Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
docId=emr_na-c05320149 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html - https://security.gentoo.org/glsa/201611-22 - https://bugs.php.net/bug.php?id=72093 - http://www.securityfocus.com/bid/90173 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.openwall.com/lists/oss-security/2016/05/05/21 - http://www.debian.org/security/2016/dsa-3602 - https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=d650063a0457aec56364e4005a636dc6c401f9cd - http://php.net/ChangeLog-5.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr
c05390722 - http://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html
CVE ID: CVE-2016-4538 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T00:32:25.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structures without considering whether they are copies of the _zero_, _one_, or _two_ global variable, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - http://lists.opensuse
nces: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html - https://security.gentoo.org/glsa/201611-22 - https://bugs.php.net/bug.php?id=72093 - http://www.securityfocus.com/bid/90173 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.openwall.com/lists/oss-security/2016/05/05/21 - http://www.debian.org/security/2016/dsa-3602 - https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=d650063a0457aec56364e4005a636dc6c401f9cd - http://php.net/ChangeLog-5.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://php.net/ChangeLog-7.php - h
://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html
CVE ID: CVE-2016-4539 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T00:32:25.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (buffer under-read and segmentation fault) or possibly have unspecified other impact via crafted XML data in the second argument, leading to a parser level of zero. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - http://lists.opensuse.org/opensuse-updates
6.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html - https://security.gentoo.org/glsa/201611-22 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.openwall.com/lists/oss-security/2016/05/05/21 - http://www.debian.org/security/2016/dsa-3602 - http://php.net/ChangeLog-5.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://www.securityfocus.com/bid/90174 - http://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://bugs.php.net/bug.php?id=72099 - http://lists.opensuse.or
site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://bugs.php.net/bug.php?id=72099 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html - https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=dccda88f27a084bcbbb30198ace12b4e7ae961cc - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html
CVE ID: CVE-2016-4540 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T00:32:25.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90172 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - https://bugs.php.net/bug.php?id=72061 - http://lists.opensuse.o
/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - https://bugs.php.net/bug.php?id=72061 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html - https://security.gentoo.org/glsa/201611-22 - https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fd9689745c44341b1bd6af4756f324be8abba2fb - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.openwall.com/lists/oss-security/2016/05/05/21 - http://www.debian.org/security/2016/dsa-3602 - http://php.net/ChangeLog-5.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c0524
- http://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html
CVE ID: CVE-2016-4541 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T00:32:25.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90172 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - https://bugs.php.net/bug.php?id=72061 - http://lists.opensuse.or
site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - https://bugs.php.net/bug.php?id=72061 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html - https://security.gentoo.org/glsa/201611-22 - https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fd9689745c44341b1bd6af4756f324be8abba2fb - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.openwall.com/lists/oss-security/2016/05/05/21 - http://www.debian.org/security/2016/dsa-3602 - http://php.net/ChangeLog-5.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://php.net/ChangeLog-7.php - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240
CVE ID: CVE-2016-4542 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T00:32:25.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - http://www.securityfocus.com/bid/89844 - http://lists.opensuse.o
site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - http://www.securityfocus.com/bid/89844 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html - https://security.gentoo.org/glsa/201611-22 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.openwall.com/lists/oss-security/2016/05/05/21 - http://www.debian.org/security/2016/dsa-3602 - http://php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=72094 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://php.net/ChangeLog-7.php - https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=082aecfc3a753ad03be82cf14f03ac065723ec92 - https://h20566.www2.hpe.com/portal/site/hpsc
et/?p=php-src.git%3Ba=commit%3Bh=082aecfc3a753ad03be82cf14f03ac065723ec92 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html
CVE ID: CVE-2016-4543 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T00:32:25.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - http://www.securityfocus.com/bid/89844 - http://lists.opensuse.org/opensuse-upd
c/kb/docDisplay?docId=emr_na-c05320149 - http://www.securityfocus.com/bid/89844 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html - https://security.gentoo.org/glsa/201611-22 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.openwall.com/lists/oss-security/2016/05/05/21 - http://www.debian.org/security/2016/dsa-3602 - http://php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=72094 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://php.net/ChangeLog-7.php - https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=082aecfc3a753ad03be82cf14f03ac065723ec92 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docD
it%3Ba=commit%3Bh=082aecfc3a753ad03be82cf14f03ac065723ec92 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html
CVE ID: CVE-2016-4544 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T00:32:25.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/89844 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html - https://security.gentoo.org/glsa/201611-22 - http://rhn
tp://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html - https://security.gentoo.org/glsa/201611-22 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.openwall.com/lists/oss-security/2016/05/05/21 - http://www.debian.org/security/2016/dsa-3602 - http://php.net/ChangeLog-5.php - https://bugs.php.net/bug.php?id=72094 - http://php.net/ChangeLog-7.php - https://git.php.net/?p=php-src.git%3Ba=commit%3Bh=082aecfc3a753ad03be82cf14f03ac065723ec92 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.ht
rg/opensuse-updates/2016-05/msg00086.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html
CVE ID: CVE-2016-4545 State: PUBLISHED Published: 2016-06-07T18:00:00 Last Updated: 2024-08-06T00:32:25.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service (resource consumption and Traffic Management Microkernel restart) via an SSL alert during the handshake. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036025 - https://support.f5.com/kb/en-us/solutions/public/k/48/sol48042976.html
CVE ID: CVE-2016-4546 State: PUBLISHED Published: 2017-02-13T18:00:00 Last Updated: 2024-08-06T00:32:25.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm service crash) via crafted data in a service call. Additional Analyst Notes: - CVE Program Container: References: - http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2016 - http://www.openwall.com/lists/oss-security/2016/05/06/1
CVE ID: CVE-2016-4547 State: PUBLISHED Published: 2017-02-13T18:00:00 Last Updated: 2024-08-06T00:32:25.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash) via a crafted system call to TvoutService_C. Additional Analyst Notes: - CVE Program Container: References: - http://security.samsungmobile.com/smrupdate.html#SMR-FEB-2016 - http://www.openwall.com/lists/oss-security/2016/05/06/2
CVE ID: CVE-2016-4551 State: PUBLISHED Published: 2016-10-05T16:00:00 Last Updated: 2024-08-06T00:32:25.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might allow remote attackers to spoof IP addresses written to the Security Audit Log via vectors related to the network landscape, aka SAP Security Note 2190621. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/Oct/3 - https://www.onapsis.com/research/security-advisories/sap-security-audit-log-invalid-address-logging - http://www.securityfocus.com/bid/93288
CVE ID: CVE-2016-4552 State: PUBLISHED Published: 2016-12-20T22:00:00 Last Updated: 2024-08-06T00:32:25.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/issues/5240 - https://github.com/roundcube/roundcubemail/wiki/Changelog#release-120 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00101.html
CVE ID: CVE-2016-4553 State: PUBLISHED Published: 2016-05-10T19:00:00 Last Updated: 2024-08-06T00:32:25.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201607-01 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://bugs.squid-cache.org/show_bug.cgi?id=4501 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg000
- http://bugs.squid-cache.org/show_bug.cgi?id=4501 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://www.squid-cache.org/Advisories/SQUID-2016_7.txt - http://www.ubuntu.com/usn/USN-2995-1 - http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch - https://access.redhat.com/errata/RHSA-2016:1140 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html - https://access.redhat.com/errata/RHSA-2016:1139 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - http://www.securitytracker.com/id/1035768 - http://www.debian.org/security/2016/dsa-3625
CVE ID: CVE-2016-4554 State: PUBLISHED Published: 2016-05-10T19:00:00 Last Updated: 2024-08-06T00:32:25.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smuggling" issue. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201607-01 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.squid-cache.org/Versions/v3/3.3/changesets/SQUID-2016_8.patch - http://www.squid-cache.org/Versions/v3/3.4/cha
ttp://www.squid-cache.org/Versions/v3/3.3/changesets/SQUID-2016_8.patch - http://www.squid-cache.org/Versions/v3/3.4/changesets/SQUID-2016_8.patch - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://www.squid-cache.org/Versions/v3/3.1/changesets/SQUID-2016_8.patch - http://www.ubuntu.com/usn/USN-2995-1 - http://www.securitytracker.com/id/1035769 - http://www.squid-cache.org/Versions/v3/3.2/changesets/SQUID-2016_8.patch - https://access.redhat.com/errata/RHSA-2016:1140 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html - https://access.redhat.com/errata/RHSA-2016:1138 - https://access.redhat.com/errata/RHSA-2016:1139 - http://www.squid-cache.o
s://access.redhat.com/errata/RHSA-2016:1138 - https://access.redhat.com/errata/RHSA-2016:1139 - http://www.squid-cache.org/Advisories/SQUID-2016_8.txt - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-2016_8.patch - http://www.debian.org/security/2016/dsa-3625
CVE ID: CVE-2016-4555 State: PUBLISHED Published: 2016-05-10T19:00:00 Last Updated: 2024-08-06T00:32:25.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.squid-cache.org/show_bug.cgi?id=4455 - https://security.gentoo.org/glsa/201607-01 - http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-2016_9.patch - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opens
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://www.squid-cache.org/Versions/v3/3.4/changesets/SQUID-2016_9.patch - http://www.ubuntu.com/usn/USN-2995-1 - http://www.openwall.com/lists/oss-security/2016/05/06/5 - https://access.redhat.com/errata/RHSA-2016:1140 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html - http://www.securitytracker.com/id/1035770 - http://www.squid-cache.org/Advisories/SQUID-2016_9.txt - https://access.redhat.com/errata/RHSA-2016:1139 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - http://www.openwa
m/errata/RHSA-2016:1139 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - http://www.openwall.com/lists/oss-security/2016/05/06/3 - http://www.debian.org/security/2016/dsa-3625
CVE ID: CVE-2016-4556 State: PUBLISHED Published: 2016-05-10T19:00:00 Last Updated: 2024-08-06T00:32:25.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes (ESI) response. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201607-01 - http://www.squid-cache.org/Versions/v3/3.5/changesets/SQUID-2016_9.patch - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg0001
topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://www.squid-cache.org/Versions/v3/3.4/changesets/SQUID-2016_9.patch - http://www.ubuntu.com/usn/USN-2995-1 - http://www.openwall.com/lists/oss-security/2016/05/06/5 - https://access.redhat.com/errata/RHSA-2016:1140 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00069.html - http://www.securitytracker.com/id/1035770 - https://access.redhat.com/errata/RHSA-2016:1138 - http://www.squid-cache.org/Advisories/SQUID-2016_9.txt - https://access.redhat.com/errata/RHSA-2016:1139 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - http
ess.redhat.com/errata/RHSA-2016:1139 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - http://www.openwall.com/lists/oss-security/2016/05/06/3 - http://www.debian.org/security/2016/dsa-3625
CVE ID: CVE-2016-4557 State: PUBLISHED Published: 2016-05-23T10:00:00 Last Updated: 2024-08-06T00:32:25.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local users to gain privileges or cause a denial of service (use-after-free) via crafted BPF instructions that reference an incorrect file descriptor. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/823603 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - https://bugzilla.redhat.com/show_bug.cgi?id=1
tp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - https://bugzilla.redhat.com/show_bug.cgi?id=1334307 - https://github.com/torvalds/linux/commit/8358b02bf67d3a5d8a825070e1aa73f25fb2e4c7 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5 - https://bugs.chromium.org/p/project-zero/issues/detail?id=808 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8358b02bf67d3a5d8a825070e1aa73f25fb2e4c7 - http://www.openwall.com/lists/oss-security/2016/05/06/4 - https://www.exploit-db.com/exploits/40759/
CVE ID: CVE-2016-4558 State: PUBLISHED Published: 2016-05-23T10:00:00 Last Updated: 2024-08-06T00:32:25.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted application on (1) a system with more than 32 Gb of memory, related to the program reference count or (2) a 1 Tb system, related to the map reference count. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3006-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1334303 - http://www
r: References: - http://www.ubuntu.com/usn/USN-3006-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1334303 - http://www.ubuntu.com/usn/USN-3005-1 - https://github.com/torvalds/linux/commit/92117d8443bc5afacc8d5ba82e541946310f106e - http://www.ubuntu.com/usn/USN-3007-1 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5 - http://www.openwall.com/lists/oss-security/2016/05/06/4 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=92117d8443bc5afacc8d5ba82e541946310f106e