Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
(8) maintenance_mode[ip_whitelist] parameters to system/preferences. Additional Analyst Notes: - CVE Program Container: References: - http://www.getsymphony.com/download/releases/version/2.6.4/ - https://github.com/symphonycms/symphony-2/commit/651e150091c61fb60ad1dff2bc2166185a83d9d6 - http://seclists.org/fulldisclosure/2015/Dec/60 - https://cybersecurityworks.com/zerodays/cve-2015-8766-getsymphoney.html
CVE ID: CVE-2015-8767 State: PUBLISHED Published: 2016-02-08T02:00:00 Last Updated: 2024-08-06T08:29:21.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/sctp/sm_sideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a denial of service (deadlock) via a crafted sctp_accept call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2930-1 - http://www.ubuntu.com/usn/USN-2967-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://access.redhat.com/errata/RHSA-2016:1341 - http://www.oracle.com/technet
rity/linuxbulletinjul2016-3090544.html - https://access.redhat.com/errata/RHSA-2016:1341 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://rhn.redhat.com/errata/RHSA-2016-0715.html - http://www.ubuntu.com/usn/USN-2930-2 - https://access.redhat.com/errata/RHSA-2016:1301 - http://www.openwall.com/lists/oss-security/2016/01/11/4 - http://www.debian.org/security/2016/dsa-3503 - http://www.ubuntu.com/usn/USN-2967-2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=635682a14427d241bab7bbdeebb48a7d7b91638e - http://www.ubuntu.com/usn/USN-2930-3 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - http:/
tp://www.ubuntu.com/usn/USN-2930-3 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - http://www.ubuntu.com/usn/USN-2932-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1297389 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.securityfocus.com/bid/80268 - https://github.com/torvalds/linux/commit/635682a14427d241bab7bbdeebb48a7d7b91638e - http://www.ubuntu.com/usn/USN-2931-1 - http://www.debian.org/security/2016/dsa-3448 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html - https://access.redhat.com/errata/RHSA-2016
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html - https://access.redhat.com/errata/RHSA-2016:1277 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
CVE ID: CVE-2015-8768 State: PUBLISHED Published: 2017-02-13T18:00:00 Last Updated: 2024-08-06T08:29:21.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: click/install.py in click does not require files in package filesystem tarballs to start with ./ (dot slash), which allows remote attackers to install an alternate security policy and gain privileges via a crafted package, as demonstrated by the test.mmrow app for Ubuntu phone. Additional Analyst Notes: - CVE Program Container: References: - http://ubuntu.com/usn/usn-2771-1 - http://www.securityfocus.com/bid/96386 - http://bazaar.launchpad.net/~click-hackers/click/devel/revision/587 - https://bugs.launchpad.net/ubuntu/+source/
96386 - http://bazaar.launchpad.net/~click-hackers/click/devel/revision/587 - https://bugs.launchpad.net/ubuntu/+source/click/+bug/1506467 - https://insights.ubuntu.com/2015/10/15/update-on-ubuntu-phone-security-issue/ - https://code.launchpad.net/~cjwatson/click/audit-missing-dot-slash/+merge/274554 - http://www.openwall.com/lists/oss-security/2016/01/12/8 - https://plus.google.com/+SzymonWaliczek/posts/3jbG2uiAniF
CVE ID: CVE-2015-8769 State: PUBLISHED Published: 2016-01-12T20:00:00 Last Updated: 2024-08-06T08:29:21.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/640-20151207-core-sql-injection.html - http://www.securitytracker.com/id/1034658 - http://www.securityfocus.com/bid/79679
CVE ID: CVE-2015-8770 State: PUBLISHED Published: 2016-01-29T19:00:00 Last Updated: 2024-08-06T08:29:21.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the set_skin function in program/include/rcmail_output_html.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. (dot dot) in the _skin parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201603-03 - http://www.debian.org/security/2016/dsa-3541 - http://trac.roundcube.net/changeset/10e5192a2b/gith
.org/glsa/201603-03 - http://www.debian.org/security/2016/dsa-3541 - http://trac.roundcube.net/changeset/10e5192a2b/github - http://www.securityfocus.com/archive/1/537304/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00030.html - https://roundcube.net/news/2015/12/26/updates-1.1.4-and-1.0.8-released/ - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00028.html - http://trac.roundcube.net/ticket/1490620 - http://packetstormsecurity.com/files/135274/Roundcube-1.1.3-Path-Traversal.html - https://www.exploit-db.com/exploits/39245/ - https://www.htbridge.com/advisory/HTB23283 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00029
45/ - https://www.htbridge.com/advisory/HTB23283 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00029.html
CVE ID: CVE-2015-8771 State: PUBLISHED Published: 2017-02-13T18:00:00 Last Updated: 2024-08-06T08:29:21.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: The generate_smb_nt_hash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gosa-project/gosa-core/commit/a67a047cba2cdae8bccb0f0e2bc6d3eb45cfcbc8 - http://www.openwall.com/lists/oss-security/2016/01/15/11 - http://www.securityfocus.com/bid/96388
CVE ID: CVE-2015-8772 State: PUBLISHED Published: 2016-01-29T20:00:00 Last Updated: 2024-08-06T08:29:21.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive information from kernel memory or cause a denial of service (system crash) via a large VERIFY_INFORMATION.Length value in an IOCTL_DISK_VERIFY ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Jan/90 - https://www.nettitude.co.uk/mcafee-file-lock-driver-kernel-memory-leak/
CVE ID: CVE-2015-8773 State: PUBLISHED Published: 2016-01-29T20:00:00 Last Updated: 2024-08-06T08:29:22.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attackers to cause a denial of service (system crash) via a long vault GUID in an ioctl call. Additional Analyst Notes: - CVE Program Container: References: - https://www.nettitude.co.uk/mcafee-file-lock-driver-kernel-stack-based-bof/ - http://seclists.org/fulldisclosure/2016/Jan/92
CVE ID: CVE-2015-8776 State: PUBLISHED Published: 2016-04-19T21:00:00 Last Updated: 2024-08-06T08:29:21.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive information via an out-of-range time value. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html - https://access.redhat.com/errata/RHSA-2017:1916 - http://www.debian.org/secu
ail/package-announce/2016-May/184626.html - https://access.redhat.com/errata/RHSA-2017:1916 - http://www.debian.org/security/2016/dsa-3481 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html - http://rhn.redhat.com/errata/RHSA-2017-0680.html - http://www.ubuntu.com/usn/USN-2985-2 - http://www.openwall.com/lists/oss-security/2016/01/20/1 - https://security.gentoo.org/glsa/201702-11 - https://security.gentoo.org/glsa/201602-02 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html - https://www.s
ounce/2016-02/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html - https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html - http://www.openwall.com/lists/oss-security/2016/01/19/11 - http://www.securityfocus.com/bid/83277 - https://sourceware.org/bugzilla/show_bug.cgi?id=18985 - http://www.debian.org/security/2016/dsa-3480 - http://www.ubuntu.com/usn/USN-2985-1
CVE ID: CVE-2015-8777 State: PUBLISHED Published: 2016-01-20T02:00:00 Last Updated: 2024-08-06T08:29:21.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html - https://access.redhat.com/errata/RHSA-2017:1916 - http://hmarco.org/bugs/glibc_ptr_mangle_weakness.html - http://lists.opensuse.org/opensuse-security-announce/20
7:1916 - http://hmarco.org/bugs/glibc_ptr_mangle_weakness.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html - http://www.ubuntu.com/usn/USN-2985-2 - http://www.openwall.com/lists/oss-security/2016/01/20/1 - https://security.gentoo.org/glsa/201702-11 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html - http://www.securityfocus.com/bid/81469 - https://sourceware.org/bugzilla/show_bug.cgi?id=18928 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html - http://www.debian.org/security/2016/dsa-3480 - http://www.ubuntu.com/usn/USN-29
age-announce/2016-February/177404.html - http://www.debian.org/security/2016/dsa-3480 - http://www.ubuntu.com/usn/USN-2985-1 - http://www.securitytracker.com/id/1034811
CVE ID: CVE-2015-8778 State: PUBLISHED Published: 2016-04-19T21:00:00 Last Updated: 2024-08-06T08:29:21.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the size argument to the __hcreate_r function, which triggers out-of-bounds heap-memory access. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html - https://access.redh
-02/msg00037.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html - https://access.redhat.com/errata/RHSA-2017:1916 - http://www.debian.org/security/2016/dsa-3481 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html - https://sourceware.org/bugzilla/show_bug.cgi?id=18240 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html - http://rhn.redhat.com/errata/RHSA-2017-0680.html - http://www.ubuntu.com/usn/USN-2985-2 - http://www.openwall.com/lists/oss-security/2016/01/20/1 - https://security.gentoo.org/glsa/201702-11 - https://security.gentoo.org/glsa/201602-02 - http://lists.opensuse.org/opensuse-security-announce/2
org/glsa/201702-11 - https://security.gentoo.org/glsa/201602-02 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html - https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html - http://www.openwall.com/lists/oss-security/2016/01/19/11 - http://www.debian.org/security/2016/dsa-3480 - http://www.ubuntu.com/usn/USN-2985-1 - http://www.securityfocus.com/bid/83275 - http://seclists.org/fulldisclosure/2019/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
CVE ID: CVE-2015-8779 State: PUBLISHED Published: 2016-04-19T21:00:00 Last Updated: 2024-08-06T08:29:22.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html - https://access.redhat.com/errata/RHSA-2017:1916 - http://ww
roject.org/pipermail/package-announce/2016-May/184626.html - https://access.redhat.com/errata/RHSA-2017:1916 - http://www.debian.org/security/2016/dsa-3481 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html - http://rhn.redhat.com/errata/RHSA-2017-0680.html - http://www.ubuntu.com/usn/USN-2985-2 - http://www.openwall.com/lists/oss-security/2016/01/20/1 - https://security.gentoo.org/glsa/201702-11 - https://security.gentoo.org/glsa/201602-02 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.htm
suse-security-announce/2016-02/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html - https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html - http://www.openwall.com/lists/oss-security/2016/01/19/11 - http://www.securityfocus.com/bid/82244 - http://www.debian.org/security/2016/dsa-3480 - https://sourceware.org/bugzilla/show_bug.cgi?id=17905 - http://www.ubuntu.com/usn/USN-2985-1 - http://seclists.org/fulldisclosure/2019/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
CVE ID: CVE-2015-8780 State: PUBLISHED Published: 2017-04-13T16:00:00 Last Updated: 2024-08-06T08:29:21.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung wssyncmlnps before 2015-10-31 allows directory traversal in a Kies restore, aka ZipFury. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ud2/advisories/tree/master/android/samsung/nocve-2015-0001
CVE ID: CVE-2015-8781 State: PUBLISHED Published: 2016-02-01T21:00:00 Last Updated: 2024-08-06T08:29:22.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of samples per pixel in a LogL compressed TIFF image, a different vulnerability than CVE-2015-8782. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://bugzilla.maptools.org/show_bug.cgi?id=2522#c0 -
sg00064.html - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://bugzilla.maptools.org/show_bug.cgi?id=2522#c0 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.securityfocus.com/bid/81730 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html - http://www.ubuntu.com/usn/USN-2939-1 - http://www.openwall.com/lists/oss-security/2016/01/24/7 - https://security.gentoo.org/glsa/201701-16 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://rhn.redhat.com/errata/RHSA-2016-1546.html - http://www.openwall.com/lists/oss-security/2016/01/24/3 - http://www.debian.org/security/2016/dsa-3467
CVE ID: CVE-2015-8782 State: PUBLISHED Published: 2016-02-01T21:00:00 Last Updated: 2024-08-06T08:29:21.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a different vulnerability than CVE-2015-8781. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.securi
2016-1547.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.securityfocus.com/bid/81730 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html - http://www.ubuntu.com/usn/USN-2939-1 - http://www.openwall.com/lists/oss-security/2016/01/24/7 - http://bugzilla.maptools.org/show_bug.cgi?id=2522 - https://security.gentoo.org/glsa/201701-16 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://rhn.redhat.com/errata/RHSA-2016-1546.html - http://www.openwall.com/lists/oss-security/2016/01/24/3 - http://www.debian.org/security/2016/dsa-3467
CVE ID: CVE-2015-8783 State: PUBLISHED Published: 2016-02-01T21:00:00 Last Updated: 2024-08-06T08:29:22.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00064.html - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.securityfocus.com/bid/81730 - http://lists.opensuse.o
ork/topics/security/linuxbulletinjul2016-3090544.html - http://www.securityfocus.com/bid/81730 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00058.html - http://www.ubuntu.com/usn/USN-2939-1 - http://www.openwall.com/lists/oss-security/2016/01/24/7 - http://bugzilla.maptools.org/show_bug.cgi?id=2522 - https://security.gentoo.org/glsa/201701-16 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://rhn.redhat.com/errata/RHSA-2016-1546.html - http://www.openwall.com/lists/oss-security/2016/01/24/3 - http://www.debian.org/security/2016/dsa-3467
CVE ID: CVE-2015-8784 State: PUBLISHED Published: 2016-04-13T17:00:00 Last Updated: 2024-08-06T08:29:22.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.openwall.com/lists/oss-security/2016/01/24/4 - https
work/topics/security/linuxbulletinjul2016-3090544.html - http://www.openwall.com/lists/oss-security/2016/01/24/4 - https://github.com/vadz/libtiff/commit/b18012dae552f85dcc5c57d3bf4e997a15b1cc1c - http://www.ubuntu.com/usn/USN-2939-1 - https://security.gentoo.org/glsa/201701-16 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://bugzilla.maptools.org/show_bug.cgi?id=2508 - http://rhn.redhat.com/errata/RHSA-2016-1546.html - http://www.securityfocus.com/bid/81696 - http://www.openwall.com/lists/oss-security/2016/01/24/8 - http://www.debian.org/security/2016/dsa-3467
CVE ID: CVE-2015-8785 State: PUBLISHED Published: 2016-02-08T02:00:00 Last Updated: 2024-08-06T08:29:21.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero length for the first segment of an iov. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://bugzilla.redhat.com/show_bug.cgi?id=1290642 - https://github.com/torvalds/linux/commit/3ca8138f014a913f98e6ef40e939868e1e9ea876 - http://ww
/show_bug.cgi?id=1290642 - https://github.com/torvalds/linux/commit/3ca8138f014a913f98e6ef40e939868e1e9ea876 - http://www.ubuntu.com/usn/USN-2886-1 - http://www.debian.org/security/2016/dsa-3503 - http://www.securityfocus.com/bid/81688 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3ca8138f014a913f98e6ef40e939868e1e9ea876 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://www.openwall.com/lists/
tml - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://www.openwall.com/lists/oss-security/2016/01/24/1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
CVE ID: CVE-2015-8786 State: PUBLISHED Published: 2016-12-09T20:00:00 Last Updated: 2024-08-06T08:29:21.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to cause a denial of service (resource consumption) via the (1) lengths_age or (2) lengths_incr parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rabbitmq/rabbitmq-server/releases/tag/rabbitmq_v3_6_1 - http://rhn.redhat.com/errata/RHSA-2017-0532.html - http://rhn.redhat.com/errata/RHSA-2017-0530.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
n.redhat.com/errata/RHSA-2017-0530.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://rhn.redhat.com/errata/RHSA-2017-0531.html - http://rhn.redhat.com/errata/RHSA-2017-0533.html - https://github.com/rabbitmq/rabbitmq-management/issues/97 - http://www.securityfocus.com/bid/91508 - http://rhn.redhat.com/errata/RHSA-2017-0226.html
CVE ID: CVE-2015-8787 State: PUBLISHED Published: 2016-02-08T02:00:00 Last Updated: 2024-08-06T08:29:22.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by sending certain IPv4 packets to an incompletely configured interface, a related issue to CVE-2003-1604. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/27/6 - http://www.oracle.com/technetwork/topics/security/linuxbulletin