Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-4515 State: PUBLISHED Published: 2012-11-11T11:00:00Z Last Updated: 2024-08-06T20:35:10.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by accessing an iframe when it is being updated. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51145 - http://www.nth-dimension.org.uk/pub/NDSA20121010.txt.asc - http://www.openwall.com/lists/oss-security/2012/10/11/11 - http://archives.neohapsis.com/archive
/NDSA20121010.txt.asc - http://www.openwall.com/lists/oss-security/2012/10/11/11 - http://archives.neohapsis.com/archives/bugtraq/2012-11/0005.html - http://quickgit.kde.org/index.php?p=kdelibs.git&a=commitdiff&h=4f2eb356f1c23444fff2cfe0a7ae10efe303d6d8 - http://www.openwall.com/lists/oss-security/2012/10/30/6 - http://secunia.com/advisories/51097
CVE ID: CVE-2012-4516 State: PUBLISHED Published: 2012-10-22T23:00:00Z Last Updated: 2024-08-06T20:35:10.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ib_acm service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=865483 - http://www.openwall.com/lists/oss-security/2012/10/11/6 - http://git.openfabrics.org/git?p=~shefty/librdmacm.git%3Ba=commitdiff%3Bh=4b5c1aa734e0e734fc2ba3cd41d0ddf02170af6d - http://www.openwall.com/lists/oss-s
=~shefty/librdmacm.git%3Ba=commitdiff%3Bh=4b5c1aa734e0e734fc2ba3cd41d0ddf02170af6d - http://www.openwall.com/lists/oss-security/2012/10/11/9 - http://www.securityfocus.com/bid/55896
CVE ID: CVE-2012-4517 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T20:35:09.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to cause a denial of service (ibacm service crash) via a crafted join response. Additional Analyst Notes: - CVE Program Container: References: - http://git.openfabrics.org/git?p=~shefty/ibacm.git%3Ba=commit%3Bh=c7d28b35d64333c262de3ec972c426423dadccf9 - http://rhn.redhat.com/errata/RHSA-2013-0509.html - https://bugzilla.redhat.com/show_bug.cgi?id=865492 - http://www.openwall.com/lists/oss-security/2012/10/11/6
509.html - https://bugzilla.redhat.com/show_bug.cgi?id=865492 - http://www.openwall.com/lists/oss-security/2012/10/11/6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79396 - http://comments.gmane.org/gmane.linux.drivers.rdma/11659 - http://www.openwall.com/lists/oss-security/2012/10/11/9 - http://www.securityfocus.com/bid/55890
CVE ID: CVE-2012-4518 State: PUBLISHED Published: 2012-10-22T23:00:00 Last Updated: 2024-08-06T20:35:09.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ib_acm daemon log or ibacm.port file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0509.html - http://www.openwall.com/lists/oss-security/2012/10/11/6 - http://git.openfabrics.org/git?p=~shefty/ibacm.git%3Ba=commit%3Bh=d204fca2b6298d7799e918141ea8e11e7ad43cec - http://www.openwall.com/lists/oss-security/2012/10/11/9 - http://www.securityfocus.com/bid/55890
CVE ID: CVE-2012-4519 State: PUBLISHED Published: 2020-02-11T17:19:42 Last Updated: 2024-08-06T20:35:09.926Z Vendors: Zenphoto Products: Zenphoto Problem Types: XSS Description: Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/11/10 - http://www.openwall.com/lists/oss-security/2013/07/10/19
CVE ID: CVE-2012-4520 State: PUBLISHED Published: 2012-11-18T23:00:00 Last Updated: 2024-08-06T20:42:53.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/10/30/4 - http://securitytracker.com/id?1027708 - https://github.com/django/django/commit/b45c377f8f488955e0c7069cad3f3dd21910b071 - http://www.osvdb.org/86493 - http://secunia.com/advisories/51314 - http
ommit/b45c377f8f488955e0c7069cad3f3dd21910b071 - http://www.osvdb.org/86493 - http://secunia.com/advisories/51314 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=691145 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090970.html - http://ubuntu.com/usn/usn-1757-1 - https://github.com/django/django/commit/92d3430f12171f16f566c9050c40feefb830a4a3 - http://www.debian.org/security/2013/dsa-2634 - https://www.djangoproject.com/weblog/2012/oct/17/security/ - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090904.html - https://github.com/django/django/commit/9305c0e12d43c4df999c3301a1f0c742264a657e - http://secunia.com/advisories/51033 - https://b
thub.com/django/django/commit/9305c0e12d43c4df999c3301a1f0c742264a657e - http://secunia.com/advisories/51033 - https://bugzilla.redhat.com/show_bug.cgi?id=865164 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090666.html - http://ubuntu.com/usn/usn-1632-1
CVE ID: CVE-2012-4521 State: REJECTED Published: 2012-11-11T11:00:00Z Last Updated: 2024-09-16T17:28:47.865Z Description: No description available.
CVE ID: CVE-2012-4522 State: PUBLISHED Published: 2012-11-24T20:00:00 Last Updated: 2024-08-06T20:42:53.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090235.html - http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=37163 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October
cgi-bin/viewvc.cgi?view=revision&revision=37163 - http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090515.html - http://www.openwall.com/lists/oss-security/2012/10/13/1 - http://rhn.redhat.com/errata/RHSA-2013-0129.html - http://www.openwall.com/lists/oss-security/2012/10/16/1 - http://www.openwall.com/lists/oss-security/2012/10/12/6 - http://www.ruby-lang.org/en/news/2012/10/12/poisoned-NUL-byte-vulnerability/
CVE ID: CVE-2012-4523 State: PUBLISHED Published: 2012-11-20T00:00:00 Last Updated: 2024-08-06T20:42:54.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used for verifying the certificate chain, which might allow remote attackers to bypass intended access restrictions and spoof clients. Additional Analyst Notes: - CVE Program Container: References: - https://postlister.uninett.no/sympa/arc/radsecproxy/2012-09/msg00006.html - http://www.securityfocus.com/bid/56105 - http://secunia.com/advisories/51251 - http://www.openwall.com
9/msg00006.html - http://www.securityfocus.com/bid/56105 - http://secunia.com/advisories/51251 - http://www.openwall.com/lists/oss-security/2012/10/31/6 - https://project.nordu.net/browse/RADSECPROXY-43 - http://www.debian.org/security/2012/dsa-2573 - https://postlister.uninett.no/sympa/arc/radsecproxy/2012-09/msg00001.html - http://www.openwall.com/lists/oss-security/2012/10/17/7
CVE ID: CVE-2012-4524 State: PUBLISHED Published: 2019-11-21T14:11:41 Last Updated: 2024-08-06T20:42:53.692Z Vendors: xlockmore Products: xlockmore Problem Types: bypass Description: xlockmore before 5.43 'dclock' security bypass vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-4524 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4524 - https://access.redhat.com/security/cve/cve-2012-4524 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79558 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091108.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-Novemb
rmail/package-announce/2012-November/091108.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091150.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091709.html - http://security.gentoo.org/glsa/glsa-201309-03.xml - http://www.openwall.com/lists/oss-security/2012/10/17/12 - http://www.securityfocus.com/bid/56169
CVE ID: CVE-2012-4525 State: PUBLISHED Published: 2019-12-02T17:46:59 Last Updated: 2024-08-06T20:42:53.710Z Vendors: piwigo Products: piwigo Problem Types: in password.php Description: piwigo has XSS in password.php Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-4525 - https://access.redhat.com/security/cve/cve-2012-4525 - http://www.openwall.com/lists/oss-security/2013/02/11/1 - http://www.securityfocus.com/bid/55710 - http://www.openwall.com/lists/oss-security/2012/10/18/4
CVE ID: CVE-2012-4526 State: PUBLISHED Published: 2019-12-02T17:48:45 Last Updated: 2024-08-06T20:42:54.961Z Vendors: piwigo Products: piwigo Problem Types: in password.php, incomplete fix for CVE-2012-4525 Description: piwigo has XSS in password.php (incomplete fix for CVE-2012-4525) Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/02/11/1 - https://security-tracker.debian.org/tracker/CVE-2012-4526 - https://access.redhat.com/security/cve/cve-2012-4526 - http://www.securityfocus.com/bid/55710 - http://www.openwall.com/lists/oss-security/2012/10/18/4
CVE ID: CVE-2012-4527 State: PUBLISHED Published: 2012-11-21T23:00:00 Last Updated: 2024-08-06T20:42:53.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091206.html - http://lists.opensuse.org/opensuse-updates/2012-11/msg00003.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-Novembe
suse.org/opensuse-updates/2012-11/msg00003.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091173.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091377.html - http://www.securityfocus.com/bid/56114 - http://www.openwall.com/lists/oss-security/2012/10/18/12 - http://www.openwall.com/lists/oss-security/2012/11/20/1 - http://www.openwall.com/lists/oss-security/2012/10/18/9 - https://bugzilla.redhat.com/show_bug.cgi?id=867790
CVE ID: CVE-2012-4528 State: PUBLISHED Published: 2012-12-28T11:00:00 Last Updated: 2024-08-06T20:42:54.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to a PHP application, via a multipart request in which an invalid part precedes the crafted data. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-08/msg00031.html - https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20121017-0_mod_security_ruleset_bypass.txt - http://mod-security.svn.sourceforge.net/viewvc/m
rod/temedia/advisories_txt/20121017-0_mod_security_ruleset_bypass.txt - http://mod-security.svn.sourceforge.net/viewvc/mod-security?view=revision&sortby=date&revision=2081 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00020.html - http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/branches/2.7.x/CHANGES - http://mod-security.svn.sourceforge.net/viewvc/mod-security/m2/trunk/apache2/msc_multipart.c?sortby=date&r1=2081&r2=2080&pathrev=2081 - http://seclists.org/fulldisclosure/2012/Oct/113 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093011.html - http://www.openwall.com/lists/oss-security/2012/10/18/14 - http://lists.opensuse.org/opensuse-updat
vember/093011.html - http://www.openwall.com/lists/oss-security/2012/10/18/14 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00025.html
CVE ID: CVE-2012-4529 State: PUBLISHED Published: 2013-10-28T21:00:00Z Last Updated: 2024-08-06T20:42:54.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id (1) via a man-in-the-middle attack or (2) by reading a log. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0839.html - http://rhn.redhat.com/errata/RHSA-2013-0833.html - http://rhn.redhat.com/errata/RHSA-2013-1
errata/RHSA-2013-0839.html - http://rhn.redhat.com/errata/RHSA-2013-0833.html - http://rhn.redhat.com/errata/RHSA-2013-1437.html - http://ocpsoft.org/support/topic/session-id-is-appended-as-url-path-parameter-in-very-first-request/ - https://issues.jboss.org/browse/JBWEB-249 - http://rhn.redhat.com/errata/RHSA-2013-0834.html
CVE ID: CVE-2012-4530 State: PUBLISHED Published: 2013-02-18T02:00:00 Last Updated: 2024-08-06T20:42:53.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: The load_script function in fs/binfmt_script.c in the Linux kernel before 3.7.2 does not properly handle recursion, which allows local users to obtain sensitive information from kernel stack memory via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0223.html - http://www.openwall.com/lists/oss-security/2012/10/19/3 - https://github.com/torvalds/linux/commit/b66c5984017533316fd1951770302649baf1aa33 - http://www.kernel.org/pub/linux/kernel/v3.x/Chang
b.com/torvalds/linux/commit/b66c5984017533316fd1951770302649baf1aa33 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2 - http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b66c5984017533316fd1951770302649baf1aa33 - https://bugzilla.redhat.com/show_bug.cgi?id=868285
CVE ID: CVE-2012-4531 State: PUBLISHED Published: 2012-10-31T16:00:00 Last Updated: 2024-08-06T20:42:54.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49678 - http://developer.joomla.org/security/news/539-20120901-core-xss-vulnerability - http://www.openwall.com/lists/oss-security/2012/10/19/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79725 - http://www.openwall.com/lists/oss-security/2012/10/07/3 - http://www.jo
ange.xforce.ibmcloud.com/vulnerabilities/79725 - http://www.openwall.com/lists/oss-security/2012/10/07/3 - http://www.joomla.org/announcements/release-news/5463-joomla-2-5-7-released.html
CVE ID: CVE-2012-4532 State: PUBLISHED Published: 2012-10-31T16:00:00Z Last Updated: 2024-09-16T18:12:46.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules/mod_languages/tmpl/default.php in the Language Switcher module for Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49678 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-014.txt - http://www.osvdb.org/83490 - http://www.openwall.co
8 - http://www.darksecurity.de/advisories/2012/SSCHADV2012-014.txt - http://www.osvdb.org/83490 - http://www.openwall.com/lists/oss-security/2012/10/19/4 - http://developer.joomla.org/security/news/540-20120902-core-xss-vulnerability - http://www.openwall.com/lists/oss-security/2012/10/07/3 - http://www.joomla.org/announcements/release-news/5463-joomla-2-5-7-released.html
CVE ID: CVE-2012-4533 State: PUBLISHED Published: 2012-11-19T00:00:00 Last Updated: 2024-08-06T20:42:53.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in ViewVC 1.0.x before 1.0.13 and 1.1.x before 1.1.16 allows remote authenticated users with repository commit access to inject arbitrary web script or HTML via the "function name" line. Additional Analyst Notes: - CVE Program Container: References: - http://viewvc.tigris.org/issues/show_bug.cgi?id=515 - http://osvdb.org/86566 - http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2794 - http://secuni
i?id=515 - http://osvdb.org/86566 - http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2794 - http://secunia.com/advisories/51041 - http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2792 - http://www.securityfocus.com/bid/56161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/79561 - http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.0.13/CHANGES - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=691062 - http://www.openwall.com/lists/oss-security/2012/10/21/3 - https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0313 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:134 - http://www.debian.org/security/2012/dsa-2563 - http:/
http://www.mandriva.com/security/advisories?name=MDVSA-2013:134 - http://www.debian.org/security/2012/dsa-2563 - http://www.openwall.com/lists/oss-security/2012/10/21/2 - http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.1.16/CHANGES - http://secunia.com/advisories/51072
CVE ID: CVE-2012-4534 State: PUBLISHED Published: 2012-12-19T11:00:00 Last Updated: 2024-08-06T20:42:54.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to cause a denial of service (infinite loop) by terminating the connection during the reading of a response. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://svn.apache.org/viewvc?view=revision&revision=1340218 - http://lists.opensuse.org/opensuse-updates/2013
8376&w=2 - http://svn.apache.org/viewvc?view=revision&revision=1340218 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00051.html - http://www.ubuntu.com/usn/USN-1685-1 - http://www.securitytracker.com/id?1027836 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00080.html - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878 - https://issues.apache.org/bugzilla/show_bug.cgi?id=52858 - http://lists.opensuse.org/opensuse-updates/2013-01/msg00061.html - http://tomcat.apache.org/security-7.html - https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878 - http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/ap
al/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878 - http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/tomcat/util/net/NioEndpoint.java?r1=1340218&r2=1340217&pathrev=1340218 - http://tomcat.apache.org/security-6.html - http://secunia.com/advisories/57126 - http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?r1=1340218&r2=1340217&pathrev=1340218 - http://rhn.redhat.com/errata/RHSA-2013-0623.html - http://archives.neohapsis.com/archives/bugtraq/2012-12/0043.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19398 - http://www.securityfocus.com/bid/56813 - http://marc.info/?l=bugtraq&m=136612293908376&w=2
g.mitre.oval%3Adef%3A19398 - http://www.securityfocus.com/bid/56813 - http://marc.info/?l=bugtraq&m=136612293908376&w=2 - http://marc.info/?l=bugtraq&m=139344343412337&w=2
CVE ID: CVE-2012-4535 State: PUBLISHED Published: 2012-11-21T23:00:00 Last Updated: 2024-08-06T20:42:53.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1540.html - http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html - http://secunia.com/advisories/55082 - http://www.securitytracker.com/id?1027759 - http://lists.xen.org/archives/html/xen
http://secunia.com/advisories/55082 - http://www.securitytracker.com/id?1027759 - http://lists.xen.org/archives/html/xen-announce/2012-11/msg00001.html - http://secunia.com/advisories/51413 - http://secunia.com/advisories/51200 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://www.debian.org/security/2012/dsa-2582 - http://osvdb.org/87298 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html - http://www.openwall.com/lists/oss-security/2012/11/13/1 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html - http://secunia.com/advisories/51468 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80022 - http://lists.opensuse.org/opensuse
a.com/advisories/51468 - https://exchange.xforce.ibmcloud.com/vulnerabilities/80022 - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://secunia.com/advisories/51352 - http://secunia.com/advisories/51324 - https://security.gentoo.org/glsa/201604-03 - http://www.securityfocus.com/bid/56498 - http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
CVE ID: CVE-2012-4536 State: PUBLISHED Published: 2012-11-21T23:00:00 Last Updated: 2024-08-06T20:42:54.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) domain_pirq_to_emuirq and (2) physdev_unmap_pirq functions in Xen 2.2 allows local guest OS administrators to cause a denial of service (Xen crash) via a crafted pirq value that triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55082 - http://secunia.com/advisories/51413 - http://secunia.com/advisories/51200 - http://security.gentoo.org/glsa/glsa-201309-24.xml - http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html - https