Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-4560 State: PUBLISHED Published: 2016-07-02T14:00:00 Last Updated: 2024-08-06T00:32:25.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Flexera InstallAnywhere allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executable file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90979 - https://flexeracommunity.force.com/customer/articles/INFO/Best-Practices-to-Avoid-Windows-Setup-Launcher-Executable-Issues - http://www-01.ibm.com/support/docview.wss?uid=swg21985483 - http://www.securitytracker.com/id/1036478 - htt
ble-Issues - http://www-01.ibm.com/support/docview.wss?uid=swg21985483 - http://www.securitytracker.com/id/1036478 - http://www-01.ibm.com/support/docview.wss?uid=swg21984949
CVE ID: CVE-2016-4561 State: PUBLISHED Published: 2016-05-10T19:00:00 Last Updated: 2024-08-06T00:32:25.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message. Additional Analyst Notes: - CVE Program Container: References: - http://source.ikiwiki.branchable.com/?p=source.git%3Ba=commitdiff%3Bh=32ef584dc5abb6ddb9f794f94ea0b2934967bba7 - http://www.debian.org/security/2016/dsa-3571 - http://ikiwiki.info/security/#index43h2
CVE ID: CVE-2016-4562 State: PUBLISHED Published: 2016-06-04T16:00:00 Last Updated: 2024-08-06T00:32:25.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles calculations of certain vertices integer data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/726812fa2fa7ce16bcf58f6e115f65427a1c0950 - http://www.imagemagick.org/script/changelog.php - ht
agick/ImageMagick/commit/726812fa2fa7ce16bcf58f6e115f65427a1c0950 - http://www.imagemagick.org/script/changelog.php - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
CVE ID: CVE-2016-4563 State: PUBLISHED Published: 2016-06-04T16:00:00 Last Updated: 2024-08-06T00:32:25.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TraceStrokePolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles the relationship between the BezierQuantum value and certain strokes data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/726812fa2fa7ce16bcf58f6e115f65427a1c0950 - http://www.imagemagic
es: - https://github.com/ImageMagick/ImageMagick/commit/726812fa2fa7ce16bcf58f6e115f65427a1c0950 - http://www.imagemagick.org/script/changelog.php - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
CVE ID: CVE-2016-4564 State: PUBLISHED Published: 2016-06-04T16:00:00 Last Updated: 2024-08-06T00:32:25.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DrawImage function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 makes an incorrect function call in attempting to locate the next token, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/726812fa2fa7ce16bcf58f6e115f65427a1c0950 - http://www.imagemagick.org/script/changelog
om/ImageMagick/ImageMagick/commit/726812fa2fa7ce16bcf58f6e115f65427a1c0950 - http://www.imagemagick.org/script/changelog.php - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
CVE ID: CVE-2016-4565 State: PUBLISHED Published: 2016-05-23T10:00:00 Last Updated: 2024-08-06T00:32:25.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: The InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a uAPI interface. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://www.ubuntu.com/usn/USN-3006-1 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://ww
buntu.com/usn/USN-3006-1 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.ubuntu.com/usn/USN-3004-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html - http://www.ubuntu.com/usn/USN-3001-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html - http://rhn.redhat.com/errata/RHSA-2016-1640.html - http://rhn.redhat.com/errata/RHSA-2016-1657.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html - http://www.securityfocus.com/bid/90301 - https://access.redhat.com/errata/RHSA-2016:1406 - http://www
08/msg00008.html - http://www.securityfocus.com/bid/90301 - https://access.redhat.com/errata/RHSA-2016:1406 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://access.redhat.com/errata/RHSA-2016:1341 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html - http://www.ubuntu.com/usn/USN-3005-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - https://access.redhat.com/errata/RHSA-2016:1301 - http://git.kernel.org/cgit/linux/kernel/git/torv
16-08/msg00007.html - https://access.redhat.com/errata/RHSA-2016:1301 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e6bd18f57aad1a2d1ef40e646d03ed0f2515c9e3 - http://rhn.redhat.com/errata/RHSA-2016-1814.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - https://github.com/torvalds/linux/commit/e6bd18f57aad1a2d1ef40e646d03ed0f2515c9e3 - http://www.ubuntu.com/usn/USN-3018-2 - http://www.ubuntu.com/usn/USN-3021-2 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html - http://rhn.redhat.com/errata/RHSA-2016-1489.html - http://www.ubunt
g/opensuse-security-announce/2016-08/msg00026.html - http://rhn.redhat.com/errata/RHSA-2016-1489.html - http://www.ubuntu.com/usn/USN-3019-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3 - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-3002-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1310570 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html - http://www.ubuntu.com/usn/USN-3021-1 - http://www.ubuntu.com/usn/USN-3018-1 - http://rhn.redhat.com/errata/RHSA-2016-1617.ht
://www.ubuntu.com/usn/USN-3021-1 - http://www.ubuntu.com/usn/USN-3018-1 - http://rhn.redhat.com/errata/RHSA-2016-1617.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html - http://www.ubuntu.com/usn/USN-3007-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html - http://www.ubuntu.com/usn/USN-3003-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html - http://rhn.redhat.com/errata/RHSA-2
.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html - http://rhn.redhat.com/errata/RHSA-2016-1581.html - https://access.redhat.com/errata/RHSA-2016:1277 - http://www.openwall.com/lists/oss-security/2016/05/07/1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2016-4566 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T00:32:25.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution (SOME) attack. Additional Analyst Notes: - CVE Program Container: References: - https://core.trac.wordpress.org/changeset/37382/ - http://www.openwall.com/lists/oss-security/2016/05/07/2 - http://www.plupload.com/punbb/viewtopic.php?pid=28690 - https://wpvulndb.com/vulnerabilities/8489 - https://codex.wordpre
ttp://www.plupload.com/punbb/viewtopic.php?pid=28690 - https://wpvulndb.com/vulnerabilities/8489 - https://codex.wordpress.org/Version_4.5.2 - http://www.securitytracker.com/id/1035818 - https://wordpress.org/news/2016/05/wordpress-4-5-2/ - https://gist.github.com/cure53/09a81530a44f6b8173f545accc9ed07e
CVE ID: CVE-2016-4567 State: PUBLISHED Published: 2016-05-22T01:00:00 Last Updated: 2024-08-06T00:32:26.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via an obfuscated form of the jsinitfunction parameter, as demonstrated by "jsinitfunctio%gn." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/johndyer/mediaelement/blob/master/changelog.md - http://www.openwall.com/lists/oss-security/2016/05/07/2 - https://codex.wordpress.org/Version_4.5.2 -
ter/changelog.md - http://www.openwall.com/lists/oss-security/2016/05/07/2 - https://codex.wordpress.org/Version_4.5.2 - http://www.securitytracker.com/id/1035818 - https://gist.github.com/cure53/df34ea68c26441f3ae98f821ba1feb9c - https://github.com/johndyer/mediaelement/commit/34834eef8ac830b9145df169ec22016a4350f06e - https://wpvulndb.com/vulnerabilities/8488 - https://wordpress.org/news/2016/05/wordpress-4-5-2/ - https://core.trac.wordpress.org/changeset/37371
CVE ID: CVE-2016-4568 State: PUBLISHED Published: 2016-05-23T10:00:00 Last Updated: 2024-08-06T00:32:25.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/v4l2-core/videobuf2-v4l2.c in the Linux kernel before 4.5.3 allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a crafted number of planes in a VIDIOC_DQBUF ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3 - http://www.openwall.com/lists/oss-security/2016/05/07/4 - https://bugzilla.redhat.com/show_bug.cgi?id=1334316 - https://github.com/torvalds/linux/co
s/oss-security/2016/05/07/4 - https://bugzilla.redhat.com/show_bug.cgi?id=1334316 - https://github.com/torvalds/linux/commit/2c1f6951a8a82e6de0d82b1158b5e493fc6c54ab - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2c1f6951a8a82e6de0d82b1158b5e493fc6c54ab
CVE ID: CVE-2016-4569 State: PUBLISHED Published: 2016-05-23T10:00:00 Last Updated: 2024-08-06T00:32:26.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - http://www.ubuntu.com/usn/USN-3017-1 - http://git.k
ists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - http://www.ubuntu.com/usn/USN-3017-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cec8f96e49d9be372fdb0c3836dcf31ec71e457e - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://www.openwall.com/lists/oss-security/2016/05/09/17 - http://www.ubuntu.com/usn/USN-3017-3 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - http://www.ubuntu.com/usn/USN-3018-2 - http://www.ubuntu.com/usn/USN-3021-2 - http://www.ubuntu.com/usn/USN-3017-2 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - https://bugzilla.redhat.com/show_bug.cgi?id=1334643 - h
/USN-3017-2 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - https://bugzilla.redhat.com/show_bug.cgi?id=1334643 - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://www.ubuntu.com/usn/USN-3019-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - https://github.com/torvalds/linux/commit/cec8f96e49d9be372fdb0c3836dcf31ec71e457e - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-3016-2 - http://www.ubuntu.com/usn/USN-3016-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://www.ubuntu.com/usn/USN-3021-1 - http://www.ubuntu.com/usn/USN-3018-1 - http://www.securityfocus.com/bid/90347 - http://li
ww.ubuntu.com/usn/USN-3021-1 - http://www.ubuntu.com/usn/USN-3018-1 - http://www.securityfocus.com/bid/90347 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://www.ubuntu.com/usn/USN-3016-3 - http://www.ubuntu.com/usn/USN-3016-4 - http://www.ubuntu.com/usn/USN-3020-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2016-4570 State: PUBLISHED Published: 2017-02-03T15:00:00 Last Updated: 2024-08-06T00:32:25.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/09/16 - http://www.securityfocus.com/bid/90315 - https://lists.debian.org/debian-lts-announce/2019/01/msg00018.html - http://www.openwall.com/lists/oss-security/2016/05/11/14 - https://bugzilla.redhat.com/show_bug.cgi?id=1334648
CVE ID: CVE-2016-4571 State: PUBLISHED Published: 2017-02-03T15:00:00 Last Updated: 2024-08-06T00:32:25.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/09/16 - http://www.securityfocus.com/bid/90315 - https://lists.debian.org/debian-lts-announce/2019/01/msg00018.html - http://www.openwall.com/lists/oss-security/2016/05/11/14 - https://bugzilla.redhat.com/show_bug.cgi?id=1334648
CVE ID: CVE-2016-4572 State: PUBLISHED Published: 2019-11-26T13:51:20 Last Updated: 2024-08-06T00:32:25.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges. Additional Analyst Notes: - CVE Program Container: References: - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#id_nd4_xkr_1cb
CVE ID: CVE-2016-4573 State: PUBLISHED Published: 2016-09-09T14:00:00 Last Updated: 2024-08-06T00:32:25.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE models, when in FortiLink managed mode and upgraded to 3.4.1, might allow remote attackers to bypass authentication and gain administrative access via an empty password for the rest_admin account. Additional Analyst Notes: - CVE Progra
and gain administrative access via an empty password for the rest_admin account. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92450 - http://fortiguard.com/advisory/fortiswitch-rest-admin-account-exposed-under-specific-conditions - https://www.themissinglink.com.au/security/advisories/cve-2016-4573
CVE ID: CVE-2016-4574 State: PUBLISHED Published: 2016-06-13T19:00:00 Last Updated: 2024-08-06T00:32:25.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/10/3 - http://www.ubuntu.com/usn/USN-2982-1 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00028.html - http://www.openwa
p://www.ubuntu.com/usn/USN-2982-1 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00028.html - http://www.openwall.com/lists/oss-security/2016/05/10/4 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00087.html - http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git%3Ba=commit%3Bh=6be61daac047d8e6aa941eb103f8e71a1d4e3c75
CVE ID: CVE-2016-4575 State: PUBLISHED Published: 2016-05-25T15:00:00 Last Updated: 2024-08-06T00:32:25.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the email APP in Huawei PLK smartphones with software AL10C00 before AL10C00B211 and AL10C92 before AL10C92B211; ATH smartphones with software AL00C00 before AL00C00B361, CL00C92 before CL00C92B361, TL00HC01 before TL00HC01B361, and UL00C00 before UL00C00B361; CherryPlus smartphones with software TL00C00 before TL00C00B553, UL00C00 before UL00C00B553, and TL00MC01 before TL00MC01B553; and RIO smartphones with software AL00C00 before AL00C00B360 allows remote attackers to inject arbit
efore TL00MC01B553; and RIO smartphones with software AL00C00 before AL00C00B360 allows remote attackers to inject arbitrary web script or HTML via an email message. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160507-01-emailapp-en
CVE ID: CVE-2016-4576 State: PUBLISHED Published: 2016-05-23T19:00:00 Last Updated: 2024-08-06T00:32:26.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei IPS Module, NGFW Module, NIP6300, NIP6600, Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 devices with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90530 - http://www.huawei.com/en/psirt/securit
: - CVE Program Container: References: - http://www.securityfocus.com/bid/90530 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160511-01-aspf-en
CVE ID: CVE-2016-4577 State: PUBLISHED Published: 2016-05-23T19:00:00 Last Updated: 2024-08-06T00:32:25.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300, USG6500, USG6600, and USG9500 firewalls with software before V500R001C20SPC100 allows remote attackers to cause a denial of service or execute arbitrary code via a crafted packet, related to "illegitimate parameters." Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160511-01-dns-en - http://www.securityfocus.com/bid/90532
CVE ID: CVE-2016-4578 State: PUBLISHED Published: 2016-05-23T10:00:00 Last Updated: 2024-08-06T00:32:25.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e
se-security-announce/2016-06/msg00054.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e4ec8cc8039a7063e24204299b462bd1383184a5 - http://www.ubuntu.com/usn/USN-3017-1 - https://www.exploit-db.com/exploits/46529/ - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://www.ubuntu.com/usn/USN-3017-3 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - http://www.ubuntu.com/usn/USN-3018-2 - https://github.com/torvalds/linux/commit/e4ec8cc8039a7063e24204299b462bd1383184a5 - http://www.ubuntu.com/usn/USN-3021-2 - http://www.ubuntu.com/usn/USN-3017-2 - https://bugzilla.redhat.com/show_bug.cgi?id=1335215 - http:/
com/usn/USN-3021-2 - http://www.ubuntu.com/usn/USN-3017-2 - https://bugzilla.redhat.com/show_bug.cgi?id=1335215 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://www.ubuntu.com/usn/USN-3019-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - http://www.debian.org/security/2016/dsa-3607 - http://www.securityfocus.com/bid/90535 - http://www.ubuntu.com/usn/USN-3016-2 - http://www.ubuntu.com/usn/USN-3016-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://www.ubuntu.com/usn/USN-3021-1 - http://www.ubuntu.com/usn/USN-3018-1 - http://git.kernel.org/cgit/linux/kernel/git/tor
//www.ubuntu.com/usn/USN-3021-1 - http://www.ubuntu.com/usn/USN-3018-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9a47e9cff994f37f7f0dbd9ae23740d0f64f9fe6 - http://www.openwall.com/lists/oss-security/2016/05/11/5 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://www.ubuntu.com/usn/USN-3016-3 - https://github.com/torvalds/linux/commit/9a47e9cff994f37f7f0dbd9ae23740d0f64f9fe6 - http://www.ubuntu.com/usn/USN-3016-4 - http://www.ubuntu.com/usn/USN-3020-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2016-4579 State: PUBLISHED Published: 2016-06-13T19:00:00 Last Updated: 2024-08-06T00:32:25.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl." Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2982-1 - http://www.openwall.com/lists/oss-security/2016/05/11/10 - http://lists.opensuse.org/opensuse-updates/2016-06/msg00028.html - https://security.gentoo.org/glsa/201706-22 - http://www.openwall.com/lists/oss-security/2016/05/10/8