Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
r 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041111 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1036 - http://www.securityfocus.com/bid/104360
CVE ID: CVE-2018-1037 State: PUBLISHED Published: 2018-04-12T01:00:00 Last Updated: 2024-08-05T03:44:11.975Z Vendors: Microsoft Products: Microsoft Visual Studio Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040664 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1037 - http://www.secu
cker.com/id/1040664 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1037 - http://www.securityfocus.com/bid/103715
CVE ID: CVE-2018-1038 State: PUBLISHED Published: 2018-04-02T13:00:00Z Last Updated: 2024-09-17T03:18:09.251Z Vendors: Microsoft Corporation Products: Windows Problem Types: Elevation of Privilege Description: The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103549 - https://www.exploit-db.com/exploits/44581/ - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1038 - https://blog.xpnsec.com/total-meltdow
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1038 - https://blog.xpnsec.com/total-meltdown-cve-2018-1038/ - http://www.securitytracker.com/id/1040632
CVE ID: CVE-2018-1039 State: PUBLISHED Published: 2018-05-09T19:00:00 Last Updated: 2024-08-05T03:44:11.836Z Vendors: Microsoft Products: Microsoft .NET Framework Problem Types: Security Feature Bypass Description: A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, aka ".NET Framework Device Guard Security Feature Bypass Vulnerability." This affects Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 3.0, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, Microsoft .NET F
crosoft .NET Framework 3.5.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 2.0, Microsoft .NET Framework 4.6/4.6.1/4.6.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104072 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1039 - http://www.securitytracker.com/id/1040851
CVE ID: CVE-2018-1040 State: PUBLISHED Published: 2018-06-14T12:00:00 Last Updated: 2024-08-05T03:44:11.990Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers Problem Types: Denial of Service Description: A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windows Code Integrity Module Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2
er 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104389 - http://www.securitytracker.com/id/1041112 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1040
CVE ID: CVE-2018-1041 State: PUBLISHED Published: 2018-02-15T17:00:00Z Last Updated: 2024-08-05T03:44:11.948Z Vendors: Red Hat, Inc. Products: jboss-remoting Problem Types: CWE-835 Description: A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an empty buffer. An attacker could use this flaw to cause denial of service via high CPU caused by an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/44099/ - https://access.redhat.com/errata/RHSA-2018:0269 - https://access.redhat.com/errata/RHSA-2018:0270 - https://access.redhat.com/errata/RHSA-2018:0271 - https://acces
0269 - https://access.redhat.com/errata/RHSA-2018:0270 - https://access.redhat.com/errata/RHSA-2018:0271 - https://access.redhat.com/errata/RHSA-2018:0268 - https://access.redhat.com/errata/RHSA-2018:0275 - http://www.securitytracker.com/id/1040323 - https://bugzilla.redhat.com/show_bug.cgi?id=1530457
CVE ID: CVE-2018-1042 State: PUBLISHED Published: 2018-01-22T08:00:00 Last Updated: 2024-08-05T03:44:11.829Z Vendors: n/a Products: Moodle 3.x Problem Types: Server Side Request Forgery Description: Moodle 3.x has Server Side Request Forgery in the filepicker. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=364381 - http://www.securityfocus.com/bid/102752 - http://packetstormsecurity.com/files/153766/Moodle-Filepicker-3.5.2-Server-Side-Request-Forgery.html
CVE ID: CVE-2018-1043 State: PUBLISHED Published: 2018-01-22T08:00:00 Last Updated: 2024-08-05T03:44:11.848Z Vendors: n/a Products: Moodle 3.x Problem Types: insufficient access control Description: In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102769 - https://moodle.org/mod/forum/discuss.php?d=364382
CVE ID: CVE-2018-1044 State: PUBLISHED Published: 2018-01-22T08:00:00 Last Updated: 2024-08-05T03:44:11.807Z Vendors: n/a Products: Moodle 3.x Problem Types: insufficient access control Description: In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=364383 - http://www.securityfocus.com/bid/102754
CVE ID: CVE-2018-1045 State: PUBLISHED Published: 2018-01-22T08:00:00 Last Updated: 2024-08-05T03:44:11.832Z Vendors: n/a Products: Moodle 3.x Problem Types: XSS Description: In Moodle 3.x, there is XSS via a calendar event name. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=364384 - http://www.securityfocus.com/bid/102755
CVE ID: CVE-2018-1046 State: PUBLISHED Published: 2018-07-16T20:00:00 Last Updated: 2024-08-05T03:44:11.842Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: [UNKNOWN] Products: pdns Problem Types: CWE-121 Description: pdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay. In the dnsreplay tool provided with PowerDNS Authoritative, replaying a specially crafted PCAP file can trigger a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution. This buffer overflow only occurs when the -ecs-stamp option of dnsreplay is used. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.co
option of dnsreplay is used. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1046
CVE ID: CVE-2018-1047 State: PUBLISHED Published: 2018-01-24T23:00:00Z Last Updated: 2024-08-05T03:44:12.035Z Vendors: Red Hat, Inc. Products: Wildfly Problem Types: CWE-20 Description: A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1248 - https://access.redhat.com/errata/RHSA-2018:1251 - https://access.redhat.com/errata/RHSA-2018:2938 - https://issues.jboss.org/browse/WFLY-9620 - https://access.redhat.com/errata
//access.redhat.com/errata/RHSA-2018:2938 - https://issues.jboss.org/browse/WFLY-9620 - https://access.redhat.com/errata/RHSA-2018:1247 - https://bugzilla.redhat.com/show_bug.cgi?id=1528361 - https://access.redhat.com/errata/RHSA-2018:1249
CVE ID: CVE-2018-1048 State: PUBLISHED Published: 2018-01-24T23:00:00Z Last Updated: 2024-08-05T03:44:11.828Z Vendors: Red Hat, Inc. Products: undertow as shipped in Jboss EAP 7.1.0.GA Problem Types: CWE-22 Description: It was found that the AJP connector in undertow, as shipped in Jboss EAP 7.1.0.GA, does not use the ALLOW_ENCODED_SLASH option and thus allow the the slash / anti-slash characters encoded in the url which may lead to path traversal and result in the information disclosure of arbitrary local files. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:0479 - https://access.redhat.com/errata/RHSA-2018:0481 - https://access.r
: - https://access.redhat.com/errata/RHSA-2018:0479 - https://access.redhat.com/errata/RHSA-2018:0481 - https://access.redhat.com/errata/RHSA-2018:0480 - https://access.redhat.com/errata/RHSA-2018:0478 - https://bugzilla.redhat.com/show_bug.cgi?id=1534343
CVE ID: CVE-2018-1049 State: PUBLISHED Published: 2018-02-16T21:00:00Z Last Updated: 2024-09-16T16:47:41.544Z Vendors: Red Hat, Inc. Products: systemd Problem Types: CWE-362 Description: In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to denial of service, until mount points are unmounted. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1041520 - https://lists.debian.org/debian-lts-announce/2018/11/msg0
ner: References: - http://www.securitytracker.com/id/1041520 - https://lists.debian.org/debian-lts-announce/2018/11/msg00017.html - https://access.redhat.com/errata/RHSA-2018:0260 - https://bugzilla.redhat.com/show_bug.cgi?id=1534701 - https://usn.ubuntu.com/3558-1/
CVE ID: CVE-2018-1050 State: PUBLISHED Published: 2018-03-13T16:00:00Z Last Updated: 2024-09-16T23:16:06.670Z Vendors: Samba Products: Samba Problem Types: CWE-476 Description: All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3595-2/ - http://www.securityfocus.com/bid/103387 - https://access.redhat.com/errata/RHSA-2018:2613 - https://access.redhat.com/errata/RHS
ww.securityfocus.com/bid/103387 - https://access.redhat.com/errata/RHSA-2018:2613 - https://access.redhat.com/errata/RHSA-2018:2612 - https://access.redhat.com/errata/RHSA-2018:1883 - https://www.debian.org/security/2018/dsa-4135 - https://usn.ubuntu.com/3595-1/ - https://access.redhat.com/errata/RHSA-2018:1860 - https://access.redhat.com/errata/RHSA-2018:3056 - https://security.gentoo.org/glsa/201805-07 - http://www.securitytracker.com/id/1040493 - https://lists.debian.org/debian-lts-announce/2018/03/msg00024.html - https://lists.debian.org/debian-lts-announce/2019/04/msg00013.html - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.
0013.html - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 - https://www.samba.org/samba/security/CVE-2018-1050.html - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03834en_us - https://bugzilla.redhat.com/show_bug.cgi?id=1538771 - https://security.netapp.com/advisory/ntap-20180313-0001/
CVE ID: CVE-2018-1051 State: PUBLISHED Published: 2018-01-25T20:00:00Z Last Updated: 2024-08-05T03:44:11.805Z Vendors: Red Hat, Inc. Products: resteasy Problem Types: CWE-20 Description: It was found that the fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 was incomplete and Yaml unmarshalling in Resteasy is still possible via `Yaml.load()` in YamlProvider. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1535411
CVE ID: CVE-2018-1052 State: PUBLISHED Published: 2018-02-09T14:00:00Z Last Updated: 2024-09-16T17:08:06.088Z Vendors: The PostgreSQL Global Development Group Products: postgresql Problem Types: CWE-200 Description: Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table. Additional Analyst Notes: - CVE Program Container: References: - https://www.postgresql.org/about/news/1829/ - http://www.securityfocus.com/bid/102987
CVE ID: CVE-2018-1053 State: PUBLISHED Published: 2018-02-09T14:00:00Z Last Updated: 2024-09-17T04:20:15.991Z Vendors: The PostgreSQL Global Development Group Products: postgresql Problem Types: CWE-377 Description: In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of `pg_dumpall -g` under umask which was in effect when the user invoked pg_upgrade, and not under 0077 which is normally used for other temporary files. This can allow an authenticated attacker to read or modify the one file, which may contain encrypted or unencrypted database passwords. T
authenticated attacker to read or modify the one file, which may contain encrypted or unencrypted database passwords. The attack is infeasible if a directory mode blocks the attacker searching the current working directory or if the prevailing umask blocks the attacker opening the file. Additional Analyst Notes: - CVE Program Container: References: - https://www.postgresql.org/about/news/1829/ - https://access.redhat.com/errata/RHSA-2018:2511 - https://lists.debian.org/debian-lts-announce/2018/02/msg00006.html - https://access.redhat.com/errata/RHSA-2018:2566 - https://access.redhat.com/errata/RHSA-2018:3816 - http://www.securityfocus.com/bid/102986 - https://usn.ubuntu.com/3564-1/
CVE ID: CVE-2018-1054 State: PUBLISHED Published: 2018-03-07T13:00:00Z Last Updated: 2024-09-17T00:11:04.061Z Vendors: Red Hat, Inc. Products: 389-ds-base Problem Types: CWE-120 Description: An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4.x. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://pagure.io/389-ds-base/issue/49545 - https://bugzilla.redhat.com/show_bug.cgi?id=1537314 - https://access.redhat.com/errata/RHSA
io/389-ds-base/issue/49545 - https://bugzilla.redhat.com/show_bug.cgi?id=1537314 - https://access.redhat.com/errata/RHSA-2018:0414 - https://access.redhat.com/errata/RHSA-2018:0515 - https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html - http://www.securityfocus.com/bid/103228
CVE ID: CVE-2018-1055 State: REJECTED Published: 2018-02-09T14:00:00 Last Updated: 2018-02-09T13:57:01 Description: No description available.
CVE ID: CVE-2018-1056 State: PUBLISHED Published: 2018-07-27T18:00:00 Last Updated: 2024-08-05T03:44:11.827Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: amadvance Products: advancecomp: Problem Types: CWE-122 Description: An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. An attacker could potentially use this flaw to crash the advzip utility by tricking it into processing crafted ZIP files. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/03/msg00004.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1056 - htt
s.debian.org/debian-lts-announce/2019/03/msg00004.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1056 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889270 - https://usn.ubuntu.com/3570-1/ - https://lists.debian.org/debian-lts-announce/2018/02/msg00016.html - https://sourceforge.net/p/advancemame/bugs/259/ - https://lists.debian.org/debian-lts-announce/2021/12/msg00034.html
CVE ID: CVE-2018-1057 State: PUBLISHED Published: 2018-03-13T16:00:00Z Last Updated: 2024-08-05T03:44:11.979Z Vendors: Samba Products: Samba Problem Types: CWE-863 Description: On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' passwords, including administrative users and privileged service accounts (eg Domain Controllers). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103382 - https://www.debian.org/security/2018/dsa-4135 - https://usn.ubuntu.com/3595-1/ - http://www.securitytracker.com/id/104
- https://www.debian.org/security/2018/dsa-4135 - https://usn.ubuntu.com/3595-1/ - http://www.securitytracker.com/id/1040494 - https://security.gentoo.org/glsa/201805-07 - https://security.netapp.com/advisory/ntap-20180313-0001/ - https://www.samba.org/samba/security/CVE-2018-1057.html - https://bugzilla.redhat.com/show_bug.cgi?id=1553553 - https://www.synology.com/support/security/Synology_SA_18_08 - https://lists.debian.org/debian-lts-announce/2019/04/msg00013.html
CVE ID: CVE-2018-1058 State: PUBLISHED Published: 2018-03-02T15:00:00Z Last Updated: 2024-09-17T03:22:50.533Z Vendors: The PostgreSQL Global Development Group Products: postgresql Problem Types: CWE-20 Description: A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1547044 - https://usn.ubuntu.com/3589-1/ - http://www.securityfocus.com/bid/103221 - https://www.postgresql.org/ab
gi?id=1547044 - https://usn.ubuntu.com/3589-1/ - http://www.securityfocus.com/bid/103221 - https://www.postgresql.org/about/news/1834/ - https://access.redhat.com/errata/RHSA-2018:2511 - https://access.redhat.com/errata/RHSA-2018:2566 - https://access.redhat.com/errata/RHSA-2018:3816
CVE ID: CVE-2018-1059 State: PUBLISHED Published: 2018-04-24T18:00:00Z Last Updated: 2024-09-17T00:46:47.514Z Vendors: Red Hat, Inc. Products: DPDK Problem Types: CWE-200 Description: The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions before 18.02.1 are vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2524 - https://access.redhat.com/errata/RHSA-2018:2102 - https://access.redhat.c
ps://access.redhat.com/errata/RHSA-2018:2524 - https://access.redhat.com/errata/RHSA-2018:2102 - https://access.redhat.com/security/cve/cve-2018-1059 - https://usn.ubuntu.com/3642-2/ - https://access.redhat.com/errata/RHSA-2018:2038 - https://usn.ubuntu.com/3642-1/ - https://access.redhat.com/errata/RHSA-2018:1267 - https://bugzilla.redhat.com/show_bug.cgi?id=1544298
CVE ID: CVE-2018-1060 State: PUBLISHED Published: 2018-06-18T14:00:00 Last Updated: 2024-08-05T03:44:12.002Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: [UNKNOWN] Products: python Problem Types: CWE-20 Description: python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4306 - http://www.securitytracker.com/id/1042001 - https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html - https://bugs.python.org
itytracker.com/id/1042001 - https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html - https://bugs.python.org/issue32981 - https://usn.ubuntu.com/3817-2/ - https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-5-release-candidate-1 - https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-6-release-candidate-1 - https://access.redhat.com/errata/RHSA-2018:3505 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1060 - https://access.redhat.com/errata/RHSA-2018:3041 - https://www.debian.org/security/2018/dsa-4307 - https://usn.ubuntu.com/3817-1/ - https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html - https://lists.fedoraproject.org/archives/list/pac
- https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/ - https://access.redhat.com/errata/RHBA-2019:0327 - https://access.redhat.com/errata/RHSA-2019:1260 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03951en_us - https://access.redhat.com/errata/
pport.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03951en_us - https://access.redhat.com/errata/RHSA-2019:3725 - https://www.oracle.com/security-alerts/cpujan2020.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
CVE ID: CVE-2018-1061 State: PUBLISHED Published: 2018-06-19T12:00:00 Last Updated: 2024-08-05T03:51:48.415Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: [UNKNOWN] Products: python Problem Types: CWE-20 Description: python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4306 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1061 - http://www.securitytracker.com/id/1042001 - https://lists.debian.org
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1061 - http://www.securitytracker.com/id/1042001 - https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html - https://bugs.python.org/issue32981 - https://usn.ubuntu.com/3817-2/ - https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-5-release-candidate-1 - https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-6-release-candidate-1 - https://access.redhat.com/errata/RHSA-2018:3505 - https://access.redhat.com/errata/RHSA-2018:3041 - https://www.debian.org/security/2018/dsa-4307 - https://usn.ubuntu.com/3817-1/ - https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html - https://lists.fedoraproject.org/archives/