Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-6213 State: PUBLISHED Published: 2016-12-28T07:42:00 Last Updated: 2024-08-06T01:22:20.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which allows local users to cause a denial of service (memory consumption and deadlock) via MS_BIND mount system calls, as demonstrated by a loop that triggers exponential growth in the number of mounts. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/13/8 - https://github.com/torvalds/linux/commit/d29216842a85c7970c536108e093963f02714498 - http://gi
ss-security/2016/07/13/8 - https://github.com/torvalds/linux/commit/d29216842a85c7970c536108e093963f02714498 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d29216842a85c7970c536108e093963f02714498 - http://www.securityfocus.com/bid/91754 - https://bugzilla.redhat.com/show_bug.cgi?id=1356471 - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842
CVE ID: CVE-2016-6214 State: PUBLISHED Published: 2016-08-12T15:00:00 Last Updated: 2024-08-06T01:22:20.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TGA file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-08/msg00086.html - https://libgd.github.io/release-2.2.3.html - http://lists.opensuse.org/opensuse-updates/2016-09/msg00078.html - https://github.com/libgd/libgd/issues/247#issuecomment-232084241 - https://github.com/libgd/libgd/commit/10ef1dca63d62433fda13309
ithub.com/libgd/libgd/issues/247#issuecomment-232084241 - https://github.com/libgd/libgd/commit/10ef1dca63d62433fda13309b4a228782db823f7 - http://www.openwall.com/lists/oss-security/2016/07/13/12 - http://www.openwall.com/lists/oss-security/2016/07/13/5 - http://www.ubuntu.com/usn/USN-3060-1 - http://www.debian.org/security/2016/dsa-3619
CVE ID: CVE-2016-6217 State: PUBLISHED Published: 2018-01-26T20:00:00 Last Updated: 2024-08-06T01:22:20.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sophos PureMessage for UNIX before 6.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://pmx.sophos.com/rn/pmx/concepts/ReleaseNotes_6.3.2.html
CVE ID: CVE-2016-6220 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-06T01:22:20.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information Disclosure vulnerability in the Dashboard and Error Pages in Trend Micro Control Manager SP3 6.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92363 - https://success.trendmicro.com/solution/1114749
CVE ID: CVE-2016-6223 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:22:20.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-16 - http://libtiff.maptools.org/v4.0.7.html - http://www.openwall.com/lists/oss-security/2016/07/14/4 - http://www.debian.org/security/2017/dsa-3762 - http://www.openwall.com/lists/oss-s
com/lists/oss-security/2016/07/14/4 - http://www.debian.org/security/2017/dsa-3762 - http://www.openwall.com/lists/oss-security/2016/07/13/3 - http://www.securityfocus.com/bid/91741
CVE ID: CVE-2016-6224 State: PUBLISHED Published: 2016-07-22T14:00:00 Last Updated: 2024-08-06T01:22:20.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a (1) NVMe or (2) MMC drive, which allows local users to obtain sensitive information via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8946. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/14/3 - http://www.openwall.com/lists/oss-security/2016/07/13/2 - https://bugs.launchpa
ll.com/lists/oss-security/2016/07/14/3 - http://www.openwall.com/lists/oss-security/2016/07/13/2 - https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282 - http://www.ubuntu.com/usn/USN-3032-1 - https://bugs.launchpad.net/ecryptfs/+bug/1597154 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K5WWCVHDLRLZTYMXEIONYFHLYAXXLJW3/ - https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/882
CVE ID: CVE-2016-6225 State: PUBLISHED Published: 2017-03-23T16:00:00 Last Updated: 2024-08-06T01:22:20.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/percona/percona-xtrabackup/pull/267 - http://lists.opensuse.org/opensuse-updates/2017-01
eferences: - https://github.com/percona/percona-xtrabackup/pull/267 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00126.html - http://lists.opensuse.org/opensuse-updates/2017-01/msg00125.html - https://bugs.launchpad.net/percona-xtrabackup/+bug/1643949 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBVCP6KLFVGG6HSGLHLTMZRD6C4IJSZP/ - https://github.com/percona/percona-xtrabackup/pull/266 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BAHI6ETS22FJCMLW7A6SICFKQXF5G2VI/ - https://www.percona.com/blog/2017/01/12/cve-2016-6225-percona-xtrabackup-encryption-iv-not-set-properly/
CVE ID: CVE-2016-6231 State: PUBLISHED Published: 2016-08-25T18:00:00 Last Updated: 2024-08-06T01:22:20.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaspersky Safe Browser iOS before 1.7.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.info-sec.ca/advisories/Kaspersky-Safe-Browser.html - http://www.securityfocus.com/bid/92200 - https://support.kaspersky.com/vulnerability.aspx?el=12430#280716 - http://www.securityfocus.com/archive/1/539071/100/0/threaded - http://seclists.org/fulldisclosure/2016
el=12430#280716 - http://www.securityfocus.com/archive/1/539071/100/0/threaded - http://seclists.org/fulldisclosure/2016/Aug/30
CVE ID: CVE-2016-6232 State: PUBLISHED Published: 2016-08-02T16:00:00 Last Updated: 2024-08-06T01:22:20.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ (dot dot slash) in a filename in an archive file, related to KNewsstuff downloads. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/16/3 - https://quickgit.kde.org/?p=karchive.git&a=commit&h=0cb243f64eef45565741b27364cece7d5c349c37 - https://www.kde.org/info/security/advisory-20160724-1.txt - http://lists.opensuse.o
f64eef45565741b27364cece7d5c349c37 - https://www.kde.org/info/security/advisory-20160724-1.txt - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00023.html - http://www.securityfocus.com/bid/91806 - http://www.debian.org/security/2016/dsa-3643 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00000.html - http://www.openwall.com/lists/oss-security/2016/07/16/2 - http://www.ubuntu.com/usn/USN-3042-1 - https://usn.ubuntu.com/4100-1/
CVE ID: CVE-2016-6233 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T01:22:20.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.19 might allow remote attackers to conduct SQL injection attacks via vectors related to use of the character pattern [\w]* in a regular expression. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UR5HXNGIUSSIZKMSZYMPBEPZEZTYFTIT/ - https://security.gentoo.org/glsa/201804-10 - https://lists.fedoraproject.org/archives/list/package
MSZYMPBEPZEZTYFTIT/ - https://security.gentoo.org/glsa/201804-10 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2JUKFTI6ABK7ZN7IEAGPCLAHCFANMID2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N27AV6AL6B4KGEP3VIMIHQ5LFAKF5FTU/ - https://framework.zend.com/security/advisory/ZF2016-02 - http://www.securityfocus.com/bid/91802
CVE ID: CVE-2016-6234 State: PUBLISHED Published: 2017-02-02T16:00:00 Last Updated: 2024-08-06T01:22:20.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_file function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (crash) via a crafted jpeg file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dropbox/lepton/issues/26 - http://www.openwall.com/lists/oss-security/2016/07/17/6
CVE ID: CVE-2016-6235 State: PUBLISHED Published: 2017-02-02T16:00:00 Last Updated: 2024-08-06T01:22:20.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (segmentation fault) via a crafted jpeg file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dropbox/lepton/issues/26 - http://www.openwall.com/lists/oss-security/2016/07/17/6
CVE ID: CVE-2016-6236 State: PUBLISHED Published: 2017-02-02T16:00:00 Last Updated: 2024-08-06T01:22:20.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dropbox/lepton/issues/26 - http://www.openwall.com/lists/oss-security/2016/07/17/6
CVE ID: CVE-2016-6237 State: PUBLISHED Published: 2017-02-02T16:00:00 Last Updated: 2024-08-06T01:22:20.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: The build_huffcodes function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service (out-of-bounds write) via a crafted jpeg file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dropbox/lepton/issues/26 - http://www.openwall.com/lists/oss-security/2016/07/17/6
CVE ID: CVE-2016-6238 State: PUBLISHED Published: 2017-02-02T16:00:00 Last Updated: 2024-08-06T01:22:20.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: The write_ujpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service (out-of-bounds read) via a crafted jpeg file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dropbox/lepton/issues/26 - http://www.openwall.com/lists/oss-security/2016/07/17/6
CVE ID: CVE-2016-6239 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:22:21.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mmap extension __MAP_NOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service (kernel panic and crash) via a large size value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036318 - http://www.openbsd.org/errata59.html - http://www.openwall.com/lists/oss-security/2016/07/14/5 - http://www.openwall.com/lists/oss-security/2016/07/17/7 - http://www.openbsd.org/errata58.html - http://www.securityfocus.com/bid/91805
CVE ID: CVE-2016-6240 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:22:20.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer truncation error in the amap_alloc function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036318 - http://www.openbsd.org/errata59.html - http://www.openwall.com/lists/oss-security/2016/07/14/5 - http://www.openwall.com/lists/oss-security/2016/07/17/7 - http://www.openbsd.org/errata58.html - http://www.securityfocus.com/bid/91805
CVE ID: CVE-2016-6241 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:22:20.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the amap_alloc1 function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036318 - http://www.openbsd.org/errata59.html - http://www.openwall.com/lists/oss-security/2016/07/14/5 - http://www.openwall.com/lists/oss-security/2016/07/17/7 - http://www.openbsd.org/errata58.html - http://www.securityfocus.com/bid/91805
CVE ID: CVE-2016-6242 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:22:20.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (assertion failure and kernel panic) via a large ident value in a kevent system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata59.html - http://www.openwall.com/lists/oss-security/2016/07/14/5 - http://www.openwall.com/lists/oss-security/2016/07/17/7 - http://www.openbsd.org/errata58.html - http://www.securityfocus.com/bid/91805
CVE ID: CVE-2016-6243 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:22:20.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: thrsleep in kern/kern_synch.c in OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (kernel panic) via a crafted value in the tsp parameter of the __thrsleep system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata59.html - http://www.openwall.com/lists/oss-security/2016/07/14/5 - http://www.openwall.com/lists/oss-security/2016/07/17/7 - http://www.openbsd.org/errata58.html - http://www.securityfocus.com/bid/91805
CVE ID: CVE-2016-6244 State: PUBLISHED Published: 2017-03-07T15:00:00 Last Updated: 2024-08-06T01:22:20.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sys_thrsigdivert function in kern/kern_sig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service (panic) via a negative "ts.tv_sec" value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91805 - http://www.openwall.com/lists/oss-security/2016/07/17/7
CVE ID: CVE-2016-6245 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:22:20.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (kernel panic) via a large size in a getdents system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata59.html - http://www.openwall.com/lists/oss-security/2016/07/14/5 - http://www.openwall.com/lists/oss-security/2016/07/17/7 - http://www.openbsd.org/errata58.html - http://www.securityfocus.com/bid/91805
CVE ID: CVE-2016-6246 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:22:20.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBSD 5.8 and 5.9 allows certain local users with kern.usermount privileges to cause a denial of service (kernel panic) by mounting a tmpfs with a VNOVAL in the (1) username, (2) groupname, or (3) device name of the root node. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata59.html - http://www.openwall.com/lists/oss-security/2016/07/14/5 - http://www.openwall.com/lists/oss-security/2016/07/17/7 - http://www.openbsd.org/errata58.html - http://www.securityfocus.com/bid/91805
CVE ID: CVE-2016-6247 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:22:20.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBSD 5.8 and 5.9 allows certain local users to cause a denial of service (kernel panic) by unmounting a filesystem with an open vnode on the mnt_vnodelist. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata59.html - http://www.openwall.com/lists/oss-security/2016/07/14/5 - http://www.openwall.com/lists/oss-security/2016/07/17/7 - http://www.openbsd.org/errata58.html - http://www.securityfocus.com/bid/91805
CVE ID: CVE-2016-6249 State: PUBLISHED Published: 2017-02-20T15:00:00 Last Updated: 2024-08-06T01:22:20.654Z Vendors: F5 Networks Products: F5 BIG-IP, REST Framework Logging Problem Types: Information Leak / Disclosure Description: F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to /var/log/restjavad.0.log. It may allow local users to obtain sensitive information by reading these files. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K12685114 - http://www.securitytracker.com/id/1037873
CVE ID: CVE-2016-6250 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T01:22:20.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-1844.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.securitytracker.com/id/1036431 - http:
le.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.securitytracker.com/id/1036431 - http://www.securityfocus.com/bid/92036 - https://github.com/libarchive/libarchive/files/295073/libarchiveOverflow.txt - http://www.openwall.com/lists/oss-security/2016/07/20/1 - https://github.com/libarchive/libarchive/commit/3014e198 - https://bugzilla.redhat.com/show_bug.cgi?id=1347085 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/07/21/3 - https://github.com/libarchive/libarchive/issues/711
CVE ID: CVE-2016-6251 State: REJECTED Published: 2017-02-17T15:00:00 Last Updated: 2017-02-17T14:57:01 Description: No description available.
CVE ID: CVE-2016-6252 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T01:22:20.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/19/7 - http://www.securityfocus.com/bid/92055 - https://security.gentoo.org/glsa/201706-02 - https://github.com/shadow-maint/shadow/issues/27 - https://bugzilla.suse.com/show_bug.cgi?id=979282 - http://www.openwall.com/lists/oss-security/2016/07/25/7 - http://www.openwall.com/lists/oss-security/2016/07/19/6 - ht
- http://www.openwall.com/lists/oss-security/2016/07/25/7 - http://www.openwall.com/lists/oss-security/2016/07/19/6 - http://www.openwall.com/lists/oss-security/2016/07/20/2 - http://www.debian.org/security/2017/dsa-3793
CVE ID: CVE-2016-6253 State: PUBLISHED Published: 2017-01-20T15:00:00 Last Updated: 2024-08-06T01:22:20.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2016-006.txt.asc - http://packetstormsecurity.com/files/138021/NetBSD-mail.local-8-Local-Root.html - https://www.exploit-db.com/exploits/40141/ - https://www.exploit-db.com/exploits/40385/ -
mail.local-8-Local-Root.html - https://www.exploit-db.com/exploits/40141/ - https://www.exploit-db.com/exploits/40385/ - http://www.securityfocus.com/bid/92101 - http://akat1.pl/?id=2 - http://www.securitytracker.com/id/1036429 - http://www.rapid7.com/db/modules/exploit/unix/local/netbsd_mail_local
CVE ID: CVE-2016-6254 State: PUBLISHED Published: 2016-08-19T21:00:00 Last Updated: 2024-08-06T01:22:20.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted network packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/collectd/collectd/commit/b589096f907052b3a4da2b9ccc9b0e2e888dfc18 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UIZ5UXDOB7BA5NGE2F2I2BL4K6763DHW/ -
s.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UIZ5UXDOB7BA5NGE2F2I2BL4K6763DHW/ - http://www.debian.org/security/2016/dsa-3636 - http://collectd.org/news.shtml - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CM4W5SJ4OTBGINGIN4NJLXCUZAZANO6J/
CVE ID: CVE-2016-6255 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:22:20.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/20/5 - https://twitter.com/mjg59/status/755062278513319936 - https://github.com/mjg59/pupnp-code/commit/be0a01bdb83395d9f3a5ea09c1308a4f1a972cbd - https://sourceforge.net/p/pupnp/code/ci/master/tree/ChangeLog - https://security.gentoo.org/glsa/201701-52
4f1a972cbd - https://sourceforge.net/p/pupnp/code/ci/master/tree/ChangeLog - https://security.gentoo.org/glsa/201701-52 - https://www.exploit-db.com/exploits/40589/ - https://www.tenable.com/security/research/tra-2017-10 - http://www.openwall.com/lists/oss-security/2016/07/18/13 - http://www.debian.org/security/2016/dsa-3736 - http://www.securityfocus.com/bid/92050