Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-5258 State: PUBLISHED Published: 2017-08-22T18:00:00 Last Updated: 2024-08-06T06:41:08.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1305443 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177420.html
CVE ID: CVE-2015-5259 State: PUBLISHED Published: 2016-01-08T19:00:00 Last Updated: 2024-08-06T06:41:08.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to execute arbitrary code via an svn:// protocol string, which triggers a heap-based buffer overflow and an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://subversion.apache.org/security/CVE-2015-5259-advisory.txt - http://www.securitytracker.com/id/1034469 - http://www.securityfocus.com/bid/82300 - https://security.gentoo.org/glsa/201610-05
CVE ID: CVE-2015-5260 State: PUBLISHED Published: 2016-06-07T14:00:00 Last Updated: 2024-08-06T06:41:09.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1890.html - https://security.gentoo.org/glsa/201606-05 - http://www.ubuntu.com/usn/USN-2766-1 - http://lists.freedesktop.org/archives/spice-devel/2015-October/022191.html - htt
http://www.ubuntu.com/usn/USN-2766-1 - http://lists.freedesktop.org/archives/spice-devel/2015-October/022191.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/RHSA-2015-1889.html - https://bugzilla.redhat.com/show_bug.cgi?id=1260822 - http://www.debian.org/security/2015/dsa-3371 - http://www.securitytracker.com/id/1033753 - http://www.securityfocus.com/bid/77019
CVE ID: CVE-2015-5261 State: PUBLISHED Published: 2016-06-07T14:00:00 Last Updated: 2024-08-06T06:41:08.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1890.html - http://www.openwall.com/lists/oss-security/2015/10/06/4 - https://security.gentoo.org/glsa/201606-05 - https://bugzilla.redhat.com/show_bug.cgi?id=1261889 - http://www.ubuntu.com/usn/USN-2766-1 - http://lists.freedesktop.org/archive
ugzilla.redhat.com/show_bug.cgi?id=1261889 - http://www.ubuntu.com/usn/USN-2766-1 - http://lists.freedesktop.org/archives/spice-devel/2015-October/022191.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/RHSA-2015-1889.html - http://www.debian.org/security/2015/dsa-3371 - http://www.securitytracker.com/id/1033753
CVE ID: CVE-2015-5262 State: PUBLISHED Published: 2015-10-27T16:00:00 Last Updated: 2024-08-06T06:41:09.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://svn.apache.org/viewvc?view=revision&revision=1626784 - https://jenkins.io/security/advisory/2018-02-26/ -
html - http://svn.apache.org/viewvc?view=revision&revision=1626784 - https://jenkins.io/security/advisory/2018-02-26/ - https://bugzilla.redhat.com/show_bug.cgi?id=1261538 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/167962.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/167999.html - https://issues.apache.org/jira/browse/HTTPCLIENT-1478 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168030.html - http://www.securitytracker.com/id/1033743 - http://www.ubuntu.com/usn/USN-2769-1 - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https:/
s.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html
CVE ID: CVE-2015-5263 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T06:41:09.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: pulp-consumer-client 2.4.0 through 2.6.3 does not check the server's TLS certificate signatures when retrieving the server's public key upon registration. Additional Analyst Notes: - CVE Program Container: References: - http://cve.killedkenny.io/cve/CVE-2015-5263 - http://www.openwall.com/lists/oss-security/2015/09/24/4 - https://github.com/pulp/pulp/commit/b542d7465f7e6e02e1ea1aec059ac607a65cefe7#diff-17110211f89c042a9267e2167dedd754 - https://github.com/pulp/pulp/blob/aa432bf58497b5e3682333b1d5f5ae4f45788a61/client_consumer/
11f89c042a9267e2167dedd754 - https://github.com/pulp/pulp/blob/aa432bf58497b5e3682333b1d5f5ae4f45788a61/client_consumer/pulp/client/consumer/cli.py#L103
CVE ID: CVE-2015-5264 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lesson module in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to bypass intended access restrictions and enter additional answer attempts by leveraging the student role. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50516 - http://www.openwall.com/lists/oss-security/2015/09/21/1 - http://www.securitytracker.com/id/1033619 - https://moodle.org/mod/forum/discuss.
.com/lists/oss-security/2015/09/21/1 - http://www.securitytracker.com/id/1033619 - https://moodle.org/mod/forum/discuss.php?d=320287
CVE ID: CVE-2015-5265 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wiki component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 does not consider the mod/wiki:managefiles capability before authorizing file management, which allows remote authenticated users to delete arbitrary files by using a manage-files button in a text editor. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48371 - http://www.openwall.com/lists/oss-security/2015/09/21/1 - https://moodle.or
.git&a=search&h=HEAD&st=commit&s=MDL-48371 - http://www.openwall.com/lists/oss-security/2015/09/21/1 - https://moodle.org/mod/forum/discuss.php?d=320289 - http://www.securitytracker.com/id/1033619
CVE ID: CVE-2015-5266 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: The enrol_meta_sync function in enrol/meta/locallib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to obtain manager privileges in opportunistic circumstances by leveraging incorrect role processing during a long-running sync script. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50744 - https://moodle.org/mod/forum/discuss.php?d=320290 - http://www.openwall.co
e.git&a=search&h=HEAD&st=commit&s=MDL-50744 - https://moodle.org/mod/forum/discuss.php?d=320290 - http://www.openwall.com/lists/oss-security/2015/09/21/1 - http://www.securitytracker.com/id/1033619
CVE ID: CVE-2015-5267 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 relies on the PHP mt_rand function to implement the random_string and complex_random_string functions, which makes it easier for remote attackers to predict password-recovery tokens via a brute-force approach. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50860 - http://www.openwall.com/lists/oss-security/2015/09/21/1 - http://www.se
odle.git&a=search&h=HEAD&st=commit&s=MDL-50860 - http://www.openwall.com/lists/oss-security/2015/09/21/1 - http://www.securitytracker.com/id/1033619 - https://moodle.org/mod/forum/discuss.php?d=320291
CVE ID: CVE-2015-5268 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rating component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 mishandles group-based authorization checks, which allows remote authenticated users to obtain sensitive information by reading a rating value. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=320292 - http://www.openwall.com/lists/oss-security/2015/09/21/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50173 - http://www.securitytrack
ty/2015/09/21/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50173 - http://www.securitytracker.com/id/1033619
CVE ID: CVE-2015-5269 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in group/overview.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to inject arbitrary web script or HTML via a modified grouping description. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=320293 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50709 - http://www.openwall.com/lists/oss-security/2015/09/21/1 - http://www.secur
e.git&a=search&h=HEAD&st=commit&s=MDL-50709 - http://www.openwall.com/lists/oss-security/2015/09/21/1 - http://www.securitytracker.com/id/1033619
CVE ID: CVE-2015-5270 State: REJECTED Published: 2015-09-12T14:00:00 Last Updated: 2015-09-12T13:57:01 Description: No description available.
CVE ID: CVE-2015-5271 State: PUBLISHED Published: 2016-04-15T17:00:00 Last Updated: 2024-08-06T06:41:09.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TripleO Heat templates (tripleo-heat-templates) do not properly order the Identity Service (keystone) before the OpenStack Object Storage (Swift) staticweb middleware in the swiftproxy pipeline when the staticweb middleware is enabled, which might allow remote attackers to obtain sensitive information from private containers via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2015:1862 - https://bugzilla.redhat.com/show_bug.cgi?id=1261697 - https:/
ences: - https://access.redhat.com/errata/RHSA-2015:1862 - https://bugzilla.redhat.com/show_bug.cgi?id=1261697 - https://launchpadlibrarian.net/217268516/CVE-2015-5271_puppet-swift.patch - https://bugs.launchpad.net/tripleo/+bug/1494896
CVE ID: CVE-2015-5272 State: PUBLISHED Published: 2016-02-22T02:00:00 Last Updated: 2024-08-06T06:41:09.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/09/21/1 - https://moodle.org/mod/forum/discuss.php?d=320288 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50576 - http://www.securitytracker.com/id/1033619
CVE ID: CVE-2015-5273 State: PUBLISHED Published: 2015-12-07T18:00:00 Last Updated: 2024-08-06T06:41:09.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2505.html - http://www.openwall.com/lists/oss-security/2015/12/01/1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www
security/2015/12/01/1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.securityfocus.com/bid/78113 - https://github.com/abrt/abrt/commit/50ee8130fb4cd4ef1af7682a2c85dd99cb99424e - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172809.html - https://bugzilla.redhat.com/show_bug.cgi?id=1262252
CVE ID: CVE-2015-5274 State: PUBLISHED Published: 2015-09-18T14:00:00 Last Updated: 2024-08-06T06:41:09.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: rubygem-openshift-origin-console in Red Hat OpenShift 2.2 allows remote authenticated users to execute arbitrary commands via a crafted request to the Broker. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1808.html
CVE ID: CVE-2015-5275 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2015-5276 State: PUBLISHED Published: 2015-11-17T15:00:00 Last Updated: 2024-08-06T06:41:09.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier for context-dependent attackers to predict the random values via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65142 - https://bugzilla.redhat.com/show_bug.cgi?id=1262846 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00054.html - http://www.securitytracker.co
ow_bug.cgi?id=1262846 - http://lists.opensuse.org/opensuse-updates/2015-11/msg00054.html - http://www.securitytracker.com/id/1034375 - http://lists.opensuse.org/opensuse-updates/2016-04/msg00052.html
CVE ID: CVE-2015-5277 State: PUBLISHED Published: 2015-12-17T19:00:00 Last Updated: 2024-08-06T06:41:09.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_contents function in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) before 2.20 might allow local users to cause a denial of service (heap corruption) or gain privileges via a long line in the NSS files database. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2985-2 - http://rhn.redhat.com/errata/RHSA-2015-2172.html - https://security.gentoo.org/glsa/201702-11 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoc
72.html - https://security.gentoo.org/glsa/201702-11 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.securitytracker.com/id/1034196 - https://sourceware.org/ml/libc-alpha/2014-09/msg00088.html - http://www.securityfocus.com/bid/78092 - https://sourceware.org/bugzilla/show_bug.cgi?id=17079 - http://www.ubuntu.com/usn/USN-2985-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1262914 - http://seclists.org/fulldisclosure/2019/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html
CVE ID: CVE-2015-5278 State: PUBLISHED Published: 2020-01-23T19:40:18 Last Updated: 2024-08-06T06:41:09.527Z Vendors: QEMU Products: QEMU Problem Types: Other Description: The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-Oc
/pipermail/package-announce/2015-October/168077.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.html - http://www.ubuntu.com/usn/USN-2745-1 - https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg05832.html - https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg03985.html - http://www.openwall.com/lists/oss-security/2015/09/15/2 - https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14
CVE ID: CVE-2015-5279 State: PUBLISHED Published: 2015-09-28T16:00:00 Last Updated: 2024-08-06T06:41:09.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3361 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169036.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167369.html - htt
ce/2015-October/169036.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167369.html - http://www.openwall.com/lists/oss-security/2015/09/15/3 - https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg03984.html - http://rhn.redhat.com/errata/RHSA-2015-1896.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=7aa2bcad0ca837dd6d4bf4fa38a80314b4a6b755 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.html - http://rhn.redhat.com/errata/RHSA-2015-1924.html - http://www.secu
pipermail/package-announce/2015-October/169039.html - http://rhn.redhat.com/errata/RHSA-2015-1924.html - http://www.securityfocus.com/bid/76746 - http://www.debian.org/security/2015/dsa-3362 - http://www.securitytracker.com/id/1033569 - http://rhn.redhat.com/errata/RHSA-2015-1923.html - http://rhn.redhat.com/errata/RHSA-2015-1925.html - https://security.gentoo.org/glsa/201602-01 - https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14
CVE ID: CVE-2015-5280 State: REJECTED Published: 2015-12-15T11:00:00 Last Updated: 2015-12-15T05:57:01 Description: No description available.
CVE ID: CVE-2015-5281 State: PUBLISHED Published: 2015-11-24T20:00:00 Last Updated: 2024-08-06T06:41:09.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: The grub2 package before 2.02-0.29 in Red Hat Enterprise Linux (RHEL) 7, when used on UEFI systems, allows local users to bypass intended Secure Boot restrictions and execute non-verified code via a crafted (1) multiboot or (2) multiboot2 module in the configuration file or physically proximate attackers to bypass intended Secure Boot restrictions and execute non-verified code via the (3) boot menu. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77983 - http://lists.fedoraproj
l Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77983 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172942.html - https://bugzilla.redhat.com/show_bug.cgi?id=1264103 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/RHSA-2015-2401.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172611.html - http://www.securitytracker.com/id/1034198
CVE ID: CVE-2015-5282 State: PUBLISHED Published: 2017-09-25T17:00:00 Last Updated: 2024-08-06T06:41:09.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Foreman 1.7.0 and after. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/theforeman/foreman/commit/4f3555b217be8723e8045f9816d147b5f684ec57 - https://bugzilla.redhat.com/show_bug.cgi?id=1264221 - http://www.openwall.com/lists/oss-security/2015/09/21/3 - https://theforeman.org/security.html#2015-5282 - http://projects.theforeman.org/issues/11859
CVE ID: CVE-2015-5283 State: PUBLISHED Published: 2015-10-19T10:00:00 Last Updated: 2024-08-06T06:41:09.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service (panic or memory corruption) by creating SCTP sockets before all of the steps have finished. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.3 - http://www.debian.org/security/2015/dsa-3372 - https://bugzilla.redhat.com/show_bug.cgi?id=1257528 - http://www.ubuntu.
http://www.debian.org/security/2015/dsa-3372 - https://bugzilla.redhat.com/show_bug.cgi?id=1257528 - http://www.ubuntu.com/usn/USN-2826-1 - http://www.securityfocus.com/bid/77058 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html - https://github.com/torvalds/linux/commit/8e2d61e0aed2b7c4ecb35844fe07e0b2b762dee4 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html - https://security-tracker.debian.org/tracker/CVE-2015-5283 - http://www.ubuntu.com/usn/USN-2829-2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8e2d61e0aed2b7c4ecb35
inoct2015-2719645.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8e2d61e0aed2b7c4ecb35844fe07e0b2b762dee4 - http://www.ubuntu.com/usn/USN-2829-1 - http://www.ubuntu.com/usn/USN-2823-1 - http://www.securitytracker.com/id/1033808 - http://patchwork.ozlabs.org/patch/515996/
CVE ID: CVE-2015-5284 State: PUBLISHED Published: 2017-09-21T14:00:00 Last Updated: 2024-08-06T06:41:09.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/freeipa-interest/2015-October/msg00000.html - https://bugzilla.redhat.com/show_bug.cgi?id=1264790 - https://bugzilla.redhat.com/attachment.cgi?id=1075511 - https://pagure.io/freeipa/issue/5347