Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-2191 State: PUBLISHED Published: 2011-10-07T01:00:00 Last Updated: 2024-08-06T22:53:17.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences, as demonstrated by a crafted nickname field to vserver/apply. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/49772 - http://seclists.org/fulldisclosure/2011/Jun/0 - http://www.openwall.com/lists/oss-security/2011/06/06/22 - http://lists.fedoraproject.org/
g/fulldisclosure/2011/Jun/0 - http://www.openwall.com/lists/oss-security/2011/06/06/22 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066222.html - https://launchpad.net/bugs/784632 - http://www.openwall.com/lists/oss-security/2011/06/02/2 - http://www.cherokee-project.com/download/LATEST_is_1.2.99/cherokee-1.2.99.tar.gz - https://bugzilla.redhat.com/show_bug.cgi?id=713304 - http://www.openwall.com/lists/oss-security/2011/06/03/6 - http://osvdb.org/72693
CVE ID: CVE-2011-2192 State: PUBLISHED Published: 2011-07-07T21:00:00 Last Updated: 2024-08-06T22:53:17.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Curl_input_negotiate function in http_negotiate.c in libcurl 7.10.6 through 7.21.6, as used in curl and other products, always performs credential delegation during GSSAPI authentication, which allows remote servers to impersonate clients via GSSAPI requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:116 - http://secunia.com/advisories/45181 - http://support.apple.com/kb/HT5130 - http://secunia.com/advisories/45144 - http://www.ubuntu.com/us
m/advisories/45181 - http://support.apple.com/kb/HT5130 - http://secunia.com/advisories/45144 - http://www.ubuntu.com/usn/USN-1158-1 - http://curl.haxx.se/docs/adv_20110623.html - http://secunia.com/advisories/45067 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062287.html - http://www.securitytracker.com/id?1025713 - http://www.redhat.com/support/errata/RHSA-2011-0918.html - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://security.gentoo.org/glsa/glsa-201203-02.xml - http://secunia.com/advisories/48256 - http://www.debian.org/security/2011/dsa-2271 - https://bugzilla.redhat.com/show_bug.cgi?id=711454 - http://curl.haxx.se/curl-gssapi
debian.org/security/2011/dsa-2271 - https://bugzilla.redhat.com/show_bug.cgi?id=711454 - http://curl.haxx.se/curl-gssapi-delegation.patch - http://secunia.com/advisories/45088 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061992.html - http://secunia.com/advisories/45047
CVE ID: CVE-2011-2193 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T22:53:17.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.x before 2.4.14, 2.5.x before 2.5.6, and 3.x before 3.0.2 allow (1) remote authenticated users to gain privileges via a long Job_Name field in a qsub command to the server, and might allow (2) local users to gain privileges via vectors involving a long host variable in pbs_iff. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061645.htm
s: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061645.html - http://www.debian.org/security/2011/dsa-2329 - http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.5.6.CHANGELOG - http://secunia.com/advisories/45039 - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062638.html - http://www.securityfocus.com/archive/1/518885/100/0/threaded - http://secunia.com/advisories/45040 - http://securityreason.com/securityalert/8304 - http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.4.14.CHANGELOG - http://www.securityfocus.com/bid/48374 - https://exchange.xforce.ibmcloud.com/vulnerabilit
OGS/torque-2.4.14.CHANGELOG - http://www.securityfocus.com/bid/48374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68152 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68151 - https://bugzilla.redhat.com/show_bug.cgi?id=711463
CVE ID: CVE-2011-2194 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T22:53:17.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the XSPF playlist parser in VideoLAN VLC media player 0.8.5 through 1.1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2011/dsa-2257 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14774 - http://secunia.com/advisories/44892 - http://www.securityfocus.com/
rch/definition/oval%3Aorg.mitre.oval%3Adef%3A14774 - http://secunia.com/advisories/44892 - http://www.securityfocus.com/bid/48171 - http://www.videolan.org/security/sa1104.html
CVE ID: CVE-2011-2195 State: PUBLISHED Published: 2021-10-26T12:10:00 Last Updated: 2024-08-06T22:53:17.304Z Vendors: n/a Products: websvn Problem Types: CWE-78 Description: A flaw was found in WebSVN 2.3.2. Without prior authentication, if the 'allowDownload' option is enabled in config.php, an attacker can invoke the dl.php script and pass a well formed 'path' argument to execute arbitrary commands against the underlying operating system. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2011/Jun/34
CVE ID: CVE-2011-2196 State: PUBLISHED Published: 2011-07-27T01:29:00Z Last Updated: 2024-08-06T22:53:17.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application. NOTE: this vulnerability exists becaus
ote attackers to execute arbitrary Java code via a crafted URL to an application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48716 - http://www.redhat.com/support/errata/RHSA-2011-0946.html - http://www.redhat.com/support/errata/RHSA-2011-0948.html - http://www.redhat.com/support/errata/RHSA-2011-0949.html - http://www.redhat.com/support/errata/RHSA-2011-0951.html - http://www.redhat.com/support/errata/RHSA-2011-0945.html - https://bugzilla.redhat.com/show_bug.cgi?id=712283 - http://www.redhat.com/support/errata/RHSA-2011-0950.html - http://www.redhat.com/sup
redhat.com/show_bug.cgi?id=712283 - http://www.redhat.com/support/errata/RHSA-2011-0950.html - http://www.redhat.com/support/errata/RHSA-2011-0947.html - http://www.redhat.com/support/errata/RHSA-2011-0952.html
CVE ID: CVE-2011-2197 State: PUBLISHED Published: 2011-06-30T15:26:00 Last Updated: 2024-08-06T22:53:17.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it easier for remote attackers to conduct XSS attacks via crafted strings to an application that uses a problematic string method, as demonstrated by the sub method. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/rubyonrails-security/msg/663b600d4471e0d4?dmode=source&output=gplain - htt
References: - http://groups.google.com/group/rubyonrails-security/msg/663b600d4471e0d4?dmode=source&output=gplain - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062090.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062514.html - http://weblog.rubyonrails.org/2011/6/8/potential-xss-vulnerability-in-ruby-on-rails-applications - http://secunia.com/advisories/44789 - http://openwall.com/lists/oss-security/2011/06/09/2 - http://openwall.com/lists/oss-security/2011/06/13/9
CVE ID: CVE-2011-2198 State: PUBLISHED Published: 2014-05-21T14:00:00 Last Updated: 2024-08-06T22:53:17.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remote authenticated users to cause a denial of service (CPU and memory consumption and crash) via a crafted file, as demonstrated by a file containing the string "\033[100000000000000000@". Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/09/3 - https://bugzilla.redhat.com/show_bug.cgi?id=712148 - https://bugzilla.gnome.org/show_bug.cgi?id=652124 - https://git.gnome
tps://bugzilla.redhat.com/show_bug.cgi?id=712148 - https://bugzilla.gnome.org/show_bug.cgi?id=652124 - https://git.gnome.org/browse/vte/commit/?h=vte-0-28&id=ac71d26f067be3a21bff315c3cabf24c94360dd6 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629688 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.openwall.com/lists/oss-security/2011/06/13/10 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00001.html
CVE ID: CVE-2011-2199 State: PUBLISHED Published: 2012-07-22T17:00:00 Last Updated: 2024-08-06T22:53:17.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/13/11 - http://security.gentoo.org/glsa/glsa-201206-12.xml - http://git.kernel.org/?p=network/tftp/tftp-hpa.git%3Ba=commitdiff%3Bh=f3035c45bc50bb5cac87ca01e7ef6a12485184f8 - http://www.securityfocus.com/bid/48411 - http://git.kernel.org/?p=network/tftp/tftp-hpa.g
bb5cac87ca01e7ef6a12485184f8 - http://www.securityfocus.com/bid/48411 - http://git.kernel.org/?p=network/tftp/tftp-hpa.git%3Ba=blob%3Bf=CHANGES%3Bh=6df0d97b1f6c99f49d65e9ff80aa7b847f0e21e1%3Bhb=badf05140d3c2408715a73a52c0f35887e337c04 - http://www.pre-cert.de/advisories/PRE-SA-2011-05.txt
CVE ID: CVE-2011-2200 State: PUBLISHED Published: 2011-06-22T22:00:00 Last Updated: 2024-08-06T22:53:17.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/06/13/12 - http://cgit.freedesktop.org/db
E Program Container: References: - http://openwall.com/lists/oss-security/2011/06/13/12 - http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.2&id=6519a1f77c61d753d4c97efd6e15630eb275336e - http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.4 - http://lists.freedesktop.org/archives/dbus/2011-May/014408.html - http://www.redhat.com/support/errata/RHSA-2011-1132.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/67974 - https://bugs.freedesktop.org/show_bug.cgi?id=38120 - http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.2 - http://secunia.com/advisories/44896 - https://bugzilla.redhat.com/show_bug.cgi?id=712676 - http://openwall.com/lists/oss-security/2011/06/12/1 - h
ies/44896 - https://bugzilla.redhat.com/show_bug.cgi?id=712676 - http://openwall.com/lists/oss-security/2011/06/12/1 - http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.4&id=c3223ba6c401ba81df1305851312a47c485e6cd7 - http://openwall.com/lists/oss-security/2011/06/12/2 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629938 - http://lists.freedesktop.org/archives/dbus/2007-March/007357.html
CVE ID: CVE-2011-2201 State: PUBLISHED Published: 2011-09-14T15:00:00Z Last Updated: 2024-08-06T22:53:17.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48167 - https://rt.cpan.org/Public/Bug/Display.html?id=61792 - http://www.openwall.com/lists/oss-security/2011/06/13/5 - http://www.openwall.com/lists/oss-security/2011/06/12/3 - http://
p://www.openwall.com/lists/oss-security/2011/06/13/5 - http://www.openwall.com/lists/oss-security/2011/06/12/3 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629511 - https://bugzilla.redhat.com/show_bug.cgi?id=712694 - http://www.openwall.com/lists/oss-security/2011/06/13/13 - http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065416.html
CVE ID: CVE-2011-2202 State: PUBLISHED Published: 2011-06-16T23:00:00 Last Updated: 2024-08-06T22:53:17.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a "file path injection vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48259 - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/main/rfc1867.c?r1=31
: - http://www.securityfocus.com/bid/48259 - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/main/rfc1867.c?r1=312103&r2=312102&pathrev=312103 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://svn.php.net/viewvc?view=revision&revision=312103 - http://support.apple.com/kb/HT5130 - http://www.securityfocus.com/bid/49241 - http://securitytracker.com/id?1025659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67999 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:165 - http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/NEWS?view=markup&pathrev=312103 - http://secunia.com/advisories/44874 - http://www.debian.org/security/2011/dsa-2266 - http://lists.apple.
athrev=312103 - http://secunia.com/advisories/44874 - http://www.debian.org/security/2011/dsa-2266 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://openwall.com/lists/oss-security/2011/06/13/15 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://bugs.php.net/bug.php?id=54939 - http://www.redhat.com/support/errata/RHSA-2011-1423.html - http://www.php.net/ChangeLog-5.php#5.3.7 - http://openwall.com/lists/oss-security/2011/06/12/5 - http://rhn.redhat.com/errata/RHSA-2012-0071.html - http://www.php.net/archive/2011.php#id2011-08-18-1 - http://pastebin.com/1edSuSVN
CVE ID: CVE-2011-2203 State: PUBLISHED Published: 2012-01-27T15:00:00 Last Updated: 2024-08-06T22:53:17.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hfs_find_init function in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and Oops) by mounting an HFS file system with a malformed MDB extent record. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/13/16 - https://bugzilla.redhat.com/show_bug.cgi?id=712774 - http://www.ubuntu.com/usn/USN-1328-1 - http://www.ubuntu.com/usn/USN-1344-1 - http://www.securityfocus.com/bid/48236 - http://www.ubuntu.com/usn/USN-1324
8-1 - http://www.ubuntu.com/usn/USN-1344-1 - http://www.securityfocus.com/bid/48236 - http://www.ubuntu.com/usn/USN-1324-1 - http://secunia.com/advisories/47754 - https://lkml.org/lkml/2011/6/8/154
CVE ID: CVE-2011-2204 State: PUBLISHED Published: 2011-06-29T17:00:00 Last Updated: 2024-08-06T22:53:17.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.17, when the MemoryUserDatabase is used, creates log entries containing passwords upon encountering errors in JMX user creation, which allows local users to obtain sensitive information by reading a log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2011:156 - http://www.debian.org/security/2012/dsa-2401 - http://secunia.com/advisories/48308 - http://support.apple.com/kb/HT5130
http://www.debian.org/security/2012/dsa-2401 - http://secunia.com/advisories/48308 - http://support.apple.com/kb/HT5130 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://www.redhat.com/support/errata/RHSA-2011-1845.html - http://tomcat.apache.org/security-7.html - http://marc.info/?l=bugtraq&m=133469267822771&w=2 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://marc.info/?l=bugtraq&m=132215163318824&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68238 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19532 - http://securitytracker.com/id?1025712 - http://tomcat.apache.org/security-6.html - http:
Aorg.mitre.oval%3Adef%3A19532 - http://securitytracker.com/id?1025712 - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - https://bugzilla.redhat.com/show_bug.cgi?id=717013 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14931 - http://marc.info/?l=bugtraq&m=133469267822771&w=2 - http://www.osvdb.org/73429 - http://tomcat.apache.org/security-5.html - http://secunia.com/advisories/44981 - http://marc.info/?l=bugtraq&m=132215163318824&w=2 - http://marc.info/?l=bugtraq&m=136485229118404&w=2 - http://www.securityfocus.com/bid/48456 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - https://lists.apache.org/thread.html/06c
curityfocus.com/bid/48456 - http://marc.info/?l=bugtraq&m=139344343412337&w=2 - https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2011-2205 State: PUBLISHED Published: 2011-06-22T21:00:00 Last Updated: 2024-08-06T22:53:17.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://blog.prosody.im/prosody-0-8-1-released/ - http://hg.prosody.im/0.8/rev/5305a665bdd4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67884 - http://hg.prosody.im/0.8/rev
sody.im/0.8/rev/5305a665bdd4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67884 - http://hg.prosody.im/0.8/rev/ee6a18f10a8d - http://www.openwall.com/lists/oss-security/2011/06/15/5 - http://secunia.com/advisories/44852 - http://prosody.im/doc/release/0.8.1 - http://www.openwall.com/lists/oss-security/2011/06/14/6 - http://www.securityfocus.com/bid/48125
CVE ID: CVE-2011-2206 State: PUBLISHED Published: 2011-06-22T22:00:00Z Last Updated: 2024-09-16T22:10:13.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference, a different vulnerability than CVE-2011-1757. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/06/15/5 - https://github.com/djabberd/DJabberd/commit/b41d6dc247a175fe8e092d6ec2c4608
enwall.com/lists/oss-security/2011/06/15/5 - https://github.com/djabberd/DJabberd/commit/b41d6dc247a175fe8e092d6ec2c460826fa62992 - https://raw.github.com/djabberd/DJabberd/master/CHANGES - http://groups.google.com/group/djabberd/msg/80a462d5c28873d7?dmode=source&output=gplain - http://www.openwall.com/lists/oss-security/2011/06/14/6
CVE ID: CVE-2011-2207 State: PUBLISHED Published: 2019-11-27T18:06:44 Last Updated: 2024-08-06T22:53:17.536Z Vendors: dirmngr Products: dirmngr Problem Types: Improper dealing with blocking system calls, when verifying a certificate Description: dirmngr before 2.1.0 improperly handles certain system calls, which allows remote attackers to cause a denial of service (DOS) via a specially-crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-2207 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2207 - https://access.redhat.com/security/cve/cve-2011-2207 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=
VE-2011-2207 - https://access.redhat.com/security/cve/cve-2011-2207 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627377 - https://www.openwall.com/lists/oss-security/2011/06/15/6
CVE ID: CVE-2011-2208 State: PUBLISHED Published: 2012-06-13T10:00:00Z Last Updated: 2024-08-06T22:53:17.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the osf_getdomainname function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform allows local users to obtain sensitive information from kernel memory via a crafted call. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.4 - http://www.openwall.com/lists/oss-security/2011/06/15/7 - https://github.com/torvalds/linux/commit/21c5977a836e399fc710ff2c5367845ed5c2527f - http://git.kernel.org
2011/06/15/7 - https://github.com/torvalds/linux/commit/21c5977a836e399fc710ff2c5367845ed5c2527f - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=21c5977a836e399fc710ff2c5367845ed5c2527f
CVE ID: CVE-2011-2209 State: PUBLISHED Published: 2012-06-13T10:00:00Z Last Updated: 2024-08-06T22:53:17.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the osf_sysinfo function in arch/alpha/kernel/osf_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform allows local users to obtain sensitive information from kernel memory via a crafted call. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.4 - http://www.openwall.com/lists/oss-security/2011/06/15/7 - https://github.com/torvalds/linux/commit/21c5977a836e399fc710ff2c5367845ed5c2527f - http://git.kernel.org/?p=li
6/15/7 - https://github.com/torvalds/linux/commit/21c5977a836e399fc710ff2c5367845ed5c2527f - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=21c5977a836e399fc710ff2c5367845ed5c2527f