Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
enkins.io/changelog-old/ - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769682 - https://issues.jenkins-ci.org/browse/JENKINS-25019 - https://github.com/jenkinsci/jenkins/commit/582128b9ac179a788d43c1478be8a5224dc19710 - http://www.securityfocus.com/bid/72054
CVE ID: CVE-2014-9635 State: PUBLISHED Published: 2017-09-12T14:00:00 Last Updated: 2024-08-06T13:47:41.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.586 does not set the HttpOnly flag in a Set-Cookie header for session cookies when run on Tomcat 7.0.41 or later, which makes it easier for remote attackers to obtain potentially sensitive information via script access to cookies. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/01/22/3 - https://issues.jenkins-ci.org/browse/JENKINS-25019 - https://bugzilla.redhat.com/show_bug.cgi?id=1185151 - https://jenkins.io/changelog-old/ - https://bugs.debia
INS-25019 - https://bugzilla.redhat.com/show_bug.cgi?id=1185151 - https://jenkins.io/changelog-old/ - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769682 - https://github.com/jenkinsci/jenkins/commit/582128b9ac179a788d43c1478be8a5224dc19710 - http://www.securityfocus.com/bid/72054
CVE ID: CVE-2014-9636 State: PUBLISHED Published: 2015-02-06T15:00:00 Last Updated: 2024-08-06T13:47:41.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q4/1131 - http://secunia.com/advisories/62738 - https://security.gentoo.org/glsa/201611-01 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148849.html - http://se
ntoo.org/glsa/201611-01 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148849.html - http://secunia.com/advisories/62751 - http://seclists.org/oss-sec/2015/q1/216 - http://www.securityfocus.com/bid/71825 - http://www.ubuntu.com/usn/USN-2489-1 - http://www.debian.org/security/2015/dsa-3152 - http://seclists.org/oss-sec/2014/q4/489 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148792.html - http://seclists.org/oss-sec/2014/q4/496 - http://www.info-zip.org/phpBB3/viewtopic.php?f=7&t=450
CVE ID: CVE-2014-9637 State: PUBLISHED Published: 2017-08-25T18:00:00 Last Updated: 2024-08-06T13:47:41.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory consumption and segmentation fault) via a crafted diff file. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/?44051 - http://www.openwall.com/lists/oss-security/2015/01/22/7 - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148953.html - http://advisories.mageia.org/MGASA-2015-0068.html - http://www.securityfocus.com/bid/72286 - https://git.savannah.gnu.org/cgit/patch.gi
es.mageia.org/MGASA-2015-0068.html - http://www.securityfocus.com/bid/72286 - https://git.savannah.gnu.org/cgit/patch.git/commit/?id=0c08d7a902c6fdd49b704623a12d8d672ef18944 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154214.html - https://bugzilla.redhat.com/show_bug.cgi?id=1185262 - http://www.ubuntu.com/usn/USN-2651-1
CVE ID: CVE-2014-9638 State: PUBLISHED Published: 2015-01-23T15:00:00 Last Updated: 2024-08-06T13:47:41.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero. Additional Analyst Notes: - CVE Program Container: References: - https://trac.xiph.org/ticket/2137 - http://www.openwall.com/lists/oss-security/2015/01/21/5 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150543.html - http://www.openwall.com/lists/oss-security/2015/01/22/9 - http://lists.opensuse.org/opensuse-updates/2015-03/msg0005
l - http://www.openwall.com/lists/oss-security/2015/01/22/9 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00054.html - http://seclists.org/fulldisclosure/2015/Jan/78 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150570.html - http://www.securityfocus.com/bid/72290
CVE ID: CVE-2014-9639 State: PUBLISHED Published: 2015-01-23T15:00:00 Last Updated: 2024-08-06T13:47:41.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72295 - http://www.openwall.com/lists/oss-security/2015/01/21/5 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150543.html - http://www.openwall.com/lists/oss-security/2015/01/22/9 - http://lists.opensu
ckage-announce/2015-February/150543.html - http://www.openwall.com/lists/oss-security/2015/01/22/9 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00054.html - http://seclists.org/fulldisclosure/2015/Jan/78 - https://trac.xiph.org/ticket/2136 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150570.html
CVE ID: CVE-2014-9640 State: PUBLISHED Published: 2015-01-23T15:00:00 Last Updated: 2024-08-06T13:47:41.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148852.html - http://advisories.mageia.org/MGASA-2015-0051.html - http://www.openwall.com/lists/oss-security/2015/01/21/6 - https://trac.xiph.org/changeset/19117 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00032.html - http://www.openwall.com/lists
h.org/changeset/19117 - http://lists.opensuse.org/opensuse-updates/2015-02/msg00032.html - http://www.openwall.com/lists/oss-security/2015/01/22/9 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:037 - https://trac.xiph.org/ticket/2009
CVE ID: CVE-2014-9641 State: PUBLISHED Published: 2015-02-06T15:00:00 Last Updated: 2024-08-06T13:47:41.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - http://www.greyhathacker.net/?p=818 - http://www.exploit-db.com/exploits/35962 - http://esupport.trendmicro.com/en-us/home/pages/technical-support/1106233.aspx - http://www.osvdb.org/115514
CVE ID: CVE-2014-9642 State: PUBLISHED Published: 2015-02-06T15:00:00 Last Updated: 2024-08-06T13:47:41.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x0022405c IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - http://www.greyhathacker.net/?p=818 - http://www.osvdb.org/114478 - http://www.bullguard.com/about/release-notes.aspx - http://packetstormsecurity.com/files/130247/BullGuard-14.1.285.4-Privilege-Escalation.html - http://www
ase-notes.aspx - http://packetstormsecurity.com/files/130247/BullGuard-14.1.285.4-Privilege-Escalation.html - http://www.exploit-db.com/exploits/35994
CVE ID: CVE-2014-9643 State: PUBLISHED Published: 2015-02-06T15:00:00 Last Updated: 2024-08-06T13:47:41.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950025a8, 0x950025ac, or 0x950025c8 IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - http://www.greyhathacker.net/?p=818 - http://packetstormsecurity.com/files/130246/K7-Computing-14.2.0.240-Privilege-Escalation.html - http://www.osvdb.org/113007 - http://w
tormsecurity.com/files/130246/K7-Computing-14.2.0.240-Privilege-Escalation.html - http://www.osvdb.org/113007 - http://www.exploit-db.com/exploits/35992
CVE ID: CVE-2014-9644 State: PUBLISHED Published: 2015-03-02T11:00:00 Last Updated: 2024-08-06T13:47:41.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a parenthesized module template expression in the salg_name field, as demonstrated by the vfat(aes) expression, a different vulnerability than CVE-2013-7421. Additional Analyst Notes: - CVE Program Container: References: - https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu - http://rhn.redhat.com/errata/RHSA-2016-0068.html - http://www.ubuntu.com/usn/USN-2544-1 - http://www
posts/PqFCo4bfrWu - http://rhn.redhat.com/errata/RHSA-2016-0068.html - http://www.ubuntu.com/usn/USN-2544-1 - http://www.debian.org/security/2015/dsa-3170 - https://bugzilla.redhat.com/show_bug.cgi?id=1190546 - http://www.openwall.com/lists/oss-security/2015/01/24/4 - http://www.ubuntu.com/usn/USN-2546-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.ubuntu.com/usn/USN-2514-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:057 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5 - http://www.mandriva.com/security/advisories?name=MDV
ml - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.5 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:058 - http://www.securityfocus.com/bid/72320 - https://github.com/torvalds/linux/commit/4943ba16bbc2db05115707b3ff7b4874e9e3c560 - http://www.ubuntu.com/usn/USN-2545-1 - http://www.ubuntu.com/usn/USN-2513-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4943ba16bbc2db05115707b3ff7b4874e9e3c560 - http://www.ubuntu.com/usn/USN-2543-1
CVE ID: CVE-2014-9645 State: PUBLISHED Published: 2017-03-12T06:05:00 Last Updated: 2024-08-06T13:47:41.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an "ifconfig /usbserial up" command or a "mount -t /snd_pcm none /" command. Additional Analyst Notes: - CVE Program Container: References: - https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu - https://bugs.busybox.net/show_bug.cgi?id=7652 - http://openwall.com/lists/oss-security/2015/01/24/4 - https://security.g
https://bugs.busybox.net/show_bug.cgi?id=7652 - http://openwall.com/lists/oss-security/2015/01/24/4 - https://security.gentoo.org/glsa/201503-13 - http://www.securityfocus.com/bid/72324 - https://bugzilla.redhat.com/show_bug.cgi?id=1185707 - https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html - http://git.busybox.net/busybox/commit/?id=4e314faa0aecb66717418e9a47a4451aec59262b - https://usn.ubuntu.com/3935-1/ - http://seclists.org/fulldisclosure/2020/Mar/15
CVE ID: CVE-2014-9646 State: PUBLISHED Published: 2015-01-27T11:00:00 Last Updated: 2024-08-06T13:47:41.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in the GoogleChromeDistribution::DoPostUninstallOperations function in installer/util/google_chrome_distribution.cc in the uninstall-survey feature in Google Chrome before 40.0.2214.91 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% directory, as demonstrated by program.exe, a different vulnerability than CVE-2015-1205. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=434964 - htt
l Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=434964 - https://codereview.chromium.org/741993002 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://security.gentoo.org/glsa/glsa-201502-13.xml - https://code.google.com/p/chromium/issues/detail?id=449894
CVE ID: CVE-2014-9647 State: PUBLISHED Published: 2015-01-27T11:00:00 Last Updated: 2024-08-06T13:47:41.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in PDFium, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to fpdfsdk/src/fpdfview.cpp and fpdfsdk/src/fsdk_mgr.cpp, a different vulnerability than CVE-2015-1205. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=410326 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://security
chromium/issues/detail?id=410326 - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://security.gentoo.org/glsa/glsa-201502-13.xml - https://pdfium.googlesource.com/pdfium/+/facd0157ce975158da1659fb58a16c1308bd553b - https://code.google.com/p/chromium/issues/detail?id=449894
CVE ID: CVE-2014-9648 State: PUBLISHED Published: 2015-01-27T11:00:00 Last Updated: 2024-08-06T13:47:41.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: components/navigation_interception/intercept_navigation_resource_throttle.cc in Google Chrome before 40.0.2214.91 on Android does not properly restrict use of intent: URLs to open an application after navigation to a web site, which allows remote attackers to cause a denial of service (loss of browser access to that site) via crafted JavaScript code, as demonstrated by pandora.com and the Pandora application, a different vulnerability than CVE-2015-1205. Additional Analyst Notes: - CVE Program Container: References: - http://g
a different vulnerability than CVE-2015-1205. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/01/stable-update.html - http://security.gentoo.org/glsa/glsa-201502-13.xml - https://code.google.com/p/chromium/issues/detail?id=331571 - https://code.google.com/p/chromium/issues/detail?id=449894
CVE ID: CVE-2014-9649 State: PUBLISHED Published: 2015-01-27T17:00:00 Last Updated: 2024-08-06T13:47:41.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the path info to api/, which is not properly handled in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0308.html - http://www.securityfocus.com/bid/76084 - https://groups.google.com/forum/#%21topic/rabbitmq-users/-3Z2FyGtXhs - http://www.rabbitmq.com/release-notes/README-3.4.1.t
ps://groups.google.com/forum/#%21topic/rabbitmq-users/-3Z2FyGtXhs - http://www.rabbitmq.com/release-notes/README-3.4.1.txt - http://www.openwall.com/lists/oss-security/2015/01/21/13
CVE ID: CVE-2014-9650 State: PUBLISHED Published: 2015-01-27T17:00:00 Last Updated: 2024-08-06T13:47:41.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the download parameter to api/definitions. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0308.html - https://groups.google.com/forum/#%21topic/rabbitmq-users/-3Z2FyGtXhs - http://www.rabbitmq.com/release-notes/README-3.4.1.txt - http://www.securityfocus.com/bid/76091 -
q-users/-3Z2FyGtXhs - http://www.rabbitmq.com/release-notes/README-3.4.1.txt - http://www.securityfocus.com/bid/76091 - http://www.openwall.com/lists/oss-security/2015/01/21/13
CVE ID: CVE-2014-9651 State: PUBLISHED Published: 2015-08-28T20:57:00 Last Updated: 2024-08-06T13:47:41.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CHICKEN 4.9.0.x before 4.9.0.2, 4.9.x before 4.9.1, and before 5.0 allows attackers to have unspecified impact via a positive START argument to the "substring-index[-ci] procedures." Additional Analyst Notes: - CVE Program Container: References: - http://lists.nongnu.org/archive/html/chicken-users/2015-01/msg00048.html - https://security.gentoo.org/glsa/201612-54 - http://www.securityfocus.com/bid/72011 - http://lists.nongnu.org/archive/html/chicken-hackers/2014-12/msg00000.html
CVE ID: CVE-2014-9652 State: PUBLISHED Published: 2015-03-30T10:00:00 Last Updated: 2024-08-06T13:47:41.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mconvert function in softmagic.c in file before 5.21, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not properly handle a certain string-length field during a copy of a truncated version of a Pascal string, which might allow remote attackers to cause a denial of service (out-of-bounds memory access and application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://w
ional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://www.securityfocus.com/bid/72505 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html - https://github.com/file/file/commit/59e63838913eee47f5c120a6c53d4565af638158 - http://php.net/ChangeLog-5.php - http://www.oracle.com/technetwork/topics/security/linuxbulletino
20a6c53d4565af638158 - http://php.net/ChangeLog-5.php - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://support.apple.com/HT205267 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html - https://bugs.php.net/patch-display.php?bug=68735&patch=bug68735.patch&revision=1420309079 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html - http://rhn.redhat.com/errata/RHSA-2015-1135.html - http://bugs.gw.com/view.php?id=398 - https://security.gentoo.org/glsa/201701-42 - http://rhn.redhat.com/errata/RHSA-2015-1053.html - http://openwall.com/lists/oss-security/2015/02/05/12 - http://rhn.redhat.com/errata/RHSA-20
errata/RHSA-2015-1053.html - http://openwall.com/lists/oss-security/2015/02/05/12 - http://rhn.redhat.com/errata/RHSA-2015-1066.html - https://bugs.php.net/bug.php?id=68735
CVE ID: CVE-2014-9653 State: PUBLISHED Published: 2015-03-30T10:00:00 Last Updated: 2024-08-06T13:47:41.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: readelf.c in file before 5.22, as used in the Fileinfo component in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5, does not consider that pread calls sometimes read only a subset of the available data, which allows remote attackers to cause a denial of service (uninitialized memory access) or possibly have unspecified other impact via a crafted ELF file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://www.oracle.com/technetwork/topics/
m Container: References: - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://usn.ubuntu.com/3686-1/ - http://openwall.com/lists/oss-security/2015/02/05/13 - http://www.debian.org/security/2015/dsa-3196 - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://rhn.redhat.com/errata/RHSA-2016-0760.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://php.net/ChangeLog-5.php - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://mx.gw.com/pipermail/file/2014/001649.html - http://bugs.gw.com/view.php?id=409 - https://g
oct2015-2719645.html - http://mx.gw.com/pipermail/file/2014/001649.html - http://bugs.gw.com/view.php?id=409 - https://github.com/file/file/commit/445c8fb0ebff85195be94cd9f7e1df89cade5c7f - http://www.securityfocus.com/bid/72516 - https://security.gentoo.org/glsa/201701-42
CVE ID: CVE-2014-9654 State: PUBLISHED Published: 2017-04-24T06:12:00 Last Updated: 2024-08-06T13:47:41.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring that they can be represented in a 24-bit field, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted string, a related issue to CVE-2014-7923. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.icu-project.org/trac/ticket/11371
14-7923. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.icu-project.org/trac/ticket/11371 - https://chromium.googlesource.com/chromium/deps/icu/+/dd727641e190d60e4593bcb3a35c7f51eb4925c5 - https://code.google.com/p/chromium/issues/detail?id=432209 - http://www.securitytracker.com/id/1035410 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - https://security.gentoo.org/glsa/201503-06 - http://bugs.icu-project.org/trac/changeset/36801 - http://openwall.com/lists/oss-security/2015/02/05/15 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
CVE ID: CVE-2014-9655 State: PUBLISHED Published: 2016-04-13T17:00:00 Last Updated: 2024-08-06T13:47:41.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) putcontig8bitYCbCr21tile function in tif_getimage.c or (2) NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://www.oracle.com/technetwork/topics/security/l
16-3090546.html - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://security.gentoo.org/glsa/201701-16 - http://www.debian.org/security/2015/dsa-3273 - http://rhn.redhat.com/errata/RHSA-2016-1546.html - http://openwall.com/lists/oss-security/2015/02/07/5 - http://www.debian.org/security/2016/dsa-3467