Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-10177 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-06T03:14:42.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the D-Link DWR-932B router. Undocumented TELNET and SSH services provide logins to admin with the password admin and root with the password 1234. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html - http://www.securityfocus.com/bid/95877
CVE ID: CVE-2016-10178 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-06T03:14:42.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 (UDP) launches the "/sbin/telnetd -l /bin/sh" command. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html - http://www.securityfocus.com/bid/95877
CVE ID: CVE-2016-10179 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-06T03:14:42.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html - http://www.securityfocus.com/bid/95877
CVE ID: CVE-2016-10180 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-06T03:14:42.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html - http://www.securityfocus.com/bid/95877
CVE ID: CVE-2016-10181 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-06T03:14:42.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the D-Link DWR-932B router. qmiweb provides sensitive information for CfgType=get_homeCfg requests. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html - http://www.securityfocus.com/bid/95877
CVE ID: CVE-2016-10182 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-06T03:14:42.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with ` characters. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html - http://www.securityfocus.com/bid/95877
CVE ID: CVE-2016-10183 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-06T03:14:42.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the D-Link DWR-932B router. qmiweb allows directory listing with ../ traversal. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html - http://www.securityfocus.com/bid/95877
CVE ID: CVE-2016-10184 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-06T03:14:42.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the D-Link DWR-932B router. qmiweb allows file reading with ..%2f traversal. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html - http://www.securityfocus.com/bid/95877
CVE ID: CVE-2016-10185 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-06T03:14:42.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the D-Link DWR-932B router. A secure_mode=no line exists in /var/miniupnpd.conf. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html - http://www.securityfocus.com/bid/95877
CVE ID: CVE-2016-10186 State: PUBLISHED Published: 2017-01-30T04:24:00 Last Updated: 2024-08-06T03:14:42.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on the D-Link DWR-932B router. /var/miniupnpd.conf has no deny rules. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2016-09-28-dlink-dwr-932b-lte-routers-vulnerabilities.html - http://www.securityfocus.com/bid/95877
CVE ID: CVE-2016-10187 State: PUBLISHED Published: 2017-03-16T15:00:00 Last Updated: 2024-08-06T03:14:42.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/calibre/+bug/1651728 - http://www.openwall.com/lists/oss-security/2017/01/29/8 - http://www.openwall.com/lists/oss-security/2017/01/31/9 - https://github.com/kovidgoyal/calibre/commit/3a89718664cb8c - http://www.securityfocus.com/bid/95909
CVE ID: CVE-2016-10188 State: PUBLISHED Published: 2017-03-14T14:00:00 Last Updated: 2024-08-06T03:14:42.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code by causing a file transfer connection to expire. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3853 - http://www.securityfocus.com/bid/95935 - https://bugs.bitlbee.org/ticket/1281 - http://www.openwall.com/lists/oss-security/2017/01/31/11 - http://www.openwall.com/lists/oss-security/2017/01/30/4
CVE ID: CVE-2016-10189 State: PUBLISHED Published: 2017-03-14T14:00:00 Last Updated: 2024-08-06T03:14:42.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95931 - https://bugs.bitlbee.org/ticket/1282 - http://www.debian.org/security/2017/dsa-3853 - https://github.com/bitlbee/bitlbee/commit/701ab8129ba9ea64f569daedca9a8603abad740f - http://www.openwall.com/lists/oss-
https://github.com/bitlbee/bitlbee/commit/701ab8129ba9ea64f569daedca9a8603abad740f - http://www.openwall.com/lists/oss-security/2017/01/31/11 - http://www.openwall.com/lists/oss-security/2017/01/30/4
CVE ID: CVE-2016-10190 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T03:14:42.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negative chunk size in an HTTP response. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - http://www.openwall.com/lists/oss-security/2017/01/31/12 - http://www.openwall.com/lists/oss-security/2017/02/02/1 - https://github.com/FFmpeg/FFmpeg/commit/2a05
y/2017/01/31/12 - http://www.openwall.com/lists/oss-security/2017/02/02/1 - https://github.com/FFmpeg/FFmpeg/commit/2a05c8f813de6f2278827734bf8102291e7484aa - https://trac.ffmpeg.org/ticket/5992 - http://www.securityfocus.com/bid/95986 - https://ffmpeg.org/security.html
CVE ID: CVE-2016-10191 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T03:14:42.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - http://www.securityfocus.com/bid/95989 - http://www.openwall.com/lists/oss-security/2017/01/31/12 - http://www.openwall.com/lists/oss-security/
s.com/bid/95989 - http://www.openwall.com/lists/oss-security/2017/01/31/12 - http://www.openwall.com/lists/oss-security/2017/02/02/1 - https://github.com/FFmpeg/FFmpeg/commit/7d57ca4d9a75562fa32e40766211de150f8b3ee7 - https://ffmpeg.org/security.html
CVE ID: CVE-2016-10192 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T03:14:42.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check chunk size. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95991 - https://github.com/FFmpeg/FFmpeg/commit/a5d25faa3f4b18dac737fdb35d0dd68eb0dc2156 - http://www.openwall.com/lists/oss-security/2017/01/31/12 - http://www.openwall.com/lists/oss-security/2017/02/02/1 - htt
http://www.openwall.com/lists/oss-security/2017/01/31/12 - http://www.openwall.com/lists/oss-security/2017/02/02/1 - https://ffmpeg.org/security.html
CVE ID: CVE-2016-10193 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-06T03:14:42.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: The espeak-ruby gem before 1.0.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the speak, save, bytes or bytes_wav method in lib/espeak/speech.rb. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/02/5 - http://www.openwall.com/lists/oss-security/2017/01/31/14 - https://github.com/dejan/espeak-ruby/issues/7
CVE ID: CVE-2016-10194 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-06T03:14:42.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/02/5 - http://www.openwall.com/lists/oss-security/2017/01/31/14 - https://github.com/spejman/festivaltts4r/issues/1
CVE ID: CVE-2016-10195 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-06T03:14:42.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96014 - https://access.redhat.com/errata/RHSA-2017:1106 - http://www.debian.org/security/2017/dsa-3789 - http://www.openwall.com/lists/oss-security/2017/02/02/7 - https://security.gentoo.org/glsa/201705-01 - https://github.com/
tp://www.openwall.com/lists/oss-security/2017/02/02/7 - https://security.gentoo.org/glsa/201705-01 - https://github.com/libevent/libevent/issues/317 - http://www.openwall.com/lists/oss-security/2017/01/31/17 - http://www.securitytracker.com/id/1038320 - https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog - https://access.redhat.com/errata/RHSA-2017:1104 - https://github.com/libevent/libevent/commit/96f64a022014a208105ead6c8a7066018449d86d - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2016-10196 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-06T03:14:42.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96014 - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - http://www.debian.org/security/2017/dsa-3789 - http://www.
- https://www.mozilla.org/security/advisories/mfsa2017-12/ - http://www.debian.org/security/2017/dsa-3789 - http://www.openwall.com/lists/oss-security/2017/02/02/7 - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://security.gentoo.org/glsa/201705-01 - https://www.mozilla.org/security/advisories/mfsa2017-10/ - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.openwall.com/lists/oss-security/2017/01/31/17 - http://www.securitytracker.com/id/1038320 - https://bugzilla.mozilla.org/show_bug.cgi?id=1343453 - https://github.com/libevent/libevent/issues/318 - https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog - https://access.redhat.com/erra
ent/issues/318 - https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog - https://access.redhat.com/errata/RHSA-2017:1104 - https://github.com/libevent/libevent/commit/329acc18a0768c21ba22522f01a5c7f46cacc4d5 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2016-10197 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-06T03:14:42.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96014 - https://access.redhat.com/errata/RHSA-2017:1106 - http://www.debian.org/security/2017/dsa-3789 - http://www.openwall.com/lists/oss-security/2017/02/02/7 - https://security.gentoo.org/glsa/201705-01 - https://github.com/libevent/libevent/issues/332 - https://github.
02/02/7 - https://security.gentoo.org/glsa/201705-01 - https://github.com/libevent/libevent/issues/332 - https://github.com/libevent/libevent/commit/ec65c42052d95d2c23d1d837136d1cf1d9ecef9e - http://www.openwall.com/lists/oss-security/2017/01/31/17 - http://www.securitytracker.com/id/1038320 - https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2016-10198 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T03:14:42.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96001 - http://www.debian.org/security/2017/dsa-3820 - https://access.redhat.com/errata/RHSA-2017:2060 - https://bugzilla.gnome.org/show_bug.cgi?id=775450 - http://www.openwall.com/lists/oss-security/2
errata/RHSA-2017:2060 - https://bugzilla.gnome.org/show_bug.cgi?id=775450 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.3 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2017/02/01/7 - https://lists.debian.org/debian-lts-announce/2020/05/msg00029.html
CVE ID: CVE-2016-10199 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T03:14:42.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted tag value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96001 - http://www.debian.org/security/2017/dsa-3820 - https://access.redhat.com/errata/RHSA-2017:2060 - https://bugzilla.gnome.org/show_bug.cgi?id=775451 - http://www.openwall.com/lists/oss-security/2017/02/02/9 -
17:2060 - https://bugzilla.gnome.org/show_bug.cgi?id=775451 - http://www.openwall.com/lists/oss-security/2017/02/02/9 - https://gstreamer.freedesktop.org/releases/1.10/#1.10.3 - https://security.gentoo.org/glsa/201705-10 - http://www.openwall.com/lists/oss-security/2017/02/01/7
CVE ID: CVE-2016-10200 State: PUBLISHED Published: 2017-03-07T21:00:00 Last Updated: 2024-08-06T03:14:42.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/32c231164b762dddefa13af5a0101032c70b50ef - http://www.securitytracker.com/id/1037965 -
/github.com/torvalds/linux/commit/32c231164b762dddefa13af5a0101032c70b50ef - http://www.securitytracker.com/id/1037965 - https://access.redhat.com/errata/RHSA-2017:2437 - http://www.securitytracker.com/id/1037968 - https://access.redhat.com/errata/RHSA-2017:2444 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=32c231164b762dddefa13af5a0101032c70b50ef - http://source.android.com/security/bulletin/2017-03-01.html - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14 - http://www.securityfocus.com/bid/101783 - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842
CVE ID: CVE-2016-10201 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-06T03:14:42.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter in a download log request to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/05/1 - https://www.foxmole.com/advisories/foxmole-2016-07-05.txt
CVE ID: CVE-2016-10202 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-06T03:14:42.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the path info to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/05/1 - https://www.foxmole.com/advisories/foxmole-2016-07-05.txt
CVE ID: CVE-2016-10203 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-06T03:14:42.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the name when creating a new monitor. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/05/1 - http://www.securityfocus.com/bid/97122 - https://www.foxmole.com/advisories/foxmole-2016-07-05.txt
CVE ID: CVE-2016-10204 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-06T03:14:42.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/05/1 - https://www.foxmole.com/advisories/foxmole-2016-07-05.txt
CVE ID: CVE-2016-10205 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-06T03:14:42.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack web sessions via the ZMSESSID cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/05/1 - http://www.securityfocus.com/bid/97116 - https://www.foxmole.com/advisories/foxmole-2016-07-05.txt
CVE ID: CVE-2016-10206 State: PUBLISHED Published: 2017-03-03T15:00:00 Last Updated: 2024-08-06T03:14:42.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack the authentication of users for requests that change passwords and possibly have unspecified other impact as demonstrated by a crafted user action request to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/05/1 - http://www.securityfocus.com/bid/97114 - https://www.foxmole.com/advisories/foxmole-2016-07-05.txt
CVE ID: CVE-2016-10207 State: PUBLISHED Published: 2017-02-28T18:00:00 Last Updated: 2024-08-06T03:14:42.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by terminating a TLS handshake early. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1023012 - http://rhn.redhat.com/errata/RHSA-2017-0630.html - https://access.redhat.com/errata/RHSA-2017:2000 - http://www.openwall.com/lists/oss-security/2017/02/02/22 - http://www.openwall.com/lists/oss-security/2017/02/05/2 - http://lists.opensuse.org/opensuse-security
ty/2017/02/02/22 - http://www.openwall.com/lists/oss-security/2017/02/05/2 - http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00020.html - https://github.com/TigerVNC/tigervnc/commit/8aa4bc53206c2430bbf0c8f4b642f59a379ee649 - http://www.securityfocus.com/bid/96012 - https://security.gentoo.org/glsa/201801-13
CVE ID: CVE-2016-10208 State: PUBLISHED Published: 2017-02-06T06:04:00 Last Updated: 2024-08-06T03:14:42.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/05/3 - http://www.securityfocus.com/bid/94354 - https://access.redhat.com/errata/RHSA-2017:1308 - https://lists.debian.org/debian-lts-announce/2017/12
s.com/bid/94354 - https://access.redhat.com/errata/RHSA-2017:1308 - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - https://github.com/torvalds/linux/commit/3a4b77cd47bb837b8557595ec7425f281f2ca1fe - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3a4b77cd47bb837b8557595ec7425f281f2ca1fe - https://usn.ubuntu.com/3754-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=1395190 - https://access.redhat.com/errata/RHSA-2017:1298 - http://seclists.org/fulldisclosure/2016/Nov/75 - https://access.redhat.com/errata/RHSA-2017:1297