Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-9772 State: PUBLISHED Published: 2017-02-06T17:00:00 Last Updated: 2024-08-06T02:59:03.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/02/9 - https://www.openafs.org/pages/security/OPENAFS-SA-2016-003.txt - http://www.securityfocus.com/bid/94651
CVE ID: CVE-2016-9773 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T02:59:03.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2016/12/01/imagemagick-heap-based-buffer-overflow-in-ispixelgray-pixel-accessor-h-incomplete-fix-for-cve-2016-9556/ - http://www.openwall.com/li
eap-based-buffer-overflow-in-ispixelgray-pixel-accessor-h-incomplete-fix-for-cve-2016-9556/ - http://www.openwall.com/lists/oss-security/2016/12/02/12 - http://www.openwall.com/lists/oss-security/2016/12/01/4 - http://www.openwall.com/lists/oss-security/2016/12/02/11
CVE ID: CVE-2016-9774 State: PUBLISHED Published: 2017-03-23T16:00:00 Last Updated: 2024-08-06T02:59:03.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: The postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6.0.35-1ubuntu3.9 on Ubuntu 12.04 LTS and on Ubuntu 14.04 LTS; the tomcat7 package before 7.0.28-4+deb7u8 on Debian wheezy, before 7.0.56-3+deb8u6 on Debian jessie, before 7.0.52-1ubuntu0.8 on Ubuntu 14.04 LTS, and on Ubuntu 12.04 LTS, 16.04 LTS, and 16.10; and the tomcat8 package before 8.0.14-1+deb8u5 on Debian jessie, before 8.0.32-1ubuntu1.3 on Ubuntu 16.04 LTS, before 8.0.37-1ubuntu0.1 on Ubuntu 16.10, and before 8.0.38-2ubuntu
essie, before 8.0.32-1ubuntu1.3 on Ubuntu 16.04 LTS, before 8.0.37-1ubuntu0.1 on Ubuntu 16.10, and before 8.0.38-2ubuntu1 on Ubuntu 17.04 might allow local users with access to the tomcat account to obtain sensitive information or gain root privileges via a symlink attack on the Catalina localhost directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3177-2 - http://www.securityfocus.com/bid/94643 - http://www.debian.org/security/2016/dsa-3739 - http://www.debian.org/security/2016/dsa-3738 - http://www.openwall.com/lists/oss-security/2016/12/02/5 - http://www.openwall.com/lists/oss-security/2016/12/02/10 - http://www.ubuntu.com/usn/USN-3177
ss-security/2016/12/02/5 - http://www.openwall.com/lists/oss-security/2016/12/02/10 - http://www.ubuntu.com/usn/USN-3177-1 - https://security.netapp.com/advisory/ntap-20180731-0002/ - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845393
CVE ID: CVE-2016-9775 State: PUBLISHED Published: 2017-03-23T16:00:00 Last Updated: 2024-08-06T02:59:03.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: The postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0.45+dfsg-1~deb8u1 on Debian jessie, before 6.0.35-1ubuntu3.9 on Ubuntu 12.04 LTS and on Ubuntu 14.04 LTS; the tomcat7 package before 7.0.28-4+deb7u7 on Debian wheezy, before 7.0.56-3+deb8u6 on Debian jessie, before 7.0.52-1ubuntu0.8 on Ubuntu 14.04 LTS, and on Ubuntu 12.04 LTS, 16.04 LTS, and 16.10; and the tomcat8 package before 8.0.14-1+deb8u5 on Debian jessie, before 8.0.32-1ubuntu1.3 on Ubuntu 16.04 LTS, before 8.0.37-1ubuntu0.
8 package before 8.0.14-1+deb8u5 on Debian jessie, before 8.0.32-1ubuntu1.3 on Ubuntu 16.04 LTS, before 8.0.37-1ubuntu0.1 on Ubuntu 16.10, and before 8.0.38-2ubuntu1 on Ubuntu 17.04 might allow local users with access to the tomcat account to gain root privileges via a setgid program in the Catalina directory, as demonstrated by /etc/tomcat8/Catalina/attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3177-2 - http://www.securityfocus.com/bid/94643 - http://www.debian.org/security/2016/dsa-3739 - http://www.debian.org/security/2016/dsa-3738 - http://www.openwall.com/lists/oss-security/2016/12/02/5 - http://www.openwall.com/lists/oss-security
ity/2016/dsa-3738 - http://www.openwall.com/lists/oss-security/2016/12/02/5 - http://www.openwall.com/lists/oss-security/2016/12/02/10 - http://www.ubuntu.com/usn/USN-3177-1 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845385 - https://security.netapp.com/advisory/ntap-20180731-0002/
CVE ID: CVE-2016-9776 State: PUBLISHED Published: 2016-12-29T22:00:00 Last Updated: 2024-08-06T02:59:03.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://security.gentoo.org/glsa/201701-49 - http://www.openwall.com/lists/oss-security/20
ounce/2018/09/msg00007.html - https://security.gentoo.org/glsa/201701-49 - http://www.openwall.com/lists/oss-security/2016/12/02/3 - http://www.openwall.com/lists/oss-security/2016/12/02/8 - https://bugzilla.redhat.com/show_bug.cgi?id=1400829 - http://www.securityfocus.com/bid/94638 - https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg05324.html
CVE ID: CVE-2016-9777 State: PUBLISHED Published: 2016-12-28T07:42:00 Last Updated: 2024-08-06T02:59:03.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: KVM in the Linux kernel before 4.8.12, when I/O APIC is enabled, does not properly restrict the VCPU index, which allows guest OS users to gain host OS privileges or cause a denial of service (out-of-bounds array access and host OS crash) via a crafted interrupt request, related to arch/x86/kvm/ioapic.c and arch/x86/kvm/ioapic.h. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.12 - https://bugzilla.redhat.com/show_bug.cgi?id=1400804 - http://git.kernel.
el.org/pub/linux/kernel/v4.x/ChangeLog-4.8.12 - https://bugzilla.redhat.com/show_bug.cgi?id=1400804 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=81cdb259fb6d8c1c4ecfeea389ff5a73c07f5755 - http://www.securityfocus.com/bid/94640 - https://github.com/torvalds/linux/commit/81cdb259fb6d8c1c4ecfeea389ff5a73c07f5755 - http://www.openwall.com/lists/oss-security/2016/12/02/2
CVE ID: CVE-2016-9778 State: PUBLISHED Published: 2019-01-16T20:00:00Z Last Updated: 2024-09-16T20:01:47.192Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ISC Products: BIND 9 Problem Types: Only servers which are performing NXDOMAIN redirection using the "nxdomain-redirect" function are potentially vulnerable and then only a subset of those servers. In order to be affected a server must be using nxdomain-redirect AND must be redirecting NXDOMAIN responses for a zone for which the server also provides authoritative service -- therefore a purely recursive server is not at risk, either. Successful exploitation of the vulnerability will cause named to stop exe
urely recursive server is not at risk, either. Successful exploitation of the vulnerability will cause named to stop execution after encountering a REQUIRE assertion failure in db.c, resulting in denial of service to clients. Description: An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature to cover a zone for which it is also providing authoritative service. A vulnerable server could be intentionally stopped by an attacker if it was using a configuration that met the criteria for the vulnerability and if the attacker could cause it to accept a query that possessed the required attributes. Please note: This vulnerability aff
he attacker could cause it to accept a query that possessed the required attributes. Please note: This vulnerability affects the "nxdomain-redirect" feature, which is one of two methods of handling NXDOMAIN redirection, and is only available in certain versions of BIND. Redirection using zones of type "redirect" is not affected by this vulnerability. Affects BIND 9.9.8-S1 -> 9.9.8-S3, 9.9.9-S1 -> 9.9.9-S6, 9.11.0-9.11.0-P1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037582 - https://security.gentoo.org/glsa/201708-01 - https://security.netapp.com/advisory/ntap-20180926-0005/ - https://kb.isc.org/article/AA-01442/ - http://www.securityf
- https://security.netapp.com/advisory/ntap-20180926-0005/ - https://kb.isc.org/article/AA-01442/ - http://www.securityfocus.com/bid/95388
CVE ID: CVE-2016-9779 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9780 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9781 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9782 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9783 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9784 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9785 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9786 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9787 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9788 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9789 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9790 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9791 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9792 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9793 State: PUBLISHED Published: 2016-12-28T07:42:00 Last Updated: 2024-08-06T02:59:03.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sock_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUFFORCE or (2) SO_RCVBUFFORCE option. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/b98b0bc8c431e3ceb4
tional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/b98b0bc8c431e3ceb4b26b0dfc8db509518fb290 - http://www.securitytracker.com/id/1037968 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b98b0bc8c431e3ceb4b26b0dfc8db509518fb290 - https://access.redhat.com/errata/RHSA-2017:0932 - https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-9793 - http://www.securityfocus.com/bid/94655 - http://www.openwall.com/lists/oss-security/2016/12/03/1 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14 - https://access.redhat.com/errata/RHSA-2017:0933 - https://access.redhat.com/errata/RHSA-2017:0931 - https://sourc
8.14 - https://access.redhat.com/errata/RHSA-2017:0933 - https://access.redhat.com/errata/RHSA-2017:0931 - https://source.android.com/security/bulletin/2017-03-01.html - https://bugzilla.redhat.com/show_bug.cgi?id=1402013
CVE ID: CVE-2016-9794 State: PUBLISHED Published: 2016-12-28T07:42:00 Last Updated: 2024-08-06T02:59:03.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted SNDRV_PCM_TRIGGER_START command. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1401494 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00057.html - http://lists.opensuse.org/opensuse-security-announc
ists.opensuse.org/opensuse-security-announce/2016-12/msg00057.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00088.html - https://patchwork.kernel.org/patch/8752621/ - https://source.android.com/security/bulletin/2017-05-01 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00072.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00062.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00075.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00081.html - http://www.openwall.com/lists/oss-security/2016/12/03/2 - https://github.com/torvalds/linux
unce/2016-12/msg00081.html - http://www.openwall.com/lists/oss-security/2016/12/03/2 - https://github.com/torvalds/linux/commit/3aa02cb664c5fb1042958c8d1aa8c35055a2ebc4 - http://www.securityfocus.com/bid/94654 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3aa02cb664c5fb1042958c8d1aa8c35055a2ebc4 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00091.html
CVE ID: CVE-2016-9795 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-08-06T02:59:03.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance for Infrastructure Managers 12.8 and 12.9; CA Universal Job Management Agent 11.2; CA Virtual Assurance for Infrastructure Managers 12.8 and 12.9; CA Workload Automation AE 11, 11.3, 11.3.5, and 11.3.6 on AIX, HP-UX, Linux, and Solaris allows local users to modify arbitrary files and consequently gain root privileges via vectors related to insufficient validation. Additional Analys
arbitrary files and consequently gain root privileges via vectors related to insufficient validation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540062/100/0/threaded - https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20170126-01--security-notice-for-ca-common-services-casrvc.html - http://www.securitytracker.com/id/1037730 - http://www.securityfocus.com/bid/95819
CVE ID: CVE-2016-9796 State: PUBLISHED Published: 2016-12-03T06:28:00 Last Updated: 2024-08-06T02:59:03.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods (AddJobSet, AddJob, and ExecuteNow) that can be used to run arbitrary commands on the server, with the privilege of NT AUTHORITY\SYSTEM on the server. NOTE: The discoverer states "The vendor position is to refer to the technical guidelines of the product security deployment to mitigate this issue, which means applyin
n is to refer to the technical guidelines of the product security deployment to mitigate this issue, which means applying proper firewall rules to prevent unauthorised clients to connect to the OmniVista server." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94649 - https://www.exploit-db.com/exploits/40862/ - https://www.youtube.com/watch?v=aq37lQKa9sk - https://github.com/malerisch/omnivista-8770-unauth-rce - http://blog.malerisch.net/2016/12/alcatel-omnivista-8770-unauth-rce-giop-corba.html
CVE ID: CVE-2016-9797 State: PUBLISHED Published: 2016-12-03T06:28:00 Last Updated: 2024-08-06T02:59:03.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BlueZ 5.42, a buffer over-read was observed in "l2cap_dump" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.spinics.net/lists/linux-bluetooth/msg68892.html - http://www.securityfocus.com/bid/94652 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00069.html
CVE ID: CVE-2016-9798 State: PUBLISHED Published: 2016-12-03T06:28:00 Last Updated: 2024-08-06T02:59:03.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.spinics.net/lists/linux-bluetooth/msg68892.html - http://www.securityfocus.com/bid/94652 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00069.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00071.html - htt
curity-announce/2019-05/msg00069.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00071.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00072.html
CVE ID: CVE-2016-9799 State: PUBLISHED Published: 2016-12-03T06:28:00 Last Updated: 2024-08-06T02:59:03.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BlueZ 5.42, a buffer overflow was observed in "pklg_read_hci" function in "btsnoop.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.spinics.net/lists/linux-bluetooth/msg68898.html - http://www.securityfocus.com/bid/94652
CVE ID: CVE-2016-9800 State: PUBLISHED Published: 2016-12-03T06:28:00 Last Updated: 2024-08-06T02:59:03.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BlueZ 5.42, a buffer overflow was observed in "pin_code_reply_dump" function in "tools/parser/hci.c" source file. The issue exists because "pin" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "pin_code_reply_cp *cp" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.spinics.net/lists/linux-bluetooth/msg68892.html - http://www.securityfocus.com/bid/94652
CVE ID: CVE-2016-9801 State: PUBLISHED Published: 2016-12-03T06:28:00 Last Updated: 2024-08-06T02:59:03.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BlueZ 5.42, a buffer overflow was observed in "set_ext_ctrl" function in "tools/parser/l2cap.c" source file when processing corrupted dump file. Additional Analyst Notes: - CVE Program Container: References: - https://www.spinics.net/lists/linux-bluetooth/msg68892.html - http://www.securityfocus.com/bid/94652
CVE ID: CVE-2016-9802 State: PUBLISHED Published: 2016-12-03T06:28:00 Last Updated: 2024-08-06T02:59:03.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.spinics.net/lists/linux-bluetooth/msg68898.html - http://www.securityfocus.com/bid/94652 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00069.html
CVE ID: CVE-2016-9803 State: PUBLISHED Published: 2016-12-03T06:28:00 Last Updated: 2024-08-06T02:59:03.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BlueZ 5.42, an out-of-bounds read was observed in "le_meta_ev_dump" function in "tools/parser/hci.c" source file. This issue exists because 'subevent' (which is used to read correct element from 'ev_le_meta_str' array) is overflowed. Additional Analyst Notes: - CVE Program Container: References: - https://www.spinics.net/lists/linux-bluetooth/msg68892.html - http://www.securityfocus.com/bid/94652
CVE ID: CVE-2016-9804 State: PUBLISHED Published: 2016-12-03T06:28:00 Last Updated: 2024-08-06T02:59:03.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BlueZ 5.42, a buffer overflow was observed in "commands_dump" function in "tools/parser/csr.c" source file. The issue exists because "commands" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "frm->ptr" parameter. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.spinics.net/lists/linux-bluetooth/msg68892.html - http://www.securityfocus.com/bid
Container: References: - https://www.spinics.net/lists/linux-bluetooth/msg68892.html - http://www.securityfocus.com/bid/94652
CVE ID: CVE-2016-9806 State: PUBLISHED Published: 2016-12-28T07:42:00 Last Updated: 2024-08-06T02:59:03.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the netlink_dump function in net/netlink/af_netlink.c in the Linux kernel before 4.6.3 allows local users to cause a denial of service (double free) or possibly have unspecified other impact via a crafted application that makes sendmsg system calls, leading to a free operation associated with a new dump that started earlier than anticipated. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94653 - http://www.securitytracker.com/id/1037968 - http://www.openwall.
References: - http://www.securityfocus.com/bid/94653 - http://www.securitytracker.com/id/1037968 - http://www.openwall.com/lists/oss-security/2016/12/03/4 - https://access.redhat.com/errata/RHSA-2017:2669 - https://github.com/torvalds/linux/commit/92964c79b357efd980812c4de5c1fd2ec8bb5520 - http://lists.openwall.net/netdev/2016/05/15/69 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=92964c79b357efd980812c4de5c1fd2ec8bb5520 - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842 - https://source.android.com/security/bulletin/2017-03-01.html - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.3 - https://bugzilla.
.com/security/bulletin/2017-03-01.html - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.3 - https://bugzilla.redhat.com/show_bug.cgi?id=1401502