How severe is CVE-2017-9139?

This vulnerability has a severity rating of LOW with a CVSS score of 3.5 out of 10.

What type of vulnerability is CVE-2017-9139?

This is classified as CWE-119, which is a common weakness in software security.

CVE-2017-9139

LOW Year: 2017

CVSS v3 Score

3.5

Low

CVSS v2 Score

2.7

Low

Weakness Type

CWE-119

View all →

Vulnerability Description

There is a stack-based buffer overflow on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). Crafted POST requests to an unspecified URL result in DoS, interrupting the HTTP service (used to login to the web UI of a router) for 1 to 2 seconds.

CVE-2016-1758

LOW

CVSS:3.3(Low)

The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app.

CWE-1192016

CVE-2016-1790

LOW

CVSS:3.3(Low)

Buffer overflow in the Accessibility component in Apple iOS before 9.3.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.

CWE-1192016

CVE-2016-4053

LOW

CVSS:3.7(Low)

Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via crafted Edge Side Includes (ESI) responses, related to incorrect use of assert and ...

CWE-1192016

CVE-2017-15337

LOW

CVSS:3.7(Low)

The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V50...

CWE-1192017