Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-4001 State: PUBLISHED Published: 2015-06-07T23:00:00 Last Updated: 2024-08-06T06:04:02.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the oz_hcd_get_desc_cnf function in drivers/staging/ozwpan/ozhcd.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2665-1 - http://www.securityfocus.com/bid/74672 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b1bb5b49373b61bf9d2c73a4d30058ba6f069e
74672 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b1bb5b49373b61bf9d2c73a4d30058ba6f069e4c - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html - https://github.com/torvalds/linux/commit/b1bb5b49373b61bf9d2c73a4d30058ba6f069e4c - http://openwall.com/lists/oss-security/2015/06/05/7 - http://www.ubuntu.com/usn/USN-2667-1
CVE ID: CVE-2015-4002 State: PUBLISHED Published: 2015-06-07T23:00:00 Last Updated: 2024-08-06T06:04:02.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does not ensure that certain length values are sufficiently large, which allows remote attackers to cause a denial of service (system crash or large loop) or possibly execute arbitrary code via a crafted packet, related to the (1) oz_usb_rx and (2) oz_usb_handle_ep_data functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74668 - https://github.com/torvalds/linux/commit/d114b9fe78c8d
Container: References: - http://www.securityfocus.com/bid/74668 - https://github.com/torvalds/linux/commit/d114b9fe78c8d6fc6e70808c2092aa307c36dc8e - http://www.ubuntu.com/usn/USN-2665-1 - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html - https://github.com/torvalds/linux/commit/9a59029bc218b48eff8b5d4dde5662fd79d3e1a8 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9a59029bc218b48eff8b5d4dde5662fd79d3e1a8 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d114b9fe78c8d6fc6e70808c2092aa307c36dc8e - http://openwall.com/lists/oss-security/2015/06/05/7 - http://www.ubuntu.com/usn/USN-2667-1
CVE ID: CVE-2015-4003 State: PUBLISHED Published: 2015-06-07T23:00:00 Last Updated: 2024-08-06T06:04:02.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The oz_usb_handle_ep_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74668 - http://www.ubuntu.com/usn/USN-2665-1 - https://github.com/torvalds/linux/commit/04bf464a5dfd9ade0dda918e44366c2c61fce80b - http://lists.opensuse.org/opensuse-security-announce/2015-08
lds/linux/commit/04bf464a5dfd9ade0dda918e44366c2c61fce80b - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04bf464a5dfd9ade0dda918e44366c2c61fce80b - http://openwall.com/lists/oss-security/2015/06/05/7 - http://www.ubuntu.com/usn/USN-2667-1
CVE ID: CVE-2015-4004 State: PUBLISHED Published: 2015-06-07T23:00:00 Last Updated: 2024-08-06T06:04:02.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3004-1 - http://www.securityfocus.com/bid/74669 - https://lkml.org/lkml/2015/5/13/739 - http://www.ubuntu.com/usn/USN-3001-1 - http://www.ubuntu.com/usn/USN
m/bid/74669 - https://lkml.org/lkml/2015/5/13/739 - http://www.ubuntu.com/usn/USN-3001-1 - http://www.ubuntu.com/usn/USN-3000-1 - http://www.ubuntu.com/usn/USN-3002-1 - http://www.ubuntu.com/usn/USN-2989-1 - http://openwall.com/lists/oss-security/2015/06/05/7 - http://www.ubuntu.com/usn/USN-3003-1 - http://www.ubuntu.com/usn/USN-2998-1
CVE ID: CVE-2015-4010 State: PUBLISHED Published: 2015-06-09T14:00:00 Last Updated: 2024-08-06T06:04:01.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the iframe_url parameter in an Update Page action in the conformconf page to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37264/ - https://wpvulndb.com/vulnerabilities/7992 - https://wordpress.org/plu
es: - https://www.exploit-db.com/exploits/37264/ - https://wpvulndb.com/vulnerabilities/7992 - https://wordpress.org/plugins/encrypted-contact-form/changelog/ - http://www.securityfocus.com/bid/73433 - http://packetstormsecurity.com/files/132209/WordPress-Encrypted-Contact-Form-1.0.4-CSRF-XSS.html - http://marc.info/?l=bugtraq&m=142607790919348&w=2 - http://seclists.org/fulldisclosure/2015/May/63 - http://www.securityfocus.com/archive/1/535699/100/0/threaded - https://plugins.trac.wordpress.org/changeset/1125443/ - http://marc.info/?l=bugtraq&m=142607790919348&w=2
CVE ID: CVE-2015-4016 State: PUBLISHED Published: 2015-05-20T18:00:00 Last Updated: 2024-08-06T06:04:02.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client detection protocol in Valve Steam allows remote attackers to cause a denial of service (process crash) via a crafted response to a broadcast packet. Additional Analyst Notes: - CVE Program Container: References: - http://store.steampowered.com/news/16801/ - http://www.securityfocus.com/bid/74735 - http://www.zerodayinitiative.com/advisories/ZDI-15-233/
CVE ID: CVE-2015-4017 State: PUBLISHED Published: 2017-08-25T18:00:00 Last Updated: 2024-08-06T06:04:02.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules. Additional Analyst Notes: - CVE Program Container: References: - https://docs.saltstack.com/en/latest/topics/releases/2014.7.6.html - http://www.openwall.com/lists/oss-security/2015/05/19/2 - https://groups.google.com/forum/#%21topic/salt-users/8Kv1bytGD6c - https://bugzilla.redhat.com/show_bug.cgi?id=1222960
CVE ID: CVE-2015-4018 State: PUBLISHED Published: 2015-05-21T20:00:00 Last Updated: 2024-08-06T06:04:02.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the link_ids[] parameter in an Update action in the syndication.php page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/feedwordpress/changelog/ - https://www.exploit-db.com/exploits/37067/ - http://seclists.org/fulldisclosure/2015/May/75 - http://packetstorms
log/ - https://www.exploit-db.com/exploits/37067/ - http://seclists.org/fulldisclosure/2015/May/75 - http://packetstormsecurity.com/files/131974/WordPress-FeedWordPress-2015.0426-SQL-Injection.html
CVE ID: CVE-2015-4020 State: PUBLISHED Published: 2015-08-25T17:00:00 Last Updated: 2024-08-06T06:04:02.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: RubyGems 2.0.x before 2.0.17, 2.2.x before 2.2.5, and 2.4.x before 2.4.8 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to redirect requests to arbitrary domains via a crafted DNS SRV record with a domain that is suffixed with the original domain name, aka a "DNS hijack attack." NOTE: this vulnerability exists because to an incomplete fix for CVE-2015-3900. Additional Analyst Notes: - CVE Program Container: References: - http://blog.rubygems.org/2015/06/08/2.2.5-released
900. Additional Analyst Notes: - CVE Program Container: References: - http://blog.rubygems.org/2015/06/08/2.2.5-released.html - https://www.trustwave.com/Resources/SpiderLabs-Blog/Attacking-Ruby-Gem-Security-with-CVE-2015-3900/ - http://www.securityfocus.com/bid/75431 - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-009/?fid=6478 - http://blog.rubygems.org/2015/06/08/2.4.8-released.html - https://github.com/rubygems/rubygems/commit/5c7bfb5 - https://puppet.com/security/cve/CVE-2015-3900 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-4021 State: PUBLISHED Published: 2015-06-09T18:00:00 Last Updated: 2024-08-06T06:04:02.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows remote attackers to cause a denial of service (integer underflow and memory corruption) via a crafted entry in a tar archive. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1187.html - http://rhn.redhat.com/errata/RHSA-2015-1186.html - http://rhn.redhat.c
ttp://rhn.redhat.com/errata/RHSA-2015-1187.html - http://rhn.redhat.com/errata/RHSA-2015-1186.html - http://rhn.redhat.com/errata/RHSA-2015-1219.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html - http://php.net/ChangeLog-5.php - http://www.securityfocus.com/bid/74700 - http://www.debian.org/security/2015/dsa-3280 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.securitytracker.com/id/1032433 - https://bugs.php.net/bug.php?id=69453 - http://rhn.redhat.com/errata/RHSA-2015-1135.html - https://support.apple.com/kb/HT205031 - http://lists.fedoraproje
53 - http://rhn.redhat.com/errata/RHSA-2015-1135.html - https://support.apple.com/kb/HT205031 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html - https://security.gentoo.org/glsa/201606-10 - http://rhn.redhat.com/errata/RHSA-2015-1218.html
CVE ID: CVE-2015-4022 State: PUBLISHED Published: 2015-06-09T18:00:00 Last Updated: 2024-08-06T06:04:02.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1187.html - https://bugs.php.net/bug.php?id=69545 - http://rhn.redhat.com/errata/RHSA-2015-1186.html - http://rhn.redhat.com/errata/RHSA-2015-1219.html - http://www.oracle
http://rhn.redhat.com/errata/RHSA-2015-1186.html - http://rhn.redhat.com/errata/RHSA-2015-1219.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html - http://php.net/ChangeLog-5.php - http://www.debian.org/security/2015/dsa-3280 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.securitytracker.com/id/1032433 - http://rhn.redhat.com/errata/RHSA-2015-1135.html - http://www.securityfocus.com/bid/74902 - https://support.apple.com/kb/HT205031 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html - http://lists.fedoraproject.org/p
5031 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html - https://security.gentoo.org/glsa/201606-10 - http://rhn.redhat.com/errata/RHSA-2015-1218.html
CVE ID: CVE-2015-4024 State: PUBLISHED Published: 2015-06-09T18:00:00 Last Updated: 2024-08-06T06:04:02.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1187.html - http://rhn.redhat.com/errata/RHSA-2015-1186.html - http://www.securityfocus.com/bid/74903 - http://www.securit
87.html - http://rhn.redhat.com/errata/RHSA-2015-1186.html - http://www.securityfocus.com/bid/74903 - http://www.securitytracker.com/id/1032432 - http://rhn.redhat.com/errata/RHSA-2015-1219.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html - https://bugs.php.net/bug.php?id=69364 - http://php.net/ChangeLog-5.php - http://www.debian.org/security/2015/dsa-3280 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://rhn.redhat.com/errata/RHSA-2015-1135.html - https://h20566.www2.hpe
es/security-announce/2015/Aug/msg00001.html - http://rhn.redhat.com/errata/RHSA-2015-1135.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763 - https://support.apple.com/kb/HT205031 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html - http://rhn.redhat.com/errata/RHSA-2015-1218.html
CVE ID: CVE-2015-4025 State: PUBLISHED Published: 2015-06-09T18:00:00 Last Updated: 2024-08-06T06:04:02.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to (1) set_include_path, (2) tempnam, (3) rmdir, or (4) readlink. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/R
e fix for CVE-2006-7243. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1187.html - http://rhn.redhat.com/errata/RHSA-2015-1186.html - https://bugs.php.net/bug.php?id=69418 - http://rhn.redhat.com/errata/RHSA-2015-1219.html - http://www.securityfocus.com/bid/74904 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://php.net/ChangeLog-5.php - http://www.debian.org/security/2015/dsa-3280 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://rhn.redhat.com/errata/RHSA-2015-1135.html - http://www.securitytracker.com/id/1032431 - https://support.apple.com/kb/HT205031 -
at.com/errata/RHSA-2015-1135.html - http://www.securitytracker.com/id/1032431 - https://support.apple.com/kb/HT205031 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html - https://security.gentoo.org/glsa/201606-10
CVE ID: CVE-2015-4026 State: PUBLISHED Published: 2015-06-09T18:00:00 Last Updated: 2024-08-06T06:04:02.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character, which might allow remote attackers to bypass intended extension restrictions and execute files with unexpected names via a crafted first argument. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1187.html - http://rhn.redhat.com/errata/RHSA-20
Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1187.html - http://rhn.redhat.com/errata/RHSA-2015-1186.html - http://rhn.redhat.com/errata/RHSA-2015-1219.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - https://bugs.php.net/bug.php?id=68598 - http://lists.opensuse.org/opensuse-updates/2015-06/msg00002.html - http://php.net/ChangeLog-5.php - http://www.debian.org/security/2015/dsa-3280 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://rhn.redhat.com/errata/RHSA-2015-1135.html - http://www.securitytracker.com/id/1032431 - https://support.apple.com/kb/HT205031 - http://lists.fedoraproject.org/
ml - http://www.securitytracker.com/id/1032431 - https://support.apple.com/kb/HT205031 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html - http://www.securityfocus.com/bid/75056 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html - https://security.gentoo.org/glsa/201606-10 - http://rhn.redhat.com/errata/RHSA-2015-1218.html
CVE ID: CVE-2015-4027 State: PUBLISHED Published: 2015-12-17T19:00:00 Last Updated: 2024-08-06T06:04:02.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before 10 build 20151125 allows local users to gain privileges via a command parameter in the reporttemplate property in a params JSON object to api/addScan. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134602/Acunetix-WVS-10-Local-Privilege-Escalation.html - https://www.exploit-db.com/exploits/38847/ - https://www.acunetix.com/blog/releases/acunetix-10-build-includes-security-checks-in-cors-confi
db.com/exploits/38847/ - https://www.acunetix.com/blog/releases/acunetix-10-build-includes-security-checks-in-cors-configurations/
CVE ID: CVE-2015-4029 State: PUBLISHED Published: 2015-08-18T15:00:00 Last Updated: 2024-08-06T06:04:02.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the WebGUI in pfSense before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the zone parameter in a del action to services_captiveportal_zones.php. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Jul/66 - https://www.pfsense.org/security/advisories/pfSense-SA-15_06.webgui.asc
CVE ID: CVE-2015-4031 State: PUBLISHED Published: 2015-05-29T15:00:00 Last Updated: 2024-08-06T06:04:02.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in saveFile.jsp in the development installation in Visual Mining NetChart allows remote attackers to write to arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-237/ - http://www.securityfocus.com/bid/74792
CVE ID: CVE-2015-4032 State: PUBLISHED Published: 2015-05-29T15:00:00 Last Updated: 2024-08-06T06:04:02.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: projectContents.jsp in the Developer tools in Visual Mining NetCharts Server allows remote attackers to rename arbitrary files, and consequently execute them, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-238/ - http://www.securityfocus.com/bid/74788
CVE ID: CVE-2015-4033 State: PUBLISHED Published: 2015-07-06T14:00:00 Last Updated: 2024-08-06T06:04:02.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung SBeam allows remote attackers to read arbitrary images by leveraging an NFC connection to access the HTTP server on port 15000. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75404 - http://www.zerodayinitiative.com/advisories/ZDI-15-257/
CVE ID: CVE-2015-4034 State: PUBLISHED Published: 2015-07-06T14:00:00 Last Updated: 2024-08-06T06:04:02.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: The createFromParcel method in the com.absolute.android.persistence.MethodSpec class in Samsung Galaxy S5s allows remote attackers to execute arbitrary files via a crafted Parcelable object in a serialized MethodSpec object. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-256/ - http://www.securityfocus.com/bid/75403
CVE ID: CVE-2015-4035 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-06T06:04:02.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: scripts/xzgrep.in in xzgrep 5.2.x before 5.2.0, before 5.0.0 does not properly process file names containing semicolons, which allows remote attackers to execute arbitrary code by having a user run xzgrep on a crafted file name. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2015/q2/484 - https://bugzilla.redhat.com/show_bug.cgi?id=1223341 - https://git.tukaani.org/?p=xz.git%3Ba=commitdiff%3Bh=f4b2b52624b802c786e4e2a8eb6895794dd93b24 - http://www.openwall.com/lists/oss-security/201
g/?p=xz.git%3Ba=commitdiff%3Bh=f4b2b52624b802c786e4e2a8eb6895794dd93b24 - http://www.openwall.com/lists/oss-security/2015/05/19/13
CVE ID: CVE-2015-4036 State: PUBLISHED Published: 2015-08-31T20:00:00 Last Updated: 2024-08-06T06:04:02.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the tcm_vhost_make_tpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted VHOST_SCSI_SET_ENDPOINT ioctl call. NOTE: the affected function was renamed to vhost_scsi_make_tpg before the vulnerability was announced. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2634-1 - http://www.securityfocus.com/bid/74664 - http://g
rogram Container: References: - http://www.ubuntu.com/usn/USN-2634-1 - http://www.securityfocus.com/bid/74664 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=59c816c1f24df0204e01851431d3bab3eb76719c - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html - http://www.openwall.com/lists/oss-security/2015/05/13/4 - https://github.com/torvalds/linux/commit/59c816c1f24df0204e01851431d3bab3eb76719c - https://bugzilla.redhat.com/show_bug.cgi?id=1189864 - http://www.ubuntu.com/usn/USN-2633-1 - http://www.securitytracker.com/id/1033729