Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-15538 State: PUBLISHED Published: 2017-10-17T20:00:00Z Last Updated: 2024-09-17T00:10:44.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5.2.9 allows an authenticated user to inject JavaScript to gain administrator privileges, related to the setParameter function in Services/MediaObjects/classes/class.ilMediaItem.php. Additional Analyst Notes: - CVE Program Container: References: - https://lists.ilias.de/pipermail/ilias-admins/2017-October/000053.html - https://www.ilias.de/docu/goto_docu_pg_75377_35.html - http://openwall.com/lists/oss-security/2017/10/17/3 - http
html - https://www.ilias.de/docu/goto_docu_pg_75377_35.html - http://openwall.com/lists/oss-security/2017/10/17/3 - https://github.com/ILIAS-eLearning/ILIAS/commit/b2a4660afec1e87d41c83c8e381f549bc6dfc70f - https://www.ilias.de/docu/goto_docu_pg_75378_1719.html
CVE ID: CVE-2017-15539 State: PUBLISHED Published: 2017-10-17T21:00:00Z Last Updated: 2024-09-17T01:46:37.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection exists in zorovavi/blog through 2017-10-17 via the id parameter to recept.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/imsebao/404team/blob/master/zorovavi-blog-sql-injection.md
CVE ID: CVE-2017-15540 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-15541 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-15542 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-15543 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-15544 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-15545 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-15546 State: PUBLISHED Published: 2018-01-25T03:00:00 Last Updated: 2024-08-05T19:57:26.503Z Vendors: n/a Products: EMC RSA Authentication Manager 8.2 SP1 P6 and earlier Problem Types: SQL Injection Vulnerability Description: The Security Console in EMC RSA Authentication Manager 8.2 SP1 P6 and earlier is affected by a blind SQL injection vulnerability. Authenticated malicious users could potentially exploit this vulnerability to read any unencrypted data from the database. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040268 - http://seclists.org/fulldisclosure/2018/Jan/81 - http://www.securityfocus.com/bid/102838
CVE ID: CVE-2017-15547 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-15548 State: PUBLISHED Published: 2018-01-05T17:00:00 Last Updated: 2024-08-05T19:57:26.467Z Vendors: n/a Products: EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0, EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x, EMC Integrated Data Protection Appliance 2.0 Problem Types: Authentication bypass vulnerability Description: An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote unauthenticated malicious user can potentially bypass application authentication and gain unauthorized root access to the affected systems. Additional A
an potentially bypass application authentication and gain unauthorized root access to the affected systems. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040070 - http://www.securityfocus.com/bid/102352 - http://seclists.org/fulldisclosure/2018/Jan/17
CVE ID: CVE-2017-15549 State: PUBLISHED Published: 2018-01-05T17:00:00 Last Updated: 2024-08-05T19:57:27.025Z Vendors: n/a Products: EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0, EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x, EMC Integrated Data Protection Appliance 2.0 Problem Types: Arbitrary file upload vulnerability Description: An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could potentially upload arbitrary maliciously crafted files in any location on the server file system.
h low privileges could potentially upload arbitrary maliciously crafted files in any location on the server file system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040070 - http://www.securityfocus.com/bid/102363 - http://seclists.org/fulldisclosure/2018/Jan/17
CVE ID: CVE-2017-15550 State: PUBLISHED Published: 2018-01-05T17:00:00 Last Updated: 2024-08-05T19:57:26.996Z Vendors: n/a Products: EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0, EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x, EMC Integrated Data Protection Appliance 2.0 Problem Types: Path traversal vulnerability Description: An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could access arbitrary files on the server file system in the context of the running vulnerable application vi
rivileges could access arbitrary files on the server file system in the context of the running vulnerable application via Path traversal. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040070 - http://seclists.org/fulldisclosure/2018/Jan/17 - http://www.securityfocus.com/bid/102358
CVE ID: CVE-2017-15551 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-15552 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-15553 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-15554 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-15555 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-15556 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-15557 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-15558 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-15559 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-15560 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-15561 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-15562 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-15563 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-15564 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-15565 State: PUBLISHED Published: 2017-10-17T22:00:00 Last Updated: 2024-08-05T19:57:27.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=103016 - https://www.debian.org/security/2018/dsa-4079 - https://lists.debian.org/debian-lts-announce/2017/11/msg00023.html
CVE ID: CVE-2017-15566 State: PUBLISHED Published: 2017-11-01T17:00:00 Last Updated: 2024-08-05T19:57:26.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege escalation to root during Prolog or Epilog execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101675 - https://www.schedmd.com/news.php?id=193#OPT_193 - https://www.debian.org/security/2017/dsa-4023
CVE ID: CVE-2017-15567 State: PUBLISHED Published: 2017-10-23T08:00:00 Last Updated: 2024-08-05T19:57:27.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: The certificate import component in IDEMIA (formerly Morpho) MorphoSmart 1300 Series (aka MSO 1300 Series) devices allows local users to obtain a command shell, and consequently gain privileges, via unspecified vectors. NOTE: the vendor disputes this because there is no command shell in the product or in the associated SDK Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/shiham101/4c49ece8ecac7c3c02ecbc6942aeca80
CVE ID: CVE-2017-15568 State: PUBLISHED Published: 2017-10-18T02:00:00 Last Updated: 2024-08-05T19:57:27.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/application_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of issue history. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://github.com/redmine/redmine/commit/94f7cfbf990028348b9262578acbc53a94fce448 - https://www.debian.org/security/2018/dsa-4191 - https://www.redmine.org/issues/27186
CVE ID: CVE-2017-15569 State: PUBLISHED Published: 2017-10-18T02:00:00 Last Updated: 2024-08-05T19:57:27.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/queries_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of an issue list. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://www.debian.org/security/2018/dsa-4191 - https://www.redmine.org/issues/27186 - https://github.com/redmine/redmine/commit/56c8ee0440d8555aa7822d947ba9091c8a791508
CVE ID: CVE-2017-15570 State: PUBLISHED Published: 2017-10-18T02:00:00 Last Updated: 2024-08-05T19:57:27.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/timelog/_list.html.erb via crafted column data. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://github.com/redmine/redmine/commit/1a0976417975a128b0a932ba1552c37e9414953b - https://www.debian.org/security/2018/dsa-4191 - https://www.redmine.org/issues/27186
CVE ID: CVE-2017-15571 State: PUBLISHED Published: 2017-10-18T02:00:00 Last Updated: 2024-08-05T19:57:27.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/issues/_list.html.erb via crafted column data. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://www.debian.org/security/2018/dsa-4191 - https://www.redmine.org/issues/27186 - https://github.com/redmine/redmine/commit/273dd9cb3bcfb1e0a0b90570b3b34eafa07d67aa
CVE ID: CVE-2017-15572 State: PUBLISHED Published: 2017-10-18T02:00:00 Last Updated: 2024-08-05T19:57:27.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information (password reset tokens) by reading a Referer log, because account/lost_password does not use a redirect. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://www.redmine.org/issues/24416 - https://www.debian.org/security/2018/dsa-4191
CVE ID: CVE-2017-15573 State: PUBLISHED Published: 2017-10-18T02:00:00 Last Updated: 2024-08-05T19:57:27.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Redmine before 3.2.6 and 3.3.x before 3.3.3, XSS exists because markup is mishandled in wiki content. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://www.debian.org/security/2018/dsa-4191 - https://www.redmine.org/issues/25503
CVE ID: CVE-2017-15574 State: PUBLISHED Published: 2017-10-18T02:00:00 Last Updated: 2024-08-05T19:57:27.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Redmine before 3.2.6 and 3.3.x before 3.3.3, stored XSS is possible by using an SVG document as an attachment. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/issues/24199 - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://www.debian.org/security/2018/dsa-4191
CVE ID: CVE-2017-15575 State: PUBLISHED Published: 2017-10-18T02:00:00 Last Updated: 2024-08-05T19:57:27.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whether the Repository module is enabled in a project's settings, which might allow remote attackers to obtain sensitive differences information or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://www.redmine.org/issues/24307 - https://www.debian.org/security/2018/dsa-4191
CVE ID: CVE-2017-15576 State: PUBLISHED Published: 2017-10-18T02:00:00 Last Updated: 2024-08-05T19:57:27.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://www.redmine.org/issues/23803 - https://www.debian.org/security/2018/dsa-4191
CVE ID: CVE-2017-15577 State: PUBLISHED Published: 2017-10-18T02:00:00 Last Updated: 2024-08-05T19:57:27.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://www.debian.org/security/2018/dsa-4191 - https://www.redmine.org/issues/23793
CVE ID: CVE-2017-15578 State: PUBLISHED Published: 2017-10-18T02:00:00 Last Updated: 2024-08-05T19:57:27.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release/ - https://blogs.securiteam.com/index.php/archives/3464
CVE ID: CVE-2017-15579 State: PUBLISHED Published: 2017-10-18T02:00:00 Last Updated: 2024-08-05T19:57:27.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpsugar.com/blog/2017/10/php-melody-v2-7-3-maintenance-release/ - https://blogs.securiteam.com/index.php/archives/3464
CVE ID: CVE-2017-15580 State: PUBLISHED Published: 2017-10-23T08:00:00 Last Updated: 2024-08-05T19:57:27.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly validate the uploaded file's contents and thus accepts any type of file, such as with a tickets.php request that is modified with a .html extension changed to a .exe extension. An attacker can leverage this vulnerability to upload arbitrary files on the web application having malicious content. Additional Analyst Notes: - CVE Program Container: References: - https://becomepentester.blogspot.com/2017/10/osTick
nt. Additional Analyst Notes: - CVE Program Container: References: - https://becomepentester.blogspot.com/2017/10/osTicket-File-Upload-Restrictions-Bypassed-CVE-2017-15580.html - https://packetstormsecurity.com/files/144747/osticket1101-shell.txt - https://www.exploit-db.com/exploits/45169/ - http://0day.today/exploits/28864 - https://cxsecurity.com/issue/WLB-2017100187 - https://www.cyber-security.ro/blog/2017/10/25/osticket-1-10-1-shell-upload/ - http://nakedsecurity.com/cve/CVE-2017-15580/
CVE ID: CVE-2017-15581 State: PUBLISHED Published: 2017-10-27T20:00:00 Last Updated: 2024-08-05T19:57:26.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the "Diary with lock" (aka WriteDiary) application 4.72 for Android, neither HTTPS nor other encryption is used for transmitting data, despite the documentation that the product is intended for "a personal journal of ... secrets and feelings," which allows remote attackers to obtain sensitive information by sniffing the network during LoginActivity or NoteActivity execution. Additional Analyst Notes: - CVE Program Container: References: - https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html - http
E Program Container: References: - https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html - https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa
CVE ID: CVE-2017-15582 State: PUBLISHED Published: 2017-10-27T20:00:00 Last Updated: 2024-08-05T19:57:27.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: In net.MCrypt in the "Diary with lock" (aka WriteDiary) application 4.72 for Android, hardcoded SecretKey and iv variables are used for the AES parameters, which makes it easier for attackers to obtain the cleartext of stored diary entries. Additional Analyst Notes: - CVE Program Container: References: - https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html - https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa
CVE ID: CVE-2017-15583 State: PUBLISHED Published: 2017-10-18T08:00:00 Last Updated: 2024-08-05T19:57:27.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The embedded web server on ABB Fox515T 1.0 devices is vulnerable to Local File Inclusion. It accepts a parameter that specifies a file for display or for use as a template. The filename is not validated; an attacker could retrieve any file. Additional Analyst Notes: - CVE Program Container: References: - http://search-ext.abb.com/library/Download.aspx?DocumentID=1KHW028693&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2017-15587 State: PUBLISHED Published: 2017-10-18T08:00:00 Last Updated: 2024-09-11T16:20:30.905876 Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow was discovered in pdf_read_new_xref_section in pdf/pdf-xref.c in Artifex MuPDF 1.11. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201811-15 - http://www.debian.org/security/2017/dsa-4006 - https://lists.debian.org/debian-lts-announce/2017/11/msg00007.html - http://git.ghostscript.com/?p=mupdf.git%3Bh=82df2631d7d0446b206ea6b434ea609b6c28b0e8 - https://bugs.ghostscript.com/show_bug.cgi?id=698605 - https://bugs.ghostscript.com/show_bug.cgi?id=698704 - htt
28b0e8 - https://bugs.ghostscript.com/show_bug.cgi?id=698605 - https://bugs.ghostscript.com/show_bug.cgi?id=698704 - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=d18bc728e46c5a5708f14d27c2b6c44e1d0c3232
CVE ID: CVE-2017-15588 State: PUBLISHED Published: 2017-10-18T08:00:00 Last Updated: 2024-08-05T19:57:27.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS because of a race condition that can cause a stale TLB entry. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101490 - https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html - https://www.debian.org/security/2017/dsa-4050 - https://support.citrix.com/article/CTX228867 - https://xenbits.xen.org/xsa/advisory-241.html - https://lists.debian.org/debian-l
support.citrix.com/article/CTX228867 - https://xenbits.xen.org/xsa/advisory-241.html - https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html - https://security.gentoo.org/glsa/201801-14 - http://www.securitytracker.com/id/1039568
CVE ID: CVE-2017-15589 State: PUBLISHED Published: 2017-10-18T08:00:00 Last Updated: 2024-08-05T19:57:27.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html - http://www.securityfocus.com/bid/101496 - https://xenbits.xen.org/xsa/advisory-239.html - https://www.debian.org/security/2017/dsa-4050 - h
focus.com/bid/101496 - https://xenbits.xen.org/xsa/advisory-239.html - https://www.debian.org/security/2017/dsa-4050 - https://support.citrix.com/article/CTX228867 - https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html - https://security.gentoo.org/glsa/201801-14 - http://www.securitytracker.com/id/1039568
CVE ID: CVE-2017-15590 State: PUBLISHED Published: 2017-10-18T08:00:00 Last Updated: 2024-08-05T19:57:27.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MSI mapping was mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-237.html - https://www.debian.org/security/2017/dsa-4050 - https://support.citrix.com/article/CTX228867 - https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html - http://www.securityfocus.com/bid/101500 - https://security.gentoo.org
an.org/debian-lts-announce/2018/10/msg00009.html - http://www.securityfocus.com/bid/101500 - https://security.gentoo.org/glsa/201801-14 - http://www.securitytracker.com/id/1039568
CVE ID: CVE-2017-15591 State: PUBLISHED Published: 2017-10-18T08:00:00 Last Updated: 2024-08-05T19:57:27.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen 4.5.x through 4.9.x allowing attackers (who control a stub domain kernel or tool stack) to cause a denial of service (host OS crash) because of a missing comparison (of range start to range end) within the DMOP map/unmap implementation. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-238.html - https://security.gentoo.org/glsa/201801-14