Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-8550 State: PUBLISHED Published: 2016-04-14T14:00:00 Last Updated: 2024-08-06T08:20:43.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.debian.org/security/2016/dsa-3519 - http://www.securityfocus.com/bid/79592 - http://xenbits.xen.org/xsa/advisory-155.html - h
n.org/security/2016/dsa-3519 - http://www.securityfocus.com/bid/79592 - http://xenbits.xen.org/xsa/advisory-155.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - http://www.securitytracker.com/id/1034479 - https://security.gentoo.org/glsa/201604-03 - http://www.debian.org/security/2016/dsa-3471 - http://www.debian.org/security/2016/dsa-3434 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
CVE ID: CVE-2015-8551 State: PUBLISHED Published: 2016-04-13T15:00:00 Last Updated: 2024-08-06T08:20:43.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and a crafted sequence of XEN_PCI_OP_* operations, aka "Linux pciback missing sanity checks." Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/
ack missing sanity checks." Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-157.html - http://www.securitytracker.com/id/1034480 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - https://security.gentoo.org/glsa/201604-03 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://www.debian.org/security/2016/dsa-3434 - http://www.securityfocus.com/bid/79546
-announce/2016-08/msg00044.html - http://www.debian.org/security/2016/dsa-3434 - http://www.securityfocus.com/bid/79546 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
CVE ID: CVE-2015-8552 State: PUBLISHED Published: 2016-04-13T15:00:00 Last Updated: 2024-08-06T08:20:43.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka "Linux pciback missing sanity checks." Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-157
sanity checks." Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-157.html - http://www.securitytracker.com/id/1034480 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - https://security.gentoo.org/glsa/201604-03 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://www.debian.org/security/2016/dsa-3434 - http://www.securityfocus.com/bid/79546 - http://lis
16-08/msg00044.html - http://www.debian.org/security/2016/dsa-3434 - http://www.securityfocus.com/bid/79546 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
CVE ID: CVE-2015-8553 State: PUBLISHED Published: 2016-04-13T15:00:00 Last Updated: 2024-08-06T08:20:43.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0777. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-120.html - https://seclists.org/bugtraq/2019/Aug/18 - https://www.debian.org/security/2019/dsa-4497
CVE ID: CVE-2015-8554 State: PUBLISHED Published: 2016-04-14T14:00:00 Last Updated: 2024-08-06T08:20:43.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries, related to a "write path." Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.securitytracker.com/id/1034481 - http://xenbits.x
chnetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.securitytracker.com/id/1034481 - http://xenbits.xen.org/xsa/advisory-164.html - http://www.securityfocus.com/bid/79579 - https://security.gentoo.org/glsa/201604-03 - http://support.citrix.com/article/CTX203879
CVE ID: CVE-2015-8555 State: PUBLISHED Published: 2016-04-13T15:00:00 Last Updated: 2024-08-06T08:20:43.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.debian.org/security/2016/dsa-3519 - http://www.securitytracker.com/id/1034477 - http://www.securi
0546.html - http://www.debian.org/security/2016/dsa-3519 - http://www.securitytracker.com/id/1034477 - http://www.securityfocus.com/bid/79543 - http://xenbits.xen.org/xsa/advisory-165.html - https://security.gentoo.org/glsa/201604-03 - http://support.citrix.com/article/CTX203879
CVE ID: CVE-2015-8556 State: PUBLISHED Published: 2017-03-24T14:00:00 Last Updated: 2024-08-06T08:20:43.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39010/ - http://packetstormsecurity.com/files/134948/Gentoo-QEMU-Local-Privilege-Escalation.html - https://security.gentoo.org/glsa/201602-01
CVE ID: CVE-2015-8557 State: PUBLISHED Published: 2016-01-08T20:00:00 Last Updated: 2024-08-06T08:20:43.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2862-1 - http://packetstormsecurity.com/files/133823/Pygments-FontManager._get_nix_font_path-Shell-Injection.html - http://www.openwall.com/lists/oss-security/2015/12/14/6 - http://www.openwall.com/lists/oss-security/2015/12/14/17 - http://secli
w.openwall.com/lists/oss-security/2015/12/14/6 - http://www.openwall.com/lists/oss-security/2015/12/14/17 - http://seclists.org/fulldisclosure/2015/Oct/4 - http://www.debian.org/security/2016/dsa-3445 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - https://security.gentoo.org/glsa/201612-05 - https://bitbucket.org/birkenfeld/pygments-main/pull-requests/501/fix-shell-injection-in/diff
CVE ID: CVE-2015-8558 State: PUBLISHED Published: 2016-05-23T19:00:00 Last Updated: 2024-08-06T08:20:43.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/12/14/9 - https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02124.html - http://www.openwall.com/lists/oss-security/2015/12/14/16 - http://www.securityfocus.com/bid/80694 - http://www.debian.o
http://www.openwall.com/lists/oss-security/2015/12/14/16 - http://www.securityfocus.com/bid/80694 - http://www.debian.org/security/2016/dsa-3469 - http://www.debian.org/security/2016/dsa-3470 - https://bugzilla.redhat.com/show_bug.cgi?id=1277983 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=156a2e4dbffa85997636a7a39ef12da6f1b40254 - http://www.debian.org/security/2016/dsa-3471 - https://security.gentoo.org/glsa/201602-01
CVE ID: CVE-2015-8559 State: PUBLISHED Published: 2017-09-21T14:00:00 Last Updated: 2024-08-06T08:20:43.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/12/14/14 - https://github.com/chef/chef/issues/3871 - https://discourse.chef.io/t/chef-infra-client-15-4-45-released/16081 - https://github.com/chef/chef/pull/8885
CVE ID: CVE-2015-8560 State: PUBLISHED Published: 2016-04-14T14:00:00 Last Updated: 2024-08-06T08:20:43.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3419 - http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7419 - http://www.openwall.com/lists/oss-security/2015/12/
xfoundation.org/loggerhead/openprinting/cups-filters/revision/7419 - http://www.openwall.com/lists/oss-security/2015/12/14/13 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.ubuntu.com/usn/USN-2838-1 - http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/annotate/head:/NEWS - http://www.debian.org/security/2015/dsa-3429 - http://www.ubuntu.com/usn/USN-2838-2 - http://www.openwall.com/lists/oss-security/2015/12/13/2 - http://rhn.redhat.com/errata/RHSA-2016-0491.html
CVE ID: CVE-2015-8561 State: PUBLISHED Published: 2015-12-15T02:00:00Z Last Updated: 2024-09-17T02:33:11.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: The F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted integer value to the (1) AttachToSS, (2) CopyAll, (3) CopyRange, (4) CopyRangeEx, or (5) SwapTable method, a different vulnerability than CVE-2015-7918. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-628 - http://www.zerodayinitiative.com/advisories/ZDI-15-626
nces: - http://www.zerodayinitiative.com/advisories/ZDI-15-628 - http://www.zerodayinitiative.com/advisories/ZDI-15-626 - https://ics-cert.us-cert.gov/advisories/ICSA-15-335-02 - http://www.zerodayinitiative.com/advisories/ZDI-15-627 - http://www.zerodayinitiative.com/advisories/ZDI-15-629 - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-329-01
CVE ID: CVE-2015-8562 State: PUBLISHED Published: 2015-12-16T21:00:00 Last Updated: 2024-08-06T08:20:43.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP User-Agent header, as exploited in the wild in December 2015. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/39033/ - http://www.securityfocus.com/archive/1/537219/100/0/threaded - https://www.exploit-db.com/exploits/38977/ - http://packetstormsecurity.com/files/135100/Joomla-3.4.5-Object-Injection.html - http://packetstormsecur
ploits/38977/ - http://packetstormsecurity.com/files/135100/Joomla-3.4.5-Object-Injection.html - http://packetstormsecurity.com/files/134949/Joomla-HTTP-Header-Unauthenticated-Remote-Code-Execution.html - https://developer.joomla.org/security-centre/630-20151214-core-remote-code-execution-vulnerability.html - http://www.securityfocus.com/bid/79195 - http://www.rapid7.com/db/modules/exploit/multi/http/joomla_http_header_rce - https://blog.sucuri.net/2015/12/remote-command-execution-vulnerability-in-joomla.html
CVE ID: CVE-2015-8563 State: PUBLISHED Published: 2015-12-16T21:00:00 Last Updated: 2024-08-06T08:20:43.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the com_templates component in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79199 - https://developer.joomla.org/security-centre/633-20151214-core-csrf-hardening.html
CVE ID: CVE-2015-8564 State: PUBLISHED Published: 2015-12-16T21:00:00 Last Updated: 2024-08-06T08:20:43.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Joomla! 3.4.x before 3.4.6 allows remote attackers to have unspecified impact via directory traversal sequences in the XML install file in an extension package archive. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/634-20151214-core-directory-traversal.html
CVE ID: CVE-2015-8565 State: PUBLISHED Published: 2015-12-16T21:00:00 Last Updated: 2024-08-06T08:20:43.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.6 allows remote attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/635-20151214-core-directory-traversal-2.html
CVE ID: CVE-2015-8566 State: PUBLISHED Published: 2015-12-16T21:00:00 Last Updated: 2024-08-06T08:20:43.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79197 - https://developer.joomla.org/security-centre/637-20151205-session-remote-code-execution-vulnerability.html
CVE ID: CVE-2015-8567 State: PUBLISHED Published: 2017-04-13T17:00:00 Last Updated: 2024-08-06T08:20:43.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption). Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html - http://www.securityfocus.com/bid/79721 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html - http://www.ubuntu.com/usn/USN-2891-1 - http://lists.opensuse.org/opensuse-security-
ity-announce/2016-01/msg00012.html - http://www.ubuntu.com/usn/USN-2891-1 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176558.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175967.html - http://www.openwall.com/lists/oss-security/2015/12/15/10 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html - https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02299.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176300.html - http://www.debian.org/security/2016/dsa-3471 - http://lists.opensuse.org/opensuse-sec
nnounce/2016-January/176300.html - http://www.debian.org/security/2016/dsa-3471 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176503.html - https://security.gentoo.org/glsa/201602-01 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html
CVE ID: CVE-2015-8568 State: PUBLISHED Published: 2017-04-11T19:00:00 Last Updated: 2024-08-06T08:20:43.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cause a denial of service (host memory consumption) by trying to activate the vmxnet3 device repeatedly. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79721 - http://www.openwall.com/lists/oss-security/2015/12/15/10 - https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02299.html - http://www.debian.org/security/2016/dsa-3471 - https://bugzilla.redhat.com/s
ive/html/qemu-devel/2015-12/msg02299.html - http://www.debian.org/security/2016/dsa-3471 - https://bugzilla.redhat.com/show_bug.cgi?id=1289816 - https://security.gentoo.org/glsa/201602-01
CVE ID: CVE-2015-8569 State: PUBLISHED Published: 2015-12-28T11:00:00 Last Updated: 2024-08-06T08:20:43.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel through 4.3.3 do not verify an address length, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/12/15/11 - http://www.ubuntu.com/usn/USN-2886-1 - http://www.ubuntu.com/usn/USN-2890-3 - http://www.securityfocus.com/bid/79428 - ht
ttp://www.ubuntu.com/usn/USN-2886-1 - http://www.ubuntu.com/usn/USN-2890-3 - http://www.securityfocus.com/bid/79428 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=09ccfd238e5a0e670d8178cf50180ea81ae09ae1 - http://twitter.com/grsecurity/statuses/676744240802750464 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html - https://lkml.org/lkml/2015/12/14/252 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.ubuntu.com/usn/USN-2890-2 - https://github.com/torvalds/linux/commit/09ccfd238e5a0e670d8178cf50180ea81ae09ae1 - htt
/www.ubuntu.com/usn/USN-2890-2 - https://github.com/torvalds/linux/commit/09ccfd238e5a0e670d8178cf50180ea81ae09ae1 - http://www.securitytracker.com/id/1034549 - https://bugzilla.redhat.com/show_bug.cgi?id=1292045 - http://www.ubuntu.com/usn/USN-2890-1 - http://www.debian.org/security/2016/dsa-3434 - http://www.ubuntu.com/usn/USN-2888-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html
CVE ID: CVE-2015-8570 State: PUBLISHED Published: 2015-12-15T21:00:00 Last Updated: 2024-08-06T08:20:43.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password reset functionality in Lepide Active Directory Self Service allows remote authenticated users to change arbitrary domain user passwords via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-621 - http://www.securityfocus.com/bid/78729
CVE ID: CVE-2015-8571 State: PUBLISHED Published: 2015-12-15T21:00:00 Last Updated: 2024-08-06T08:20:43.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Autodesk Design Review (ADR) before 2013 Hotfix 2 allows remote attackers to execute arbitrary code via a crafted biClrUsed value in a BMP file, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/79800 - http://www.zerodayinitiative.com/advisories/ZDI-15-617 - https://knowledge.autodesk.com/support/design-review/downloads/caas/downloads/content/autodesk-design-review-2013-hotfix.html
CVE ID: CVE-2015-8572 State: PUBLISHED Published: 2015-12-15T21:00:00Z Last Updated: 2024-09-16T17:28:36.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Autodesk Design Review (ADR) before 2013 Hotfix 2 allow remote attackers to execute arbitrary code via crafted RLE data in a (1) BMP or (2) FLI file, (3) encoded scan lines in a PCX file, or (4) DataSubBlock or (5) GlobalColorTable in a GIF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-615 - http://www.zerodayinitiative.com/advisories/ZDI-15-620 - http://www.zerodayinitiative.com/advisories/ZDI-15-619 - http://www.zerodayi
rodayinitiative.com/advisories/ZDI-15-620 - http://www.zerodayinitiative.com/advisories/ZDI-15-619 - http://www.zerodayinitiative.com/advisories/ZDI-15-618 - http://www.zerodayinitiative.com/advisories/ZDI-15-616 - https://knowledge.autodesk.com/support/design-review/downloads/caas/downloads/content/autodesk-design-review-2013-hotfix.html
CVE ID: CVE-2015-8573 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:30 Description: No description available.
CVE ID: CVE-2015-8574 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:46 Description: No description available.
CVE ID: CVE-2015-8575 State: PUBLISHED Published: 2016-02-08T02:00:00 Last Updated: 2024-08-06T08:20:43.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sco_sock_bind function in net/bluetooth/sco.c in the Linux kernel before 4.3.4 does not verify an address length, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1292840 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.4 - http://www.openwall.com/lists/oss-security/2015/12/16/3 - http://www.ubuntu.com/usn/USN-