Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-18170 State: PUBLISHED Published: 2018-10-23T13:00:00 Last Updated: 2024-08-05T21:13:49.046Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Integer Underflow vulnerability in Bluetooth controller Description: Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, SDM630, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/
016. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - https://source.android.com/security/bulletin/2018-07-01#qualcomm-closed-source-components
CVE ID: CVE-2017-18171 State: PUBLISHED Published: 2018-10-23T13:00:00 Last Updated: 2024-08-05T21:13:49.039Z Vendors: Qualcomm, Inc. Products: Snapdragon Mobile Problem Types: Improper Input Validation in Bluetooth Controller Description: Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, SDM630, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/c
0, Snapdragon_High_Med_2016. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - https://source.android.com/security/bulletin/2018-07-01#qualcomm-closed-source-components
CVE ID: CVE-2017-18172 State: PUBLISHED Published: 2018-10-23T13:00:00 Last Updated: 2024-08-05T21:13:49.059Z Vendors: Qualcomm, Inc. Products: Snapdragon Automobile, Snapdragon Mobile Problem Types: Integer Overflow or Wraparound in SUI Description: In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting in an Integer Overflow or Wraparound in System UI in Snapdragon Automobile, Snapdragon Mobile in version MDM9635M, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016. Additional Analyst N
650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins - https://source.android.com/security/bulletin/2018-07-01#qualcomm-closed-source-components
CVE ID: CVE-2017-18173 State: PUBLISHED Published: 2019-05-06T22:34:44 Last Updated: 2024-08-05T21:13:48.916Z Vendors: Qualcomm Technologies, Inc. Products: Snapdragon Mobile Problem Types: CWE190: Integer Overflow or Wraparound Description: In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins
CVE ID: CVE-2017-18174 State: PUBLISHED Published: 2018-02-11T18:00:00 Last Updated: 2024-08-05T21:13:49.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls the pinctrl_unregister function, leading to a double free. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3848-2/ - https://github.com/torvalds/linux/commit/8dca4a41f1ad65043a78c2338d9725f859c8d2c3 - https://usn.ubuntu.com/3848-1/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8dca4a41f1ad65043a78c2338d9725f859c8d2c3 - http://git.kernel.org/cgit/linux/kernel/
el/git/torvalds/linux.git/commit/?id=8dca4a41f1ad65043a78c2338d9725f859c8d2c3 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=251e22abde21833b3d29577e4d8c7aaccd650eee - https://github.com/torvalds/linux/commit/251e22abde21833b3d29577e4d8c7aaccd650eee
CVE ID: CVE-2017-18175 State: PUBLISHED Published: 2018-02-12T14:00:00Z Last Updated: 2024-09-16T18:38:47.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Progress Sitefinity 9.1 has XSS via the Content Management Template Configuration (aka Templateconfiguration), as demonstrated by the src attribute of an IMG element. This is fixed in 10.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html - https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html
CVE ID: CVE-2017-18176 State: PUBLISHED Published: 2018-02-12T14:00:00Z Last Updated: 2024-09-16T22:25:19.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Progress Sitefinity 9.1 has XSS via file upload, because JavaScript code in an HTML file has the same origin as the application's own code. This is fixed in 10.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html - https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html
CVE ID: CVE-2017-18177 State: PUBLISHED Published: 2018-02-12T14:00:00Z Last Updated: 2024-09-16T18:39:37.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Progress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User Creation Page. This is fixed in 10.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html - https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html
CVE ID: CVE-2017-18178 State: PUBLISHED Published: 2018-02-12T14:00:00Z Last Updated: 2024-09-16T18:29:33.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the redirection target, if the target is specified using a certain %40 syntax. This is fixed in 10.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html - https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html
CVE ID: CVE-2017-18179 State: PUBLISHED Published: 2018-02-12T14:00:00Z Last Updated: 2024-09-16T22:55:34.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Progress Sitefinity 9.1 uses wrap_access_token as a non-expiring authentication token that remains valid after a password change or a session termination. Also, it is transmitted as a GET parameter. This is fixed in 10.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-progress-sitefinity/index.html - https://packetstormsecurity.com/files/143894/Progress-Sitefinity-9.1-XSS-Session-Management-Open-Redirect.html
CVE ID: CVE-2017-18183 State: PUBLISHED Published: 2018-02-13T19:00:00 Last Updated: 2024-08-05T21:13:49.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter::enqueueObject() function in libqpdf/QPDFWriter.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qpdf/qpdf/commit/8249a26d69f72b9cda584c14cc3f12769985e481 - https://github.com/qpdf/qpdf/issues/143 - https://usn.ubuntu.com/3638-1/
CVE ID: CVE-2017-18184 State: PUBLISHED Published: 2018-02-13T19:00:00 Last Updated: 2024-08-05T21:13:49.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iterate_rc4 in QPDF_encryption.cc. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3638-1/ - https://github.com/qpdf/qpdf/commit/dea704f0ab7f625e1e7b3f9a1110b45b63157317 - https://github.com/qpdf/qpdf/issues/147
CVE ID: CVE-2017-18185 State: PUBLISHED Published: 2018-02-13T19:00:00 Last Updated: 2024-08-05T21:13:49.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the Pl_Buffer::write function in Pl_Buffer.cc. It is caused by an integer overflow in the PNG filter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/qpdf/qpdf/commit/ec7d74a386c0b2f38990079c3b0d2a2b30be0e71 - https://usn.ubuntu.com/3638-1/ - https://github.com/qpdf/qpdf/issues/150
CVE ID: CVE-2017-18186 State: PUBLISHED Published: 2018-02-13T19:00:00 Last Updated: 2024-08-05T21:13:49.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref tables in QPDF.cc. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3638-1/ - https://github.com/qpdf/qpdf/commit/85f05cc57ffa0a863d9d9b23e73acea9410b2937 - https://github.com/qpdf/qpdf/issues/149
CVE ID: CVE-2017-18187 State: PUBLISHED Published: 2018-02-14T17:00:00 Last Updated: 2024-08-05T21:13:49.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_psk_identity() function in library/ssl_srv.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ARMmbed/mbedtls/commit/83c9f495ffe70c7dd280b41fdfd4881485a3bc28 - https://www.debian.org/security/2018/dsa-4147 - https://www.debian.org/security/2018/dsa-4138 - https://security.gentoo.org/glsa/201804-19 - https://github.com/ARMmbed/mbedtls/blob/master/ChangeLog
y/2018/dsa-4138 - https://security.gentoo.org/glsa/201804-19 - https://github.com/ARMmbed/mbedtls/blob/master/ChangeLog - http://www.securityfocus.com/bid/103055 - https://usn.ubuntu.com/4267-1/
CVE ID: CVE-2017-18188 State: PUBLISHED Published: 2018-02-14T20:00:00Z Last Updated: 2024-09-16T18:54:13.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenRC opentmpfiles through 0.1.3, when the fs.protected_hardlinks sysctl is turned off, allows local users to obtain ownership of arbitrary files by creating a hard link inside a directory on which "chown -R" will be run. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenRC/opentmpfiles/issues/3
CVE ID: CVE-2017-18189 State: PUBLISHED Published: 2018-02-15T10:00:00 Last Updated: 2024-08-05T21:13:49.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite loop with a resultant NULL pointer dereference, which may allow a remote attacker to cause a denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://public-inbox.org/sox-devel/20171109114554.16297-1-mans%40mansr.com/raw - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881121 - https://lists.debian.org/debian-lts-announce/2019/02/msg00042.html - https://
ian.org/cgi-bin/bugreport.cgi?bug=881121 - https://lists.debian.org/debian-lts-announce/2019/02/msg00042.html - https://access.redhat.com/errata/RHSA-2019:2283 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EUKFZQSZG2ABMTAMOGBMY7MJNSGEIYTL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62RARFRXGKPNNFFNVDV7DHJSOKAIZ3CX/
CVE ID: CVE-2017-18190 State: PUBLISHED Published: 2018-02-16T17:00:00 Last Updated: 2024-08-05T21:13:49.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often resolved via a DNS server (neither the OS nor the web browser is responsible for ensuring that localhost.localdomain is 127.0.0.1). Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3577-1/ - https://lists.debian.org/
itional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3577-1/ - https://lists.debian.org/debian-lts-announce/2018/07/msg00003.html - https://github.com/apple/cups/commit/afa80cb2b457bf8d64f775bed307588610476c41 - https://lists.debian.org/debian-lts-announce/2018/02/msg00023.html - https://bugs.chromium.org/p/project-zero/issues/detail?id=1048
CVE ID: CVE-2017-18191 State: PUBLISHED Published: 2018-02-19T17:00:00 Last Updated: 2024-08-05T21:13:49.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on the compute host. (The same code error also results in data loss, but that is not a vulnerability because the user loses their own data.) All Nova setups supporting encrypted volumes are affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.
supporting encrypted volumes are affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103104 - https://access.redhat.com/errata/RHSA-2018:2714 - https://review.openstack.org/539893 - http://openwall.com/lists/oss-security/2018/04/20/3 - https://security.openstack.org/ossa/OSSA-2018-001.html - https://access.redhat.com/errata/RHSA-2018:2332 - https://launchpad.net/bugs/1739593 - https://access.redhat.com/errata/RHSA-2018:2855
CVE ID: CVE-2017-18192 State: PUBLISHED Published: 2018-02-20T06:00:00Z Last Updated: 2024-09-16T23:26:37.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: smart/calculator/gallerylock/CalculatorActivity.java in the "Photo,Video Locker-Calculator" application through 18 for Android allows attackers to access files via the backdoor 17621762 PIN. Additional Analyst Notes: - CVE Program Container: References: - https://www.ds-security.com/2017/11/16/photovideo-locker-calculator-leak-of-sensitive-files/
CVE ID: CVE-2017-18193 State: PUBLISHED Published: 2018-02-22T15:00:00 Last Updated: 2024-08-05T21:13:49.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/f2fs/extent_cache.c in the Linux kernel before 4.13 mishandles extent trees, which allows local users to cause a denial of service (BUG) via an application with multiple threads. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dad48e73127ba10279ea33e6dbc8d3905c4d31c0 - https://usn.ubuntu.com/3654-1/ - https://github.com/torvalds/linux/commit/dad48e73127ba10279ea33e6dbc8d3905c4d31c0 - https://www.debian.org/security/2018/dsa-4188 - ht
.com/torvalds/linux/commit/dad48e73127ba10279ea33e6dbc8d3905c4d31c0 - https://www.debian.org/security/2018/dsa-4188 - http://www.securityfocus.com/bid/103147 - https://usn.ubuntu.com/3654-2/ - https://usn.ubuntu.com/3656-1/
CVE ID: CVE-2017-18194 State: PUBLISHED Published: 2018-02-22T16:00:00 Last Updated: 2024-08-05T21:13:49.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in users/signup.php in the "signup" component in HamayeshNegar CMS allows a remote attacker to execute arbitrary SQL commands via the "utype" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2017090094 - https://cxsecurity.com/issue/WLB-2018020267
CVE ID: CVE-2017-18195 State: PUBLISHED Published: 2018-02-26T17:00:00 Last Updated: 2024-08-05T21:13:49.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0. An unauthenticated user can enumerate comments from all blog posts by POSTing requests to /index.php/tools/required/conversations/view_ajax with incremental 'cnvID' integers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/r3naissance/NSE/blob/master/http-vuln-cve2017-18195.nse - https://github.com/concrete5/concrete5/pull/6008/files - https://www.exploit-db.com/exploits/44194/ - https://github.com/concr
//github.com/concrete5/concrete5/pull/6008/files - https://www.exploit-db.com/exploits/44194/ - https://github.com/concrete5/concrete5/releases/tag/8.3.0
CVE ID: CVE-2017-18196 State: PUBLISHED Published: 2018-02-23T21:00:00Z Last Updated: 2024-09-16T17:33:01.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories, which might allow local users to bypass intended file restrictions by leveraging access to a directory located deeper within the /tmp directory tree, as demonstrated by /tmp/ANY/PATH/ANY/PATH/input.tif. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/885704 - https://security.gentoo.org/glsa/202312-01
CVE ID: CVE-2017-18197 State: PUBLISHED Published: 2018-02-24T02:00:00 Last Updated: 2024-08-05T21:13:49.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to prevent XML External Entity (XXE) attacks, as demonstrated by /ServerView. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jgraph/mxgraph/issues/124 - https://lists.debian.org/debian-lts-announce/2018/03/msg00002.html
CVE ID: CVE-2017-18198 State: PUBLISHED Published: 2018-02-24T06:00:00 Last Updated: 2024-08-05T21:13:49.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted iso file. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/?52265 - http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gz - http://www.securityfocus.com/bid/103200 - https://access.redhat.com/errata/RHSA-2018:3246
CVE ID: CVE-2017-18199 State: PUBLISHED Published: 2018-02-24T06:00:00 Last Updated: 2024-08-05T21:13:49.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via a crafted iso file. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/?52264 - http://ftp.gnu.org/gnu/libcdio/libcdio-1.0.0.tar.gz - https://access.redhat.com/errata/RHSA-2018:3246 - http://www.securityfocus.com/bid/103202
CVE ID: CVE-2017-18200 State: PUBLISHED Published: 2018-02-26T03:00:00 Last Updated: 2024-08-05T21:13:49.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: The f2fs implementation in the Linux kernel before 4.14 mishandles reference counts associated with f2fs_wait_discard_bios calls, which allows local users to cause a denial of service (BUG), as demonstrated by fstrim. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/638164a2718f337ea224b747cf5977ef143166a4 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=638164a2718f337ea224b747cf5977ef143166a4
CVE ID: CVE-2017-18201 State: PUBLISHED Published: 2018-02-26T14:00:00 Last Updated: 2024-08-05T21:13:49.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_generic.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103190 - https://git.savannah.gnu.org/cgit/libcdio.git/commit/?id=f6f9c48fb40b8a1e8218799724b0b61a7161eb1d - https://access.redhat.com/errata/RHSA-2018:3246
CVE ID: CVE-2017-18202 State: PUBLISHED Published: 2018-02-27T06:00:00 Last Updated: 2024-08-05T21:13:49.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which allows attackers to cause a denial of service (TLB entry leak or use-after-free) or possibly have unspecified other impact by triggering a copy_to_user call within a certain time window. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=687cb0884a714ff484d038e9190edc874edcf146 - https://github.com/torvalds/linux/commit/68
git/torvalds/linux.git/commit/?id=687cb0884a714ff484d038e9190edc874edcf146 - https://github.com/torvalds/linux/commit/687cb0884a714ff484d038e9190edc874edcf146 - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.4 - http://www.securityfocus.com/bid/103161 - https://access.redhat.com/errata/RHSA-2018:2772
CVE ID: CVE-2017-18203 State: PUBLISHED Published: 2018-02-27T20:00:00 Last Updated: 2024-08-05T21:13:49.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3619-2/ - http://www.securityfocus.com/bid/103184 - https://github.com/torvalds/linux/commit/b9a41d21dceadf8104812626ef85dc56ee8a60ed - https://access.redhat.com/er
03184 - https://github.com/torvalds/linux/commit/b9a41d21dceadf8104812626ef85dc56ee8a60ed - https://access.redhat.com/errata/RHSA-2018:1854 - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.3 - https://access.redhat.com/errata/RHSA-2018:1062 - https://access.redhat.com/errata/RHSA-2018:0676 - https://usn.ubuntu.com/3653-2/ - https://usn.ubuntu.com/3655-1/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9a41d21dceadf8104812626ef85dc56ee8a60ed - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html - https://usn.ubuntu.com/3655-2/ - https://usn.ubuntu.com/3653-1/ - https://usn.ubuntu.com/3657-1/ - https://usn.ubuntu.com/3619-1/ - https://ac
/3655-2/ - https://usn.ubuntu.com/3653-1/ - https://usn.ubuntu.com/3657-1/ - https://usn.ubuntu.com/3619-1/ - https://access.redhat.com/errata/RHSA-2019:4154
CVE ID: CVE-2017-18204 State: PUBLISHED Published: 2018-02-27T20:00:00 Last Updated: 2024-08-05T21:13:49.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ocfs2_setattr function in fs/ocfs2/file.c in the Linux kernel before 4.14.2 allows local users to cause a denial of service (deadlock) via DIO requests. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3617-1/ - https://usn.ubuntu.com/3619-2/ - https://usn.ubuntu.com/3617-3/ - https://github.com/torvalds/linux/commit/28f5a8a7c033cbf3e32277f4cc9c6afd74f05300 - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2 - https://usn.ubuntu.com/3655-1/ - http://git.kernel.org/cgit/li