Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-2772 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2773 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2774 State: PUBLISHED Published: 2016-03-09T15:26:00 Last Updated: 2024-08-05T23:32:20.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of service (INSIST assertion failure or request-processing outage) by establishing many sessions. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2590.html - http://www.securitytracker.com/id/1035196 - https://kb.isc.org/article/AA-01354 - http://www.oracle.com/technetwork/topics/security/bulletinjul201
.com/id/1035196 - https://kb.isc.org/article/AA-01354 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183640.html - https://usn.ubuntu.com/3586-1/ - http://lists.opensuse.org/opensuse-updates/2016-07/msg00066.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183458.html - http://www.securityfocus.com/bid/84208 - https://lists.debian.org/debian-lts-announce/2019/11/msg00023.html
CVE ID: CVE-2016-2775 State: PUBLISHED Published: 2016-07-19T22:00:00 Last Updated: 2024-08-05T23:32:20.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ5STNEUHBNEPUHJT7CYEVSMATFYMIX7/ - https://kb.isc.org/article/AA-01438 - https://access.redhat.com/errat
ct.org/message/NJ5STNEUHBNEPUHJT7CYEVSMATFYMIX7/ - https://kb.isc.org/article/AA-01438 - https://access.redhat.com/errata/RHBA-2017:1767 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TT754KDUJTKOASJODJX7FKHCOQ6EC7UX/ - http://www.securityfocus.com/bid/92037 - https://security.gentoo.org/glsa/201610-07 - https://kb.isc.org/article/AA-01435 - https://access.redhat.com/errata/RHBA-2017:0651 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZUCSMEOZIZ2R2SKA4FPLTOVZHJBAOWC/ - https://kb.isc.org/article/AA-01393/74/CVE-2016-2775 - http://www.securitytracker.com/id/1036360 - https://lists.fedorapr
ttps://kb.isc.org/article/AA-01393/74/CVE-2016-2775 - http://www.securitytracker.com/id/1036360 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7T2WJP5ELO4ZRSBXSETIZ3GAO6KOEFTA/ - https://access.redhat.com/errata/RHSA-2017:2533 - https://kb.isc.org/article/AA-01436 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05321107 - https://security.netapp.com/advisory/ntap-20160722-0002/
CVE ID: CVE-2016-2776 State: PUBLISHED Published: 2016-09-28T10:00:00 Last Updated: 2024-08-05T23:32:20.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93188 - https://kb.isc.org/article/AA-01438 - https://kb.isc.org/article/AA-01419/0 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http:
isc.org/article/AA-01419/0 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://rhn.redhat.com/errata/RHSA-2016-1944.html - https://www.exploit-db.com/exploits/40453/ - https://security.gentoo.org/glsa/201610-07 - https://kb.isc.org/article/AA-01435 - http://rhn.redhat.com/errata/RHSA-2016-2099.html - https://security.netapp.com/advisory/ntap-20160930-0001/ - http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html - http://www.securitytracker.com/id/1036903 - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:28.bind.asc - http://rhn.redhat.c
vmbulletinoct2016-3090547.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:28.bind.asc - http://rhn.redhat.com/errata/RHSA-2016-1945.html - https://kb.isc.org/article/AA-01436 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05321107
CVE ID: CVE-2016-2777 State: REJECTED Published: 2016-02-27T11:00:00 Last Updated: 2016-02-27T05:57:01 Description: No description available.
CVE ID: CVE-2016-2779 State: PUBLISHED Published: 2017-02-07T15:00:00 Last Updated: 2024-08-05T23:32:21.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=815922 - http://www.openwall.com/lists/oss-security/2016/02/27/1 - http://www.openwall.com/lists/oss-security/2016/02/27/2
CVE ID: CVE-2016-2780 State: PUBLISHED Published: 2016-04-13T14:00:00 Last Updated: 2024-08-05T23:32:20.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160302-01-utps-en
CVE ID: CVE-2016-2781 State: PUBLISHED Published: 2017-02-07T15:00:00.000Z Last Updated: 2025-06-09T15:59:40.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.openwall.com/lists/oss-security/2016/02/28/2 - http://www.openwall.com/lists/oss-security/2016/02/28/3 - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2016-2782 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-05T23:32:21.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that lacks a (1) bulk-in or (2) interrupt-in endpoint. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://www.ubuntu.com/usn/USN-2930-1 - http://www.ubuntu.com/usn/USN-2
pensuse-security-announce/2016-06/msg00054.html - http://www.ubuntu.com/usn/USN-2930-1 - http://www.ubuntu.com/usn/USN-2967-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cac9b50b0d75a1d50d6c056ff65c005f3224c8e0 - https://github.com/torvalds/linux/commit/cac9b50b0d75a1d50d6c056ff65c005f3224c8e0 - http://www.ubuntu.com/usn/USN-2930-2 - https://www.exploit-db.com/exploits/39539/ - http://www.ubuntu.com/usn/USN-2967-2 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://www.ubuntu.com/usn/USN-2930-3 - http://www.openwall.com/lists/oss-security/2016/02/28/9 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html
penwall.com/lists/oss-security/2016/02/28/9 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00019.html - http://www.ubuntu.com/usn/USN-2929-1 - http://www.ubuntu.com/usn/USN-2932-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.ubuntu.com/usn/USN-2948-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1312670 - http://www.ubuntu.com/usn/USN-2929-2 - http://www.ubuntu.com/usn/USN-2948-2
CVE ID: CVE-2016-2783 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-05T23:32:21.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2.3.0 and 5.x before 5.0.1.0 does not properly handle VLAN and I-SIS indexes, which allows remote attackers to obtain unauthorized access via crafted Ethernet frames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92157 - https://packetstormsecurity.com/files/138082/Avaya-VOSS-4.1.0.0-SPB-Traffic-Traversal.html
CVE ID: CVE-2016-2784 State: PUBLISHED Published: 2016-05-26T14:00:00 Last Updated: 2024-08-05T23:32:21.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow remote attackers to conduct cache poisoning attacks, modify links, and conduct cross-site scripting (XSS) attacks via a crafted HTTP Host header in a request. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136897/CMS-Made-Simple-Cache-Poisoning.html - http://seclists.org/fulldisclosure/2016/May/15 - http://www.securityfocus.com/archive/1/538272/100/0/threaded - http://www.cmsmades
ists.org/fulldisclosure/2016/May/15 - http://www.securityfocus.com/archive/1/538272/100/0/threaded - http://www.cmsmadesimple.org/2016/03/Announcing-CMSMS-1-12-2-kolonia/ - https://www.exploit-db.com/exploits/39760/ - http://www.cmsmadesimple.org/2016/04/Announcing-CMSMS-2-1-3-Black-Point/
CVE ID: CVE-2016-2785 State: PUBLISHED Published: 2016-06-10T15:00:00 Last Updated: 2024-08-05T23:32:21.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to bypass intended auth.conf access restrictions by leveraging incorrect URL decoding. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201606-02 - https://github.com/puppetlabs/puppet/pull/4921/commits/8d2ce797db265720f0a20d1d46ee2757b4e4f6b2 - https://puppet.com/security/cve/cve-2016-2785
CVE ID: CVE-2016-2786 State: PUBLISHED Published: 2016-06-10T15:00:00 Last Updated: 2024-08-05T23:32:20.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pxp-agent component in Puppet Enterprise 2015.3.x before 2015.3.3 and Puppet Agent 1.3.x before 1.3.6 does not properly validate server certificates, which might allow remote attackers to spoof brokers and execute arbitrary commands via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2016-2786 - https://security.gentoo.org/glsa/201606-02
CVE ID: CVE-2016-2787 State: PUBLISHED Published: 2017-02-13T18:00:00 Last Updated: 2024-08-05T23:32:21.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2016-2787
CVE ID: CVE-2016-2788 State: PUBLISHED Published: 2017-02-13T18:00:00 Last Updated: 2024-08-05T23:32:21.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: MCollective 2.7.0 and 2.8.x before 2.8.9, as used in Puppet Enterprise, allows remote attackers to execute arbitrary code via vectors related to the mco ping command. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/cve-2016-2788
CVE ID: CVE-2016-2789 State: PUBLISHED Published: 2016-04-07T23:00:00 Last Updated: 2024-08-05T23:32:21.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web User Interface in Citrix XenMobile Server 10.0, 10.1 before Rolling Patch 4, and 10.3 before Rolling Patch 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035265 - http://support.citrix.com/article/CTX207499
CVE ID: CVE-2016-2790 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:32:21.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://www.securityfocus.com/bid/84222 - http://l
/lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://www.securityfocus.com/bid/84222 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1243464 - http://lists.opensuse.org/opensuse-security-announce/2016-03/m
- https://bugzilla.mozilla.org/show_bug.cgi?id=1243464 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.ubuntu.com/usn/USN-2927-1 - http://www.debian.org/security/2016/dsa-3520 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.debian.org/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.mozilla.org/security/announce/2016/mfsa2016-37.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/
016/mfsa2016-37.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.debian.org/security/2016/dsa-3515 - http://www.ubuntu.com/usn/USN-2934-1 - https://security.gentoo.org/glsa/201701-63 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-2791 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:32:21.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://www.securityfocus.com/bid/84222 - http://lists.opensuse.org/opensuse-security-announce/2016
16-03/msg00091.html - http://www.securityfocus.com/bid/84222 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.ubuntu.com/usn/USN-2927-1 - http://www.
nounce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.ubuntu.com/usn/USN-2927-1 - http://www.debian.org/security/2016/dsa-3520 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.debian.org/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.mozilla.org/security/announce/2016/mfsa2016-37.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.debian.org/security/2016
curity-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.debian.org/security/2016/dsa-3515 - http://www.ubuntu.com/usn/USN-2934-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1243473 - https://security.gentoo.org/glsa/201701-63 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-2792 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:32:21.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2800. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://www.securityfocus.com/bid/84222 - htt
ttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://www.securityfocus.com/bid/84222 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-
.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=1243482 - http://www.ubuntu.com/usn/USN-2927-1 - http://www.debian.org/security/2016/dsa-3520 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.debian.org/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.mozilla.org/security/announce/2016/mfsa2016-37.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-anno
nce/2016/mfsa2016-37.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.debian.org/security/2016/dsa-3515 - http://www.ubuntu.com/usn/USN-2934-1 - https://security.gentoo.org/glsa/201701-63 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-2793 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:32:21.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://www.securityfocus.com/bid/84222 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://
//www.securityfocus.com/bid/84222 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - https://bugzilla.mozilla.org/show_bug.cgi?id=1243513 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.ubuntu.com/
use.org/opensuse-security-announce/2016-03/msg00089.html - http://www.ubuntu.com/usn/USN-2917-1 - http://www.ubuntu.com/usn/USN-2927-1 - http://www.debian.org/security/2016/dsa-3520 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html - http://www.debian.org/security/2016/dsa-3510 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html - http://www.mozilla.org/security/announce/2016/mfsa2016-37.html - http://www.securitytracker.com/id/1035215 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://
sts.opensuse.org/opensuse-security-announce/2016-03/msg00050.html - https://security.gentoo.org/glsa/201605-06 - http://www.debian.org/security/2016/dsa-3515 - http://www.ubuntu.com/usn/USN-2934-1 - https://security.gentoo.org/glsa/201701-63 - http://www.ubuntu.com/usn/USN-2917-2 - http://www.ubuntu.com/usn/USN-2917-3
CVE ID: CVE-2016-2794 State: PUBLISHED Published: 2016-03-13T18:00:00 Last Updated: 2024-08-05T23:32:21.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html - http://www.securityfocus.com/bid/84222 - http://lists.opensuse.org/opensuse-sec