Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
&pvid=security_advisory&year=&suid=20140804_00 - http://www.osvdb.org/109663 - http://www.securityfocus.com/bid/68946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/95062 - http://www.kb.cert.org/vuls/id/252068 - http://secunia.com/advisories/58996 - http://secunia.com/advisories/59697 - http://www.exploit-db.com/exploits/34272 - http://packetstormsecurity.com/files/127772/Symantec-Endpoint-Protection-11.x-12.x-Kernel-Pool-Overflow.html
CVE ID: CVE-2014-3435 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-3436 State: PUBLISHED Published: 2014-08-22T01:00:00 Last Updated: 2024-08-06T10:43:05.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Encryption Desktop 10.3.x before 10.3.2 MP3, and Symantec PGP Desktop 10.0.x through 10.2.x, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted encrypted e-mail message that decompresses to a larger size. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95406 - http://www.securitytracker.com/id/1030761 - http://www.securityfocus.com/bid/69259 - http://www.symantec.com/security_response/securityupdates/deta
com/id/1030761 - http://www.securityfocus.com/bid/69259 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140821_00
CVE ID: CVE-2014-3437 State: PUBLISHED Published: 2014-11-07T11:00:00 Last Updated: 2024-08-06T10:43:06.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98525 - http://www.symantec.com/security_respons
osure/2014/Nov/7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98525 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141105_00 - http://www.securityfocus.com/bid/70843 - http://www.securityfocus.com/archive/1/533918/100/0/threaded - http://www.securitytracker.com/id/1031176
CVE ID: CVE-2014-3438 State: PUBLISHED Published: 2014-11-07T11:00:00 Last Updated: 2024-08-06T10:43:06.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/98526 - http://seclists.org/fulldisclosure/2014/Nov/7 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20
www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141105_00 - http://www.securityfocus.com/bid/70844 - http://www.securityfocus.com/archive/1/533918/100/0/threaded - http://www.securitytracker.com/id/1031176
CVE ID: CVE-2014-3439 State: PUBLISHED Published: 2014-11-07T11:00:00 Last Updated: 2024-08-06T10:43:06.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: ConsoleServlet in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Nov/7 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141105_00 - http://www.securityfocus.com/bid/70845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98527 - http://www.securityfocu
//www.securityfocus.com/bid/70845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98527 - http://www.securityfocus.com/archive/1/533918/100/0/threaded - http://www.securitytracker.com/id/1031176
CVE ID: CVE-2014-3440 State: PUBLISHED Published: 2015-01-21T11:00:00 Last Updated: 2024-08-06T10:43:05.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Agent Control Interface in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x before 6.0 MP1 allows remote authenticated users to execute arbitrary commands by leveraging client-system access to upload a log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150119_00 - http://se
rity_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150119_00 - http://seclists.org/fulldisclosure/2015/May/39 - http://www.securityfocus.com/bid/72091
CVE ID: CVE-2014-3441 State: PUBLISHED Published: 2014-05-14T19:00:00 Last Updated: 2024-08-06T10:43:06.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: codec\libpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service (crash) via a crafted .png file, as demonstrated by a png in a .wave file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126564/VLC-Player-2.1.3-Memory-Corruption.html - http://www.securityfocus.com/bid/67315
CVE ID: CVE-2014-3442 State: PUBLISHED Published: 2014-05-23T14:00:00 Last Updated: 2024-08-06T10:43:06.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malformed .FLV file, related to f263.w5s. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/93173 - http://packetstormsecurity.com/files/126636 - http://www.securityfocus.com/bid/67429
CVE ID: CVE-2014-3443 State: PUBLISHED Published: 2014-05-14T19:00:00 Last Updated: 2024-08-06T10:43:06.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: JetMPAd.ax in JetAudio 8.1.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .ogg file. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/33332 - http://www.securityfocus.com/bid/67319
CVE ID: CVE-2014-3444 State: PUBLISHED Published: 2014-05-20T10:00:00 Last Updated: 2024-08-06T10:43:05.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16.0.3.51 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (write access violation and application crash) via a malformed .3gp file. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126637
CVE ID: CVE-2014-3445 State: PUBLISHED Published: 2020-01-28T14:09:12 Last Updated: 2024-08-06T10:43:06.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: backup.php in HandsomeWeb SOS Webpages before 1.1.12 does not require knowledge of the cleartext password, which allows remote attackers to bypass authentication by leveraging knowledge of the administrator password hash. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126844/HandsomeWeb-SOS-Webpages-1.1.11-Backup-Hash-Disclosure.html - http://sourceforge.net/projects/soswebpages/files/SOS%20Webpages/SOS%20Webpages%201.1.12/ - http://seclists.org/fulldisclosure/2014/May/130
net/projects/soswebpages/files/SOS%20Webpages/SOS%20Webpages%201.1.12/ - http://seclists.org/fulldisclosure/2014/May/130 - http://www.securityfocus.com/bid/67644 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-3445/
CVE ID: CVE-2014-3446 State: PUBLISHED Published: 2014-10-30T14:00:00 Last Updated: 2024-08-06T10:43:06.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-3446 - http://www.securityfocus.com/bid/70861 - http://seclists.org/fulldisclosure/2014/May/87 - https://exchange.xforce.ibmcloud.com/vulnerabilities/93280
CVE ID: CVE-2014-3447 State: PUBLISHED Published: 2020-01-09T13:21:09 Last Updated: 2024-08-06T10:43:06.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/May/86 - https://packetstormsecurity.com/files/126741/BSS-Continuity-CMS-4.2.22640.0-Denial-Of-Service.html
CVE ID: CVE-2014-3448 State: PUBLISHED Published: 2020-01-09T13:25:26 Last Updated: 2024-08-06T10:43:06.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126740/BSS-Continuity-CMS-4.2.22640.0-Code-Execution.html - http://seclists.org/fulldisclosure/2014/May/85
CVE ID: CVE-2014-3449 State: PUBLISHED Published: 2020-01-09T13:28:31 Last Updated: 2024-08-06T10:43:05.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/126739/BSS-Continuity-CMS-4.2.22640.0-Authentication-Bypass.html - http://seclists.org/fulldisclosure/2014/May/84
CVE ID: CVE-2014-3450 State: PUBLISHED Published: 2014-05-23T14:00:00 Last Updated: 2024-08-06T10:43:05.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Panda Gold Protection and Global Protection 2014 7.01.01 and earlier, Internet Security 2014 19.01.01 and earlier, and AV Pro 2014 13.01.01 and earlier allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/May/89 - http://www.securityfocus.com/archive/1/532163/100/0/threaded - http://www.securityfocus.com/bid/67527
CVE ID: CVE-2014-3451 State: PUBLISHED Published: 2017-08-18T18:00:00 Last Updated: 2024-08-06T10:43:05.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenFire XMPP Server before 3.10 accepts self-signed certificates, which allows remote attackers to perform unspecified spoofing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/04/23/16 - http://www.securityfocus.com/archive/1/535363/100/1100/threaded - https://community.igniterealtime.org/blogs/ignite/2015/04/22/openfire-3100-released - http://packetstormsecurity.com/files/131614/OpenFire-XMPP-3.9.3-Certificate-Handling.html - http://www.securityfocus.c
- http://packetstormsecurity.com/files/131614/OpenFire-XMPP-3.9.3-Certificate-Handling.html - http://www.securityfocus.com/bid/74305
CVE ID: CVE-2014-3452 State: PUBLISHED Published: 2014-05-16T15:00:00 Last Updated: 2024-08-06T10:43:06.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Filters\LAV\avfilter-lav-4.dll in K-lite Codec 10.4.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .jpg file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67403 - http://packetstormsecurity.com/files/126613/klite1045-corrupt.txt
CVE ID: CVE-2014-3453 State: PUBLISHED Published: 2014-05-17T19:00:00 Last Updated: 2024-08-06T10:43:05.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in the flag_import_form_validate function in includes/flag.export.inc in the Flag module 7.x-3.0, 7.x-3.5, and earlier for Drupal allows remote authenticated administrators to execute arbitrary PHP code via the "Flag import code" text area to admin/structure/flags/import. NOTE: this issue could also be exploited by other attackers if the administrator ignores a security warning on the permissions assignment page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfo
the permissions assignment page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67318 - https://bugzilla.redhat.com/show_bug.cgi?id=1096604 - http://seclists.org/fulldisclosure/2014/May/44 - http://www.openwall.com/lists/oss-security/2014/05/12/2
CVE ID: CVE-2014-3454 State: PUBLISHED Published: 2014-05-12T14:00:00Z Last Updated: 2024-09-16T22:46:54.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Special:CreateCategory in the SemanticForms extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to hijack the authentication of users for requests that create categories via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html - https://bugzilla.wikimedia.org/show_bug.cgi?id=57025
CVE ID: CVE-2014-3455 State: PUBLISHED Published: 2014-05-12T14:00:00Z Last Updated: 2024-09-17T02:42:25.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) CreateProperty, (2) CreateTemplate, (3) CreateForm, and (4) CreateClass special pages in the SemanticForms extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allow remote attackers to hijack the authentication of users for requests that have unspecified impact and vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html - https
rogram Container: References: - http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html - https://bugzilla.wikimedia.org/show_bug.cgi?id=57025
CVE ID: CVE-2014-3456 State: PUBLISHED Published: 2014-05-13T15:00:00Z Last Updated: 2024-09-17T01:57:02.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in GitLab Enterprise Edition (EE) 6.6.0 before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.gitlab.com/2014/02/27/gitlab-ee-6-6-2-security-release/
CVE ID: CVE-2014-3459 State: PUBLISHED Published: 2014-08-07T10:00:00 Last Updated: 2024-08-06T10:43:06.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in SolarWinds Network Configuration Manager (NCM) before 7.3 allows remote attackers to execute arbitrary code via the PEstrarg1 property. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-14-133/
CVE ID: CVE-2014-3460 State: PUBLISHED Published: 2014-05-20T10:00:00 Last Updated: 2024-08-06T10:43:06.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted pathname. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/58635 - http://www.securitytracker.com/id/1030434 - http://www.securityfocus.com/bid/67487 - http://zerodayinitiative.com/advisories/ZDI-14-134/ - http://www.novell.com/support/kb/doc.php?id=7
ocus.com/bid/67487 - http://zerodayinitiative.com/advisories/ZDI-14-134/ - http://www.novell.com/support/kb/doc.php?id=7015183
CVE ID: CVE-2014-3461 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T10:43:06.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0743.html - http://rhn.redhat.com/errata/RHSA-2014-0744.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134053.html - http://article.gmane.org/gmane.comp.emulators.qemu/272092
CVE ID: CVE-2014-3462 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-06T10:43:05.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "blockMACRandBytes". Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2017-01/msg00090.html - http://www.openwall.com/lists/oss-security/2014/05/14/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1097537 - https://security.gentoo.org/glsa/201512-09
CVE ID: CVE-2014-3463 State: REJECTED Published: 2014-05-30T10:00:00 Last Updated: 2014-05-30T08:57:00 Description: No description available.
CVE ID: CVE-2014-3464 State: PUBLISHED Published: 2014-08-19T18:00:00 Last Updated: 2024-08-06T10:43:06.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) 6.2.0 and 6.3.0, does not properly enforce the method level restrictions for outbound messages, which allows remote authenticated users to access otherwise restricted JAX-WS handlers by leveraging permissions to the EJB class. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-2133. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulner
-2013-2133. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/95409 - http://rhn.redhat.com/errata/RHSA-2014-1020.html - https://bugzilla.redhat.com/show_bug.cgi?id=1102317 - http://rhn.redhat.com/errata/RHSA-2014-1021.html - http://rhn.redhat.com/errata/RHSA-2014-1019.html
CVE ID: CVE-2014-3465 State: PUBLISHED Published: 2014-06-10T14:00:00 Last Updated: 2024-08-06T10:43:06.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN. Additional Analyst Notes: - CVE Program Container: References: - http://lists.gnutls.org/pipermail/gnutls-help/2014-January/003326.html - https://bugzilla.redhat.com/show_bug.cgi?id=1101734 - http://secunia.com/advisories/59086 - http://r
nuary/003326.html - https://bugzilla.redhat.com/show_bug.cgi?id=1101734 - http://secunia.com/advisories/59086 - http://rhn.redhat.com/errata/RHSA-2014-0684.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00007.html - https://www.gitorious.org/gnutls/gnutls/commit/d3648ebb04b650e6d20a2ec1fb839256b30b9fc6 - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00010.html - http://lists.gnutls.org/pipermail/gnutls-help/2014-January/003327.html
CVE ID: CVE-2014-3466 State: PUBLISHED Published: 2014-06-03T14:00:00 Last Updated: 2024-08-06T10:43:06.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote servers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a long session id in a ServerHello message. Additional Analyst Notes: - CVE Program Container: References: - http://www.gnutls.org/security.html - http://www-01.ibm.com/support/docview.wss?uid=swg21678776 - http://www.debian.org/security/2014/dsa-2944 - http://secunia.com/advi
-01.ibm.com/support/docview.wss?uid=swg21678776 - http://www.debian.org/security/2014/dsa-2944 - http://secunia.com/advisories/58340 - http://rhn.redhat.com/errata/RHSA-2014-0595.html - http://www.ubuntu.com/usn/USN-2229-1 - http://secunia.com/advisories/58642 - http://www.securityfocus.com/bid/67741 - http://www.novell.com/support/kb/doc.php?id=7015302 - http://secunia.com/advisories/59057 - http://linux.oracle.com/errata/ELSA-2014-0595.html - http://secunia.com/advisories/59086 - https://bugzilla.redhat.com/show_bug.cgi?id=1101932 - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html - http://rhn.redhat.com/errata/RHSA-2014-0684.html - http://lists.opensuse.org/opens
rity-announce/2014-06/msg00002.html - http://rhn.redhat.com/errata/RHSA-2014-0684.html - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00007.html - http://secunia.com/advisories/59021 - http://rhn.redhat.com/errata/RHSA-2014-0815.html - http://radare.today/technical-analysis-of-the-gnutls-hello-vulnerability/ - http://www.novell.com/support/kb/doc.php?id=7015303 - http://linux.oracle.com/errata/ELSA-2014-0594.html - http://secunia.com/advisories/58598 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096155 - http://secunia.com/advisories/59838 - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00015.html - http://secunia.com/advisories/6
ies/59838 - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00015.html - http://secunia.com/advisories/60384 - http://rhn.redhat.com/errata/RHSA-2014-0594.html - http://secunia.com/advisories/59016 - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00010.html - http://secunia.com/advisories/58601 - http://secunia.com/advisories/59408 - https://www.gitorious.org/gnutls/gnutls/commit/688ea6428a432c39203d00acd1af0e7684e5ddfd - http://www.securitytracker.com/id/1030314
CVE ID: CVE-2014-3467 State: PUBLISHED Published: 2014-06-05T20:00:00 Last Updated: 2024-08-06T10:43:06.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60320 - http://www.debian.org/security/2014/dsa-3056 - http://www.novell.com/support/kb/doc.php?id=7015302 - http://secunia.com/advisories/59057 - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html - http://suppor
ecunia.com/advisories/59057 - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html - http://support.f5.com/kb/en-us/solutions/public/15000/400/sol15423.html - http://linux.oracle.com/errata/ELSA-2014-0596.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:116 - http://secunia.com/advisories/59021 - http://secunia.com/advisories/61888 - http://advisories.mageia.org/MGASA-2014-0247.html - http://rhn.redhat.com/errata/RHSA-2014-0815.html - http://rhn.redhat.com/errata/RHSA-2014-0596.html - http://lists.gnu.org/archive/html/help-libtasn1/2014-05/msg00006.html - http://www.novell.com/support/kb/doc.php?id=7015303 - http://linux.oracle.com/errata/ELSA-2014-059