Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-2064 State: PUBLISHED Published: 2016-08-07T21:00:00 Last Updated: 2024-08-05T23:17:50.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted application that makes an ioctl call specifying many commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/multiple-vulnerabilities-msm-qdsp6-audio-driver-a
tes: - CVE Program Container: References: - https://www.codeaurora.org/multiple-vulnerabilities-msm-qdsp6-audio-driver-allow-kernel-memory-corruption-cve-2016-2064-cve - https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.18/commit/?id=775fca8289eff931f91ff6e8c36cf2034ba59e88 - http://www.securityfocus.com/bid/92375
CVE ID: CVE-2016-2065 State: PUBLISHED Published: 2016-08-07T21:00:00 Last Updated: 2024-08-05T23:17:50.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service (out-of-bounds write and memory corruption) or possibly have unspecified other impact via a crafted application that makes an ioctl call triggering incorrect use of a parameters pointer. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/
se of a parameters pointer. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/multiple-vulnerabilities-msm-qdsp6-audio-driver-allow-kernel-memory-corruption-cve-2016-2064-cve - http://www.securityfocus.com/bid/92376 - https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.18/commit/?id=775fca8289eff931f91ff6e8c36cf2034ba59e88
CVE ID: CVE-2016-2066 State: PUBLISHED Published: 2016-06-13T01:00:00 Last Updated: 2024-08-05T23:17:50.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application that makes an ioctl call. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/multiple-vulnerabilities-msm-qdsp6-audio-driver-allow-kernel-memory-corruption-cve-2016-2064-cve - https://us.codeauror
/multiple-vulnerabilities-msm-qdsp6-audio-driver-allow-kernel-memory-corruption-cve-2016-2064-cve - https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.18/commit/?id=775fca8289eff931f91ff6e8c36cf2034ba59e88 - http://www.securityfocus.com/bid/91046 - http://source.android.com/security/bulletin/2016-06-01.html
CVE ID: CVE-2016-2067 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-05T23:17:50.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/gpu/msm/kgsl.c in the MSM graphics driver (aka GPU driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, mishandles the KGSL_MEMFLAGS_GPUREADONLY flag, which allows attackers to gain privileges by leveraging accidental read-write mappings, aka Qualcomm internal bug CR988993. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=410cfa95f0a1cf58819cbfbd896f9aa45b
iner: References: - https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=410cfa95f0a1cf58819cbfbd896f9aa45b004ac0 - http://source.android.com/security/bulletin/2016-07-01.html - https://www.codeaurora.org/privilege-escalation-vulnerability-graphics-driver-cve-2016-2067
CVE ID: CVE-2016-2068 State: PUBLISHED Published: 2016-07-11T01:00:00 Last Updated: 2024-08-05T23:17:50.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MSM QDSP6 audio driver (aka sound driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (integer overflow, and buffer overflow or buffer over-read) via a crafted application that performs a (1) AUDIO_EFFECTS_WRITE or (2) AUDIO_EFFECTS_READ operation, aka Qualcomm internal bug CR1006609. Additional Analyst Notes: - CVE Program Container: References: - https://us.codeaurora.org/c
omm internal bug CR1006609. Additional Analyst Notes: - CVE Program Container: References: - https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.18/commit/?id=2c04c0dab66013b7dfbe4d5a523c2c1d6b5b11d6 - http://source.android.com/security/bulletin/2016-07-01.html - https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=9900650540c889f761d102202bc80306ae80ab83 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=01ee86da5a0cd788f134e360e2be517ef52b6b00 - https://www.codeaurora.org/multiple-vulnerabilities-msm-qdsp6-audio-driver-allow-kernel-memory-corruption-cve-2016-2068-0
CVE ID: CVE-2016-2069 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-05T23:17:50.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in arch/x86/mm/tlb.c in the Linux kernel before 4.4.1 allows local users to gain privileges by triggering access to a paging structure by a different CPU. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/81809 - http://www.ubuntu.com/usn/USN-2967-1 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.openwall.com/lists/oss-security/2016/01/25/1 - http://www.
opics/security/linuxbulletinjul2016-3090544.html - http://www.openwall.com/lists/oss-security/2016/01/25/1 - http://www.debian.org/security/2016/dsa-3503 - http://www.ubuntu.com/usn/USN-2967-2 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - http://rhn.redhat.com/errata/RHSA-2017-0817.html - http://www.ubuntu.com/usn/USN-2932-1 - http://www.ubuntu.com/usn/USN-2989-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - https://github.com/torvalds/linux/commit/71b3c126e61177eb693423f2e18a1914205b165e - http://www.oracle.com/technetwork/to
https://github.com/torvalds/linux/commit/71b3c126e61177eb693423f2e18a1914205b165e - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - https://bugzilla.redhat.com/show_bug.cgi?id=1301893 - http://www.ubuntu.com/usn/USN-2931-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html - http://www.ubuntu.com/usn/USN-2998-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=71b3c126e61177eb693423f2e18a1914205b165e - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
CVE ID: CVE-2016-2070 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-05T23:17:50.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tcp_cwnd_reduction function in net/ipv4/tcp_input.c in the Linux kernel before 4.3.5 allows remote attackers to cause a denial of service (divide-by-zero error and system crash) via crafted TCP traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/25/5 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.5 - https://github.com/torvalds/linux/commit/8b8a321ff72c785ed5e8b4cf6eda20b35d427390 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/lin
orvalds/linux/commit/8b8a321ff72c785ed5e8b4cf6eda20b35d427390 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b8a321ff72c785ed5e8b4cf6eda20b35d427390 - https://bugzilla.redhat.com/show_bug.cgi?id=1302219
CVE ID: CVE-2016-2071 State: PUBLISHED Published: 2016-02-17T15:00:00 Last Updated: 2024-08-05T23:17:50.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows remote attackers to gain privileges via unspecified NS Web GUI commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035098 - http://support.citrix.com/article/CTX206001
CVE ID: CVE-2016-2072 State: PUBLISHED Published: 2016-02-17T15:00:00 Last Updated: 2024-08-05T23:17:50.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305.e, and 10.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035098 - http://support.citrix.com/article/CTX206001
CVE ID: CVE-2016-2073 State: PUBLISHED Published: 2016-02-12T15:26:00 Last Updated: 2024-08-05T23:17:50.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: The htmlParseNameComplex function in HTMLparser.c in libxml2 allows attackers to cause a denial of service (out-of-bounds read) via a crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035011 - https://www.debian.org/security/2016/dsa-3593 - http://www.ubuntu.com/usn/USN-2994-1 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.openwall.com/lists/oss-security/2016/01/26/7 - https://security.gentoo.org/glsa/201701-3
l2016-3090568.html - http://www.openwall.com/lists/oss-security/2016/01/26/7 - https://security.gentoo.org/glsa/201701-37 - http://www.openwall.com/lists/oss-security/2016/01/25/6 - http://www.securityfocus.com/bid/85267
CVE ID: CVE-2016-2074 State: PUBLISHED Published: 2016-07-03T21:00:00 Last Updated: 2024-08-05T23:17:50.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command. Additional Analyst Notes: - CVE Program Container: References: - http://openvswitch.org/pipermail/announce/2016-March/000082.html - http://rhn.redhat.com/errata/RHSA-2016-0537.html - http://rhn.redhat.com/errata/RHSA-2016-0524.html - https://bugzilla.redhat.com/show_bug.cgi?id=13185
SA-2016-0537.html - http://rhn.redhat.com/errata/RHSA-2016-0524.html - https://bugzilla.redhat.com/show_bug.cgi?id=1318553 - http://www.debian.org/security/2016/dsa-3533 - https://access.redhat.com/errata/RHSA-2016:0615 - https://security-tracker.debian.org/tracker/CVE-2016-2074 - https://security.gentoo.org/glsa/201701-07 - https://support.citrix.com/article/CTX232655 - http://rhn.redhat.com/errata/RHSA-2016-0523.html - http://openvswitch.org/pipermail/announce/2016-March/000083.html - http://www.securityfocus.com/bid/85700
CVE ID: CVE-2016-2075 State: PUBLISHED Published: 2016-03-16T10:00:00 Last Updated: 2024-08-05T23:17:50.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0003.html - http://www.securitytracker.com/id/1035270
CVE ID: CVE-2016-2076 State: PUBLISHED Published: 2016-04-15T14:00:00 Last Updated: 2024-08-05T23:17:50.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which allows remote attackers to hijack sessions via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0004.html - http://www.securitytracker.com/id/1035571 - http://www.securitytracker.com/id/1035570 - http://www.securitytracker.co
- http://www.securitytracker.com/id/1035571 - http://www.securitytracker.com/id/1035570 - http://www.securitytracker.com/id/1035572
CVE ID: CVE-2016-2077 State: PUBLISHED Published: 2016-05-18T14:00:00 Last Updated: 2024-08-05T23:17:50.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host OS users to gain host OS privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035900 - http://www.vmware.com/security/advisories/VMSA-2016-0005.html
CVE ID: CVE-2016-2078 State: PUBLISHED Published: 2016-06-08T14:00:00 Last Updated: 2024-08-05T23:17:50.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/137189/VMWare-vSphere-Web-Client-6.0-Cross-Site-Scripting.html - http://www.vmware.com/security/advisories/VMSA-2016-0006.html - http://hyp3rlinx.altervista.org/advisories/VMW
ng.html - http://www.vmware.com/security/advisories/VMSA-2016-0006.html - http://hyp3rlinx.altervista.org/advisories/VMWARE-VSPHERE-FLASH-XSS.txt - http://www.securityfocus.com/archive/1/538484/100/0/threaded - http://www.securitytracker.com/id/1035961
CVE ID: CVE-2016-2079 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-05T23:17:50.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware NSX Edge 6.1 before 6.1.7 and 6.2 before 6.2.3 and vCNS Edge 5.5 before 5.5.4.3, when the SSL-VPN feature is configured, allow remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0007.html - http://www.securitytracker.com/id/1036077
CVE ID: CVE-2016-2080 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2081 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-05T23:17:50.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0008.html - http://www.securitytracker.com/id/1036078
CVE ID: CVE-2016-2082 State: PUBLISHED Published: 2016-07-03T01:00:00 Last Updated: 2024-08-05T23:17:50.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0008.html - http://www.securitytracker.com/id/1036078
CVE ID: CVE-2016-2083 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-2084 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-05T23:17:50.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP AAM 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP DNS 12.0.0 before build 1.14.628; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.3.0; BIG-IP GTM 11
ld 1.14.628; BIG-IP DNS 12.0.0 before build 1.14.628; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.3.0; BIG-IP GTM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, and 11.6.0 before build 6.204.442; BIG-IP PSM 11.3.x and 11.4.x before 11.4.1 build 685-HF10; BIG-IQ Cloud, Device, and Security 4.2.0 through 4.5.0; and BIG-IQ ADC 4.5.0 do not properly regenerate certificates and keys when deploying cloud images in Amazon Web Services (AWS), Azure or Verizon cloud services environments, which allows attackers to obtain sensitive information or cause a denial of service (disruption) by leveraging a target instance configuration. A
obtain sensitive information or cause a denial of service (disruption) by leveraging a target instance configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035520 - https://support.f5.com/kb/en-us/solutions/public/k/11/sol11772107.html
CVE ID: CVE-2016-2085 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-05T23:17:50.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The evm_verify_hmac function in security/integrity/evm/evm_main.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users to forge MAC values via a timing side-channel attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2949-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1324867 - https://security-tracker.debian.org/tracker/CVE-2016-2085 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=613317bd212c585c20796c
tracker/CVE-2016-2085 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=613317bd212c585c20796c10afe5daaa95d4b0a1 - http://www.ubuntu.com/usn/USN-2947-3 - http://www.ubuntu.com/usn/USN-2947-2 - https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-2085.html - http://www.ubuntu.com/usn/USN-2947-1 - http://www.ubuntu.com/usn/USN-2946-2 - https://github.com/torvalds/linux/commit/613317bd212c585c20796c10afe5daaa95d4b0a1 - http://www.ubuntu.com/usn/USN-2948-1 - http://www.ubuntu.com/usn/USN-2946-1 - http://www.ubuntu.com/usn/USN-2948-2
CVE ID: CVE-2016-2086 State: PUBLISHED Published: 2016-04-07T21:00:00 Last Updated: 2024-08-05T23:17:50.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177673.html - https://nodejs.org/en/blog/vulnerability/february-2016-security-releases/ - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177184.html - http://www.security
ty-releases/ - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177184.html - http://www.securityfocus.com/bid/83282 - https://security.gentoo.org/glsa/201612-43
CVE ID: CVE-2016-2087 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-05T23:17:50.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39656/ - http://www.securityfocus.com/bid/95881 - http://packetstormsecurity.com/files/136564/Hexchat-IRC-Client-2.11.0-Directory-Traversal.html
CVE ID: CVE-2016-2088 State: PUBLISHED Published: 2016-03-09T23:00:00 Last Updated: 2024-08-05T23:17:50.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via a malformed packet with more than one cookie option. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035238 - http://www.securityfocus.com/bid/84290 - https://security.gentoo.org/glsa/201610-07 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html - https://kb.isc
o.org/glsa/201610-07 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181036.html - https://kb.isc.org/article/AA-01380 - https://kb.isc.org/article/AA-01351 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178831.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179904.html
CVE ID: CVE-2016-2089 State: PUBLISHED Published: 2016-02-08T19:00:00 Last Updated: 2024-08-05T23:17:50.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted JPEG 2000 image. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3508 - http://www.securityfocus.com/bid/83108 - http://www.openwall.com/lists/oss-security/2016/01/28/6 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/01/28/4 - http://lists.opensuse.org/opensu
t.com/errata/RHSA-2017:1208 - http://www.openwall.com/lists/oss-security/2016/01/28/4 - http://lists.opensuse.org/opensuse-updates/2016-02/msg00060.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00063.html
CVE ID: CVE-2016-2090 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-05T23:17:50.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KJE5SPSX7HEKLZ34LUTZLXWPEL2K353/ - https://blog.fuzzing-project.org/36-Heap-buffer-overflow-in-fgetwln-function-of-libbsd.html - https://lists.fedoraproject.org/archives/list/package-annou
36-Heap-buffer-overflow-in-fgetwln-function-of-libbsd.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIQKQ42Z7553D46QY3IMIQKS52QTNIHY/ - https://bugs.freedesktop.org/show_bug.cgi?id=93881 - http://www.openwall.com/lists/oss-security/2016/01/28/5 - https://cgit.freedesktop.org/libbsd/commit/?id=c8f0723d2b4520bdd6b9eb7c3e7976de726d7ff7 - https://security.gentoo.org/glsa/201607-13 - https://lists.debian.org/debian-lts-announce/2019/12/msg00036.html - https://usn.ubuntu.com/4243-1/