Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-5493 State: PUBLISHED Published: 2017-01-15T02:00:00 Last Updated: 2024-08-05T15:04:14.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random numbers for keys, which makes it easier for remote attackers to bypass intended access restrictions via a crafted (1) site signup or (2) user signup. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8721 - http://www.securityfocus.com/bid/95401 - http://www.debian.org/security/2017/dsa-3779 - https://codex.wordpress.org/Version_4.7.1 - http://www.openwall.com
401 - http://www.debian.org/security/2017/dsa-3779 - https://codex.wordpress.org/Version_4.7.1 - http://www.openwall.com/lists/oss-security/2017/01/14/6 - http://www.securitytracker.com/id/1037591 - https://github.com/WordPress/WordPress/commit/cea9e2dc62abf777e06b12ec4ad9d1aaa49b29f4 - https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/
CVE ID: CVE-2017-5494 State: PUBLISHED Published: 2017-01-15T22:00:00 Last Updated: 2024-08-05T15:04:14.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a (1) comment frame or (2) avatar frame. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/b2evolution/b2evolution/issues/34 - https://github.com/b2evolution/b2evolution/commit/261dbd5b294e707af766691e65a177a290314a6e - http://www.securityfocus.com/bid/95452
CVE ID: CVE-2017-5495 State: PUBLISHED Published: 2017-01-24T07:40:00 Last Updated: 2024-08-05T15:04:14.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of-Service of Quagga daemons, or even the entire host. When Quagga daemons are configured with their telnet CLI enabled, anyone who can connect to the TCP ports can trigger this vulnerability, prior to authentication. Most distributions restrict the Quagga telnet interface to local access only by default. The Quagga telnet interface 'vty' input buffer grows automatically, without bound, so l
to local access only by default. The Quagga telnet interface 'vty' input buffer grows automatically, without bound, so long as a newline is not entered. This allows an attacker to cause the Quagga daemon to allocate unbounded memory by sending very long strings without a newline. Eventually the daemon is terminated by the system, or the system itself runs out of memory. This is fixed in Quagga 1.1.1 and Free Range Routing (FRR) Protocol Suite 2017-01-10. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0794.html - http://savannah.nongnu.org/forum/forum.php?forum_id=8783 - https://github.com/freerangerouting/frr/pull/63 - http://www.secur
//savannah.nongnu.org/forum/forum.php?forum_id=8783 - https://github.com/freerangerouting/frr/pull/63 - http://www.securitytracker.com/id/1037688 - https://lists.quagga.net/pipermail/quagga-dev/2017-January/016586.html - http://www.securityfocus.com/bid/95745
CVE ID: CVE-2017-5496 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-05T15:04:14.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/41395/ - http://packetstormsecurity.com/files/141177/Sawmill-Enterprise-8.7.9-Authentication-Bypass.html - http://seclists.org/fulldisclosure/2017/Feb/46 - http://hyp3rlinx.altervista.org/advisories/SAWMILL-PASS-THE-HASH-AUTHENTICATION-BYPASS.txt
CVE ID: CVE-2017-5498 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:04:14.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/ - http://www.securityfocus.com/bid/95666
CVE ID: CVE-2017-5499 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:04:15.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/ - http://www.securityfocus.com/bid/95666 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
CVE ID: CVE-2017-5500 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:04:14.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/ - http://www.securityfocus.com/bid/95666
CVE ID: CVE-2017-5501 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:04:15.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in libjasper/jpc/jpc_tsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/ - http://www.securityfocus.com/bid/95666
CVE ID: CVE-2017-5502 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:04:14.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: libjasper/jp2/jp2_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors involving left shift of a negative value. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/16/jasper-multiple-crashes-with-ubsan/ - http://www.securityfocus.com/bid/95666
CVE ID: CVE-2017-5503 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:04:14.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/16/jasper-invalid-memory-write-in-dec_clnpass-jpc_t1dec-c/ - http://www.securityfocus.com/bid/95683 - http://www.openwall.com/lists/oss-security/2017/01/17/10 - http://www.openwall.com/lists/oss-security/2017
m/bid/95683 - http://www.openwall.com/lists/oss-security/2017/01/17/10 - http://www.openwall.com/lists/oss-security/2017/01/16/3 - https://security.gentoo.org/glsa/201908-03 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
CVE ID: CVE-2017-5504 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:04:14.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/16/jasper-invalid-memory-read-in-jpc_undo_roi-jpc_dec-c/ - http://www.securityfocus.com/bid/95682 - https://security.gentoo.org/glsa/201908-03 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html - http://lists.opensuse.org/open
/201908-03 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
CVE ID: CVE-2017-5505 State: PUBLISHED Published: 2017-03-16T15:00:00 Last Updated: 2024-08-05T15:04:14.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/17/4 - https://blogs.gentoo.org/ago/2017/01/16/jasper-invalid-memory-read-in-jas_matrix_asl-jas_seq-c/ - http://www.securityfocus.com/bid/95687 - http://www.openwall.com/lists/oss-security/2017/01/16/5 - https://security.gentoo.org/glsa/201908-03 - h
com/bid/95687 - http://www.openwall.com/lists/oss-security/2017/01/16/5 - https://security.gentoo.org/glsa/201908-03 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
CVE ID: CVE-2017-5506 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T15:04:15.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/16/6 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851383 - https://security.gentoo.org/glsa/201702-09 - https://github.com/ImageMagick/ImageMagick/issues/354 - http://www.securityfocus.com/bid/95753 - http://www.debian.org/security/2017/dsa-3799 - http://www.openwall.com/lists
- http://www.securityfocus.com/bid/95753 - http://www.debian.org/security/2017/dsa-3799 - http://www.openwall.com/lists/oss-security/2017/01/17/5 - https://github.com/ImageMagick/ImageMagick/commit/9a069e0f2e027ec5138f998023cf9cb62c04889f
CVE ID: CVE-2017-5507 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T15:04:15.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service (memory consumption) via vectors involving a pixel cache. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/16/6 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851382 - https://security.gentoo.org/glsa/201702-09 - https://github.com/ImageMagick/ImageMagick/blob/7.0.4-4/ChangeLog - http://www.debian.org/security/2017/dsa-3799
2-09 - https://github.com/ImageMagick/ImageMagick/blob/7.0.4-4/ChangeLog - http://www.debian.org/security/2017/dsa-3799 - https://github.com/ImageMagick/ImageMagick/blob/6.9.7-4/ChangeLog - http://www.openwall.com/lists/oss-security/2017/01/17/5 - http://www.securityfocus.com/bid/95752 - https://github.com/ImageMagick/ImageMagick/commit/66e283e0a9c141b19fe6c4c39f4a41c0d3188ba8
CVE ID: CVE-2017-5508 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T15:04:14.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/16/6 - https://github.com/ImageMagick/ImageMagick/blob/6.9.7-3/ChangeLog - https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=31161 - https://security.gentoo.org/glsa/201702-09 - http://www.d
w.imagemagick.org/discourse-server/viewtopic.php?f=3&t=31161 - https://security.gentoo.org/glsa/201702-09 - http://www.debian.org/security/2017/dsa-3799 - https://github.com/ImageMagick/ImageMagick/commit/c073a7712d82476b5fbee74856c46b88af9c3175 - http://www.securityfocus.com/bid/95748 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851381 - http://www.openwall.com/lists/oss-security/2017/01/17/5 - https://github.com/ImageMagick/ImageMagick/blob/7.0.4-3/ChangeLog
CVE ID: CVE-2017-5509 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T15:04:14.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/16/6 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851377 - https://security.gentoo.org/glsa/201702-09 - https://github.com/ImageMagick/ImageMagick/commit/37a1710e2dab6ed91128ea648d654a22fbe2a6af - https://github.com/ImageMagick/ImageMagick/commit/d4ec73f866a7c42a2e7f
commit/37a1710e2dab6ed91128ea648d654a22fbe2a6af - https://github.com/ImageMagick/ImageMagick/commit/d4ec73f866a7c42a2e7f301fcd696e5cb7a7d3ab - https://github.com/ImageMagick/ImageMagick/issues/350 - http://www.securityfocus.com/bid/95751 - http://www.openwall.com/lists/oss-security/2017/01/17/5
CVE ID: CVE-2017-5510 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T15:04:15.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/16/6 - https://github.com/ImageMagick/ImageMagick/commit/91cc3f36f2ccbd485a0456bab9aebe63b635da88 - http://www.securityfocus.com/bid/95755 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851376 - https://security.gentoo.org/glsa/201702-09 - https://github.com/ImageMagic
debian.org/cgi-bin/bugreport.cgi?bug=851376 - https://security.gentoo.org/glsa/201702-09 - https://github.com/ImageMagick/ImageMagick/issues/348 - https://github.com/ImageMagick/ImageMagick/commit/e87af64b1ff1635a32d9b6162f1b0e260fb54ed9 - http://www.debian.org/security/2017/dsa-3799 - http://www.openwall.com/lists/oss-security/2017/01/17/5
CVE ID: CVE-2017-5511 State: PUBLISHED Published: 2017-03-24T15:00:00 Last Updated: 2024-08-05T15:04:15.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/c8c6a0f123d5e35c173125365c97e2c0fc7eca42 - http://www.openwall.com/lists/oss-security/2017/01/16/6 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=851374 - https://security.gentoo.org/glsa/201702-09 - http://www.securityfocus.com/bid/95746 - http://www.debi
t.cgi?bug=851374 - https://security.gentoo.org/glsa/201702-09 - http://www.securityfocus.com/bid/95746 - http://www.debian.org/security/2017/dsa-3799 - https://github.com/ImageMagick/ImageMagick/issues/347 - http://www.openwall.com/lists/oss-security/2017/01/17/5 - https://github.com/ImageMagick/ImageMagick/commit/7d65a814ac76bd04760072c33e452371692ee790
CVE ID: CVE-2017-5515 State: PUBLISHED Published: 2017-01-17T09:22:00 Last Updated: 2024-08-05T15:04:15.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary web script or HTML via tag names. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/semplon/GeniXCMS/issues/63 - http://www.securityfocus.com/bid/95623
CVE ID: CVE-2017-5516 State: PUBLISHED Published: 2017-01-17T09:22:00 Last Updated: 2024-08-05T15:04:14.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers to inject arbitrary web script or HTML via crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/semplon/GeniXCMS/issues/65 - http://www.securityfocus.com/bid/95622
CVE ID: CVE-2017-5517 State: PUBLISHED Published: 2017-01-17T09:22:00 Last Updated: 2024-08-05T15:04:15.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the type parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/semplon/GeniXCMS/issues/66 - http://www.securityfocus.com/bid/95455
CVE ID: CVE-2017-5518 State: PUBLISHED Published: 2017-01-17T09:22:00 Last Updated: 2024-08-05T15:04:14.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an intranet IP address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95462 - https://github.com/semplon/GeniXCMS/issues/64
CVE ID: CVE-2017-5519 State: PUBLISHED Published: 2017-01-17T09:22:00 Last Updated: 2024-08-05T15:04:15.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95458 - https://github.com/semplon/GeniXCMS/issues/67
CVE ID: CVE-2017-5520 State: PUBLISHED Published: 2017-01-17T09:22:00 Last Updated: 2024-08-05T15:04:14.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files with the `.php6`, `.php7` and `.phtml` extensions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95460 - https://github.com/semplon/GeniXCMS/issues/62
CVE ID: CVE-2017-5521 State: PUBLISHED Published: 2017-01-17T09:22:00.000Z Last Updated: 2025-10-21T23:55:47.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password disclosure via simple crafted requests to the web management server. The bug is exploitable remotely if the remote management option is set, and can also be exploited given access to the router over LAN or WLAN. When trying to access the web panel, a user is asked to authenticate; if the authentication is canceled and password recovery is not ena
ccess the web panel, a user is asked to authenticate; if the authentication is canceled and password recovery is not enabled, the user is redirected to a page that exposes a password recovery token. If a user supplies the correct token to the page /passwordrecovered.cgi?id=TOKEN (and password recovery is not enabled), they will receive the admin password for the router. If password recovery is set the exploit will fail, as it will ask the user for the recovery questions that were previously set when enabling that feature. This is persistent (even after disabling the recovery option, the exploit will fail) because the router will ask for the security questions. Additional Analyst Notes: - CVE
y option, the exploit will fail) because the router will ask for the security questions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/41205/ - http://kb.netgear.com/30632/Web-GUI-Password-Recovery-and-Exposure-Security-Vulnerability - http://www.securityfocus.com/bid/95457
CVE ID: CVE-2017-5522 State: PUBLISHED Published: 2017-03-15T16:00:00 Last Updated: 2024-08-05T15:04:14.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving WFS get feature requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mapserver/mapserver/commit/e52a436c0e1c5e9f7ef13428dba83194a800f4df - http://www.mapserver.org/development/changelog/changelog-6-4.html#changelog-6-4-5 - http://www.mapserver.org/development/chan
//www.mapserver.org/development/changelog/changelog-6-4.html#changelog-6-4-5 - http://www.mapserver.org/development/changelog/changelog-6-0-6.html#changelog-6-0-6 - https://lists.osgeo.org/pipermail/mapserver-dev/2017-January/015007.html - http://www.mapserver.org/development/changelog/changelog-7-0.html#changelog-7-0-4 - http://www.debian.org/security/2017/dsa-3766 - http://www.mapserver.org/development/changelog/changelog-6-2-4.html#changelog-6-2-4
CVE ID: CVE-2017-5524 State: PUBLISHED Published: 2017-03-23T16:00:00 Last Updated: 2024-08-05T15:04:15.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging the Python string format method. Additional Analyst Notes: - CVE Program Container: References: - https://plone.org/security/hotfix/20170117/sandbox-escape - http://www.securityfocus.com/bid/95679 - http://www.openwall.com/lists/oss-security/2017/01/18/6
CVE ID: CVE-2017-5525 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-05T15:04:15.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/18/7 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://security.gentoo.org/glsa/201702-28 - http://www.securityfocus.com/bid/95671 - http://git.qemu-project.org/?
ml - https://security.gentoo.org/glsa/201702-28 - http://www.securityfocus.com/bid/95671 - http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=12351a91da97b414eec8cdb09f1d9f41e535a401 - http://www.openwall.com/lists/oss-security/2017/01/17/19
CVE ID: CVE-2017-5526 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-05T15:04:15.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=069eb7b2b8fc47c7cb52e5a4af23ea98d939e3da - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://www.openwall.com/lists/oss-security/2017/01/18/8 - http://www.secu
rg/debian-lts-announce/2018/09/msg00007.html - http://www.openwall.com/lists/oss-security/2017/01/18/8 - http://www.securityfocus.com/bid/95669 - http://www.openwall.com/lists/oss-security/2017/01/18/1