Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
.com/id/1036415 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.ubuntu.com/usn/USN-2983-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html - http://support.eset.com/ca6333/ - http://www.securityfocus.com/bid/90729 - http://www.ubuntu.com/usn/USN-3044-1 - http://www.openwall.com/lists/oss-security/2016/05/17/12 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1236923 - http://seclists.org/fulldis
rity-announce/2016-06/msg00006.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1236923 - http://seclists.org/fulldisclosure/2017/Feb/68 - https://security.gentoo.org/glsa/201701-21 - https://source.android.com/security/bulletin/2016-11-01.html - http://www.debian.org/security/2016/dsa-3582 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html - https://bugzilla.redhat.com/show_bug.cgi?id=1296102 - http://www.mozilla.org/security/announce/2016/mfsa2016-68.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html - https://access.redhat.com/errata/RHSA-2018:2486 - http://www.securitytracker.com/id/1036348 - https://support.apple.com/HT206903 -
cess.redhat.com/errata/RHSA-2018:2486 - http://www.securitytracker.com/id/1036348 - https://support.apple.com/HT206903 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html - http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10365
CVE ID: CVE-2016-0719 State: REJECTED Published: 2016-05-18T15:00:00 Last Updated: 2016-05-18T14:57:01 Description: No description available.
CVE ID: CVE-2016-0720 State: PUBLISHED Published: 2017-04-21T15:00:00 Last Updated: 2024-08-05T22:30:03.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1299614 - https://github.com/ClusterLabs/pcs/commit/b9e7f061788c3b86a0c67d2d4158f067ec5eb625 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178384.html - http://www.securityfocus.com/bid/97984 - http://rhn.redhat.com/errata/RHSA-2016-2596.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-Marc
- http://rhn.redhat.com/errata/RHSA-2016-2596.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178261.html
CVE ID: CVE-2016-0721 State: PUBLISHED Published: 2017-04-21T15:00:00 Last Updated: 2024-08-05T22:30:04.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in pcsd in pcs before 0.9.157. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ClusterLabs/pcs/commit/bc6ad9086857559db57f4e3e6de66762291c0774 - https://bugzilla.redhat.com/show_bug.cgi?id=1299615 - https://github.com/ClusterLabs/pcs/commit/e9b28833d54a47ec441f6dbad0db96e1fc662a5b - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178384.html - http://www.securityfocus.com/bid/97977 - http://rhn.redhat.com/errata/RHSA-2016-2596.html - https:
6-March/178384.html - http://www.securityfocus.com/bid/97977 - http://rhn.redhat.com/errata/RHSA-2016-2596.html - https://github.com/ClusterLabs/pcs/commit/acdbbe8307e6f4a36b2c7754765e732e43fe8d17 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178261.html
CVE ID: CVE-2016-0722 State: REJECTED Published: 2016-02-18T15:00:00 Last Updated: 2016-02-18T13:57:01 Description: No description available.
CVE ID: CVE-2016-0723 State: PUBLISHED Published: 2016-02-08T02:00:00 Last Updated: 2024-08-05T22:30:03.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free and system crash) by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2016-0723 - http://www.ubuntu.com/usn/USN-2930-1 - http://www.ubuntu.com/usn/USN-2967-1 - http://www.oracle.com
cker/CVE-2016-0723 - http://www.ubuntu.com/usn/USN-2930-1 - http://www.ubuntu.com/usn/USN-2967-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://bugzilla.redhat.com/show_bug.cgi?id=1296253 - http://www.ubuntu.com/usn/USN-2930-2 - http://www.debian.org/security/2016/dsa-3503 - http://www.ubuntu.com/usn/USN-2967-2 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c17c861a357e9458001f021a7afa7aab9937439 - http://www.ubuntu.com/usn/USN-2930-3 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - http://source.android.com/
usn/USN-2930-3 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - http://source.android.com/security/bulletin/2016-07-01.html - http://www.ubuntu.com/usn/USN-2929-1 - http://www.ubuntu.com/usn/USN-2932-1 - http://www.securityfocus.com/bid/82950 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://www.securitytracker.com/id/1035695 - http://www.ubuntu.com/usn/USN-2948-1 - http://www.debian.org/security/2016/dsa-3448 - http://lists.opensuse.org/opensuse-security-anno
ntu.com/usn/USN-2948-1 - http://www.debian.org/security/2016/dsa-3448 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html - http://www.ubuntu.com/usn/USN-2929-2 - https://github.com/torvalds/linux/commit/5c17c861a357e9458001f021a7afa7aab9937439 - http://www.ubuntu.com/usn/USN-2948-2 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176464.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html - https://support.f5.com/csp/article/K43650115
CVE ID: CVE-2016-0724 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-05T22:30:03.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) core_enrol_get_course_enrolment_methods and (2) enrol_self_get_instance_info web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated users to obtain sensitive information via a web-service request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034694 - https://moodle.org/mod/forum/discuss.php?d=326205 -
Container: References: - http://www.securitytracker.com/id/1034694 - https://moodle.org/mod/forum/discuss.php?d=326205 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52072 - http://www.openwall.com/lists/oss-security/2016/01/18/1 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html
CVE ID: CVE-2016-0725 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-05T22:30:04.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/management_renderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted search string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034694 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52552 - https://moodle.org/mod/forum/discuss.php?d=326206 - http://www
g/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52552 - https://moodle.org/mod/forum/discuss.php?d=326206 - http://www.openwall.com/lists/oss-security/2016/01/18/1 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html
CVE ID: CVE-2016-0726 State: PUBLISHED Published: 2017-06-06T18:00:00 Last Updated: 2024-08-05T22:30:03.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin" administrator account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1295446
CVE ID: CVE-2016-0727 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-05T22:30:03.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS, before 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 on Ubuntu 14.04 LTS, on Ubuntu Wily, and before 1:4.2.8p4+dfsg-3ubuntu5.3 on Ubuntu 16.04 LTS allows local users with access to the ntp account to write to arbitrary files and consequently gain privileges via vectors involving statistics directory cleanup. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3096-1 - https://bugzilla.redhat.com/show_bug
otes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3096-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1382369 - http://www.securitytracker.com/id/1034808 - http://packetstormsecurity.com/files/141913/NTP-Privilege-Escalation.html - http://www.securityfocus.com/bid/81552 - https://bugs.launchpad.net/ubuntu/+source/ntp/+bug/1528050
CVE ID: CVE-2016-0728 State: PUBLISHED Published: 2016-02-08T02:00:00 Last Updated: 2024-08-05T22:30:03.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034701 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00038.html - http://www.ubuntu.com/usn/USN-2871-1 - http://rhn.red
ts.opensuse.org/opensuse-security-announce/2016-03/msg00038.html - http://www.ubuntu.com/usn/USN-2871-1 - http://rhn.redhat.com/errata/RHSA-2016-0068.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00026.html - http://www.ubuntu.com/usn/USN-2870-2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.html - http://www.ubuntu.com/usn/USN-2872-3 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00035.html - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00043.html - http://www.ubuntu.com/usn/USN-2872-1 - http://perception-point.io/2016/01/14/analysis-and-explo
/2016-03/msg00043.html - http://www.ubuntu.com/usn/USN-2872-1 - http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-kernel-vulnerability-cve-2016-0728/ - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00045.html - http://www.ubuntu.com/usn/USN-2871-2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=23567fd052a9abb6d67fe8e7a9ccdd9800a540f2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00041.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - https://www.exploit-db.com/exploits/
/h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - https://www.exploit-db.com/exploits/39277/ - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176194.html - http://source.android.com/security/bulletin/2016-03-01.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00034.html - https://github.com/torvalds/linux/commit/23567fd052a9abb6d67fe8e7a9ccdd9800a540f2 - http://www.securityfocus.com/bid/81054 - http://www.ubuntu.com/usn/USN-2873-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1297475 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html - http://lists.opensuse.org/opensuse-security
sts.fedoraproject.org/pipermail/package-announce/2016-February/176484.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00033.html - http://rhn.redhat.com/errata/RHSA-2016-0065.html - http://www.ubuntu.com/usn/USN-2870-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00044.html - https://bto.bluecoat.com/security-advisory/sa112 - http://www.ubuntu.com/usn/USN-2872-2 - http://www.debian.org/security/2016/dsa-3448 - https://security.netapp.com/advisory/ntap-20160211-0001/ - http://rhn.redhat.com/errata/RHSA-2016-0064.html - https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05018265 - https://h20566.www2.hpe.com/portal/site/hp
65.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05018265 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05130958 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00012.html - http://www.openwall.com/lists/oss-security/2016/01/19/2
CVE ID: CVE-2016-0729 State: PUBLISHED Published: 2016-04-07T21:00:00 Last Updated: 2024-08-05T22:30:03.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a denial of service (segmentation fault or memory corruption) or possibly execute arbitrary code via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182597.html - http://packetstormsecurity.com/files/135949/Apache-Xerces-C-XML-Parser-
ermail/package-announce/2016-April/182597.html - http://packetstormsecurity.com/files/135949/Apache-Xerces-C-XML-Parser-Buffer-Overflow.html - http://www.securitytracker.com/id/1035113 - http://www.securityfocus.com/bid/83423 - http://xerces.apache.org/xerces-c/secadv/CVE-2016-0729.txt - http://svn.apache.org/viewvc?view=revision&revision=1727978 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182131.html - http://lists.opensuse.org/opensuse-updates/2016-04/msg00086.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.securityfocus.com/archive/1/537620/100/0/threaded - https://security.gentoo.org/glsa/201612-46 - http:
html - http://www.securityfocus.com/archive/1/537620/100/0/threaded - https://security.gentoo.org/glsa/201612-46 - http://lists.opensuse.org/opensuse-updates/2016-04/msg00012.html - https://issues.apache.org/jira/browse/XERCESC-2061 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182062.html - http://www.debian.org/security/2016/dsa-3493 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://lists.opensuse.org/opensuse-updates/2016-07/msg00053.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2016-0730 State: REJECTED Published: 2017-02-04T18:00:00 Last Updated: 2017-02-04T17:57:01 Description: No description available.
CVE ID: CVE-2016-0731 State: PUBLISHED Published: 2016-05-18T14:00:00 Last Updated: 2024-08-05T22:30:04.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/AMBARI-14780 - https://docs.hortonworks.com/HDPDocuments/Ambari-2.2.1.0/bk_releasenotes_ambari_2.2.1.0/content/ambari_relnotes-2.2.1.0-cves.html - https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.2.
html - https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.2.1
CVE ID: CVE-2016-0732 State: PUBLISHED Published: 2017-09-07T13:00:00 Last Updated: 2024-08-05T22:30:03.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when configured with multiple identity zones; and Elastic Runtime 1.6.0 through 1.6.13 allows remote authenticated users with privileges in one zone to gain privileges and perform operations on a different zone via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2016-0732
CVE ID: CVE-2016-0733 State: PUBLISHED Published: 2016-04-12T14:00:00 Last Updated: 2024-08-05T22:30:04.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password, which allows remote attackers to bypass authentication by leveraging knowledge of a valid username. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/82871 - https://mail-archives.apache.org/mod_mbox/ranger-dev/201602.mbox/%3CD2D9A4C5.114ECA%25vel%40apache.org%3E - https://issues.apache.org/jira/browse/RANGER-835 - https://cwiki.apache.org/confluence/display/RANGER/Vu
apache.org%3E - https://issues.apache.org/jira/browse/RANGER-835 - https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
CVE ID: CVE-2016-0734 State: PUBLISHED Published: 2016-04-07T19:00:00 Last Updated: 2024-08-05T22:30:03.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1424 - http://www.securitytracker.com/id/1035327 - http://www.openwall.com/lists/oss-security/2016/03/10/11 - http://activemq.apache.org/security-advisories.
/id/1035327 - http://www.openwall.com/lists/oss-security/2016/03/10/11 - http://activemq.apache.org/security-advisories.data/CVE-2016-0734-announcement.txt - http://www.securityfocus.com/bid/84321 - https://lists.apache.org/thread.html/a859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E
CVE ID: CVE-2016-0735 State: PUBLISHED Published: 2016-04-11T19:00:00 Last Updated: 2024-08-05T22:30:04.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Ranger 0.5.x before 0.5.2 allows remote authenticated users to bypass intended parent resource-level access restrictions by leveraging mishandling of a resource-level exclude policy. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/ranger-dev/201603.mbox/%3CD31EE434.14B879%25vel%40apache.org%3E
CVE ID: CVE-2016-0736 State: PUBLISHED Published: 2017-07-27T21:00:00Z Last Updated: 2024-09-16T17:52:49.825Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: Padding Oracle Attack Description: In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (AES256-CBC by default), hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa
tes: - CVE Program Container: References: - https://support.apple.com/HT208221 - http://www.debian.org/security/2017/dsa-3796 - https://www.exploit-db.com/exploits/40961/ - http://www.securitytracker.com/id/1037508 - https://access.redhat.com/errata/RHSA-2017:1413 - https://access.redhat.com/errata/RHSA-2017:1161 - https://www.tenable.com/security/tns-2017-04 - https://access.redhat.com/errata/RHSA-2017:1414 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us - http://www.securityfocus.com/bid/95078 - http://rhn.redhat.com/errata/RHSA-2017-1415.html - https://access.redhat.com/errata/RHSA-2017:0906 - https://httpd.apache.org/security/vulnerabi
rata/RHSA-2017-1415.html - https://access.redhat.com/errata/RHSA-2017:0906 - https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-0736 - https://security.gentoo.org/glsa/201701-36 - https://security.netapp.com/advisory/ntap-20180423-0001/ - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a35
572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apach
thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2016-0737 State: PUBLISHED Published: 2016-01-29T20:00:00 Last Updated: 2024-08-05T22:30:04.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0329.html - http://www.securityfocus.com/bid/81432 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://rhn.redhat.com/errata/RHSA-2016-0128.html