Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-8045 State: PUBLISHED Published: 2017-11-27T10:00:00 Last Updated: 2024-08-05T16:19:29.514Z Vendors: n/a Products: Spring AMQP Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7 Problem Types: Remote code execution Description: In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2017-8045 - http://www.securityfocus.com/bid/100936
CVE ID: CVE-2017-8046 State: PUBLISHED Published: 2018-01-04T06:00:00 Last Updated: 2024-08-05T16:19:29.628Z Vendors: Pivotal Products: Pivotal Spring Data REST and Spring Boot Problem Types: run arbitrary Java code Description: Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2017-8046 - https://access.redhat.com/errata/RHSA-2018:2405 - http://www.securityfocus.com/bid/100948 - https://www.expl
2017-8046 - https://access.redhat.com/errata/RHSA-2018:2405 - http://www.securityfocus.com/bid/100948 - https://www.exploit-db.com/exploits/44289/
CVE ID: CVE-2017-8047 State: PUBLISHED Published: 2017-10-03T07:00:00 Last Updated: 2024-08-05T16:19:29.849Z Vendors: n/a Products: Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274 Problem Types: open redirect Description: In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it is possible to append a combination of characters to the URL that will allow for an open redirect. An attacker could exploit this as a phishing attack to gain access to user credentials or other sensitive data. NOTE: 274 resolves the vulnerability but has a serious bug that is
n access to user credentials or other sensitive data. NOTE: 274 resolves the vulnerability but has a serious bug that is fixed in 275. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-8047/
CVE ID: CVE-2017-8048 State: PUBLISHED Published: 2017-10-03T07:00:00 Last Updated: 2024-08-05T16:19:29.629Z Vendors: n/a Products: Cloud Controller VM capi-release versions 1.33.0 and later, prior to 1.42.0, cf-release versions 268 and later, prior to 274 Problem Types: API regression Description: In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially crafted application. NOTE: 274 resolves the vulnerability but has a serious bug that is fixed in 275. Ad
ing a specially crafted application. NOTE: 274 resolves the vulnerability but has a serious bug that is fixed in 275. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2017-8048/
CVE ID: CVE-2017-8049 State: REJECTED Published: 2018-01-03T15:00:00 Last Updated: 2018-01-03T14:57:01 Description: No description available.
CVE ID: CVE-2017-8050 State: PUBLISHED Published: 2017-04-21T18:00:00Z Last Updated: 2024-09-16T18:33:32.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenable Appliance 4.4.0, and possibly prior, contains a flaw in the Web UI that allows for the unauthorized manipulation of the admin password. Additional Analyst Notes: - CVE Program Container: References: - https://vulndb.cyberriskanalytics.com/153134 - http://www.tenable.com/security/tns-2017-07
CVE ID: CVE-2017-8051 State: PUBLISHED Published: 2017-04-21T18:00:00Z Last Updated: 2024-09-16T22:56:34.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload.py script in the Web UI. Through the manipulation of the tns_appliance_session_user parameter, a remote attacker can inject arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://vulndb.cyberriskanalytics.com/153135 - http://www.tenable.com/security/tns-2017-07 - https://www.exploit-db.com/exploits/41892/
CVE ID: CVE-2017-8052 State: PUBLISHED Published: 2017-04-22T01:00:00Z Last Updated: 2024-09-16T18:38:46.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Craft CMS before 2.6.2974 allows XSS attacks. Additional Analyst Notes: - CVE Program Container: References: - https://craftcms.com/changelog#2-6-2974 - https://twitter.com/CraftCMS/status/855535309878112256
CVE ID: CVE-2017-8053 State: PUBLISHED Published: 2017-04-22T21:00:00Z Last Updated: 2024-09-16T23:16:48.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp). Additional Analyst Notes: - CVE Program Container: References: - http://www.evernote.com/l/AnGe5jS_MvNDaZvZW-fzvV37H4ggSf5IkQo/ - http://openwall.com/lists/oss-security/2017/04/22/1
CVE ID: CVE-2017-8054 State: PUBLISHED Published: 2017-04-22T22:00:00Z Last Updated: 2024-09-16T22:40:01.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted PDF document. Additional Analyst Notes: - CVE Program Container: References: - http://qwertwwwe.github.io/2017/04/22/PoDoFo-0-9-5-allows-remote-attackers-to-cause-a-denial-of-service-infinit-loop/
CVE ID: CVE-2017-8055 State: PUBLISHED Published: 2017-04-22T22:00:00Z Last Updated: 2024-09-16T19:24:27.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler. A login request that contains a blank password sent to the XML-RPC agent in Fireware v11.12.1 and earlier returns different responses for valid and invalid usernames. An attacker could exploit this vulnerability to enumerate valid usernames on an affected Firebox. Additional Analyst Notes: - CVE Program Container: References: - https://www.sidertia.com/Home/Community/Blog/2017/04/17/Fixed-the-Fireware-Vulnerabilities-discovered-by-Siderti
nces: - https://www.sidertia.com/Home/Community/Blog/2017/04/17/Fixed-the-Fireware-Vulnerabilities-discovered-by-Sidertia - https://packetstormsecurity.com/files/142177/watchguardfbxtm-xxeinject.txt - http://watchguardsupport.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000KlGSAU - https://www.watchguard.com/support/release-notes/fireware/11/en-US/EN_ReleaseNotes_Fireware_11_12_2/index.html
CVE ID: CVE-2017-8056 State: PUBLISHED Published: 2017-04-22T22:00:00Z Last Updated: 2024-09-17T01:52:05.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC agent. This causes the Firebox wgagent process to crash. This process crash ends all authenticated sessions to the Firebox, including management connections, and prevents new authenticated sessions until the process has recovered. The Firebox may also experience an overall degradation in performance while the wgagent process recovers. An attacker could continuously send XML-RPC requests that contain reference
formance while the wgagent process recovers. An attacker could continuously send XML-RPC requests that contain references to external entities to perform a limited Denial of Service (DoS) attack against an affected Firebox. Additional Analyst Notes: - CVE Program Container: References: - https://www.sidertia.com/Home/Community/Blog/2017/04/17/Fixed-the-Fireware-Vulnerabilities-discovered-by-Sidertia - https://packetstormsecurity.com/files/142177/watchguardfbxtm-xxeinject.txt - https://www.watchguard.com/support/release-notes/fireware/11/en-US/EN_ReleaseNotes_Fireware_11_12_2/index.html - http://watchguardsupport.force.com/publicKB?type=KBSecurityIssues&SFDCID=kA62A0000000KlBSAU
CVE ID: CVE-2017-8057 State: PUBLISHED Published: 2017-04-25T18:00:00 Last Updated: 2024-08-05T16:27:21.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Joomla! 3.4.0 through 3.6.5 (fixed in 3.7.0), multiple files caused full path disclosures on systems with enabled error reporting. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/690-20170408-core-information-disclosure.html - http://www.securityfocus.com/bid/98028
CVE ID: CVE-2017-8058 State: PUBLISHED Published: 2017-05-05T07:04:00 Last Updated: 2024-08-05T16:27:21.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acceptance of invalid/self-signed TLS certificates in Atlassian HipChat before 3.16.2 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98318 - https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f
CVE ID: CVE-2017-8059 State: PUBLISHED Published: 2017-05-05T07:04:00 Last Updated: 2024-08-05T16:27:21.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acceptance of invalid/self-signed TLS certificates in "Foxit PDF - PDF reader, editor, form, signature" before 5.4 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept login information (username/password), in addition to the static authentication token if the user is already logged in. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029
/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f
CVE ID: CVE-2017-8060 State: PUBLISHED Published: 2017-05-05T07:04:00 Last Updated: 2024-08-05T16:27:21.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98327 - https://medium.com/%40chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f
CVE ID: CVE-2017-8061 State: PUBLISHED Published: 2017-04-23T05:37:00 Last Updated: 2024-08-05T16:27:21.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/usb/dvb-usb/dvb-usb-firmware.c in the Linux kernel 4.9.x and 4.10.x before 4.10.7 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.7 - http://www.openwall.com/lists/oss-security/2017/
ences: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.7 - http://www.openwall.com/lists/oss-security/2017/04/16/4 - https://github.com/torvalds/linux/commit/67b0503db9c29b04eadfeede6bebbfe5ddad94ef - http://www.securityfocus.com/bid/97972 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=67b0503db9c29b04eadfeede6bebbfe5ddad94ef
CVE ID: CVE-2017-8062 State: PUBLISHED Published: 2017-04-23T05:37:00 Last Updated: 2024-08-05T16:27:21.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/usb/dvb-usb/dw2102.c in the Linux kernel 4.9.x and 4.10.x before 4.10.4 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97973 - https://github.com/torvalds/linux/commit/606142af57dad981b78707234cfbd15f9f7b712
ttp://www.securityfocus.com/bid/97973 - https://github.com/torvalds/linux/commit/606142af57dad981b78707234cfbd15f9f7b7125 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=606142af57dad981b78707234cfbd15f9f7b7125 - http://www.openwall.com/lists/oss-security/2017/04/16/4
CVE ID: CVE-2017-8063 State: PUBLISHED Published: 2017-04-23T05:37:00 Last Updated: 2024-08-05T16:27:21.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/usb/dvb-usb/cxusb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3f190e3aec212fc8c61e202c51400afa7384d4bc - http://www.securityfo
/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3f190e3aec212fc8c61e202c51400afa7384d4bc - http://www.securityfocus.com/bid/97974 - http://www.openwall.com/lists/oss-security/2017/04/16/4 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.12 - https://github.com/torvalds/linux/commit/3f190e3aec212fc8c61e202c51400afa7384d4bc
CVE ID: CVE-2017-8064 State: PUBLISHED Published: 2017-04-23T05:37:00 Last Updated: 2024-08-05T16:27:21.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/usb/dvb-usb-v2/dvb_usb_core.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97975 - http://www.openwall.com/lists/oss-security/2017/04/16/4 - https://git.
ences: - http://www.securityfocus.com/bid/97975 - http://www.openwall.com/lists/oss-security/2017/04/16/4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=005145378c9ad7575a01b6ce1ba118fb427f583a - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.12 - http://www.debian.org/security/2017/dsa-3886 - https://github.com/torvalds/linux/commit/005145378c9ad7575a01b6ce1ba118fb427f583a
CVE ID: CVE-2017-8065 State: PUBLISHED Published: 2017-04-23T05:37:00 Last Updated: 2024-08-05T16:27:21.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: crypto/ccm.c in the Linux kernel 4.9.x and 4.10.x through 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b30460c5b0ed762be75a004e924ec3f8711e032 - http://www.openwall.
g/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b30460c5b0ed762be75a004e924ec3f8711e032 - http://www.openwall.com/lists/oss-security/2017/04/16/4 - https://github.com/torvalds/linux/commit/3b30460c5b0ed762be75a004e924ec3f8711e032 - http://www.securityfocus.com/bid/97994
CVE ID: CVE-2017-8066 State: PUBLISHED Published: 2017-04-23T05:37:00 Last Updated: 2024-08-05T16:27:22.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/net/can/usb/gs_usb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.2 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.2 - https://github.com/torvalds/linux/commit/c919a3069c775c1c876bec5
www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.2 - https://github.com/torvalds/linux/commit/c919a3069c775c1c876bec55e00b2305d5125caa - http://www.openwall.com/lists/oss-security/2017/04/16/4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c919a3069c775c1c876bec55e00b2305d5125caa - http://www.securityfocus.com/bid/97992
CVE ID: CVE-2017-8067 State: PUBLISHED Published: 2017-04-23T05:37:00 Last Updated: 2024-08-05T16:27:22.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/char/virtio_console.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/04/16/4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/
//www.openwall.com/lists/oss-security/2017/04/16/4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c4baad50297d84bde1a7ad45e50c73adae4a2192 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.12 - http://www.securityfocus.com/bid/97997 - https://github.com/torvalds/linux/commit/c4baad50297d84bde1a7ad45e50c73adae4a2192
CVE ID: CVE-2017-8068 State: PUBLISHED Published: 2017-04-23T05:37:00 Last Updated: 2024-08-05T16:27:22.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/net/usb/pegasus.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5593523f968bc86d42a035c6df47d5e0979b5ace - https://github.com/t
g/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5593523f968bc86d42a035c6df47d5e0979b5ace - https://github.com/torvalds/linux/commit/5593523f968bc86d42a035c6df47d5e0979b5ace - http://www.securityfocus.com/bid/98000 - http://www.openwall.com/lists/oss-security/2017/04/16/4 - http://www.securityfocus.com/bid/98008 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11
CVE ID: CVE-2017-8069 State: PUBLISHED Published: 2017-04-23T05:37:00Z Last Updated: 2024-09-17T03:43:10.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/net/usb/rtl8150.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/04/16/4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7926
com/lists/oss-security/2017/04/16/4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7926aff5c57b577ab0f43364ff0c59d968f6a414 - https://github.com/torvalds/linux/commit/7926aff5c57b577ab0f43364ff0c59d968f6a414 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11
CVE ID: CVE-2017-8070 State: PUBLISHED Published: 2017-04-23T05:37:00 Last Updated: 2024-08-05T16:27:22.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/net/usb/catc.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/2d6a0e9de03ee658a9adc3bfb2f0ca55dff1e478 - http://www.securityfocus.com/bid/98011 - http://www.openwall
lds/linux/commit/2d6a0e9de03ee658a9adc3bfb2f0ca55dff1e478 - http://www.securityfocus.com/bid/98011 - http://www.openwall.com/lists/oss-security/2017/04/16/4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2d6a0e9de03ee658a9adc3bfb2f0ca55dff1e478 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.11
CVE ID: CVE-2017-8071 State: PUBLISHED Published: 2017-04-23T05:37:00 Last Updated: 2024-08-05T16:27:21.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID request callback, which allows local users to cause a denial of service (deadlock) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7a7b5df84b6b4e5d599c7289526eed96541a0654 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9 - http://www.openwall.com/lists/oss-sec
89526eed96541a0654 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9 - http://www.openwall.com/lists/oss-security/2017/04/16/4 - http://www.securityfocus.com/bid/97991 - https://github.com/torvalds/linux/commit/7a7b5df84b6b4e5d599c7289526eed96541a0654
CVE ID: CVE-2017-8072 State: PUBLISHED Published: 2017-04-23T05:37:00 Last Updated: 2024-08-05T16:27:21.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO error status for a zero-length report, which allows local users to have an unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/8e9faa15469ed7c7467423db4c62aeed3ff4cae3 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8e9faa15469ed7c7467423db4c62aeed3ff4cae3 - http://w
it.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8e9faa15469ed7c7467423db4c62aeed3ff4cae3 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9 - http://www.openwall.com/lists/oss-security/2017/04/16/4 - http://www.securityfocus.com/bid/98010
CVE ID: CVE-2017-8073 State: PUBLISHED Published: 2017-04-23T15:00:00 Last Updated: 2024-08-05T16:27:21.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97987 - https://weechat.org/download/security/ - https://github.com/weechat/weechat/commit/2fb346f25f79e412cf0ed314fdf791763c19b70b - https://weechat.org/news/95/20170422-Version-1.7.1/ - http://www.debian.org/security/2017/dsa-383