Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
uid=ssg1S1004564 - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html - http://www.openssl.org/news/secadv_20120104.txt - http://www.mandriva.com/security/advisories?name=MDVSA-2012:007 - http://secunia.com/advisories/57353 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://osvdb.org/78191
CVE ID: CVE-2012-0028 State: PUBLISHED Published: 2012-06-21T23:00:00Z Last Updated: 2024-08-06T18:09:17.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=771764 - http://www.openwall.com/lists/oss-security/2012/05/08/1 - https://github.com/torvalds/linux/commit/8141c7f3e7aee618312fa1c15109e1219de784a7 - http://
/oss-security/2012/05/08/1 - https://github.com/torvalds/linux/commit/8141c7f3e7aee618312fa1c15109e1219de784a7 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8141c7f3e7aee618312fa1c15109e1219de784a7 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.28
CVE ID: CVE-2012-0029 State: PUBLISHED Published: 2012-01-27T15:00:00 Last Updated: 2024-08-06T18:09:17.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72656 - http://secunia.com/advisories/47741 - http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0 - http://secunia.com/adviso
nia.com/advisories/47741 - http://git.qemu.org/?p=qemu.git%3Ba=log%3Bh=refs/heads/stable-1.0 - http://secunia.com/advisories/47992 - http://secunia.com/advisories/48318 - http://secunia.com/advisories/47740 - http://www.redhat.com/support/errata/RHSA-2012-0050.html - http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html - http://www.ubuntu.com/usn/USN-1339-1 - http://www.securityfocus.com/bid/51642 - http://secunia.com/advisories/50913 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html - http://rhn.redhat.com/errata/RHSA-2012-0370.html - https://bugzilla.redhat.com/show_bug.cgi?id=772075 - http://lists.fedoraproject.org/pipermail/package-announce/2012-Jun
https://bugzilla.redhat.com/show_bug.cgi?id=772075 - http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html
CVE ID: CVE-2012-0030 State: PUBLISHED Published: 2012-01-13T18:00:00 Last Updated: 2024-08-06T18:09:17.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other users via an OSAPI request with a modified project_id URI parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72296 - http://secunia.com/advisories/47543 - http://www.ubuntu.com/usn/USN-1326-1 - https://github.com/openstack/nova/commit/3d4ffb64f1e18117240c26809788528979e3bd15#diff-0 - https://lists.launchpad.net/ope
tps://github.com/openstack/nova/commit/3d4ffb64f1e18117240c26809788528979e3bd15#diff-0 - https://lists.launchpad.net/openstack/msg06648.html - http://www.securityfocus.com/bid/51370
CVE ID: CVE-2012-0031 State: PUBLISHED Published: 2012-01-18T20:00:00 Last Updated: 2024-08-06T18:09:17.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other impact by modifying a certain type field within a scoreboard shared memory segment, leading to an invalid call to the free function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/47410 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://marc.info/?l=bugtraq&m=134987
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://marc.info/?l=bugtraq&m=134987041210674&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:012 - http://rhn.redhat.com/errata/RHSA-2012-0543.html - http://svn.apache.org/viewvc?view=revision&revision=1230065 - http://www.securityfocus.com/bid/51407 - http://marc.info/?l=bugtraq&m=134987041210674&w=2 - http://marc.info/?l=bugtraq&m=133294460209056&w=2 - http://rhn.redhat.com/errata/RHSA-2012-0128.html - http://marc.info/?l=bugtraq&m=133294460209056&w=2 - http://rhn.redhat.com/errata/RHSA-2012-0542.html - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://supp
.com/errata/RHSA-2012-0542.html - http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - http://support.apple.com/kb/HT5501 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - https://bugzilla.redhat.com/show_bug.cgi?id=773744 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://marc.info/?l=bugtraq&m=133494237717847&w=2 - http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 - http://secunia.com/advisories/48551 - http://www.debian.org/security/2012/dsa-2405 - http://marc.info/?l=bugtraq&m=133494237717847&w=2 - http://list
s/48551 - http://www.debian.org/security/2012/dsa-2405 - http://marc.info/?l=bugtraq&m=133494237717847&w=2 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00002.html - http://www.halfdog.net/Security/2011/ApacheScoreboardInvalidFreeOnShutdown/ - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3e
7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://list
he.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43
%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r05b5357d1f6bd106f41541ee7d87aafe3f5ea4dc3e9bde5ce09baff8%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r1d201e3da31a2c8aa870c8314623caef7debd74a13d0f25205e26f15%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r
6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2012-0032 State: PUBLISHED Published: 2014-04-01T01:00:00 Last Updated: 2024-08-06T18:09:17.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat JBoss Operations Network (JON) before 3.0.1 uses 0777 permissions for the root directory when installing a remote client, which allows local users to read or modify subdirectories and files within the root directory, as demonstrated by obtaining JON credentials. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0406.html - https://bugzilla.redhat.com/show_bug.cgi?id=772514
CVE ID: CVE-2012-0033 State: PUBLISHED Published: 2014-04-08T14:00:00 Last Updated: 2024-08-06T18:09:17.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a denial of service (crash) via a crafted DCC RESUME request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/znc/znc/commit/11508aa72efab4fad0dbd8292b9614d9371b20a9#modules/bouncedcc.cpp - http://secunia.com/advisories/47387 - http://www.openwall.com/lists/oss-security/2012/01/10/1 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00023.html - http://
penwall.com/lists/oss-security/2012/01/10/1 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00023.html - http://www.securityfocus.com/bid/51328
CVE ID: CVE-2012-0034 State: PUBLISHED Published: 2013-02-05T23:11:00 Last Updated: 2024-08-06T18:09:17.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0, Web Platform (EWP) 5.1.2 and 5.2.0, and BRMS Platform before 5.3.1 logs the username and password in cleartext when an exception is thrown, which allows local users to obtain sensitive information by reading the log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/78259 - https://bugzilla.redhat.com/show_bug.cgi?id=772835 - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redha
https://bugzilla.redhat.com/show_bug.cgi?id=772835 - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redhat.com/errata/RHSA-2013-0195.html - http://rhn.redhat.com/errata/RHSA-2013-0221.html - http://rhn.redhat.com/errata/RHSA-2013-0196.html - https://issues.jboss.org/browse/JBCACHE-1612 - http://www.securityfocus.com/bid/51392 - http://rhn.redhat.com/errata/RHSA-2012-1072.html - http://rhn.redhat.com/errata/RHSA-2013-0193.html - http://rhn.redhat.com/errata/RHSA-2012-0108.html - http://secunia.com/advisories/51984 - http://secunia.com/advisories/52054 - http://rhn.redhat.com/errata/RHSA-2013-0191.html - http://rhn.redhat.com/errata/RHSA-2013-0533.html - http://rhn.redhat.com/er
/rhn.redhat.com/errata/RHSA-2013-0191.html - http://rhn.redhat.com/errata/RHSA-2013-0533.html - http://rhn.redhat.com/errata/RHSA-2013-0197.html
CVE ID: CVE-2012-0035 State: PUBLISHED Published: 2012-01-19T15:00:00 Last Updated: 2024-08-06T18:09:17.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2012/01/10/2 - http://sourceforge.net/mailarchive/message.php?msg_id=28657612 - http://secunia.com/advisories/47311 - http://secunia.com/advisories/50801 - htt
ailarchive/message.php?msg_id=28657612 - http://secunia.com/advisories/47311 - http://secunia.com/advisories/50801 - http://openwall.com/lists/oss-security/2012/01/10/4 - http://secunia.com/advisories/47515 - http://sourceforge.net/mailarchive/message.php?msg_id=28649762 - http://www.ubuntu.com/usn/USN-1586-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:076 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072285.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072288.html - https://security.gentoo.org/glsa/201812-05 - http://lists.gnu.org/archive/html/emacs-devel/2012-01/msg00387.html
CVE ID: CVE-2012-0036 State: PUBLISHED Published: 2012-04-13T20:00:00 Last Updated: 2024-08-06T18:09:17.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the (1) IMAP, (2) POP3, or (3) SMTP protocol. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - https://h
y/cpujul2015-2367936.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03760en_us - http://www.securitytracker.com/id/1032924 - http://www.debian.org/security/2012/dsa-2398 - http://security.gentoo.org/glsa/glsa-201203-02.xml - http://www.securityfocus.com/bid/51665 - http://secunia.com/advisories/48256 - http://curl.haxx.se/docs/adv_20120124.html - http://curl.haxx.se/curl-url-sanitize.patch - http://www.mandriva.com/security/advisories?name=MDVSA-2012:058 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - https://bugzilla.redhat.c
-2012:058 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - https://bugzilla.redhat.com/show_bug.cgi?id=773457 - http://support.apple.com/kb/HT5281 - https://github.com/bagder/curl/commit/75ca568fa1c19de4c5358fed246686de8467c238 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
CVE ID: CVE-2012-0037 State: PUBLISHED Published: 2012-06-17T01:00:00 Last Updated: 2024-08-06T18:09:17.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read arbitrary files via a crafted XML external entity (XXE) declaration and reference in an RDF document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60799 - http://secunia.com/advisories/48526 - http://secunia.com/advisories/48479 - http://www.gentoo.org/security/en/glsa/glsa-201408-
secunia.com/advisories/48526 - http://secunia.com/advisories/48479 - http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml - http://security.gentoo.org/glsa/glsa-201209-05.xml - http://secunia.com/advisories/48494 - http://www.securitytracker.com/id?1026837 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:061 - http://www.securityfocus.com/bid/52681 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078242.html - http://secunia.com/advisories/48529 - http://www.osvdb.org/80307 - http://rhn.redhat.com/errata/RHSA-2012-0410.html - http://www.openwall.com/lists/oss-security/2012/03/27/4 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:062 - http
ww.openwall.com/lists/oss-security/2012/03/27/4 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:062 - http://secunia.com/advisories/48542 - http://www.libreoffice.org/advisories/CVE-2012-0037/ - http://vsecurity.com/resources/advisory/20120324-1/ - http://secunia.com/advisories/50692 - http://blog.documentfoundation.org/2012/03/22/tdf-announces-libreoffice-3-4-6/ - http://secunia.com/advisories/48649 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74235 - http://www.debian.org/security/2012/dsa-2438 - http://rhn.redhat.com/errata/RHSA-2012-0411.html - http://secunia.com/advisories/48493 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077708.html -
ttp://secunia.com/advisories/48493 - http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077708.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:063 - http://www.openoffice.org/security/cves/CVE-2012-0037.html - http://librdf.org/raptor/RELEASE.html#rel2_0_7 - https://github.com/dajobe/raptor/commit/a676f235309a59d4aa78eeffd2574ae5d341fcb0 - https://lists.apache.org/thread.html/re0504f08000df786e51795940501e81a5d0ae981ecca68141e87ece0%40%3Ccommits.openoffice.apache.org%3E
CVE ID: CVE-2012-0038 State: PUBLISHED Published: 2012-05-17T10:00:00Z Last Updated: 2024-08-06T18:09:17.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before 3.1.9 allows local users to cause a denial of service (panic) via a filesystem with a malformed ACL, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/01/10/11 - https://github.com/torvalds/linux/commit/fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bba - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa8
edd752a8b4e9d1ee2cd615b82c93cf8bba - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bba - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=093019cf1b18dd31b2c3b77acce4e000e2cbc9ce - https://bugzilla.redhat.com/show_bug.cgi?id=773280 - https://github.com/torvalds/linux/commit/093019cf1b18dd31b2c3b77acce4e000e2cbc9ce - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.9
CVE ID: CVE-2012-0039 State: PUBLISHED Published: 2012-01-14T17:00:00Z Last Updated: 2025-01-21T18:29:23.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. NOTE: this issue may be disputed by the vendor; the existence of the g_str_hash function is not a vulnerability in the library, because callers of g_hash_table_new and g_hash_table_new_full can specify an arbitrary hash fu
erability in the library, because callers of g_hash_table_new and g_hash_table_new_full can specify an arbitrary hash function that is appropriate for the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://openwall.com/lists/oss-security/2012/01/10/12 - http://mail.gnome.org/archives/gtk-devel-list/2003-May/msg00111.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655044 - https://bugzilla.redhat.com/show_bug.cgi?id=772720
CVE ID: CVE-2012-0040 State: PUBLISHED Published: 2012-01-24T18:00:00 Last Updated: 2024-08-06T18:09:17.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules/core/www/no_cookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/72313 - http://secunia.com/advisories/47534 - http://code.google.com/p/simplesamlphp/issues/detail?id=468 - http://osvdb.org/78254 - http://www.openwall.com/lists/oss-security/2012/01/
.com/p/simplesamlphp/issues/detail?id=468 - http://osvdb.org/78254 - http://www.openwall.com/lists/oss-security/2012/01/20/20 - http://www.securityfocus.com/bid/51372 - http://secunia.com/advisories/47491 - http://www.debian.org/security/2012/dsa-2387
CVE ID: CVE-2012-0041 State: PUBLISHED Published: 2012-04-11T10:00:00 Last Updated: 2024-08-06T18:09:17.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_packet function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) via a long packet in a capture file, as demonstrated by an airopeek file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6663 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=40164 - http://www.openwall.com/lists/oss-security/2012/01/20/4 - http://secunia.com/advisories/54425
=revision&revision=40164 - http://www.openwall.com/lists/oss-security/2012/01/20/4 - http://secunia.com/advisories/54425 - http://rhn.redhat.com/errata/RHSA-2013-0125.html - http://www.wireshark.org/security/wnpa-sec-2012-01.html - http://secunia.com/advisories/48947 - http://www.openwall.com/lists/oss-security/2012/01/11/7 - http://secunia.com/advisories/47494 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15297
CVE ID: CVE-2012-0042 State: PUBLISHED Published: 2012-04-11T10:00:00 Last Updated: 2024-08-06T18:09:17.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 does not properly perform certain string conversions, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted packet, related to epan/to_str.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2012-02.html - http://secunia.com/advisories/54425 - http://rhn.redhat.com/errata/RHSA-2013-0125.html - http://secunia.com/advisories/48947 - http://www.openwall
ies/54425 - http://rhn.redhat.com/errata/RHSA-2013-0125.html - http://secunia.com/advisories/48947 - http://www.openwall.com/lists/oss-security/2012/01/11/7 - http://www.securitytracker.com/id?1026507 - http://secunia.com/advisories/47494 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://anonsvn.wireshark.org/viewvc?view=revision&revision=40194 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15368 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6634
CVE ID: CVE-2012-0043 State: PUBLISHED Published: 2012-04-11T10:00:00 Last Updated: 2024-08-06T18:09:17.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the reassemble_message function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a series of fragmented RLC packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2012-03.html - http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=4026