Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-7404 State: PUBLISHED Published: 2019-06-21T13:17:11 Last Updated: 2024-08-06T01:57:47.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Magnum passes OpenStack credentials into the Heat templates creating its instances. While these should just be used for retrieving the instances' SSL certificates, they allow full API access, though and can be used to perform any API operation the user is authorized to perform. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/magnum/+bug/1620536 - https://bugzilla.suse.com/show_bug.cgi?id=998182 - https://www.securityfocus.com/bid/98467 - https://opendev.org/openstack/magnum
ugzilla.suse.com/show_bug.cgi?id=998182 - https://www.securityfocus.com/bid/98467 - https://opendev.org/openstack/magnum/commit/0bb0d6486d6771ee21bbf897a091b1aa59e01b22
CVE ID: CVE-2016-7405 State: PUBLISHED Published: 2016-10-03T18:00:00 Last Updated: 2024-08-06T01:57:47.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qstr method in the PDO driver in the ADOdb Library for PHP before 5.x before 5.20.7 might allow remote attackers to conduct SQL injection attacks via vectors related to incorrect quoting. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LT3WU77BRUJREZUYQ3ZQBMUIVIVIND4Y/ - http://www.openwall.com/lists/oss-security/2016/09/07/8 - http://www.securityfocus.com/bid/92969 - https://github.com/ADOdb/ADOdb/issues/226 -
m/lists/oss-security/2016/09/07/8 - http://www.securityfocus.com/bid/92969 - https://github.com/ADOdb/ADOdb/issues/226 - https://security.gentoo.org/glsa/201701-59 - http://www.openwall.com/lists/oss-security/2016/09/15/1 - https://github.com/ADOdb/ADOdb/blob/v5.20.7/docs/changelog.md - https://github.com/ADOdb/ADOdb/commit/bd9eca9f40220f9918ec3cc7ae9ef422b3e448b8
CVE ID: CVE-2016-7406 State: PUBLISHED Published: 2017-03-03T16:00:00.000Z Last Updated: 2025-11-04T16:09:09.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the (1) username or (2) host argument. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-23 - http://www.securityfocus.com/bid/92974 - http://www.openwall.com/lists/oss-security/2016/09/15/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1376353 - https://secure.ucc.asn.au/hg/dropbear/rev/b66a483f3dcb
CVE ID: CVE-2016-7407 State: PUBLISHED Published: 2017-03-03T16:00:00 Last Updated: 2024-08-06T01:57:47.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dropbearconvert command in Dropbear SSH before 2016.74 allows attackers to execute arbitrary code via a crafted OpenSSH key file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-23 - https://secure.ucc.asn.au/hg/dropbear/rev/34e6127ef02e - http://www.openwall.com/lists/oss-security/2016/09/15/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1376353 - http://www.securityfocus.com/bid/92972
CVE ID: CVE-2016-7408 State: PUBLISHED Published: 2017-03-03T16:00:00 Last Updated: 2024-08-06T01:57:47.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dbclient in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via a crafted (1) -m or (2) -c argument. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-23 - http://www.securityfocus.com/bid/92970 - http://www.openwall.com/lists/oss-security/2016/09/15/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1376353 - https://secure.ucc.asn.au/hg/dropbear/rev/eed9376a4ad6
CVE ID: CVE-2016-7409 State: PUBLISHED Published: 2017-03-03T16:00:00 Last Updated: 2024-08-06T01:57:47.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows local users to read process memory via the -v argument, related to a failed remote ident. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-23 - https://secure.ucc.asn.au/hg/dropbear/rev/6a14b1f6dc04 - http://www.openwall.com/lists/oss-security/2016/09/15/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1376353 - http://www.securityfocus.com/bid/92973
CVE ID: CVE-2016-7410 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:57:47.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _dwarf_read_loc_section function in dwarf_loc.c in libdwarf 20160613 allows attackers to cause a denial of service (buffer over-read) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/13/5 - http://www.openwall.com/lists/oss-security/2016/09/15/3 - http://www.securityfocus.com/bid/92971
CVE ID: CVE-2016-7411 State: PUBLISHED Published: 2016-09-17T21:00:00 Last Updated: 2024-08-06T01:57:47.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an unserialize call that references a partially constructed object. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036836 - https://bugs.php.net/bug.php?id=73052 - http://www.openwall.com/lists/oss-security/2016
securitytracker.com/id/1036836 - https://bugs.php.net/bug.php?id=73052 - http://www.openwall.com/lists/oss-security/2016/09/15/10 - https://github.com/php/php-src/commit/6a7cc8ff85827fa9ac715b3a83c2d9147f33cd43?w=1 - http://www.php.net/ChangeLog-5.php - http://www.securityfocus.com/bid/93009
CVE ID: CVE-2016-7412 State: PUBLISHED Published: 2016-09-17T21:00:00 Last Updated: 2024-08-06T01:57:47.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the UNSIGNED_FLAG flag, which allows remote MySQL servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted field metadata. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php/php-src/commit/28f80baf3c53e267c9ce46a2a0fadbb981585132?w=1 - http://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 -
3c53e267c9ce46a2a0fadbb981585132?w=1 - http://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036836 - https://bugs.php.net/bug.php?id=72293 - http://www.openwall.com/lists/oss-security/2016/09/15/10 - https://access.redhat.com/errata/RHSA-2018:1296 - http://www.php.net/ChangeLog-5.php - https://www.tenable.com/security/tns-2016-19 - http://www.securityfocus.com/bid/93005
CVE ID: CVE-2016-7413 State: PUBLISHED Published: 2016-09-17T21:00:00 Last Updated: 2024-08-06T01:57:47.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a wddxPacket XML document that lacks an end-tag for a recordset field element, leading to mishandling in a wddx_deserialize call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php/php-src/commit/b88393f08a558eec14964a55d3c680fe67407712?w=1 - http://www.php.net/ChangeLo
nces: - https://github.com/php/php-src/commit/b88393f08a558eec14964a55d3c680fe67407712?w=1 - http://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036836 - http://www.openwall.com/lists/oss-security/2016/09/15/10 - https://access.redhat.com/errata/RHSA-2018:1296 - http://www.php.net/ChangeLog-5.php - https://www.tenable.com/security/tns-2016-19 - http://www.securityfocus.com/bid/93006 - https://bugs.php.net/bug.php?id=72860
CVE ID: CVE-2016-7414 State: PUBLISHED Published: 2016-09-17T21:00:00 Last Updated: 2024-08-06T01:57:47.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressed_filesize field is large enough, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via a crafted PHAR archive, related to ext/phar/util.c and ext/phar/zip.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.
erences: - http://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036836 - http://www.securityfocus.com/bid/93004 - https://github.com/php/php-src/commit/0bfb970f43acd1e81d11be1154805f86655f15d5?w=1 - https://bugs.php.net/bug.php?id=72928 - http://www.openwall.com/lists/oss-security/2016/09/15/10 - https://access.redhat.com/errata/RHSA-2018:1296 - http://www.php.net/ChangeLog-5.php - https://www.tenable.com/security/tns-2016-19
CVE ID: CVE-2016-7415 State: PUBLISHED Published: 2016-09-17T21:00:00 Last Updated: 2024-08-06T01:57:47.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long locale string. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/bug.php?id=73007 - http://www.openwall.com/lists/oss-security/2016/09/15/10 - https://security.gentoo.org/glsa/201701-58 - https://www.tenable.com/security/tns-2016-19
/oss-security/2016/09/15/10 - https://security.gentoo.org/glsa/201701-58 - https://www.tenable.com/security/tns-2016-19 - http://www.securityfocus.com/bid/93022 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
CVE ID: CVE-2016-7416 State: PUBLISHED Published: 2016-09-17T21:00:00 Last Updated: 2024-08-06T01:57:47.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a MessageFormatter::formatMessage call with a long first argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93008 - http://www.php.net/ChangeLog-7.php - https://security.gento
iner: References: - http://www.securityfocus.com/bid/93008 - http://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036836 - http://www.openwall.com/lists/oss-security/2016/09/15/10 - https://access.redhat.com/errata/RHSA-2018:1296 - https://bugs.php.net/bug.php?id=73007 - http://www.php.net/ChangeLog-5.php - https://www.tenable.com/security/tns-2016-19 - https://github.com/php/php-src/commit/6d55ba265637d6adf0ba7e9c9ef11187d1ec2f5b?w=1
CVE ID: CVE-2016-7417 State: PUBLISHED Published: 2016-09-17T21:00:00 Last Updated: 2024-08-06T01:57:47.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validating a return value and data type, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-7.php - https://github.com/php/php-src/commit/ecb7f58a069be0dec4a6131b6351a761f808f22e?w=1 - https://security.gentoo.org/glsa/201611-22 - http://www.security
c/commit/ecb7f58a069be0dec4a6131b6351a761f808f22e?w=1 - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036836 - http://www.openwall.com/lists/oss-security/2016/09/15/10 - https://access.redhat.com/errata/RHSA-2018:1296 - http://www.securityfocus.com/bid/93007 - https://bugs.php.net/bug.php?id=73029 - http://www.php.net/ChangeLog-5.php - https://www.tenable.com/security/tns-2016-19
CVE ID: CVE-2016-7418 State: PUBLISHED Published: 2016-09-17T21:00:00 Last Updated: 2024-08-06T01:57:47.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attackers to cause a denial of service (invalid pointer access and out-of-bounds read) or possibly have unspecified other impact via an incorrect boolean element in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php/php-src/commit/c4cca4c20e75359c9a13a1f9a36cb7b4e9601d29?w=1 - http://www.php.net/ChangeLog
ces: - https://github.com/php/php-src/commit/c4cca4c20e75359c9a13a1f9a36cb7b4e9601d29?w=1 - http://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036836 - http://www.openwall.com/lists/oss-security/2016/09/15/10 - https://access.redhat.com/errata/RHSA-2018:1296 - http://www.securityfocus.com/bid/93011 - http://www.php.net/ChangeLog-5.php - https://www.tenable.com/security/tns-2016-19 - https://bugs.php.net/bug.php?id=73065
CVE ID: CVE-2016-7419 State: PUBLISHED Published: 2016-09-17T21:00:00 Last Updated: 2024-08-06T01:57:47.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 allows remote authenticated users to inject arbitrary web script or HTML via a crafted directory name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92373 - https://owncloud.org/security/advisory/?id=oc-sa-2016-011 - https://hackerone.com/reports/145355 - https://github.com/nextcloud/gallery/commit/6933d27afe518967bd1b60e6a7eacd882
1 - https://hackerone.com/reports/145355 - https://github.com/nextcloud/gallery/commit/6933d27afe518967bd1b60e6a7eacd88288929fc - https://nextcloud.com/security/advisory/?id=nc-sa-2016-001
CVE ID: CVE-2016-7420 State: PUBLISHED Published: 2016-09-16T00:00:00.000Z Last Updated: 2025-11-14T20:04:12.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/weidai11/cryptopp/commit/553049ba297d89d9e8fbf2204acb40a8a53f5cd6 - http://www
ntainer: References: - https://github.com/weidai11/cryptopp/commit/553049ba297d89d9e8fbf2204acb40a8a53f5cd6 - http://www.securityfocus.com/bid/92988 - http://www.openwall.com/lists/oss-security/2016/09/16/1 - https://github.com/weidai11/cryptopp/issues/277 - http://www.openwall.com/lists/oss-security/2016/09/15/12 - http://www.openwall.com/lists/oss-security/2023/09/28/2 - http://www.openwall.com/lists/oss-security/2023/09/28/4
CVE ID: CVE-2016-7421 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T01:57:47.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pvscsi_ring_pop_req_descr function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit process IO loop to the ring size. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg03609.html - https://security.gentoo.org/glsa/201609-01 - http://www.securityfocus.com/bid/92998 - http://www.openwall.com/lists/oss-security/2016/0
y.gentoo.org/glsa/201609-01 - http://www.securityfocus.com/bid/92998 - http://www.openwall.com/lists/oss-security/2016/09/16/9 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d251157ac1928191af851d199a9ff255d330bec9 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - http://www.openwall.com/lists/oss-security/2016/09/16/3
CVE ID: CVE-2016-7422 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T01:57:47.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value. Additional Analyst Notes: - CVE Program Container: References: - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=973e7170dddefb491a48df5cba33b2ae151013a0 - https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg03546.html - https://access.redhat.com/errata/RHSA-2017:2392 - http://lis
sts.gnu.org/archive/html/qemu-devel/2016-09/msg03546.html - https://access.redhat.com/errata/RHSA-2017:2392 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - https://security.gentoo.org/glsa/201609-01 - http://www.securityfocus.com/bid/92996 - http://www.openwall.com/lists/oss-security/2016/09/16/10 - http://www.openwall.com/lists/oss-security/2016/09/16/4 - https://access.redhat.com/errata/RHSA-2017:2408
CVE ID: CVE-2016-7423 State: PUBLISHED Published: 2016-10-10T16:00:00 Last Updated: 2024-08-06T01:57:47.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mptsas_process_scsi_io_request function in QEMU (aka Quick Emulator), when built with LSI SAS1068 Host Bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors involving MPTSASRequest objects. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201611-11 - https://bugzilla.redhat.com/show_bug.cgi?id=1376776 - http://www.securityfocus.com/bid/92997 - https://lists.gnu.org/archive/html/qemu-d
.redhat.com/show_bug.cgi?id=1376776 - http://www.securityfocus.com/bid/92997 - https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg03604.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=670e56d3ed2918b3861d9216f2c0540d9e9ae0d5 - http://www.openwall.com/lists/oss-security/2016/09/16/11 - http://www.openwall.com/lists/oss-security/2016/09/16/5
CVE ID: CVE-2016-7424 State: PUBLISHED Published: 2016-10-07T14:00:00 Last Updated: 2024-08-06T01:57:47.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: The put_no_rnd_pixels8_xy2_mmx function in x86/rnd_template.c in libav 11.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted MP3 file. Additional Analyst Notes: - CVE Program Container: References: - https://git.libav.org/?p=libav.git%3Ba=commit%3Bh=136f55207521f0b03194ef5b55ba70f1635d6aee - http://www.debian.org/security/2016/dsa-3685 - http://www.securityfocus.com/bid/93038 - http://www.openwall.com/lists/oss-security/2016/09/16/17 - http://www.openwall.com/l
//www.securityfocus.com/bid/93038 - http://www.openwall.com/lists/oss-security/2016/09/16/17 - http://www.openwall.com/lists/oss-security/2016/09/17/1 - http://www.openwall.com/lists/oss-security/2016/09/17/4 - https://bugzilla.libav.org/show_bug.cgi?id=962 - https://blogs.gentoo.org/ago/2016/09/17/libav-null-pointer-dereference-in-put_no_rnd_pixels8_xy2_mmx-rnd_template-c/
CVE ID: CVE-2016-7425 State: PUBLISHED Published: 2016-10-16T21:00:00 Last Updated: 2024-08-06T01:57:47.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: The arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c in the Linux kernel through 4.8.2 does not restrict a certain length field, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) via an ARCMSR_MESSAGE_WRITE_WQBUFFER control code. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3146-2 - https://bugzilla.redhat.com/show_bug.cgi?id=1377330 - http://www.ubuntu.com/usn/USN-3144-2 - http://www.ubuntu.com/usn/USN-314
//bugzilla.redhat.com/show_bug.cgi?id=1377330 - http://www.ubuntu.com/usn/USN-3144-2 - http://www.ubuntu.com/usn/USN-3146-1 - http://www.ubuntu.com/usn/USN-3145-1 - http://www.openwall.com/lists/oss-security/2016/09/17/2 - http://marc.info/?l=linux-scsi&m=147394796228991&w=2 - http://www.ubuntu.com/usn/USN-3144-1 - http://www.ubuntu.com/usn/USN-3147-1 - http://marc.info/?l=linux-scsi&m=147394713328707&w=2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7bc2b55a5c030685b399bb65b6baa9ccc3d1f167 - https://security-tracker.debian.org/tracker/CVE-2016-7425 - https://github.com/torvalds/linux/commit/7bc2b55a5c030685b399bb65b6baa9ccc3d1f167 - http://www.ubuntu.com/usn/US
-7425 - https://github.com/torvalds/linux/commit/7bc2b55a5c030685b399bb65b6baa9ccc3d1f167 - http://www.ubuntu.com/usn/USN-3145-2 - http://www.securityfocus.com/bid/93037
CVE ID: CVE-2016-7426 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T01:57:47.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allows remote attackers to cause a denial of service (prevent responses from the sources) by sending responses with a spoofed source address. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us - https://usn.ubuntu.com/3707-2/ - http://rhn.redhat.com/errata/RHSA-2017-0252.html - http
ocId=emr_na-hpesbux03706en_us - https://usn.ubuntu.com/3707-2/ - http://rhn.redhat.com/errata/RHSA-2017-0252.html - http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities - http://nwtime.org/ntp428p9_release/ - https://www.kb.cert.org/vuls/id/633847 - http://www.securitytracker.com/id/1037354 - https://bto.bluecoat.com/security-advisory/sa139 - http://support.ntp.org/bin/view/Main/NtpBug3071 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc - http://www.securityfocus.com/bid/94451
CVE ID: CVE-2016-7427 State: PUBLISHED Published: 2017-01-13T16:00:00 Last Updated: 2024-08-06T01:57:47.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via a crafted broadcast mode packet. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03706en_us - https://usn.ubuntu.com/3707-2/ - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03883en_us - http://support.ntp.org/bin/view/M
pport.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03883en_us - http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities - http://nwtime.org/ntp428p9_release/ - http://support.ntp.org/bin/view/Main/NtpBug3114 - https://www.kb.cert.org/vuls/id/633847 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03899en_us - http://www.securitytracker.com/id/1037354 - https://bto.bluecoat.com/security-advisory/sa139 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:39.ntp.asc - http://www.securityfocus.com/bid/94447