 1.23.16', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html'}, {'name': '[mediawiki-announce] 20170430 Security release 1.27.3 and 1.28.2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000209.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.debian.org/861585'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://phabricator.wikimedia.org/T158689'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0372'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0372?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0373 mean in the context of cybersecurity?

[Assistant] CVE-2017-0373


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0373.

[Assistant] The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0373?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/commit/?h=stretch&id=e7e5dd1a650939a0e021d1d5b311dbb3c4884773'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cpansearch.perl.org/src/DDUMONT/Config-Model-2.102/Changes'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0373'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0373?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0374 mean in the context of cybersecurity?

[Assistant] CVE-2017-0374


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0374.

[Assistant] lib/Config/Model.pm in Config-Model (aka libconfig-model-perl) before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the INC array.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0374?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cpansearch.perl.org/src/DDUMONT/Config-Model-2.102/Changes'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0374'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/commit/?h=stretch&id=0de8471e5a8958ad37446dfcd0362a269e3ec573'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0374?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0375 mean in the context of cybersecurity?

[Assistant] CVE-2017-0375


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0375.

[Assistant] The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_ function via a malformed BEGIN cell.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0375?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://trac.torproject.org/projects/tor/ticket/22493'}, {'name': '99017', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/99017'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torproject/tor/commit/79b59a2dfcb68897ee89d98587d09e55f07e68d7'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0375?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0376 mean in the context of cybersecurity?

[Assistant] CVE-2017-0376


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0376.

[Assistant] The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell function via a BEGIN_DIR cell on a rendezvous circuit.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0376?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.html'}, {'name': 'DSA-3877', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2017/dsa-3877'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://trac.torproject.org/projects/tor/ticket/22494'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torproject/tor/commit/56a7c5bc15e0447203a491c1ee37de9939ad1dcd'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0376?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0377 mean in the context of cybersecurity?

[Assistant] CVE-2017-0377


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0377.

[Assistant] Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's family), which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0377?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://trac.torproject.org/projects/tor/ticket/22753'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security-tracker.debian.org/CVE-2017-0377'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://blog.torproject.org/blog/tor-0309-released-security-update-clients'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://blog.torproject.org/blog/tor-0314-alpha-released-security-update-clients'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torproject/tor/commit/665baf5ed5c6186d973c46cdea165c0548027350'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0377?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0378 mean in the context of cybersecurity?

[Assistant] CVE-2017-0378


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0378.

[Assistant] XSS exists in the login_form function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATH_INFO to main.php.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0378?

[Assistant] {'name': '99927', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/99927'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openwall.com/lists/oss-security/2017/07/20/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/lota/phamm/issues/21'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.debian.org/868988'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.phamm.org/docs/CHANGELOG'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0378?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0379 mean in the context of cybersecurity?

[Assistant] CVE-2017-0379


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0379.

[Assistant] Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0379?

[Assistant] {'name': '100503', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/100503'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html'}, {'name': '1041294', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1041294'}, {'name': 'DSA-3959', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2017/dsa-3959'}, {'tags': ['x_refsource_MISC'], 'url': 'https://lists.debian.org/debian-security-announce/2017/msg00221.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=da780c8183cccc8f533c8ace8211ac2cb2bdee7b'}, {'tags': ['x_refsource_MISC'], 'url': 'https://eprint.iacr.org/2017/806'}, {'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2017-0379'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20180726-0002/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.debian.org/873383'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0379?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0380 mean in the context of cybersecurity?

[Assistant] CVE-2017-0380


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0380.

[Assistant] The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0380?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://trac.torproject.org/projects/tor/ticket/23490'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torproject/tor/commit/09ea89764a4d3a907808ed7d4fe42abfe64bd486'}, {'name': '1039519', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1039519'}, {'name': 'DSA-3993', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2017/dsa-3993'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0380?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0381 mean in the context of cybersecurity?

[Assistant] CVE-2017-0381


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0381.

[Assistant] An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31607432.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0381?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': 'GLSA-201702-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201702-21'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT208144'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/libopus/+/0d052d64480a30e83fcdda80f4774624e044beb7'}, {'name': '95248', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95248'}, {'name': '1039427', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1039427'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT208113'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT208112'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT208115'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0381?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0382 mean in the context of cybersecurity?

[Assistant] CVE-2017-0382


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0382.

[Assistant] A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32338390.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0382?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95247', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95247'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0382?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0383 mean in the context of cybersecurity?

[Assistant] CVE-2017-0383


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0383.

[Assistant] An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1. Android ID: A-31677614.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0383?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95243', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95243'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0383?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0384 mean in the context of cybersecurity?

[Assistant] CVE-2017-0384


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0384.

[Assistant] An elevation of privilege vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32095626.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0384?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/321ea5257e37c8edb26e66fe4ee78cca4cd915fe'}, {'name': '95239', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95239'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0384?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0385 mean in the context of cybersecurity?

[Assistant] CVE-2017-0385


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0385.

[Assistant] An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32585400.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0385?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95239', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95239'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0385?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0386 mean in the context of cybersecurity?

[Assistant] CVE-2017-0386


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0386.

[Assistant] An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32255299.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0386?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95256', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95256'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0386?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0387 mean in the context of cybersecurity?

[Assistant] CVE-2017-0387


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0387.

[Assistant] An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32660278.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0387?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95258', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95258'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0387?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0388 mean in the context of cybersecurity?

[Assistant] CVE-2017-0388


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0388.

[Assistant] An elevation of privilege vulnerability in the External Storage Provider could enable a local secondary user to read data from an external storage SD card inserted by the primary user. This issue is rated as High because it is a general bypass for operating system protections that isolate application data from other applications. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32523490.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0388?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95252', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95252'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0388?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0389 mean in the context of cybersecurity?

[Assistant] CVE-2017-0389


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0389.

[Assistant] A denial of service vulnerability in core networking could enable a remote attacker to use specially crafted network packet to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31850211.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0389?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95251', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95251'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0389?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0390 mean in the context of cybersecurity?

[Assistant] CVE-2017-0390


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0390.

[Assistant] A denial of service vulnerability in Tremolo/dpen.s in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31647370.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0390?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95230', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95230'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/tremolo/+/5dc99237d49e73c27d3eca54f6ccd97d13f94de0'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0390?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0391 mean in the context of cybersecurity?

[Assistant] CVE-2017-0391


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0391.

[Assistant] A denial of service vulnerability in decoder/ihevcd_decode.c in libhevc in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32322258.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0391?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/libhevc/+/a33f6725d7e9f92330f995ce2dcf4faa33f6433f'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95230', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95230'}, {'name': '1038623', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1038623'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0391?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0392 mean in the context of cybersecurity?

[Assistant] CVE-2017-0392


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0392.

[Assistant] A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32577290.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0392?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95230', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95230'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/453b351ac5bd2b6619925dc966da60adf6b3126c'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0392?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0393 mean in the context of cybersecurity?

[Assistant] CVE-2017-0393


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0393.

[Assistant] A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-30436808.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0393?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95230', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95230'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/libvpx/+/6886e8e0a9db2dbad723dc37a548233e004b33bc'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0393?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0394 mean in the context of cybersecurity?

[Assistant] CVE-2017-0394


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0394.

[Assistant] A denial of service vulnerability in Telephony could enable a remote attacker to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31752213.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0394?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95255', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95255'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0394?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0395 mean in the context of cybersecurity?

[Assistant] CVE-2017-0395


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0395.

[Assistant] An elevation of privilege vulnerability in Contacts could enable a local malicious application to silently create contact information. This issue is rated as Moderate because it is a local bypass of user interaction requirements (access to functionality that would normally require either user initiation or user permission). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32219099.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0395?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95261', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95261'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0395?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0396 mean in the context of cybersecurity?

[Assistant] CVE-2017-0396


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0396.

[Assistant] An information disclosure vulnerability in visualizer/EffectVisualizer.cpp in libeffects in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-31781965.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0396?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95232', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95232'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/557bd7bfe6c4895faee09e46fc9b5304a956c8b7'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0396?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0397 mean in the context of cybersecurity?

[Assistant] CVE-2017-0397


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0397.

[Assistant] An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32377688.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0397?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95232', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95232'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/7a3246b870ddd11861eda2ab458b11d723c7f62c'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0397?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0398 mean in the context of cybersecurity?

[Assistant] CVE-2017-0398


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0398.

[Assistant] An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android IDs: A-32438594, A-32635664.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0398?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95226', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95226'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0398?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0399 mean in the context of cybersecurity?

[Assistant] CVE-2017-0399


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0399.

[Assistant] An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32588756.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0399?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/c66c43ad571ed2590dcd55a762c73c90d9744bac'}, {'name': '95226', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95226'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0399?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0400 mean in the context of cybersecurity?

[Assistant] CVE-2017-0400


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0400.

[Assistant] An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32584034.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0400?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/c66c43ad571ed2590dcd55a762c73c90d9744bac'}, {'name': '95226', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95226'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0400?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0401 mean in the context of cybersecurity?

[Assistant] CVE-2017-0401


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0401.

[Assistant] An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32588016.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0401?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/321ea5257e37c8edb26e66fe4ee78cca4cd915fe'}, {'name': '95226', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95226'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0401?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0402 mean in the context of cybersecurity?

[Assistant] CVE-2017-0402


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0402.

[Assistant] An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32436341.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0402?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/c66c43ad571ed2590dcd55a762c73c90d9744bac'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/hardware/qcom/audio/+/d72ea85c78a1a68bf99fd5804ad9784b4102fe57'}, {'name': '95226', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95226'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0402?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0403 mean in the context of cybersecurity?

[Assistant] CVE-2017-0403


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0403.

[Assistant] An elevation of privilege vulnerability in the kernel performance subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32402548.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0403?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95274', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95274'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0403?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0404 mean in the context of cybersecurity?

[Assistant] CVE-2017-0404


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0404.

[Assistant] An elevation of privilege vulnerability in the kernel sound subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32510733.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0404?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-01-01.html'}, {'name': '95281', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/95281'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0404?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0405 mean in the context of cybersecurity?

[Assistant] CVE-2017-0405


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0405.

[Assistant] A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinger process. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-31960359.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0405?

[Assistant] {'name': '1037798', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037798'}, {'name': '96048', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/96048'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-02-01.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0405?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0406 mean in the context of cybersecurity?

[Assistant] CVE-2017-0406


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0406.

[Assistant] A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. This affects the libhevc library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32915871.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0406?

[Assistant] {'name': '1037798', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037798'}, {'name': '96046', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/96046'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-02-01.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0406?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0407 mean in the context of cybersecurity?

[Assistant] CVE-2017-0407


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0407.

[Assistant] A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. This affects the libhevc library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32873375.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0407?

[Assistant] {'name': '1037798', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037798'}, {'name': '96046', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/96046'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-02-01.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0407?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0408 mean in the context of cybersecurity?

[Assistant] CVE-2017-0408


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0408.

[Assistant] A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 7.1.1. Android ID: A-32769670.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0408?

[Assistant] {'name': '96092', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/96092'}, {'name': '1037798', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037798'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-02-01.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0408?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0409 mean in the context of cybersecurity?

[Assistant] CVE-2017-0409


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0409.

[Assistant] A remote code execution vulnerability in libstagefright could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31999646.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0409?

[Assistant] {'name': '1037798', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037798'}, {'name': '96091', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/96091'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-02-01.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0409?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0410 mean in the context of cybersecurity?

[Assistant] CVE-2017-0410


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0410.

[Assistant] An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-31929765.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0410?

[Assistant] {'name': '1037798', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037798'}, {'name': '96056', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/96056'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-02-01.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0410?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0411 mean in the context of cybersecurity?

[Assistant] CVE-2017-0411


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0411.

[Assistant] An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33042690.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0411?

[Assistant] {'name': '41354', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/41354/'}, {'name': '1037798', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037798'}, {'name': '96056', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/96056'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-02-01.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0411?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0412 mean in the context of cybersecurity?

[Assistant] CVE-2017-0412


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0412.

[Assistant] An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33039926.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0412?

[Assistant] {'name': '41355', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/41355/'}, {'name': '1037798', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037798'}, {'name': '96056', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/96056'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-02-01.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0412?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0413 mean in the context of cybersecurity?

[Assistant] CVE-2017-0413


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0413.

[Assistant] An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32161610.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0413?

[Assistant] {'name': '1037798', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037798'}, {'name': '96063', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/96063'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-02-01.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0413?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0414 mean in the context of cybersecurity?

[Assistant] CVE-2017-0414


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0414.

[Assistant] An information disclosure vulnerability in AOSP Messaging could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32807795.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0414?

[Assistant] {'name': '1037798', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037798'}, {'name': '96063', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/96063'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-02-01.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0414?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0415 mean in the context of cybersecurity?

[Assistant] CVE-2017-0415


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0415.

[Assistant] An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32706020.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0415?

[Assistant] {'name': '96089', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/96089'}, {'name': '1037798', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037798'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-02-01.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0415?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0416 mean in the context of cybersecurity?

[Assistant] CVE-2017-0416


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0416.

[Assistant] An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32886609.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0416?

[Assistant] {'name': '1037798', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037798'}, {'name': '96055', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/96055'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-02-01.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0416?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0417 mean in the context of cybersecurity?

[Assistant] CVE-2017-0417


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2017-0417.

[Assistant] An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32705438.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2017-0417?

[Assistant] {'name': '1037798', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1037798'}, {'name': '96055', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/96055'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://source.android.com/security/bulletin/2017-02-01.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2017-0417?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2017-0418 mean in the context of cybersecurity?

[Assistant] CVE-2017-0418