Files
vuln-nvd/data/2017/CVE-2017-5867.json
T

2 lines
5.3 KiB
JSON

{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*","matchCriteriaId":"4E2EB67F-2620-434E-9AB5-45293C019F3F","versionEndIncluding":"8.1.10","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:8.2.0:*:*:*:*:*:*:*","matchCriteriaId":"49E9C5BC-A6BA-4919-9934-BFAA915CC042","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:8.2.1:*:*:*:*:*:*:*","matchCriteriaId":"34AF5397-3B98-431B-B235-424A3B6BEFAC","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:8.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7C35E22D-36A5-495B-8611-7C8B70064A2E","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:8.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FBDBB20-B519-4683-BB16-63A25AE53D7E","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:8.2.4:*:*:*:*:*:*:*","matchCriteriaId":"67AD973F-F06D-46C9-85EB-3521899A257B","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:8.2.5:*:*:*:*:*:*:*","matchCriteriaId":"8098FF20-D5EA-4F72-A837-0CE7B9761974","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:8.2.6:*:*:*:*:*:*:*","matchCriteriaId":"0930807A-BA26-4AFF-9B52-EC2EAF5A456D","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:8.2.7:*:*:*:*:*:*:*","matchCriteriaId":"F81CD71B-7D08-485B-9042-D4CE523FEE80","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:8.2.8:*:*:*:*:*:*:*","matchCriteriaId":"6FC26723-FE1F-4C1A-AF9C-901A1A7A4DA3","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"25185B4F-623B-45F5-97C3-A520C96B6CA6","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8F31B84D-7A81-426C-8C91-BF86087ED657","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8CF3111-74DA-4644-9318-4D5CC6FBD1CC","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D52C26E1-C1A1-4834-84C5-C4403E1734D2","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"377EE3A2-8105-4448-AB9E-C703513CA6CD","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:9.0.5:*:*:*:*:*:*:*","matchCriteriaId":"ADF1A811-E3EF-4A4A-8F7A-C3E5DBC24159","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:9.0.6:*:*:*:*:*:*:*","matchCriteriaId":"ECEB63FC-724C-4FA5-A998-4549A2460A92","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:9.1.0:*:*:*:*:*:*:*","matchCriteriaId":"8E74BD31-5BD3-40FE-93BA-CAE23DA681B2","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:9.1.1:*:*:*:*:*:*:*","matchCriteriaId":"32D138CF-6623-4E1E-97DC-6DD96FE62C1E","vulnerable":true},{"criteria":"cpe:2.3:a:owncloud:owncloud:9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"578DA4AF-C61B-4796-B5BF-89701D3FB8CB","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticated users to cause a denial of service (server hang and logfile flooding) via a one bit BMP file."},{"lang":"es","value":"ownCloud Server en versiones anteriores a 8.1.11, 8.2.x en versiones anteriores a 8.2.9, 9.0.x en versiones anteriores a 9.0.7 y 9.1.x en versiones anteriores a 9.1.3 permite a usuarios remotos autenticados provocar una denegación de servicio (cuelgue del servidor e inundación de archivos de registro) a través de un archivo BMP de un bit"}],"id":"CVE-2017-5867","lastModified":"2026-06-17T01:21:20.990","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"PARTIAL","baseScore":4.0,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":8.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.0"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-03-03T15:59:01.367","references":[{"source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/96430"},{"source":"cve@mitre.org","tags":["Patch","Vendor Advisory"],"url":"https://owncloud.org/security/advisory/?id=oc-sa-2017-003"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/96430"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://owncloud.org/security/advisory/?id=oc-sa-2017-003"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-400"}],"source":"nvd@nist.gov","type":"Primary"}]}