Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ts.fedoraproject.org/pipermail/package-announce/2014-October/139814.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-September/139445.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139654.html - http://seclists.org/oss-sec/2014/q3/639 - http://www.openwall.com/lists/oss-security/2014/09/23/6
CVE ID: CVE-2010-5305 State: PUBLISHED Published: 2019-03-26T17:24:25 Last Updated: 2025-06-26T17:05:54.602Z Vendors: Rockwell Automation Products: PLC5, SLC5/0x, RSLogix Problem Types: CWE-255 Description: The potential exists for exposure of the product's password used to restrict unauthorized access to Rockwell PLC5/SLC5/0x/RSLogix 1785-Lx and 1747-L5x controllers. The potential exists for an unauthorized programming and configuration client to gain access to the product and allow changes to the product’s configuration or program. When applicable, upgrade product firmware to a version that includes enhanced security functionality compatible with Rockwell Automation's FactoryTalk Security
e to a version that includes enhanced security functionality compatible with Rockwell Automation's FactoryTalk Security services. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-10-070-02 - http://rockwellautomation.custhelp.com/app/answers/detail/a_id/66684/kw/vulnerability/r_id/115100
CVE ID: CVE-2010-5306 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-07T04:17:10.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Healthcare Optima CT680, CT540, CT640, and CT520 has a default password of #bigguy for the root user, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/5472001-1EN_rev2.pdf?REQ=RAA&DIRECTION=5472001-1EN&FILENAME=5472001-1EN_rev2.pdf&FILEREV=2&DOCREV_ORG=2 - http://apps.gehealthcare.com/servlet/ClientServlet/5401943_rev+3.pdf?REQ=RAA&DIRECTION=5401943&FILENAME=5401943_rev%2B3.pdf&FILEREV=3&DOCREV_ORG=3 - http://
/ClientServlet/5401943_rev+3.pdf?REQ=RAA&DIRECTION=5401943&FILENAME=5401943_rev%2B3.pdf&FILEREV=3&DOCREV_ORG=3 - http://apps.gehealthcare.com/servlet/ClientServlet/5341628-1EN_r12.pdf?REQ=RAA&DIRECTION=5341628-1EN&FILENAME=5341628-1EN_r12.pdf&FILEREV=12&DOCREV_ORG=12 - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE ID: CVE-2010-5307 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-07T04:17:10.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of (1) operator for the root account, (2) adw2.0 for the admin account, and (3) adw2.0 for the sdc account, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcoded, or dependent on another system or product that requires a fixed value. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/MR360+operator+manual+paper.pdf?REQ=RAA
gram Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/MR360+operator+manual+paper.pdf?REQ=RAA&DIRECTION=5339461-1EN&FILENAME=MR360%2Boperator%2Bmanual%2Bpaper.pdf&FILEREV=4&DOCREV_ORG=4 - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE ID: CVE-2010-5308 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-07T04:17:10.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allows physically proximate users to gain access via an arbitrary username in the Emergency Login screen. NOTE: this might not qualify for inclusion in CVE if unauthenticated emergency access is part of the intended security policy of the product, can be controlled by the system administrator, and is not enabled by default. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servle
enabled by default. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/MR360+operator+manual+paper.pdf?REQ=RAA&DIRECTION=5339461-1EN&FILENAME=MR360%2Boperator%2Bmanual%2Bpaper.pdf&FILEREV=4&DOCREV_ORG=4 - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277
CVE ID: CVE-2010-5309 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-07T04:17:10.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Healthcare CADStream Server has a default password of confirma for the admin user, which has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/MR360+operator+manual+paper.pdf?REQ=RAA&DIRECTION=5339461-1EN&FILENAME=MR360%2Boperator%2Bmanual%2Bpaper.pdf&FILEREV=4&DOCREV_ORG=4 - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics
/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE ID: CVE-2010-5310 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-07T04:17:10.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Acquisition Workstation for the GE Healthcare Revolution XQ/i has a password of adw3.1 for the sdc user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value. Additional Analyst Notes: - CVE Program Container: References: - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-cert.us-cert.gov/adviso
10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02 - http://apps.gehealthcare.com/servlet/ClientServlet/2296976-100R10.pdf?DOCCLASS=A&REQ=RAC&DIRECTION=2296976-100&FILENAME=2296976-100R10.pdf&FILEREV=10&DOCREV_ORG=10&SUBMIT=+ACCEPT+
CVE ID: CVE-2010-5312 State: PUBLISHED Published: 2014-11-24T00:00:00 Last Updated: 2024-08-07T04:17:10.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0442.html - http://www.debian.org/security/2015/dsa-3249 - http://seclists.org/oss-sec/2014/q4/616 - http://www.securityfocus.com/bid/71106 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://rhn.
.securityfocus.com/bid/71106 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://rhn.redhat.com/errata/RHSA-2015-1462.html - http://bugs.jqueryui.com/ticket/6016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98696 - http://seclists.org/oss-sec/2014/q4/613 - https://github.com/jquery/jquery-ui/commit/7e9060c109b928769a664dbcc2c17bd21231b6f3 - http://www.securitytracker.com/id/1037035 - https://security.netapp.com/advisory/ntap-20190416-0007/ - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07
1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://www.drupal.org/sa-core-2022-002 - https://lists.debian.org/debian-lts-announce/2022/01/msg00014.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/
CVE ID: CVE-2010-5313 State: PUBLISHED Published: 2014-11-30T01:00:00 Last Updated: 2024-08-07T04:17:10.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38 allows L2 guest OS users to cause a denial of service (L1 guest OS crash) via a crafted instruction that triggers an L2 emulation failure report, a similar issue to CVE-2014-7842. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0855.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fc3a9157d3148ab91039c75423da8ef97be3e105 - http://www.oracle.com/technetwork/topics/s
valds/linux-2.6.git%3Ba=commit%3Bh=fc3a9157d3148ab91039c75423da8ef97be3e105 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html - http://www.openwall.com/lists/oss-security/2014/11/13/7 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://github.com/torvalds/linux/commit/fc3a9157d3148ab91039c75423da8ef97be3e105 - http://www.securityfocus.com/bid/71363 - http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.38 - https://bugzilla.redhat.com/show_bug.cgi
com/bid/71363 - http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.38 - https://bugzilla.redhat.com/show_bug.cgi?id=1163762
CVE ID: CVE-2010-5314 State: PUBLISHED Published: 2015-01-03T11:00:00Z Last Updated: 2024-09-16T22:52:04.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in controllers/home_controller.php in BEdita before 3.1 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to news/index. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22723
CVE ID: CVE-2010-5315 State: PUBLISHED Published: 2015-01-03T11:00:00Z Last Updated: 2024-09-16T18:29:24.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in BEdita before 3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create categories via a data array to news/saveCategories or (2) modify credentials via a data array to admin/saveUser. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22723
CVE ID: CVE-2010-5316 State: PUBLISHED Published: 2015-01-03T11:00:00Z Last Updated: 2024-09-16T18:44:23.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to inject arbitrary web script or HTML via a top_height cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22667
CVE ID: CVE-2010-5317 State: PUBLISHED Published: 2015-01-03T11:00:00Z Last Updated: 2024-09-17T00:15:34.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL commands via (1) the file_name parameter in an attachment action, (2) the post parameter in a show_comment action, (3) the sys-name parameter in an rssfeed action, or (4) the sys-name parameter in a view action. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22667
CVE ID: CVE-2010-5318 State: PUBLISHED Published: 2015-01-03T11:00:00Z Last Updated: 2024-09-16T17:47:50.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password by specifying the administrator's e-mail address in the email parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22667
CVE ID: CVE-2010-5319 State: PUBLISHED Published: 2015-01-03T11:00:00Z Last Updated: 2024-09-17T04:00:10.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Kandidat CMS 1.4.2 allow remote attackers to hijack the authentication of administrators for requests that (1) modify settings via a validate action to admin/settings.php, (2) modify pages via the what parameter to admin/edit.php, or (3) modify articles via the edit parameter to admin/news.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22648
CVE ID: CVE-2010-5320 State: PUBLISHED Published: 2015-01-03T11:00:00Z Last Updated: 2024-09-16T18:03:29.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in MemHT Portal 4.0.1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify settings via a configuration action to admin.php, (2) modify articles via an articles action to admin.php, or (3) modify credentials via a users action to admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.htbridge.com/advisory/HTB22662
CVE ID: CVE-2010-5321 State: PUBLISHED Published: 2017-04-24T06:12:00 Last Updated: 2024-08-07T04:17:10.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in drivers/media/video/videobuf-core.c in the videobuf subsystem in the Linux kernel 2.6.x through 4.x allows local users to cause a denial of service (memory consumption) by leveraging /dev/video access for a series of mmap calls that require new allocations, a different vulnerability than CVE-2007-6761. NOTE: as of 2016-06-18, this affects only 11 drivers that have not been updated to use videobuf2 instead of videobuf. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bi
uf2 instead of videobuf. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=827340 - http://www.openwall.com/lists/oss-security/2015/02/08/4 - https://bugzilla.redhat.com/show_bug.cgi?id=620629 - http://linuxtv.org/irc/v4l/index.php?date=2010-07-29 - https://bugzilla.kernel.org/show_bug.cgi?id=120571
CVE ID: CVE-2010-5322 State: PUBLISHED Published: 2015-03-11T14:00:00Z Last Updated: 2024-09-16T17:23:09.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secpod.org/advisories/SECPOD_ZeusCart_XSS.txt - http://sroesemann.blogspot.de/2015/01/sroeadv-2015-12.html - http://www.securityfocus.com/bid/72761 - http://osvdb.org/show/osvdb/68756 - http://seclists.org/oss-sec/2015/q1/649 - http://www.exploit-db.com/exploits/36159
http://osvdb.org/show/osvdb/68756 - http://seclists.org/oss-sec/2015/q1/649 - http://www.exploit-db.com/exploits/36159 - http://packetstormsecurity.com/files/130487/Zeuscart-4-Cross-Site-Scripting-SQL-Injection.html - http://seclists.org/fulldisclosure/2015/Feb/89 - http://secpod.org/blog/?p=109 - https://github.com/ZeusCart/zeuscart/issues/28
CVE ID: CVE-2010-5323 State: PUBLISHED Published: 2015-06-07T23:00:00 Last Updated: 2024-08-07T04:17:10.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction with WAR content in the POST data, a different vulnerability than CVE-2010-5324. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7005573 - http://www.zerodayinitiative.com/advisories/ZDI-10-078/ - http
- https://www.novell.com/support/kb/doc.php?id=7005573 - http://www.zerodayinitiative.com/advisories/ZDI-10-078/ - http://www.exploit-db.com/exploits/16784/ - https://bugzilla.novell.com/show_bug.cgi?id=578911
CVE ID: CVE-2010-5324 State: PUBLISHED Published: 2015-06-07T23:00:00 Last Updated: 2024-08-07T04:17:10.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a zenworks-fileupload request with a crafted directory name in the type parameter, in conjunction with a WAR filename in the filename parameter and WAR content in the POST data, a different vulnerability than CVE-2010-5323. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.
n CVE-2010-5323. Additional Analyst Notes: - CVE Program Container: References: - https://www.novell.com/support/kb/doc.php?id=7005573 - http://www.zerodayinitiative.com/advisories/ZDI-10-078/ - http://tucanalamigo.blogspot.com/2010/04/pdc-de-zdi-10-078.html - http://www.securityfocus.com/bid/39114 - https://bugzilla.novell.com/show_bug.cgi?id=578911
CVE ID: CVE-2010-5325 State: PUBLISHED Published: 2016-04-15T14:00:00 Last Updated: 2024-08-07T04:17:10.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a long job title. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1218297 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://bzr.linuxfoundation.org/loggerhead/openprinting/foomatic-4.0/foomatic-filters/
inuxbulletinapr2016-2952096.html - http://bzr.linuxfoundation.org/loggerhead/openprinting/foomatic-4.0/foomatic-filters/annotate/head:/ChangeLog - https://bugs.linuxfoundation.org/show_bug.cgi?id=515 - http://rhn.redhat.com/errata/RHSA-2016-0491.html - http://www.openwall.com/lists/oss-security/2016/02/15/1 - http://www.openwall.com/lists/oss-security/2016/02/15/7
CVE ID: CVE-2010-5326 State: PUBLISHED Published: 2016-05-13T10:00:00.000Z Last Updated: 2025-10-21T23:55:52.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arbitrary code via an HTTP or HTTPS request, as exploited in the wild in 2013 through 2016, aka a "Detour" attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/90533 - https://www.onapsis.com/threat-report-tip-iceberg-wild-exploitation-cyber-attacks-sap-business-applications - http
533 - https://www.onapsis.com/threat-report-tip-iceberg-wild-exploitation-cyber-attacks-sap-business-applications - http://service.sap.com/sap/support/notes/1445998 - http://www.onapsis.com/research/publications/sap-security-in-depth-vol4-the-invoker-servlet-a-dangerous-detour-into-sap-java-solutions - http://www.us-cert.gov/ncas/alerts/TA16-132A - http://www.securityfocus.com/bid/48925
CVE ID: CVE-2010-5327 State: PUBLISHED Published: 2017-01-13T19:00:00 Last Updated: 2024-08-07T04:17:10.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template. Additional Analyst Notes: - CVE Program Container: References: - https://issues.liferay.com/browse/LPS-7087 - https://issues.liferay.com/browse/LPE-14964 - https://dev.liferay.com/web/community-security-team/known-vulnerabilities - https://github.com/liferay/liferay-portal/commit/90c4e85a8f8135f069f3f05e4d54a77704769f91 - https://dev.liferay.com/web/community-security-team/known-vulnerabilities/-
t/90c4e85a8f8135f069f3f05e4d54a77704769f91 - https://dev.liferay.com/web/community-security-team/known-vulnerabilities/-/asset_publisher/4AHAYapUm8Xc/content/lps-64547-remote-code-execution-and-privilege-escalation-in-templates - https://issues.liferay.com/browse/LPS-64547
CVE ID: CVE-2010-5328 State: PUBLISHED Published: 2017-02-06T06:04:00 Last Updated: 2024-08-07T04:17:10.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/linux/init_task.h in the Linux kernel before 2.6.35 does not prevent signals with a process group ID of zero from reaching the swapper process, which allows local users to cause a denial of service (system crash) by leveraging access to this process group. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fa2755e20ab0c7215d99c2dc7c262e98a09b01df - https://github.com/torvalds/linux/commit/fa2755e20ab0c7215d99c2dc7c262e98a09b01df - h
0ab0c7215d99c2dc7c262e98a09b01df - https://github.com/torvalds/linux/commit/fa2755e20ab0c7215d99c2dc7c262e98a09b01df - https://github.com/torvalds/linux/commit/f20011457f41c11edb5ea5038ad0c8ea9f392023 - http://ftp.naist.jp/pub/linux/kernel/v2.6/ChangeLog-2.6.35 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f106eee10038c2ee5b6056aaf3f6d5229be6dcdd - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f20011457f41c11edb5ea5038ad0c8ea9f392023 - http://www.openwall.com/lists/oss-security/2017/01/21/2 - https://github.com/torvalds/linux/commit/f106eee10038c2ee5b6056aaf3f6d5229be6dcdd - http://www.securityfocus.com/bid/97103 - https://bugzilla.re
lds/linux/commit/f106eee10038c2ee5b6056aaf3f6d5229be6dcdd - http://www.securityfocus.com/bid/97103 - https://bugzilla.redhat.com/show_bug.cgi?id=1358840
CVE ID: CVE-2010-5329 State: PUBLISHED Published: 2017-04-24T06:12:00 Last Updated: 2024-08-07T04:17:10.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: The video_usercopy function in drivers/media/video/v4l2-ioctl.c in the Linux kernel before 2.6.39 relies on the count value of a v4l2_ext_controls data structure to determine a kmalloc size, which might allow local users to cause a denial of service (memory consumption) via a large value. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fc0a80798576f80ca10b3f6c9c7097f12fd1d64e - http://www.securityfocus.com/bid/97986 - https://github.
linux.git/commit/?id=fc0a80798576f80ca10b3f6c9c7097f12fd1d64e - http://www.securityfocus.com/bid/97986 - https://github.com/torvalds/linux/commit/fc0a80798576f80ca10b3f6c9c7097f12fd1d64e - http://www.openwall.com/lists/oss-security/2015/02/08/4 - http://linuxtv.org/irc/v4l/index.php?date=2010-07-29