Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
om/bid/50440 - http://www.debian.org/security/2011/dsa-2374 - http://secunia.com/advisories/46678 - http://www.openswan.org/download/CVE-2011-4073/CVE-2011-4073.txt - http://www.redhat.com/support/errata/RHSA-2011-1422.html - http://www.securitytracker.com/id?1026268 - http://secunia.com/advisories/46681
CVE ID: CVE-2011-4074 State: PUBLISHED Published: 2011-11-02T17:00:00 Last Updated: 2024-08-06T23:53:32.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cmd.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via an _debug command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50331 - http://openwall.com/lists/oss-security/2011/10/25/2 - http://secunia.com/advisories/46672 - http://secunia.com/advisories/46551 - http://openwall.com/lists/oss-security/2011/10/24/9 - http://osvdb.org/76593 - http://phpldapadmin.sourceforge.net/wiki/ind
p://openwall.com/lists/oss-security/2011/10/24/9 - http://osvdb.org/76593 - http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page - http://www.debian.org/security/2011/dsa-2333 - http://phpldapadmin.git.sourceforge.net/git/gitweb.cgi?p=phpldapadmin/phpldapadmin%3Ba=blobdiff%3Bf=htdocs/cmd.php%3Bh=0ddf0044355abc94160be73122eb34f3e48ab2d9%3Bhp=34f3848fe4a6d4c00c7c568afa81f59579f5d724%3Bhb=64668e882b8866fae0fa1b25375d1a2f3b4672e2%3Bhpb=caeba72171ade4f588fef1818aa4f6243a68b85e
CVE ID: CVE-2011-4075 State: PUBLISHED Published: 2011-11-02T17:00:00 Last Updated: 2024-08-06T23:53:32.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary PHP code via the orderby parameter (aka sortby variable) in a query_engine action to cmd.php, as exploited in the wild in October 2011. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=3417184&group_id=61828&atid=498546 - http://osvdb.org/76594 - http://www.securityfocus.com/bid/50331 - http://openwall.com/lists/oss-security/2011/10/25/
6 - http://osvdb.org/76594 - http://www.securityfocus.com/bid/50331 - http://openwall.com/lists/oss-security/2011/10/25/2 - http://www.exploit-db.com/exploits/18021/ - http://phpldapadmin.git.sourceforge.net/git/gitweb.cgi?p=phpldapadmin/phpldapadmin%3Ba=blobdiff%3Bf=lib/functions.php%3Bh=eb160dc9f7d74e563131e21d4c85d7849a0c6638%3Bhp=19fde9974d4e5eb3bfac04bb223ccbefdb98f9a0%3Bhb=76e6dad13ef77c5448b8dfed1a61e4acc7241165%3Bhpb=5d4245f93ae6f065e7535f268e3cd87a23b07744 - http://dev.metasploit.com/redmine/issues/5820 - http://secunia.com/advisories/46672 - http://secunia.com/advisories/46551 - http://openwall.com/lists/oss-security/2011/10/24/9 - http://phpldapadmin.sourceforge.net/wiki/index.php
isories/46551 - http://openwall.com/lists/oss-security/2011/10/24/9 - http://phpldapadmin.sourceforge.net/wiki/index.php/Main_Page - http://www.debian.org/security/2011/dsa-2333
CVE ID: CVE-2011-4076 State: PUBLISHED Published: 2019-11-26T03:53:58 Last Updated: 2024-08-06T23:53:32.881Z Vendors: nova Products: nova Problem Types: Other Description: OpenStack Nova before 2012.1 allows someone with access to an EC2_ACCESS_KEY (equivalent to a username) to obtain the EC2_SECRET_KEY (equivalent to a password). Exposing the EC2_ACCESS_KEY via http or tools that allow man-in-the-middle over https could allow an attacker to easily obtain the EC2_SECRET_KEY. An attacker could also presumably brute force values for EC2_ACCESS_KEY. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4076 - https://bugzilla.redha
CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4076 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4076 - https://access.redhat.com/security/cve/cve-2011-4076 - https://bugs.launchpad.net/nova/+bug/868360 - https://www.openwall.com/lists/oss-security/2011/10/25/4
CVE ID: CVE-2011-4077 State: PUBLISHED Published: 2012-01-27T15:00:00 Last Updated: 2024-08-06T23:53:32.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an XFS image containing a symbolic link with a long pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/10/26/1 - https://bugzilla.redhat.com/show_bug.cgi?id=749156 - http://www.openwall.com/lists/oss-secur
oss-security/2011/10/26/1 - https://bugzilla.redhat.com/show_bug.cgi?id=749156 - http://www.openwall.com/lists/oss-security/2011/10/26/3 - http://xorl.wordpress.com/2011/12/07/cve-2011-4077-linux-kernel-xfs-readlink-memory-corruption/ - http://oss.sgi.com/archives/xfs/2011-10/msg00345.html - http://secunia.com/advisories/48964 - http://marc.info/?l=bugtraq&m=139447903326211&w=2
CVE ID: CVE-2011-4078 State: PUBLISHED Published: 2011-11-03T15:00:00 Last Updated: 2024-08-06T23:53:32.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service (resource consumption and inbox outage), via a Subject header containing only a URL, a related issue to CVE-2011-3379. Additional Analyst Notes: - CVE Program Container: References: - http://trac.roundcube.net/ticket/1488086 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - https://exchange.xforce.ibmcl
88086 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/71025 - http://www.securityfocus.com/bid/50402 - http://openwall.com/lists/oss-security/2011/10/26/6 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
CVE ID: CVE-2011-4079 State: PUBLISHED Published: 2011-10-27T20:00:00 Last Updated: 2024-08-06T23:53:32.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the UTF8StringNormalize function in OpenLDAP 2.4.26 and earlier allows remote attackers to cause a denial of service (slapd crash) via a zero-length string that triggers a heap-based buffer overflow, as demonstrated using an empty postalAddressAttribute value in an LDIF entry. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201406-36.xml - http://www.openwall.com/lists/oss-security/2011/10/26/5 - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7
l - http://www.openwall.com/lists/oss-security/2011/10/26/5 - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7059%3Bselectid=7059 - https://bugzilla.redhat.com/show_bug.cgi?id=749324 - http://www.ubuntu.com/usn/USN-1266-1 - http://secunia.com/advisories/46599 - http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commitdiff%3Bh=507238713b71208ec4f262f312cb495a302df9e9 - http://www.securityfocus.com/bid/50384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70991 - http://www.openwall.com/lists/oss-security/2011/10/26/9
CVE ID: CVE-2011-4080 State: PUBLISHED Published: 2012-05-24T23:00:00Z Last Updated: 2024-08-06T23:53:32.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access restrictions and read the kernel ring buffer by leveraging root privileges, as demonstrated by a root user in a Linux Containers (aka LXC) environment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/bfdc0b497faa82a0ba2f9dddcf109231dd519fcc - http://www
Container: References: - https://github.com/torvalds/linux/commit/bfdc0b497faa82a0ba2f9dddcf109231dd519fcc - http://www.openwall.com/lists/oss-security/2011/10/26/10 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bfdc0b497faa82a0ba2f9dddcf109231dd519fcc
CVE ID: CVE-2011-4081 State: PUBLISHED Published: 2012-05-24T23:00:00Z Last Updated: 2024-08-06T23:53:32.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed by a (1) ghash_update function call or (2) ghash_final function call, as demonstrated by a write operation on an AF_ALG socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/10/27/2 - http://git.kernel.org/?p=linu
Program Container: References: - http://www.openwall.com/lists/oss-security/2011/10/27/2 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ed47b7d142ec99ad6880bbbec51e9f12b3af74c - https://bugzilla.redhat.com/show_bug.cgi?id=749475 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 - https://github.com/torvalds/linux/commit/7ed47b7d142ec99ad6880bbbec51e9f12b3af74c
CVE ID: CVE-2011-4082 State: PUBLISHED Published: 2019-11-26T04:02:45 Last Updated: 2024-08-06T23:53:32.751Z Vendors: phpldapadmin Products: phpldapadmin Problem Types: Other Description: A local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 processed certain values of the "Accept-Language" HTTP header. A remote attacker could use this flaw to cause a denial of service via specially-crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4082 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4082 - https://access.redhat.com/security/cve/cve-2011-4082
CVE ID: CVE-2011-4083 State: PUBLISHED Published: 2014-02-17T16:00:00 Last Updated: 2024-08-06T23:53:32.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1) Certificate-based Red Hat Network private entitlement keys and the (2) private key for the entitlement in an archive of debugging information, which might allow remote attackers to obtain sensitive information by reading the archive. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0153.html - http://rhn.redhat.com/errata/RHSA-2011-1536.html
CVE ID: CVE-2011-4084 State: REJECTED Published: 2011-12-30T01:00:00.000Z Last Updated: 2025-02-13T15:46:08.050Z Description: No description available.
CVE ID: CVE-2011-4085 State: PUBLISHED Published: 2012-11-23T20:00:00 Last Updated: 2024-08-06T23:53:32.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1028.html - ht
. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1028.html - http://secunia.com/advisories/47866 - http://rhn.redhat.com/errata/RHSA-2011-1805.html - http://rhn.redhat.com/errata/RHSA-2011-1456.html - http://rhn.redhat.com/errata/RHSA-2012-0091.html - http://rhn.redhat.com/errata/RHSA-2011-1822.html - http://rhn.redhat.com/errata/RHSA-2011-1799.html - https://bugzilla.redhat.com/show_bug.cgi?id=750422 - http://rhn.redhat.com/errata/RHSA-2011-1798.html - http://rhn.redhat.com/errata/RHSA-2011-1800.html - http://secunia.com/advisories/47169
CVE ID: CVE-2011-4086 State: PUBLISHED Published: 2012-07-03T16:00:00 Last Updated: 2024-08-06T23:53:32.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle the _Delay and _Unwritten buffer head states, which allows local users to cause a denial of service (system crash) by leveraging the presence of an ext4 filesystem that was mounted with a journal. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html - https://bugzilla.redhat.com/show_bug.cgi?id=749143 - http://secunia.com/advi
e-security-announce/2012-04/msg00021.html - https://bugzilla.redhat.com/show_bug.cgi?id=749143 - http://secunia.com/advisories/48898 - https://github.com/torvalds/linux/commit/15291164b22a357cb211b618adfef4fa82fc0de3 - http://rhn.redhat.com/errata/RHSA-2012-0670.html - http://www.debian.org/security/2012/dsa-2469 - http://secunia.com/advisories/48964 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=15291164b22a357cb211b618adfef4fa82fc0de3 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html - http://rhn.redhat.com/errata/RHSA-2012-0571.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.1
CVE ID: CVE-2011-4087 State: PUBLISHED Published: 2013-06-08T10:00:00Z Last Updated: 2024-09-16T23:35:38.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: The br_parse_ip_options function in net/bridge/br_netfilter.c in the Linux kernel before 2.6.39 does not properly initialize a certain data structure, which allows remote attackers to cause a denial of service by leveraging connectivity to a network interface that uses an Ethernet bridge device. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/f8e9881c2aef1e982e5abc25c046820cd0b7cf64 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f8e98
2aef1e982e5abc25c046820cd0b7cf64 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f8e9881c2aef1e982e5abc25c046820cd0b7cf64 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://www.openwall.com/lists/oss-security/2011/10/28/14
CVE ID: CVE-2011-4088 State: PUBLISHED Published: 2020-01-31T16:45:33 Last Updated: 2024-08-06T23:53:32.853Z Vendors: ABRT Products: ABRT Problem Types: Other Description: ABRT might allow attackers to obtain sensitive information from crash reports. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-December/071027.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/71871
CVE ID: CVE-2011-4089 State: PUBLISHED Published: 2014-04-16T18:00:00 Last Updated: 2024-08-06T23:53:32.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2011/Oct/804 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=632862 - http://www.ubuntu.com/usn/USN-1308-1 - http://www.exploit-db.com/exploits/18147 - http://www.openwall.com/lists/oss-security/201
ww.ubuntu.com/usn/USN-1308-1 - http://www.exploit-db.com/exploits/18147 - http://www.openwall.com/lists/oss-security/2011/10/28/16
CVE ID: CVE-2011-4090 State: PUBLISHED Published: 2019-11-26T04:09:48 Last Updated: 2024-08-06T23:53:32.642Z Vendors: serendipity Products: serendipity Problem Types: Cross-Site Scripting Description: Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-4090 - https://access.redhat.com/security/cve/cve-2011-4090 - https://seclists.org/oss-sec/2011/q4/176
CVE ID: CVE-2011-4091 State: PUBLISHED Published: 2014-02-10T17:00:00 Last Updated: 2024-08-06T23:53:32.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform authentication before checking the user name, which allows remote attackers to obtain sensitive information such as server-usage patterns by a particular user and color preferences. Additional Analyst Notes: - CVE Program Container: References: - http://git.0x539.de/?p=net6.git%3Ba=commitdiff%3Bh=84afca022f063f89bfcd4bb32b1ee911f555abf1%3Bhp=ac61d7fb42a1f977fb527e024bede319c4a9e169 - http://www.oracle.com/technetwork/topics/security/bulle
2b1ee911f555abf1%3Bhp=ac61d7fb42a1f977fb527e024bede319c4a9e169 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://lists.opensuse.org/opensuse-updates/2012-01/msg00044.html - http://lists.opensuse.org/opensuse-updates/2012-01/msg00054.html - https://bugzilla.novell.com/show_bug.cgi?id=727708 - http://www.openwall.com/lists/oss-security/2011/10/31/1 - https://bugzilla.redhat.com/show_bug.cgi?id=750632
CVE ID: CVE-2011-4092 State: PUBLISHED Published: 2014-02-10T17:00:00 Last Updated: 2024-08-06T23:53:32.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=750636 - http://www.openwall.com/lists/oss-security/2011/10/30/5 - http://www.openwall.com/lists/oss-security/2011/10/31/1
CVE ID: CVE-2011-4093 State: PUBLISHED Published: 2014-02-10T17:00:00 Last Updated: 2024-08-06T23:53:32.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large number of connections until the overflow occurs and an ID of another user is provided. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.novell.com/show_bug.cgi?id=727710 - http://git.0x539.de/?p=net6.git%3Ba=commitdiff%3Bh=ac61d7fb42a1f977fb527e024bede319c4a9e169%3Bhp=08c8e2261604c6fcbbaf62f9ae9d13f7015fcb9a - https://bugz
3Ba=commitdiff%3Bh=ac61d7fb42a1f977fb527e024bede319c4a9e169%3Bhp=08c8e2261604c6fcbbaf62f9ae9d13f7015fcb9a - https://bugzilla.redhat.com/show_bug.cgi?id=750631 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://lists.opensuse.org/opensuse-updates/2012-01/msg00044.html - http://lists.opensuse.org/opensuse-updates/2012-01/msg00054.html - http://www.openwall.com/lists/oss-security/2011/10/31/1
CVE ID: CVE-2011-4094 State: PUBLISHED Published: 2020-01-21T14:47:04 Last Updated: 2024-08-06T23:53:32.948Z Vendors: Jara Products: Jara Problem Types: SQL injection Description: Jara 1.6 has a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/10/31/4 - https://seclists.org/fulldisclosure/2011/Oct/767 - https://www.exploit-db.com/exploits/18020
CVE ID: CVE-2011-4095 State: PUBLISHED Published: 2020-01-21T14:49:59 Last Updated: 2024-08-06T23:53:32.912Z Vendors: Jara Products: Jara Problem Types: XSS Description: Jara 1.6 has an XSS vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2011/10/31/4 - https://seclists.org/oss-sec/2011/q4/193
CVE ID: CVE-2011-4096 State: PUBLISHED Published: 2011-11-17T19:00:00 Last Updated: 2024-08-06T23:53:32.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: The idnsGrokReply function in Squid before 3.1.16 does not properly free memory, which allows remote attackers to cause a denial of service (daemon abort) via a DNS reply containing a CNAME record that references another CNAME record that contains an empty A record. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.squid-cache.org/show_bug.cgi?id=3237#c12 - http://www.redhat.com/support/errata/RHSA-2011-1791.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://ww
port/errata/RHSA-2011-1791.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://www.openwall.com/lists/oss-security/2011/10/31/5 - http://www.securitytracker.com/id?1026265 - http://www.openwall.com/lists/oss-security/2011/11/01/3 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:193 - http://secunia.com/advisories/46609 - http://www.squid-cache.org/Versions/v3/3.1/changesets/SQUID_3_1_16.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - http://secunia.com/advisories/47459
CVE ID: CVE-2011-4097 State: PUBLISHED Published: 2012-05-17T10:00:00Z Last Updated: 2024-08-06T23:53:32.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a denial of service (memory consumption or process termination) by using a certain large amount of memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/11/01/2 - https://bugzilla.redhat.com/show_bug.cgi?id=750399 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.8 - https://github.com/torvalds/linux/commit/56
gi?id=750399 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.8 - https://github.com/torvalds/linux/commit/56c6a8a4aadca809e04276eabe5552935c51387f
CVE ID: CVE-2011-4098 State: PUBLISHED Published: 2013-06-08T10:00:00Z Last Updated: 2024-09-16T17:18:48.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fallocate implementation in the GFS2 filesystem in the Linux kernel before 3.2 relies on the page cache, which might allow local users to cause a denial of service by preallocating blocks in certain situations involving insufficient memory. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=64dd153c83743af81f20924c6343652d731eeecb - https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=fadca7bdc43b02f518585d9547019966415cadfd
24c6343652d731eeecb - https://oss.oracle.com/git/?p=redpatch.git%3Ba=commit%3Bh=fadca7bdc43b02f518585d9547019966415cadfd - https://www.redhat.com/archives/cluster-devel/2011-September/msg00064.html - https://github.com/torvalds/linux/commit/64dd153c83743af81f20924c6343652d731eeecb - http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.2.bz2
CVE ID: CVE-2011-4099 State: PUBLISHED Published: 2014-02-08T00:00:00 Last Updated: 2024-08-06T23:53:32.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=722694 - https://sites.google.com/site/fullycapable/release-notes-for-libcap/releasenotesfor222 - http://rhn.redhat.com/errata/RHSA-2011-1694.html