Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-6306 State: PUBLISHED Published: 2016-09-26T00:00:00 Last Updated: 2024-08-06T01:29:18.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2016-20 - https://access.redhat.com/errata/RHSA-2018:2185 - https://access.redhat.com/errata/RHSA-2018:2186 - http://www.securityfocus.com/bid/93153 - http://rhn.redhat.com/errata/RHSA-2016-1940.html - https
rrata/RHSA-2018:2186 - http://www.securityfocus.com/bid/93153 - http://rhn.redhat.com/errata/RHSA-2016-1940.html - https://security.gentoo.org/glsa/201612-16 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us - http://www.securitytracker.com/id/1036885 - https://www.tenable.com/security/tns-2016-16 - https://www.tenable.com/security/tns-2016-21 - https://bto.bluecoat.com/security-advisory/sa132 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html - https://access.redhat.com/errata/R
sl.asc - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html - https://access.redhat.com/errata/RHSA-2018:2187 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://kc.mcafee.com/corporate/index?page=content&id=SB10215 - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html - http://www.ubuntu.com/usn/USN-3087-1 - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html - http://www.ubuntu.com/usn/USN-3087-2 - http://lists.opensuse.org/opensuse
suse-security-announce/2016-10/msg00029.html - http://www.ubuntu.com/usn/USN-3087-2 - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html - http://seclists.org/fulldisclosure/2017/Jul/31 - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html - https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us - http://www.debian.org/security/2016/dsa-3673 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html - http://lists.opensuse.org/opensuse-secu
l - http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448 - https://support.f5.com/csp/article/K90492697 - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en - https://www.oracle.com/security-alerts/cpuapr2020.html - http://www.oracle.com/techne
huawei-sa-20170322-01-openssl-en - https://www.oracle.com/security-alerts/cpuapr2020.html - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://www.oracle.com/security-alerts/cpujul2020.html - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/security-alerts/cpujan2020.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.oracle.com/tec
7-3236626.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/ - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - https://www.openssl.org/news/secadv/20160922.txt - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=52e623c4cb06fffa9d5e75c60b34b4bc130b12e9 - https://www.oracle.com/security-alerts/cpuoct2020.html - https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-adviso
y-alerts/cpuoct2020.html - https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-6307 State: PUBLISHED Published: 2016-09-26T00:00:00 Last Updated: 2024-08-06T01:29:18.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c. Additional Analyst Notes: - CVE Program Container: References: - https://www.openssl.org/news/secadv/20160922.txt - https://www.tenable.com/security/tns-2016-20 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http:/
.tenable.com/security/tns-2016-20 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - http://www.securitytracker.com/id/1036885 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://www.tenable.com/security/tns-2016-16 - https://www.tenable.com/security/tns-2016-21 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://bto.bluecoat.com/security-advisory/sa132 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://www.securityfocus.
advisory/sa132 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://www.securityfocus.com/bid/93152 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=4b390b6c3f8df925dc92a3dd6b022baa9a2f4650 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-6308 State: PUBLISHED Published: 2016-09-26T00:00:00 Last Updated: 2024-08-06T01:29:19.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages. Additional Analyst Notes: - CVE Program Container: References: - https://www.openssl.org/news/secadv/20160922.txt - https://www.tenable.com/security/tns-2016-20 - http://www.securityfocus.com/bid/93151 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - h
http://www.securityfocus.com/bid/93151 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=df6b5e29ffea2d5a3e08de92fb765fdb21c7a21e - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - http://www.securitytracker.com/id/1036885 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://www.tenable.com/security/tns-2016-16 - https://www.tenable.com/security/tns-2016-21 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://bto.bluecoat.com/security-advisory/sa132 - h
.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://bto.bluecoat.com/security-advisory/sa132 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-6309 State: PUBLISHED Published: 2016-09-26T19:00:00 Last Updated: 2024-08-06T01:29:18.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or possibly execute arbitrary code via a crafted TLS session. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2016-20 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - https://www.openssl.org/news/secadv/20160926.txt - https://support.hpe.com/hpsc/doc/public/display?docLocale
6628.html - https://www.openssl.org/news/secadv/20160926.txt - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - http://www.securitytracker.com/id/1036885 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://www.tenable.com/security/tns-2016-16 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=acacbfa7565c78d2273c0b2a2e5e803f44afefeb - http://www.securityfocus.com/bid/93177 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://bto.bluecoat.com/security-advisory/sa132 - http://www.oracle.com/technetwork/security-a
puapr2018-3678067.html - https://bto.bluecoat.com/security-advisory/sa132 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
CVE ID: CVE-2016-6310 State: PUBLISHED Published: 2017-08-22T18:00:00 Last Updated: 2024-08-06T01:29:18.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: oVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine.log file in RHEV before 4.0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1363738 - http://www.securityfocus.com/bid/92345
CVE ID: CVE-2016-6311 State: PUBLISHED Published: 2017-08-22T18:00:00 Last Updated: 2024-08-06T01:29:18.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Get requests in JBoss Enterprise Application Platform (EAP) 7 disclose internal IP addresses to remote attackers. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:3458 - https://bugzilla.redhat.com/show_bug.cgi?id=1362735 - https://access.redhat.com/errata/RHSA-2017:3455 - https://access.redhat.com/errata/RHSA-2017:3456 - https://access.redhat.com/errata/RHSA-2017:3454
CVE ID: CVE-2016-6312 State: PUBLISHED Published: 2017-07-14T20:00:00 Last Updated: 2024-08-06T01:29:18.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_dontdothat component of the mod_dav_svn Apache module in Subversion as packaged in Red Hat Enterprise Linux 5.11 does not properly detect recursion during entity expansion, which allows remote authenticated users with access to the webdav repository to cause a denial of service (memory consumption and httpd crash). NOTE: Exists as a regression to CVE-2009-1955. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1364122 - http://www.securityfocus.com/bid/92320
CVE ID: CVE-2016-6313 State: PUBLISHED Published: 2016-12-13T20:00:00 Last Updated: 2024-08-06T01:29:18.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3650 - https://security.gentoo.org/glsa/201612-01 - http://www.ubuntu.com/usn/USN-3064-1 - http://www.debian.org/security/2016/dsa-3649 - https://security.gentoo.org/gl
1 - http://www.ubuntu.com/usn/USN-3064-1 - http://www.debian.org/security/2016/dsa-3649 - https://security.gentoo.org/glsa/201610-04 - http://www.securitytracker.com/id/1036635 - https://lists.gnupg.org/pipermail/gnupg-announce/2016q3/000395.html - https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=blob_plain%3Bf=NEWS - http://rhn.redhat.com/errata/RHSA-2016-2674.html - http://www.securityfocus.com/bid/92527 - http://www.ubuntu.com/usn/USN-3065-1
CVE ID: CVE-2016-6314 State: REJECTED Published: 2022-07-28T16:47:46 Last Updated: 2022-07-28T16:47:46 Description: No description available.
CVE ID: CVE-2016-6315 State: REJECTED Published: 2022-07-28T16:48:20 Last Updated: 2022-07-28T16:48:20 Description: No description available.
CVE ID: CVE-2016-6316 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:29:18.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow remote attackers to inject arbitrary web script or HTML via text declared as "HTML safe" and used as attribute values in tag handlers. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-1856.html - https://puppet.com/security/cve/cve-2016-6316 - http://www.securityfocus.com/bid/92430 - http://rhn.redhat.com/errata/RHSA-2016-1855
et.com/security/cve/cve-2016-6316 - http://www.securityfocus.com/bid/92430 - http://rhn.redhat.com/errata/RHSA-2016-1855.html - http://www.openwall.com/lists/oss-security/2016/08/11/3 - http://rhn.redhat.com/errata/RHSA-2016-1858.html - http://rhn.redhat.com/errata/RHSA-2016-1857.html - http://weblog.rubyonrails.org/2016/8/11/Rails-5-0-0-1-4-2-7-2-and-3-2-22-3-have-been-released/ - https://groups.google.com/forum/#%21topic/ruby-security-ann/8B2iV2tPRSE - http://www.debian.org/security/2016/dsa-3651
CVE ID: CVE-2016-6317 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:29:18.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2660, CVE-2012-2694, and CVE-2013-0155. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfo
CVE-2012-2694, and CVE-2013-0155. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92434 - http://www.openwall.com/lists/oss-security/2016/08/11/4 - http://rhn.redhat.com/errata/RHSA-2016-1855.html - http://weblog.rubyonrails.org/2016/8/11/Rails-5-0-0-1-4-2-7-2-and-3-2-22-3-have-been-released/ - https://groups.google.com/forum/#%21topic/ruby-security-ann/WccgKSKiPZA
CVE ID: CVE-2016-6318 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:29:18.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows local users to cause a denial of service (application crash) or gain privileges via a long GECOS field, involving longbuffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/08/16/2 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00122.html - http://www.securityfocus.com/bid/92478 - https://security.gentoo.org/glsa/201612-25 - https://lists.debian.org/debian-l
http://www.securityfocus.com/bid/92478 - https://security.gentoo.org/glsa/201612-25 - https://lists.debian.org/debian-lts-announce/2020/05/msg00023.html - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2016-6319 State: PUBLISHED Published: 2016-08-19T21:00:00 Last Updated: 2024-08-06T01:29:18.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:0336 - https://github.com/theforeman/foreman/commit/0f35fe14acf0d0d3b55e9337bc5e2b9640ff2372 - http://projects.theforeman.org/issues/16024 - http://www.securityfocus.com/bid/92429 - h
0d0d3b55e9337bc5e2b9640ff2372 - http://projects.theforeman.org/issues/16024 - http://www.securityfocus.com/bid/92429 - http://projects.theforeman.org/issues/16019 - https://bugzilla.redhat.com/show_bug.cgi?id=1365815 - https://theforeman.org/security.html#2016-6319
CVE ID: CVE-2016-6320 State: PUBLISHED Published: 2016-08-19T21:00:00 Last Updated: 2024-08-06T01:29:18.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in app/assets/javascripts/host_edit_interfaces.js in Foreman before 1.12.2 allows remote authenticated users to inject arbitrary web script or HTML via the network interface device identifier in the host interface form. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHBA-2016:1885 - http://www.securityfocus.com/bid/92431 - https://theforeman.org/security.html#2016-6320 - https://github.com/theforeman/foreman/pull/3714/commits/850c38451c
31 - https://theforeman.org/security.html#2016-6320 - https://github.com/theforeman/foreman/pull/3714/commits/850c38451c7bbde75521b796d16aca26e4d240a0 - https://bugzilla.redhat.com/show_bug.cgi?id=1365785 - http://projects.theforeman.org/issues/16022
CVE ID: CVE-2016-6321 State: PUBLISHED Published: 2016-12-09T22:00:00.000Z Last Updated: 2025-08-06T21:12:29.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://seclists.org/fulldisclosure/2016/Oct/102 - http://www.securityfocus.com/bid/93937 - https://security.gentoo.org/glsa/201611-19 - http://secl
closure/2016/Oct/102 - http://www.securityfocus.com/bid/93937 - https://security.gentoo.org/glsa/201611-19 - http://seclists.org/fulldisclosure/2016/Oct/96 - http://git.savannah.gnu.org/cgit/tar.git/commit/?id=7340f67b9860ea0531c1450e5aa261c50f67165d - http://lists.gnu.org/archive/html/bug-tar/2016-10/msg00016.html - http://www.debian.org/security/2016/dsa-3702 - https://sintonen.fi/advisories/tar-extract-pathname-bypass.proper.txt - http://packetstormsecurity.com/files/139370/GNU-tar-1.29-Extract-Pathname-Bypass.html - http://www.ubuntu.com/usn/USN-3132-1 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - h
pache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2016-6322 State: PUBLISHED Published: 2016-09-22T15:00:00 Last Updated: 2024-08-06T01:29:19.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deployed system by reading the file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1366413 - http://www.securityfocus.com/bid/92668
CVE ID: CVE-2016-6323 State: PUBLISHED Published: 2016-10-07T14:00:00 Last Updated: 2024-08-06T01:29:18.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WO7IMEYWZ2WTXGGMZBWWSDCUMFN63XO
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WO7IMEYWZ2WTXGGMZBWWSDCUMFN63XOB/ - http://www.securityfocus.com/bid/92532 - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KTXSOVCRDGBIB4WCIDAGYYUBESXZ4IGK/ - https://sourceware.org/bugzilla/show_bug.cgi?id=20435 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=9e2ff6c9cc54c0b4402b8d49e4abe7000fde7617 - https://security.gentoo.org/glsa/201706-19 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LVWSAZVBTLALXF4SCBPDV3FY6J22DXLZ/ - http://www
ject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LVWSAZVBTLALXF4SCBPDV3FY6J22DXLZ/ - http://www.openwall.com/lists/oss-security/2016/08/18/12 - http://lists.opensuse.org/opensuse-updates/2016-10/msg00009.html
CVE ID: CVE-2016-6324 State: REJECTED Published: 2022-07-28T16:48:56 Last Updated: 2022-07-28T16:48:56 Description: No description available.
CVE ID: CVE-2016-6325 State: PUBLISHED Published: 2016-10-13T14:00:00 Last Updated: 2024-08-06T01:29:18.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and JBoss EWS 2 uses weak permissions for (1) /etc/sysconfig/tomcat and (2) /etc/tomcat/tomcat.conf, which allows local users to gain privileges by leveraging membership in the tomcat group. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93478 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://rhn.redhat.com/errata/RHSA-2016-2045.html - http://rh
network/topics/security/linuxbulletinoct2016-3090545.html - http://rhn.redhat.com/errata/RHSA-2016-2045.html - http://rhn.redhat.com/errata/RHSA-2016-2046.html - http://rhn.redhat.com/errata/RHSA-2017-0457.html - https://access.redhat.com/errata/RHSA-2017:0455 - https://bugzilla.redhat.com/show_bug.cgi?id=1367447 - https://access.redhat.com/errata/RHSA-2017:0456
CVE ID: CVE-2016-6326 State: REJECTED Published: 2022-07-28T16:49:33 Last Updated: 2022-07-28T16:49:33 Description: No description available.