Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176373.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html - http://www.securitytracker.com/id/1034849 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - http://www.oracle.com/technetwork/sec
849 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.openssl.org/news/secadv/20160128.txt - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390893 - https://security.gentoo.org/glsa/201601-05 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html - https://h20566.www2.hpe.com/hpsc/doc/public/
ttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03724en_us - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.securityfocus.com/bid/91787 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html - https://www.kb.cert.org/vuls/id/257823 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://lists.opensuse.org/opensuse-security-annou
.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://www.securityfocus.com/bid/82237 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:11.op
//kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:11.openssl.asc - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=d81a1600588b726c2bdccda7efad3cc7a87d6245 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-3198 State: PUBLISHED Published: 2017-07-21T14:00:00 Last Updated: 2024-08-06T05:39:31.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Undertow module of WildFly 9.x before 9.0.0.CR2 and 10.x before 10.0.0.Alpha1 allows remote attackers to obtain the source code of a JSP page via a "/" at the end of a URL. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1224787 - https://stackoverflow.com/questions/30028346/with-trailing-slash-in-url-jsp-show-source-code - https://issues.jboss.org/browse/WFLY-4595 - https://developer.jboss.org/message/927301#927301
CVE ID: CVE-2015-3199 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2015-3200 State: PUBLISHED Published: 2015-06-09T14:00:00 Last Updated: 2024-08-06T05:39:31.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authentication string without a colon character, as demonstrated by a string containing a NULL and new line character. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74813 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375 - http://redmine.lighttpd.net/issues/2646 - http://www.securitytracker.com/id/1032405 - http://lists.fedorapro
c05247375 - http://redmine.lighttpd.net/issues/2646 - http://www.securitytracker.com/id/1032405 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163223.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163286.html - http://jaanuskp.blogspot.com/2015/05/cve-2015-3200.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10310
CVE ID: CVE-2015-3201 State: PUBLISHED Published: 2015-06-08T14:00:00 Last Updated: 2024-08-06T05:39:32.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which allows local users to obtain user credentials by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159788.html - http://icedtea.classpath.org/hg/thermostat/rev/c2f18f81f57a - http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2372 - http://rhn.redhat.com/errata/RHSA-2015-1052.html - http://www.securityfocus.com/bid/75066 - http:
show_bug.cgi?id=2372 - http://rhn.redhat.com/errata/RHSA-2015-1052.html - http://www.securityfocus.com/bid/75066 - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159958.html
CVE ID: CVE-2015-3202 State: PUBLISHED Published: 2015-07-02T21:16:00 Last Updated: 2024-08-06T05:39:31.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3268 - http://www.ubuntu.com/usn/USN-2617-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159543.html - http://lists.fedoraproject.org
617-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159543.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160094.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159831.html - http://www.securitytracker.com/id/1032386 - https://gist.github.com/taviso/ecb70eb12d461dd85cba - http://www.securityfocus.com/bid/74765 - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159298.html - http://lists.opensuse.org/opensuse-updates/2015-06/msg00007.html - http://www.debian.org/security/2015/dsa-3266 - https://security.gentoo.org/glsa/201603-04 - http://www.ubuntu.com/usn/USN-2617-2 - http://lists.fedoraproject.
a-3266 - https://security.gentoo.org/glsa/201603-04 - http://www.ubuntu.com/usn/USN-2617-2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160106.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159683.html - https://security.gentoo.org/glsa/201701-19 - http://www.openwall.com/lists/oss-security/2015/05/21/9 - http://lists.opensuse.org/opensuse-updates/2015-06/msg00005.html - http://packetstormsecurity.com/files/132021/Fuse-Local-Privilege-Escalation.html - https://twitter.com/taviso/status/601370527437967360 - https://www.exploit-db.com/exploits/37089/ - http://www.ubuntu.com/usn/USN-2617-3
CVE ID: CVE-2015-3203 State: PUBLISHED Published: 2015-09-28T16:00:00 Last Updated: 2024-08-06T05:39:32.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the href parameter. Additional Analyst Notes: - CVE Program Container: References: - https://larsjung.de/h5ai/cve-2015-3203.txt - https://www.exploit-db.com/exploits/38256/
CVE ID: CVE-2015-3204 State: PUBLISHED Published: 2015-07-01T14:00:00 Last Updated: 2024-08-06T05:39:31.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: libreswan 3.9 through 3.12 allows remote attackers to cause a denial of service (daemon restart) via an IKEv1 packet with (1) unassigned bits set in the IPSEC DOI value or (2) the next payload value set to ISAKMP_NEXT_SAK. Additional Analyst Notes: - CVE Program Container: References: - https://libreswan.org/security/CVE-2015-3204/CVE-2015-3204.txt - http://rhn.redhat.com/errata/RHSA-2015-1154.html - https://security.gentoo.org/glsa/201603-13 - http://www.securityfocus.com/bid/75392
CVE ID: CVE-2015-3205 State: PUBLISHED Published: 2015-06-16T16:00:00 Last Updated: 2024-08-06T05:39:32.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file, related to "free" function calls in the "lexer's memory clean-up procedure." Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132257/Libmimedir-VCF-Memory-Corruption-Proof-Of-Concept.html - https://www.exploit-db.com/exploits/37249/ - http://www.securityfocus.com/bid/75147
CVE ID: CVE-2015-3206 State: PUBLISHED Published: 2017-08-25T18:00:00 Last Updated: 2024-08-06T05:39:32.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other unspecified impact by performing a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/05/21/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1223802 - https://pypi.python.org/pypi/kerberos - http://www.securityfocus.com/bid/74760 - https://github.
ow_bug.cgi?id=1223802 - https://pypi.python.org/pypi/kerberos - http://www.securityfocus.com/bid/74760 - https://github.com/apple/ccs-pykerberos/issues/31
CVE ID: CVE-2015-3207 State: PUBLISHED Published: 2022-07-07T12:25:43 Last Updated: 2024-08-06T05:39:31.989Z Vendors: n/a Products: Openshift Origin Problem Types: CWE-614 Description: In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1221882 - https://github.com/openshift/origin/pull/2261 - https://github.com/openshift/origin/pull/2291
CVE ID: CVE-2015-3208 State: REJECTED Published: 2017-07-25T18:00:00.000Z Last Updated: 2025-02-13T15:46:11.011Z Description: No description available.
CVE ID: CVE-2015-3209 State: PUBLISHED Published: 2015-06-15T15:00:00 Last Updated: 2024-08-06T05:39:31.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2630-1 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00027.html - http://rhn.redhat.com/errata/RHSA-2015-1087.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00015.html - https://
t.com/errata/RHSA-2015-1087.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00015.html - https://kb.juniper.net/JSA10783 - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160669.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 - http://www.debian.org/security/2015/dsa-3286 - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160677.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html - http://rhn.redhat.com/errata/RHSA-2015-1088.html - http://rhn.redhat.com/errata/RHSA-2015-1089.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html - https://security.gent
RHSA-2015-1089.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html - https://security.gentoo.org/glsa/201510-02 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00014.html - http://www.debian.org/security/2015/dsa-3284 - http://www.securityfocus.com/bid/75123 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html - http://www.securitytracker.com/id/1032545 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html - http://xenbits.xen.org/xsa/advisory-135.html - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.html - https://security.gentoo.org/glsa/201604-03 - http://rhn.redhat.com/er
opensuse-security-announce/2015-08/msg00020.html - https://security.gentoo.org/glsa/201604-03 - http://rhn.redhat.com/errata/RHSA-2015-1189.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html - http://www.debian.org/security/2015/dsa-3285 - https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13
CVE ID: CVE-2015-3210 State: PUBLISHED Published: 2016-12-13T16:00:00 Last Updated: 2024-08-06T05:39:31.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by /^(?P=B)((?P=B)(?J:(?P<B>c)(?P<B>a(?P=B)))>WGXCREDITS)/, a different vulnerability than CVE-2015-8384. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1132 - http://www.securityfocus.com/bid/74934 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.openwall.com/lists/oss-security/2015/06
us.com/bid/74934 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.openwall.com/lists/oss-security/2015/06/01/7 - http://www.openwall.com/lists/oss-security/2015/12/02/11 - https://bugs.exim.org/show_bug.cgi?id=1636
CVE ID: CVE-2015-3211 State: PUBLISHED Published: 2017-08-25T18:00:00 Last Updated: 2024-08-06T05:39:31.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: php-fpm allows local users to write to or create arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1228721
CVE ID: CVE-2015-3212 State: PUBLISHED Published: 2015-08-31T10:00:00 Last Updated: 2024-08-06T05:39:32.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in net/sctp/socket.c in the Linux kernel before 4.1.2 allows local users to cause a denial of service (list corruption and panic) via a rapid series of system calls related to sockets, as demonstrated by setsockopt calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2717-1 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.2 - http://www.ubuntu.com/usn/USN-2713-1 - http://www.ubuntu.com/usn/USN-2718-1 - http://rhn.redhat.com/errata/RHSA-2015-1778.html -
w.ubuntu.com/usn/USN-2713-1 - http://www.ubuntu.com/usn/USN-2718-1 - http://rhn.redhat.com/errata/RHSA-2015-1778.html - http://www.ubuntu.com/usn/USN-2714-1 - http://www.securitytracker.com/id/1033169 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html - http://www.debian.org/security/2015/dsa-3329 - http://rhn.redhat.com/errata/RHSA-2015-1787.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html - https://bugzilla.redhat.com/show_bug.cgi?id=1226442 - https://github.com/torvalds/linux/commit/2d45a02d0166caf2627fe91897c6ffc3b19514c4 - http://www.securityfo
i?id=1226442 - https://github.com/torvalds/linux/commit/2d45a02d0166caf2627fe91897c6ffc3b19514c4 - http://www.securityfocus.com/bid/76082 - http://www.ubuntu.com/usn/USN-2716-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2d45a02d0166caf2627fe91897c6ffc3b19514c4 - http://www.ubuntu.com/usn/USN-2719-1 - http://www.ubuntu.com/usn/USN-2715-1 - https://support.f5.com/csp/article/K05211147
CVE ID: CVE-2015-3213 State: PUBLISHED Published: 2015-08-12T14:00:00 Last Updated: 2024-08-06T05:39:31.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gesture handling code in Clutter before 1.16.2 allows physically proximate attackers to bypass the lock screen via certain (1) mouse or (2) touch gestures. Additional Analyst Notes: - CVE Program Container: References: - https://git.gnome.org/browse/clutter/commit/?h=clutter-1.18&id=97724939c8de004d7fa230f3ff64862d957f93a9 - https://bugzilla.redhat.com/show_bug.cgi?id=1227098 - http://rhn.redhat.com/errata/RHSA-2015-1510.html - https://bugzilla.gnome.org/show_bug.cgi?id=710227 - https://bugzilla.gnome.org/show_bug.cgi?id=7
a/RHSA-2015-1510.html - https://bugzilla.gnome.org/show_bug.cgi?id=710227 - https://bugzilla.gnome.org/show_bug.cgi?id=749847
CVE ID: CVE-2015-3214 State: PUBLISHED Published: 2015-08-31T10:00:00 Last Updated: 2024-08-06T05:39:31.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/product_security/qemu - https://bugzilla.redhat.com/show_bug.cgi?id=1229640 - https://support.lenovo.com/us/en/product_security/qemu - https://www.exploit-db.com/exploits/37990/ -
g.cgi?id=1229640 - https://support.lenovo.com/us/en/product_security/qemu - https://www.exploit-db.com/exploits/37990/ - https://security.gentoo.org/glsa/201510-02 - https://github.com/torvalds/linux/commit/ee73f656a604d5aa9df86a97102e4e462dd79924 - http://www.debian.org/security/2015/dsa-3348 - http://rhn.redhat.com/errata/RHSA-2015-1508.html - http://rhn.redhat.com/errata/RHSA-2015-1507.html - http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ee73f656a604d5aa9df86a97102e4e462dd79924 - http://rhn.redhat.com/errata/RHSA-2015-1512.html - http://www.securitytracker.com/id/1032598 - http://www.securityfocus.
http://rhn.redhat.com/errata/RHSA-2015-1512.html - http://www.securitytracker.com/id/1032598 - http://www.securityfocus.com/bid/75273 - http://www.openwall.com/lists/oss-security/2015/06/25/7 - https://www.mail-archive.com/qemu-devel%40nongnu.org/msg304138.html - https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13
CVE ID: CVE-2015-3215 State: PUBLISHED Published: 2017-06-26T15:00:00 Last Updated: 2024-08-06T05:39:32.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted length value in an IP packet, as demonstrated by a value that does not account for the size of the IP options. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1044.html - https://www.redhat.com/security/data/cve/CVE-2015-3215.html - http://rhn.redhat.com/errata/RHSA-2015-1043.html - https://github.com/YanVugenfirer/kvm-guest-drivers-windows/commit/fbfa4d1083ea
n.redhat.com/errata/RHSA-2015-1043.html - https://github.com/YanVugenfirer/kvm-guest-drivers-windows/commit/fbfa4d1083ea84c5429992ca3e996d7d4fbc8238 - https://github.com/YanVugenfirer/kvm-guest-drivers-windows/commit/723416fa4210b7464b28eab89cc76252e6193ac1
CVE ID: CVE-2015-3216 State: PUBLISHED Published: 2015-07-07T10:00:00 Last Updated: 2024-08-06T05:39:32.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in openssl-1.0.1e-25.el7 in Red Hat Enterprise Linux (RHEL) 7 and other products, allows remote attackers to cause a denial of service (application crash) by establishing many TLS sessions to a multithreaded server, leading to use of a negative value for a certain length field. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/
. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html - http://www.securitytracker.com/id/1032587 - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html - http://rhn.redhat.com/errata/RHSA-2015-1115.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html - http://www.securityfocus.com/bid/75219 - https://bugzilla.redhat.com/show_bug.cgi?id=1225994 - http://rhn.redhat.com/errata/RHSA-2016-2957.html - http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html
CVE ID: CVE-2015-3217 State: PUBLISHED Published: 2016-12-13T16:00:00 Last Updated: 2024-08-06T05:39:31.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\.|([^\\\\W_])?)+)+$/. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1132 - http://vcs.pcre.org/pcre?view=revision&revision=1566 - https://bugs.exim.org/show_bug.cgi?id=1638 - http://www.oracle.com/technetwork/topics/security/linuxbu
n&revision=1566 - https://bugs.exim.org/show_bug.cgi?id=1638 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.openwall.com/lists/oss-security/2015/06/03/7 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886 - http://rhn.redhat.com/errata/RHSA-2016-1025.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - https://bugzilla.redhat.com/show_bug.cgi?id=1228283 - http://www.securityfocus.com/bid/75018
CVE ID: CVE-2015-3218 State: PUBLISHED Published: 2015-10-26T19:00:00 Last Updated: 2024-08-06T05:39:31.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authentication_agent_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (NULL pointer dereference and polkitd daemon crash) by calling RegisterAuthenticationAgent with an invalid object path. Additional Analyst Notes: - CVE Program Container: References: - http://lists.freedesktop.org/archives/polkit-devel/2015-May/000420.html - https://usn.ubuntu.com/3717-1/ - http://lists.fedoraproject.org/pipermail/package-announce/2015
l/2015-May/000420.html - https://usn.ubuntu.com/3717-1/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161721.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00042.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162294.html - http://lists.freedesktop.org/archives/polkit-devel/2015-July/000432.html - http://www.securityfocus.com/bid/76086 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00010.html - http://www.securitytracker.com/id/1035023 - http://lists.freedesktop.org/archives/polkit-devel/2015-May/000421.html