Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-3144 State: PUBLISHED Published: 2019-01-16T20:00:00Z Last Updated: 2024-09-16T22:46:13.879Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: ISC Products: ISC DHCP Problem Types: By intentionally exploiting this vulnerability an attacker who is permitted to establish connections to the OMAPI control port can exhaust the pool of socket descriptors available to the DHCP server. Once exhausted, the server will not accept additional connections, potentially denying access to legitimate connections from the server operator. While the server will continue to receive and service DHCP client requests, the operator can be blocked from the ability to
e the server will continue to receive and service DHCP client requests, the operator can be blocked from the ability to use OMAPI to control server state, add new lease reservations, etc. Description: A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond their end-of-life (EOL). Releases prior to 4.1.0 have not been tested. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:0158 - https://www.deb
Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:0158 - https://www.debian.org/security/2018/dsa-4133 - http://www.securityfocus.com/bid/102726 - http://www.securitytracker.com/id/1040194 - https://usn.ubuntu.com/3586-1/ - https://kb.isc.org/docs/aa-01541
CVE ID: CVE-2017-3145 State: PUBLISHED Published: 2019-01-16T20:00:00Z Last Updated: 2024-09-17T00:10:46.349Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ISC Products: BIND 9 Problem Types: While this bug has existed in BIND since 9.0.0, there are no known code paths leading to it in ISC releases prior to those containing the fix for CVE-2017-3137. Thus while all instances of BIND ought to be patched, only ISC versions [9.9.9-P8 to 9.9.11, 9.10.4-P8 to 9.10.6, 9.11.0-P5 to 9.11.2, 9.9.9-S10 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, and 9.12.0a1 to 9.12.0rc1] acting as DNSSEC validating resolvers are currently known to crash due to this bug. The known crash is
a1 to 9.12.0rc1] acting as DNSSEC validating resolvers are currently known to crash due to this bug. The known crash is an assertion failure in netaddr.c. Description: BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:0102 - https://access.redhat.com/errata/RHSA-2018:0487 - https://www.debian.or
ttps://access.redhat.com/errata/RHSA-2018:0102 - https://access.redhat.com/errata/RHSA-2018:0487 - https://www.debian.org/security/2018/dsa-4089 - https://access.redhat.com/errata/RHSA-2018:0488 - https://access.redhat.com/errata/RHSA-2018:0101 - http://www.securitytracker.com/id/1040195 - https://kb.isc.org/docs/aa-01542 - http://www.securityfocus.com/bid/102716 - https://lists.debian.org/debian-lts-announce/2018/01/msg00029.html - https://security.netapp.com/advisory/ntap-20180117-0003/ - https://supportportal.juniper.net/s/article/2018-07-Security-Bulletin-SRX-Series-Vulnerabilities-in-ISC-BIND-named
CVE ID: CVE-2017-3146 State: REJECTED Published: 2020-02-07T16:25:17 Last Updated: 2020-02-07T16:25:17 Description: No description available.
CVE ID: CVE-2017-3147 State: REJECTED Published: 2020-02-07T16:25:17 Last Updated: 2020-02-07T16:25:17 Description: No description available.
CVE ID: CVE-2017-3148 State: REJECTED Published: 2020-02-07T16:25:17 Last Updated: 2020-02-07T16:25:17 Description: No description available.
CVE ID: CVE-2017-3149 State: REJECTED Published: 2020-02-07T16:25:18 Last Updated: 2020-02-07T16:25:18 Description: No description available.
CVE ID: CVE-2017-3150 State: PUBLISHED Published: 2017-08-29T20:00:00Z Last Updated: 2024-09-16T19:57:05.348Z Vendors: Apache Software Foundation Products: Apache Atlas Problem Types: Use of insecure cookies Description: Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E - http://www.securityfocus.com/bid/100536
CVE ID: CVE-2017-3151 State: PUBLISHED Published: 2017-08-29T20:00:00Z Last Updated: 2024-09-17T00:55:58.778Z Vendors: Apache Software Foundation Products: Apache Atlas Problem Types: Persistent XSS vulnerability Description: Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100547 - https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E
CVE ID: CVE-2017-3152 State: PUBLISHED Published: 2017-08-29T20:00:00Z Last Updated: 2024-09-16T22:16:03.163Z Vendors: Apache Software Foundation Products: Apache Atlas Problem Types: DOM XSS threat Description: Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100577 - https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E
CVE ID: CVE-2017-3153 State: PUBLISHED Published: 2017-08-29T20:00:00Z Last Updated: 2024-09-16T18:24:06.592Z Vendors: Apache Software Foundation Products: Apache Atlas Problem Types: Reflected XSS vulnerability Description: Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E - http://www.securityfocus.com/bid/100578
CVE ID: CVE-2017-3154 State: PUBLISHED Published: 2017-08-29T20:00:00Z Last Updated: 2024-09-16T21:07:44.241Z Vendors: Apache Software Foundation Products: Apache Atlas Problem Types: Stack trace in error response Description: Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E - http://www.securityfocus.com/bid/100581
CVE ID: CVE-2017-3155 State: PUBLISHED Published: 2017-08-29T20:00:00Z Last Updated: 2024-09-16T19:36:18.696Z Vendors: Apache Software Foundation Products: Apache Atlas Problem Types: XFS - cross frame scripting vulnerability Description: Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E - http://www.securityfocus.com/bid/100587
CVE ID: CVE-2017-3156 State: PUBLISHED Published: 2017-08-10T18:00:00Z Last Updated: 2024-09-16T23:16:01.996Z Vendors: Apache Software Foundation Products: Apache CXF Problem Types: Timing attack Description: The OAuth2 Hawk and JOSE MAC Validation code in Apache CXF prior to 3.0.13 and 3.1.x prior to 3.1.10 is not using a constant time MAC signature comparison algorithm which may be exploited by sophisticated timing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96398 - https://access.redhat.com/errata/RHSA-2017:1832 - http://cxf.apache.org/security-advisories.data/CVE-2017-3156.txt.asc - https://lists.apache.org/thread.html/rc7742
832 - http://cxf.apache.org/security-advisories.data/CVE-2017-3156.txt.asc - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf
org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2017-3157 State: PUBLISHED Published: 2017-11-20T20:00:00Z Last Updated: 2024-09-16T20:16:57.330Z Vendors: Apache Software Foundation Products: Apache OpenOffice Problem Types: Information Disclosure Description: By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacker by, e.g., using hidden sections to store the information, tricking the user into saving the document and convincing the user to send the document back to the attacker. The vulnerability is mitigated by the need for the attacker to know the precise file pat
document back to the attacker. The vulnerability is mitigated by the need for the attacker to know the precise file path in the target system, and the need to trick the user into saving the document and sending it back. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:0914 - https://www.debian.org/security/2017/dsa-3792 - http://www.securitytracker.com/id/1037893 - http://www.securityfocus.com/bid/96402 - https://access.redhat.com/errata/RHSA-2017:0979 - https://www.openoffice.org/security/cves/CVE-2017-3157.html
CVE ID: CVE-2017-3158 State: PUBLISHED Published: 2018-01-18T20:00:00Z Last Updated: 2024-09-16T16:37:33.486Z Vendors: Apache Software Foundation Products: Apache Guacamole Problem Types: Buffer Overflow Description: A race condition in Guacamole's terminal emulator in versions 0.9.5 through 0.9.10-incubating could allow writes of blocks of printed data to overlap. Such overlapping writes could cause packet data to be misread as the packet length, resulting in the remaining data being written beyond the end of a statically-allocated buffer. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/b218d36bfdaf655d27382daec4dcd02ec717631f4aee8b7e430
rogram Container: References: - https://lists.apache.org/thread.html/b218d36bfdaf655d27382daec4dcd02ec717631f4aee8b7e4300ad65%40%3Cuser.guacamole.apache.org%3E
CVE ID: CVE-2017-3159 State: PUBLISHED Published: 2017-03-07T15:00:00 Last Updated: 2024-08-05T14:16:28.249Z Vendors: Apache Software Foundation Products: Apache Camel Problem Types: Java deserialization Description: Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:0868 - https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true - http://www.securityfocus.com/bid/96321 - http://www.openwall.com/lists/oss-security/2017/05/22/2 - http://camel.apache.org/secu
www.securityfocus.com/bid/96321 - http://www.openwall.com/lists/oss-security/2017/05/22/2 - http://camel.apache.org/security-advisories.data/CVE-2017-3159.txt.asc?version=1&modificationDate=1486565167000&api=v2 - https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
CVE ID: CVE-2017-3160 State: PUBLISHED Published: 2018-02-01T21:00:00Z Last Updated: 2024-09-16T19:56:14.676Z Vendors: Apache Software Foundation Products: Apache Cordova Android Problem Types: Man-in-the-Middle vulnerability Description: After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, the scripts will fetch Gradle on the first build. However, since the default URI is not using https, it is vulnerable to a MiTM and the Gradle executable is not safe. The severity of this issue is high due to the fact that the build scripts immediately start a build after Gradle has been fetched. Developers who are concerned about this issue
the build scripts immediately start a build after Gradle has been fetched. Developers who are concerned about this issue should install version 6.1.2 or higher of Cordova-Android. If developers are unable to install the latest version, this vulnerability can easily be mitigated by setting the CORDOVA_ANDROID_GRADLE_DISTRIBUTION_URL environment variable to https://services.gradle.org/distributions/gradle-2.14.1-all.zip Additional Analyst Notes: - CVE Program Container: References: - https://cordova.apache.org/announcements/2017/01/27/android-612.html - http://www.securityfocus.com/bid/95838 - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2017-3161 State: PUBLISHED Published: 2017-04-26T20:00:00 Last Updated: 2024-08-05T14:16:28.253Z Vendors: Apache Software Foundation Products: Apache Hadoop Problem Types: XSS Description: The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98025 - https://s.apache.org/4MQm - https://lists.apache.org/thread.html/r127f75748fcabc63bc5a1bec6885753eb9b2bed803b6ed7bd46f965b%40%3Cuser.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r66de86b9a608c1da70b2d27d765c11ec88edf6e5dd6f379ab33e072a%40%3C
oop.apache.org%3E - https://lists.apache.org/thread.html/r66de86b9a608c1da70b2d27d765c11ec88edf6e5dd6f379ab33e072a%40%3Cuser.flink.apache.org%3E
CVE ID: CVE-2017-3162 State: PUBLISHED Published: 2017-04-26T20:00:00 Last Updated: 2024-08-05T14:16:28.315Z Vendors: Apache Software Foundation Products: Apache Hadoop Problem Types: Unchecked parameter in query string Description: HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apache Hadoop before 2.7.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98017 - https://s.apache.org/k2ss - https://lists.apache.org/thread.html/r127f75748fcabc63bc5a1bec6885753eb9b2bed803b6ed7bd46f965b%40%3Cuser.hadoop.apache.org%3E - https://lists.apache.or
.html/r127f75748fcabc63bc5a1bec6885753eb9b2bed803b6ed7bd46f965b%40%3Cuser.hadoop.apache.org%3E - https://lists.apache.org/thread.html/r66de86b9a608c1da70b2d27d765c11ec88edf6e5dd6f379ab33e072a%40%3Cuser.flink.apache.org%3E
CVE ID: CVE-2017-3163 State: PUBLISHED Published: 2017-08-30T14:00:00Z Last Updated: 2024-09-16T18:39:30.795Z Vendors: Apache Software Foundation Products: Apache Solr Problem Types: Information Disclosure Description: When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only tr
xposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1448 - https://access.redhat.com/errata/RHSA-2018:1449 - https://access.redhat.com/errata/RHSA-2018:1450 - https://access.redhat.com/errata/RHSA-2018:1451 - https://lists.apache.org/thread.html/a6a33a186f293f9f9aecf3bd39c76252bfc49a79de4321dd2a53b488%40%3Csolr-user.lucene.apache.org%3E - https://access.redhat.com/errata/RHSA-2018:1447 - https://www.debian.org/security/2018/dsa-4124
CVE ID: CVE-2017-3164 State: PUBLISHED Published: 2019-03-08T21:00:00Z Last Updated: 2024-09-16T19:52:10.132Z Vendors: Apache Software Foundation Products: Apache Solr Problem Types: Server Side Request Forgery Description: Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the "shards" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the server could make Solr perform an HTTP GET request to any reachable URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107026 - http://mail-archives.apache.org/mod_mbox/www-announce/201902.mbox/%3CCAECwjAVjBN%3DwO5rYs6ktAX-5%3D
cus.com/bid/107026 - http://mail-archives.apache.org/mod_mbox/www-announce/201902.mbox/%3CCAECwjAVjBN%3DwO5rYs6ktAX-5%3D-f5JDFwbbTSM2TTjEbGO5jKKA%40mail.gmail.com%3E - https://lists.apache.org/thread.html/75dc651478f9d04505b46d44fe3ac739e7aaf3d7bf1257973685f8f7%40%3Cdev.lucene.apache.org%3E - https://lists.apache.org/thread.html/ca3105b6934ccd28e843dffe39724f6963ff49825e9b709837203649%40%3Cdev.lucene.apache.org%3E - https://lists.apache.org/thread.html/e0f9c652b57a91fdcc287efcead620af9f4d8e46b88f0b761aa265de%40%3Cdev.lucene.apache.org%3E - https://lists.apache.org/thread.html/43026507844ada1ac658ccf7bc939378c13e492fd6538416ce65df39%40%3Cdev.lucene.apache.org%3E - https://lists.apache.org/thr
ml/43026507844ada1ac658ccf7bc939378c13e492fd6538416ce65df39%40%3Cdev.lucene.apache.org%3E - https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E - https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://security.netapp.com/advisory/ntap-20190327-0003/ - https://lists.apache.org/thread.html/rc400db37710ee79378b6c52de3640493ff538c2beb41cefdbbdf2ab8%40%3Ccommits.submarine.apache.org%3E
CVE ID: CVE-2017-3165 State: PUBLISHED Published: 2017-09-13T16:00:00Z Last Updated: 2024-09-16T18:54:35.712Z Vendors: Apache Software Foundation Products: Apache Brooklyn Problem Types: Cross-site scripting Description: In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site scripting where one authenticated user can cause scripts to run in the browser of another user authorized to access the first user's resources. This is due to improper escaping of server-side content. There is known to be a proof-of-concept exploit using this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96228 - https://brooklyn.apa
onal Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96228 - https://brooklyn.apache.org/community/security/CVE-2017-3165.html - https://lists.apache.org/thread.html/5aa6b7583edbfc1f5653607003204326d9e27ef65e8af356c798b21c%40%3Cdev.brooklyn.apache.org%3E
CVE ID: CVE-2017-3166 State: PUBLISHED Published: 2017-11-13T14:00:00Z Last Updated: 2024-09-16T23:41:26.878Z Vendors: Apache Software Foundation Products: Apache Hadoop Problem Types: Privilege escalation Description: In Apache Hadoop versions 2.6.1 to 2.6.5, 2.7.0 to 2.7.3, and 3.0.0-alpha1, if a file in an encryption zone with access permissions that make it world readable is localized via YARN's localization mechanism, that file will be stored in a world-readable location and can be shared freely with any application that requests to localize that file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/2e16689b44bdd1976b6368c143a4017fc7
st Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/2e16689b44bdd1976b6368c143a4017fc7159d1f2d02a5d54fe9310f%40%3Cgeneral.hadoop.apache.org%3E - https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E
CVE ID: CVE-2017-3167 State: PUBLISHED Published: 2017-06-20T01:00:00.000Z Last Updated: 2025-11-04T16:09:10.240Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-287 Description: In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT208221 - https://access.redhat.com/errata/RHSA-2017:2479 - https://access.redhat.com/errata/RHSA-2017:2483 - https://security.netapp.com/advisory/ntap-20180601-0002/ - https://www.no
ps://access.redhat.com/errata/RHSA-2017:2483 - https://security.netapp.com/advisory/ntap-20180601-0002/ - https://www.nomachine.com/SU08O00185 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us - https://access.redhat.com/errata/RHSA-2017:3475 - http://www.securityfocus.com/bid/99135 - https://access.redhat.com/errata/RHSA-2017:3195 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://access.redhat.com/errata/RHSA-2017:3476 - https://lists.apache.org/thread.html/8409e41a8f7dd9ded37141c38df001be930115428c3d64f70bbdb8b4%40%3Cdev.httpd.apache.org%3E - https://access.redhat.com/errata/RHSA-2017:3477 - http://www.deb
930115428c3d64f70bbdb8b4%40%3Cdev.httpd.apache.org%3E - https://access.redhat.com/errata/RHSA-2017:3477 - http://www.debian.org/security/2017/dsa-3896 - https://access.redhat.com/errata/RHSA-2017:3194 - https://access.redhat.com/errata/RHSA-2017:3193 - http://www.securitytracker.com/id/1038711 - https://security.gentoo.org/glsa/201710-32 - https://access.redhat.com/errata/RHSA-2017:2478 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429
a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E - https://www.tenable.com/security/tns-2019-09 - https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d4