Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-14027 State: PUBLISHED Published: 2017-11-01T02:00:00 Last Updated: 2024-11-14T20:01:39.797Z Vendors: n/a Products: Korenix JetNet Problem Types: CWE-798 Description: A Use of Hard-coded Credentials issue was discovered in Korenix JetNet JetNet5018G version 1.4, JetNet5310G version 1.4a, JetNet5428G-2G-2FX version 1.4, JetNet5628G-R version 1.4, JetNet5628G version 1.4, JetNet5728G-24P version 1.4, JetNet5828G version 1.1d, JetNet6710G-HVDC version 1.1e, and JetNet6710G version 1.1. The software uses undocumented hard-coded credentials that may allow an attacker to gain remote access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
acker to gain remote access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-299-01 - http://www.securityfocus.com/bid/101598
CVE ID: CVE-2017-14028 State: PUBLISHED Published: 2017-11-16T21:00:00 Last Updated: 2024-08-05T19:13:41.532Z Vendors: n/a Products: Moxa NPort 5110, 5130, and 5150 Problem Types: CWE-400 Description: A Resource Exhaustion issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exhaust memory resources by sending a large amount of TCP SYN packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101885 - https://ics-cert.us-cert.gov/advisories/ICSA-17-320-01
CVE ID: CVE-2017-14029 State: PUBLISHED Published: 2017-11-06T22:00:00 Last Updated: 2024-08-05T19:13:41.624Z Vendors: n/a Products: Trihedral Engineering Limited VTScada Problem Types: CWE-427 Description: An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program will execute specially crafted malicious dll files placed on the target machine. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-304-02
CVE ID: CVE-2017-14030 State: PUBLISHED Published: 2018-01-12T20:00:00 Last Updated: 2024-08-05T19:13:41.501Z Vendors: n/a Products: Moxa MXview Problem Types: CWE-428 Description: An issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation vulnerability could allow an authorized user with file access to escalate privileges by inserting arbitrary code into the unquoted service path. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102494 - https://ics-cert.us-cert.gov/advisories/ICSA-18-011-02
CVE ID: CVE-2017-14031 State: PUBLISHED Published: 2017-11-06T22:00:00 Last Updated: 2024-08-05T19:13:41.601Z Vendors: n/a Products: Trihedral Engineering Limited VTScada Problem Types: CWE-284 Description: An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administrator user has privileges to read and write to the file system of the target machine. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-17-304-02
CVE ID: CVE-2017-14032 State: PUBLISHED Published: 2017-08-30T20:00:00 Last Updated: 2024-08-05T19:13:41.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3967 - https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-02 - https://gi
ity/2017/dsa-3967 - https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-02 - https://github.com/ARMmbed/mbedtls/commit/31458a18788b0cf0b722acda9bb2f2fe13a3fb32 - https://github.com/ARMmbed/mbedtls/commit/d15795acd5074e0b44e71f7ede8bdfe1b48591fc - https://bugs.debian.org/873557
CVE ID: CVE-2017-14033 State: PUBLISHED Published: 2017-09-19T17:00:00 Last Updated: 2024-08-05T19:13:41.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service (interpreter crash) via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:0585 - https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released/ - https://access.redhat.com/errata/RHSA-2018:0378 - http://www.securitytracker.com/id/1042004 - https://www.debian.org/security/2017/dsa-4031 - https:
rata/RHSA-2018:0378 - http://www.securitytracker.com/id/1042004 - https://www.debian.org/security/2017/dsa-4031 - https://www.ruby-lang.org/en/news/2017/09/14/ruby-2-2-8-released/ - http://www.securitytracker.com/id/1039363 - https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html - https://access.redhat.com/errata/RHSA-2018:0583 - https://www.ruby-lang.org/en/news/2017/09/14/openssl-asn1-buffer-underrun-cve-2017-14033/ - http://www.securityfocus.com/bid/100868 - https://security.gentoo.org/glsa/201710-18
CVE ID: CVE-2017-14034 State: PUBLISHED Published: 2017-11-16T04:00:00 Last Updated: 2024-08-05T19:13:41.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destination address, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ebel34/bpg-web-encoder/issues/1
CVE ID: CVE-2017-14035 State: PUBLISHED Published: 2017-08-30T21:00:00Z Last Updated: 2024-09-16T21:56:32.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: CrushFTP 8.x before 8.2.0 has a serialization vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://crushftp.com/version8.html
CVE ID: CVE-2017-14036 State: PUBLISHED Published: 2017-08-30T21:00:00Z Last Updated: 2024-09-16T17:54:47.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://crushftp.com/version8.html - https://crushftp.com/version7.html
CVE ID: CVE-2017-14037 State: PUBLISHED Published: 2017-08-30T21:00:00Z Last Updated: 2024-09-17T00:36:12.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://crushftp.com/version8.html - https://crushftp.com/version7.html
CVE ID: CVE-2017-14038 State: PUBLISHED Published: 2017-08-30T21:00:00Z Last Updated: 2024-09-16T20:43:41.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://crushftp.com/version8.html - https://crushftp.com/version7.html
CVE ID: CVE-2017-14039 State: PUBLISHED Published: 2017-08-30T22:00:00 Last Updated: 2024-08-05T19:13:41.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201710-26 - https://github.com/uclouvain/openjpeg/issues/992 - http://www.debian.org/security/2017/dsa-4013 - http://www.securityfocus.com/bid/100550 - https://github.com/uclouvain/op
http://www.debian.org/security/2017/dsa-4013 - http://www.securityfocus.com/bid/100550 - https://github.com/uclouvain/openjpeg/commit/c535531f03369623b9b833ef41952c62257b507e - https://blogs.gentoo.org/ago/2017/08/28/openjpeg-heap-based-buffer-overflow-in-opj_t2_encode_packet-t2-c/
CVE ID: CVE-2017-14040 State: PUBLISHED Published: 2017-08-30T22:00:00 Last Updated: 2024-08-05T19:13:41.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerability may lead to remote denial of service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/08/28/openjpeg-invalid-memory-write-in-tgatoimage-convert-c/ - https://github.com/uclouvain/openjpeg/issues/995 - http://www.debian.org/security/2017/dsa-4013 - https://github.com/uclouvain/openjpeg/commit/2cd30c2
penjpeg/issues/995 - http://www.debian.org/security/2017/dsa-4013 - https://github.com/uclouvain/openjpeg/commit/2cd30c2b06ce332dede81cccad8b334cde997281 - http://www.securityfocus.com/bid/100553
CVE ID: CVE-2017-14041 State: PUBLISHED Published: 2017-08-30T22:00:00 Last Updated: 2024-08-05T19:13:41.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/08/28/openjpeg-stack-based-buffer-overflow-write-in-pgxtoimage-convert-c/ - https://github.com/uclouvain/openjpeg/commit/e5285319229a5d77bf316bb0d3a6cbd3cb8666d9 - http://www.securityfocus.com/
- https://github.com/uclouvain/openjpeg/commit/e5285319229a5d77bf316bb0d3a6cbd3cb8666d9 - http://www.securityfocus.com/bid/100555 - https://github.com/uclouvain/openjpeg/issues/997 - http://www.debian.org/security/2017/dsa-4013
CVE ID: CVE-2017-14042 State: PUBLISHED Published: 2017-08-30T22:00:00 Last Updated: 2024-08-05T19:13:41.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26. The vulnerability causes a big memory allocation, which may lead to remote denial of service in the MagickRealloc function in magick/memory.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100556 - https://blogs.gentoo.org/ago/2017/08/28/graphicsmagick-memory-allocation-failure-in-magickrealloc-memory-c-2/ - http://hg.code.sf.net/p/graphicsmagick/code/rev/3bbf7a1
smagick-memory-allocation-failure-in-magickrealloc-memory-c-2/ - http://hg.code.sf.net/p/graphicsmagick/code/rev/3bbf7a13643d - https://usn.ubuntu.com/4206-1/
CVE ID: CVE-2017-14048 State: PUBLISHED Published: 2017-08-31T04:00:00 Last Updated: 2024-08-05T19:13:41.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlackCat CMS 1.2 allows remote authenticated users to inject arbitrary PHP code into info.php via a crafted new_modulename parameter to backend/addons/ajax_create.php. NOTE: this can be exploited via CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_RCE2/blackcat_cms_RCE2.md
CVE ID: CVE-2017-14049 State: PUBLISHED Published: 2017-08-31T04:00:00 Last Updated: 2024-08-05T19:13:41.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BlackCat CMS 1.2, backend/settings/ajax_save_settings.php allows remote authenticated users to conduct XSS attacks via the Website header or Website footer field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_xss/blackcat_cms_xss.md
CVE ID: CVE-2017-14050 State: PUBLISHED Published: 2017-08-31T04:00:00 Last Updated: 2024-08-05T19:13:41.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: In BlackCat CMS 1.2, backend/addons/install.php allows remote authenticated users to execute arbitrary PHP code via a ZIP archive that contains a .php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/M4ple/vulnerability/blob/master/blackcat_cms_RCE3/blackcat_cms_RCE3.md
CVE ID: CVE-2017-14051 State: PUBLISHED Published: 2017-08-31T04:00:00 Last Updated: 2024-08-05T19:13:41.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - https://usn.ubuntu.com/3583-2/ - https://bugzilla.kernel.org/show_bug.cgi?id=194061 - http://www.securityfocus.com/bid/100571 - https://patchwork.k
-2/ - https://bugzilla.kernel.org/show_bug.cgi?id=194061 - http://www.securityfocus.com/bid/100571 - https://patchwork.kernel.org/patch/9929625/ - https://usn.ubuntu.com/3583-1/
CVE ID: CVE-2017-14053 State: PUBLISHED Published: 2017-09-01T21:00:00 Last Updated: 2024-08-05T19:13:41.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/NTAP-20170831-0001
CVE ID: CVE-2017-14054 State: PUBLISHED Published: 2017-08-31T15:00:00 Last Updated: 2024-08-05T19:13:41.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted IVR file, which claims a large "len" field in the header but does not contain sufficient backing data, is provided, the first type==4 loop would consume huge CPU resources, since there is no EOF check inside the loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100627 - https://github.com/FFmpeg/FFmpeg/commit/124eb202
gram Container: References: - http://www.securityfocus.com/bid/100627 - https://github.com/FFmpeg/FFmpeg/commit/124eb202e70678539544f6268efc98131f19fa49 - http://www.debian.org/security/2017/dsa-3996
CVE ID: CVE-2017-14055 State: PUBLISHED Published: 2017-08-31T15:00:00 Last Updated: 2024-08-05T19:13:41.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nb_frames" field in the header but does not contain sufficient backing data, is provided, the loop over the frames would consume huge CPU and memory resources, since there is no EOF check inside the loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100626 - https://github.com/F
nal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100626 - https://github.com/FFmpeg/FFmpeg/commit/4f05e2e2dc1a89f38cd9f0960a6561083d714f1e - https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html - http://www.debian.org/security/2017/dsa-3996
CVE ID: CVE-2017-14056 State: PUBLISHED Published: 2017-08-31T15:00:00 Last Updated: 2024-08-05T19:13:41.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted RL2 file, which claims a large "frame_count" field in the header but does not contain sufficient backing data, is provided, the loops (for offset and size tables) would consume huge CPU and memory resources, since there is no EOF check inside these loops. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/96f
hese loops. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/96f24d1bee7fe7bac08e2b7c74db1a046c9dc0de - http://www.securityfocus.com/bid/100628 - https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html - http://www.debian.org/security/2017/dsa-3996
CVE ID: CVE-2017-14057 State: PUBLISHED Published: 2017-08-31T15:00:00 Last Updated: 2024-08-05T19:13:41.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted ASF file, which claims a large "name_len" or "count" field in the header but does not contain sufficient backing data, is provided, the loops over the name and markers would consume huge CPU and memory resources, since there is no EOF check inside these loops. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100630 - https://lists.deb
tional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100630 - https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html - https://github.com/FFmpeg/FFmpeg/commit/7f9ec5593e04827249e7aeb466da06a98a0d7329 - http://www.debian.org/security/2017/dsa-3996
CVE ID: CVE-2017-14058 State: PUBLISHED Published: 2017-08-31T15:00:00 Last Updated: 2024-08-05T19:13:41.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service (infinite loop). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100629 - https://github.com/FFmpeg/FFmpeg/commit/7ec414892ddcad88313848494b6fc5f437c9ca4a - http://www.debian.org/security/2017/dsa-3996 - https://lists.debian.org/debian-lts-announce/2019/03/msg00041.html - https://github.com/F
n.org/security/2017/dsa-3996 - https://lists.debian.org/debian-lts-announce/2019/03/msg00041.html - https://github.com/FFmpeg/FFmpeg/commit/7ba100d3e6e8b1e5d5342feb960a7f081d6e15af
CVE ID: CVE-2017-14059 State: PUBLISHED Published: 2017-08-31T15:00:00 Last Updated: 2024-08-05T19:13:41.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100631 - https://github.com/FFmpeg/FFmpeg/commit/7e80b63ec
ram Container: References: - http://www.securityfocus.com/bid/100631 - https://github.com/FFmpeg/FFmpeg/commit/7e80b63ecd259d69d383623e75b318bf2bd491f6 - http://www.debian.org/security/2017/dsa-3996
CVE ID: CVE-2017-14060 State: PUBLISHED Published: 2017-08-31T15:00:00 Last Updated: 2024-08-05T19:13:41.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cause a Denial of Service (in the QueueAuthenticPixelCacheNexus function within the MagickCore/cache.c file) by submitting a malformed image file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/710 - https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - https://lists.debian.org/debian-lts-ann
- https://usn.ubuntu.com/3681-1/ - https://security.gentoo.org/glsa/201711-07 - https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html - https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE ID: CVE-2017-14061 State: PUBLISHED Published: 2017-08-31T16:00:00Z Last Updated: 2024-09-17T00:30:30.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/libidn/libidn2/commit/16853b6973a1e72fee2b7cccda85472cb9951305 - https://gitlab.com/libidn/libidn2/blob/master/NEWS
CVE ID: CVE-2017-14062 State: PUBLISHED Published: 2017-08-31T16:00:00 Last Updated: 2024-08-05T19:13:41.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3988 - https://gitlab.com/libidn/libidn2/blob/master/NEWS - https://gitlab.com/libidn/libidn2/commit/3284eb342cd0ed1a18786e3fcdf0cdd7e76676bd - https://lists.debian.org/debian-lts-announce/2018/07/msg00040.html
CVE ID: CVE-2017-14063 State: PUBLISHED Published: 2017-08-31T16:00:00 Last Updated: 2024-08-05T19:13:41.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Async Http Client (aka async-http-client) before 2.0.35 can be tricked into connecting to a host different from the one extracted by java.net.URI if a '?' character occurs in a fragment identifier. Similar bugs were previously identified in cURL (CVE-2016-8624) and Oracle Java 8 java.net.URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AsyncHttpClient/async-http-client/issues/1455 - https://access.redhat.com/errata/RHSA-2018:2669 - http://openwall.com/lists/oss-security/2017/08/31/4 - h
/issues/1455 - https://access.redhat.com/errata/RHSA-2018:2669 - http://openwall.com/lists/oss-security/2017/08/31/4 - https://lists.apache.org/thread.html/rfaa4d578587f52a9c4d176af516a681a712c664e3be440a4163691d5%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r79d9bab405414af45568c4683386f5e9fd02c10ca87ffa2ee33512dc%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/re2510852c4a1f635b14b35e5dfd7597076928e723ab08559ede575e0%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/r04b15fd898a6b1612153543375daaa8145a0fd1804ec9fa2e0d95c97%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/rcb46acc25917e01ebecca13
8145a0fd1804ec9fa2e0d95c97%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/rcb46acc25917e01ebecca132e870da9ab935d5796686ed8a2785b026%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/r7046a51116207588e36ca8c2e291327e391dae40712d267117475a98%40%3Cdev.tez.apache.org%3E - https://lists.apache.org/thread.html/r7879a48644f708be0529bd39f0679ad3ad951f3dc24442878a008fd8%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/r683d78c6d7a15659f2bb82dd4120dab8c45a870eaa7f1a15cce4ed3b%40%3Cissues.tez.apache.org%3E - https://lists.apache.org/thread.html/re7367895ccbf64523efcd39a9181baf2eaa30b069d8d6496852fba56%40%3Cissues.tez.apache.org%3E - https://l