Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-4908 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T00:46:39.909Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RSS settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN14631222/index.html - http://www.securityfocus.com/bid/97912 - http://www.securityfocus.com/bid/94966 - https://support.cybozu.com/ja-jp/article/9399
CVE ID: CVE-2016-4909 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T00:46:39.803Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to hijack the authentication of a logged in user to force a logout via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94973 - http://www.securityfocus.com/bid/97911 - https://support.cybozu.com/ja-jp/article/9459 - https://jvn.jp/en/jp/JVN15222211/index.html
CVE ID: CVE-2016-4910 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T00:46:39.235Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to delete other operational administrators' MultiReport filters via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN14631222/index.html - https://support.cybozu.com/ja-jp/article/9461 - http://www.securityfocus.com/bid/94966
CVE ID: CVE-2016-4911 State: PUBLISHED Published: 2016-06-13T14:00:00 Last Updated: 2024-08-06T00:46:40.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Fernet Token Provider in OpenStack Identity (Keystone) 9.0.x before 9.0.1 (mitaka) allows remote authenticated users to prevent revocation of a chain of tokens and bypass intended access restrictions by rescoping a token. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/keystone/+bug/1577558 - http://www.openwall.com/lists/oss-security/2016/05/17/10 - http://www.securityfocus.com/bid/90728 - https://security.openstack.org/ossa/OSSA-2016-008.html - https://review.openstack.org/#/c/
securityfocus.com/bid/90728 - https://security.openstack.org/ossa/OSSA-2016-008.html - https://review.openstack.org/#/c/311886/ - http://www.openwall.com/lists/oss-security/2016/05/17/11
CVE ID: CVE-2016-4912 State: PUBLISHED Published: 2017-03-27T17:00:00 Last Updated: 2024-08-06T00:46:39.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a large number of crafted packets, which triggers a memory allocation failure. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1329295 - https://security.gentoo.org/glsa/201707-05 - http://www.securitytracker.com/id/1035916 - http://www.openwall.com/lists/oss-security/2016/05/18/6
CVE ID: CVE-2016-4913 State: PUBLISHED Published: 2016-05-23T10:00:00 Last Updated: 2024-08-06T00:46:39.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3083 - https://github.com/torvalds/linux/commit/99d825822eade8d827a1817357cbf3f889a552d6 - http://www.oracle.com/tec
018:3083 - https://github.com/torvalds/linux/commit/99d825822eade8d827a1817357cbf3f889a552d6 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.ubuntu.com/usn/USN-3017-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://www.ubuntu.com/usn/USN-3017-3 - http://www.ubuntu.com/usn/USN-3018-2 - http://www.ubuntu.com/usn/USN-3021-2 - https://bugzilla.redhat.com/show_bug.cgi?id=1337528 - http://www.ubuntu.com/usn/USN-3017-2 - http://www.ubuntu.com/usn/USN-3019-1 - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-3016-2 - http://www.ubuntu.com/usn/USN-3016-1 - http://lists.opensuse.org/ope
6/dsa-3607 - http://www.ubuntu.com/usn/USN-3016-2 - http://www.ubuntu.com/usn/USN-3016-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://www.ubuntu.com/usn/USN-3021-1 - http://www.openwall.com/lists/oss-security/2016/05/18/5 - http://www.ubuntu.com/usn/USN-3018-1 - http://www.openwall.com/lists/oss-security/2016/05/18/3 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5 - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://www.securityfocus.com/bid/90730 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99d825822eade8d827a1817357cbf3f889a552d6 - http://www.ubuntu.com/usn/USN-3016
x/kernel/git/torvalds/linux.git/commit/?id=99d825822eade8d827a1817357cbf3f889a552d6 - http://www.ubuntu.com/usn/USN-3016-3 - http://www.ubuntu.com/usn/USN-3016-4 - https://access.redhat.com/errata/RHSA-2018:3096 - http://www.ubuntu.com/usn/USN-3020-1
CVE ID: CVE-2016-4921 State: PUBLISHED Published: 2017-10-13T17:00:00Z Last Updated: 2024-09-17T02:47:04.155Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: denial of service vulnerability Description: By flooding a Juniper Networks router running Junos OS with specially crafted IPv6 traffic, all available resources can be consumed, leading to the inability to store next hop information for legitimate traffic. In extreme cases, the crafted IPv6 traffic may result in a total resource exhaustion and kernel panic. The issue is triggered by traffic destined to the router. Transit traffic does not trigger the vuln
on and kernel panic. The issue is triggered by traffic destined to the router. Transit traffic does not trigger the vulnerability. This issue only affects devices with IPv6 enabled and configured. Devices not configured to process IPv6 traffic are unaffected by this vulnerability. This issue was found during internal product security testing. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. Affected releases are Juniper Networks Junos OS 11.4 prior to 11.4R13-S3; 12.3 prior to 12.3R3-S4; 12.3X48 prior to 12.3X48-D30; 13.3 prior to 13.3R10, 13.3R4-S11; 14.1 prior to 14.1R2-S8, 14.1R4-S12, 14.1R8; 14.1X53 prior to 14.1X53-D28, 14.1X53-D40; 14.1X55 prior to 14.1X55
R4-S11; 14.1 prior to 14.1R2-S8, 14.1R4-S12, 14.1R8; 14.1X53 prior to 14.1X53-D28, 14.1X53-D40; 14.1X55 prior to 14.1X55-D35; 14.2 prior to 14.2R3-S10, 14.2R4-S7, 14.2R6; 15.1 prior to 15.1F2-S5, 15.1F5-S2, 15.1F6, 15.1R3; 15.1X49 prior to 15.1X49-D40; 15.1X53 prior to 15.1X53-D57, 15.1X53-D70. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10762 - http://www.securitytracker.com/id/1037014 - http://www.securityfocus.com/bid/93532
CVE ID: CVE-2016-4922 State: PUBLISHED Published: 2017-10-13T17:00:00Z Last Updated: 2024-09-16T16:28:48.876Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: Privilege escalation Description: Certain combinations of Junos OS CLI commands and arguments have been found to be exploitable in a way that can allow unauthorized access to the operating system. This may allow any user with permissions to run these CLI commands the ability to achieve elevated privileges and gain complete control of the device. Affected releases are Juniper Networks Junos OS 11.4 prior to 11.4R13-S3; 12.1X46 prior to 12.1X46-D60; 12.1X47
device. Affected releases are Juniper Networks Junos OS 11.4 prior to 11.4R13-S3; 12.1X46 prior to 12.1X46-D60; 12.1X47 prior to 12.1X47-D45; 12.3 prior to 12.3R12; 12.3X48 prior to 12.3X48-D35; 13.2 prior to 13.2R9; 13.3 prior to 13.3R4-S11, 13.3R9; 14.1 prior to 14.1R4-S12, 14.1R7; 14.1X53 prior to 14.1X53-D28, 14.1X53-D40; 14.1X55 prior to 14.1X55-D35; 14.2 prior to 14.2R3-S10, 14.2R4-S7, 14.2R5; 15.1 prior to 15.1F4, 15.1R3; 15.1X49 prior to 15.1X49-D60; 15.1X53 prior to 15.1X53-D57, 15.1X53-D70. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10763 - http://www.securityfocus.com/bid/93534 - http://www.securitytracker.com/id/1037013
CVE ID: CVE-2016-4923 State: PUBLISHED Published: 2017-10-13T17:00:00Z Last Updated: 2024-09-16T16:54:14.922Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Juniper Networks Products: Junos OS Problem Types: Insufficient cross site scripting protection Description: Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. Affected releases are Juniper
nos device. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. Affected releases are Juniper Networks Junos OS 11.4 prior to 11.4R13-S3; 12.1X44 prior to 12.1X44-D60; 12.1X46 prior to 12.1X46-D40; 12.1X47 prior to 12.1X47-D30; 12.3 prior to 12.3R11; 12.3X48 prior to 12.3X48-D20; 13.2X51 prior to 13.2X51-D39, 13.2X51-D40; 13.3 prior to 13.3R9; 14.1 prior to 14.1R6; 14.2 prior to 14.2R6; 15.1 prior to 15.1R3; 15.1X49 prior to 15.1X49-D20; 15.1X53 prior to 15.1X53-D57. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10764 - http://www.securityfocus.com/bid/93529
CVE ID: CVE-2016-4924 State: PUBLISHED Published: 2017-10-13T17:00:00Z Last Updated: 2024-09-16T22:25:25.053Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: Juniper Networks Products: Junos OS Problem Types: Information leak vulnerability Description: An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptographic keys. This issue was found during internal product security testing. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. No other Juniper Networks
curity testing. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS 15.1 prior to 15.1F5; 14.1 prior to 14.1R8 Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93531 - https://kb.juniper.net/JSA10766
CVE ID: CVE-2016-4925 State: PUBLISHED Published: 2017-10-13T17:00:00Z Last Updated: 2024-09-16T20:47:49.179Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Juniper Networks Products: JunosE Problem Types: denial of service Description: Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 (halt) in task: scheduler. The line card will reboot and recover without user interaction. However, additional specifically malformed packets may cause follow-on line card resets and lead to an extended service outage. This issue only affects E Series routers with IPv6 licensed and enabled. Rout
ts and lead to an extended service outage. This issue only affects E Series routers with IPv6 licensed and enabled. Routers not configured to process IPv6 traffic are unaffected by this vulnerability. Juniper SIRT is not aware of any malicious exploitation of this vulnerability. No other Juniper Networks products or platforms are affected by this issue. Additional Analyst Notes: - CVE Program Container: References: - https://kb.juniper.net/JSA10767 - http://www.securitytracker.com/id/1037012 - http://www.securityfocus.com/bid/93533
CVE ID: CVE-2016-4926 State: PUBLISHED Published: 2017-03-20T20:00:00 Last Updated: 2024-08-06T00:46:39.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93540 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10760
CVE ID: CVE-2016-4927 State: PUBLISHED Published: 2017-03-20T20:00:00 Last Updated: 2024-08-06T00:46:39.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle (MITM) type of attacks while a Space device is communicating with managed devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93540 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10760
CVE ID: CVE-2016-4928 State: PUBLISHED Published: 2017-03-20T20:00:00 Last Updated: 2024-08-06T00:46:39.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on Junos Space. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93540 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10760
CVE ID: CVE-2016-4929 State: PUBLISHED Published: 2017-03-20T20:00:00 Last Updated: 2024-08-06T00:46:39.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93540 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10760
CVE ID: CVE-2016-4930 State: PUBLISHED Published: 2017-03-20T20:00:00 Last Updated: 2024-08-06T00:46:39.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform certain administrative actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93540 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10760
CVE ID: CVE-2016-4931 State: PUBLISHED Published: 2017-03-20T20:00:00 Last Updated: 2024-08-06T00:46:39.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93540 - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10760
CVE ID: CVE-2016-4932 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4933 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4934 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4935 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4936 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4937 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4938 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4939 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4940 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4941 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4945 State: PUBLISHED Published: 2016-06-01T22:00:00 Last Updated: 2024-08-06T00:46:39.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vpn/js/gateway_login_form_view.js in Citrix NetScaler Gateway 11.0 before Build 66.11 allows remote attackers to inject arbitrary web script or HTML via the NSC_TMAC cookie. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/137221/Citrix-Netscaler-11.0-Build-64.35-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/538515/100/0/threaded - http://www.securitytracker.com/id/1036020 - http://support.citrix.com/article/CT
s.com/archive/1/538515/100/0/threaded - http://www.securitytracker.com/id/1036020 - http://support.citrix.com/article/CTX213313 - http://persicon.com/tl_files/advisories/PERSICON-advisory-2016-No-1-citrix.txt
CVE ID: CVE-2016-4946 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T00:46:39.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cloudera HUE 3.9.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) First name or (2) Last name field in the HUE Users page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93881 - http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf
CVE ID: CVE-2016-4947 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T00:46:39.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete. Additional Analyst Notes: - CVE Program Container: References: - http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf - http://www.securityfocus.com/bid/93880
CVE ID: CVE-2016-4948 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T00:46:39.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cloudera Manager 5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Template Name field when renaming a template; (2) KDC Server host, (3) Kerberos Security Realm, (4) Kerberos Encryption Types, (5) Advanced Configuration Snippet (Safety Valve) for [libdefaults] section of krb5.conf, (6) Advanced Configuration Snippet (Safety Valve) for the Default Realm in krb5.conf, (7) Advanced Configuration Snippet (Safety Valve) for remaining krb
t (Safety Valve) for the Default Realm in krb5.conf, (7) Advanced Configuration Snippet (Safety Valve) for remaining krb5.conf, or (8) Active Directory Account Prefix fields in the Kerberos wizard; or (9) classicWizard parameter to cmf/cloudera-director/redirect. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93878 - http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf
CVE ID: CVE-2016-4949 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T00:46:39.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1) stderr.log or (2) stdout.log value in the filename parameter to /cmf/process/<process_id>/logs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93882 - http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf
CVE ID: CVE-2016-4950 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T00:46:39.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93879 - http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf
CVE ID: CVE-2016-4951 State: PUBLISHED Published: 2016-05-23T10:00:00 Last Updated: 2024-08-06T00:46:39.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel through 4.6 does not verify socket existence, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a dumpit operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/21/2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.ubuntu.com/usn/USN-3017-1 - ht
www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.ubuntu.com/usn/USN-3017-1 - http://www.ubuntu.com/usn/USN-3017-3 - http://www.ubuntu.com/usn/USN-3017-2 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - http://www.ubuntu.com/usn/USN-3016-2 - http://www.ubuntu.com/usn/USN-3016-1 - https://github.com/torvalds/linux/commit/45e093ae2830cd1264677d47ff9a95a71f5d9f9c - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=45e093ae2830cd1264677d47ff9a95a71f5d9f9c - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://www.ubuntu.com/usn/USN-3016-3 - http://www.ubuntu.com/usn
twork/topics/security/ovmbulletinoct2016-3090547.html - http://www.ubuntu.com/usn/USN-3016-3 - http://www.ubuntu.com/usn/USN-3016-4 - http://lists.openwall.net/netdev/2016/05/14/28 - http://www.ubuntu.com/usn/USN-3020-1
CVE ID: CVE-2016-4952 State: PUBLISHED Published: 2016-09-02T14:00:00 Last Updated: 2024-08-06T00:46:39.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3047-1 - http://www.openwall.com/lists/oss-security/2016/05/23/1 - http://www.openwall.com/lists/oss-security/2016/05/23/4 - https://lists.gnu.o
wall.com/lists/oss-security/2016/05/23/1 - http://www.openwall.com/lists/oss-security/2016/05/23/4 - https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg03774.html - http://www.ubuntu.com/usn/USN-3047-2 - https://bugzilla.redhat.com/show_bug.cgi?id=1334384 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html