Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE Program Container: References: - http://www.securityfocus.com/bid/94302 - https://github.com/geopython/pycsw/pull/474/files - http://seclists.org/oss-sec/2016/q4/406 - https://patch-diff.githubusercontent.com/raw/geopython/pycsw/pull/474.patch
CVE ID: CVE-2016-8641 State: PUBLISHED Published: 2018-08-01T14:00:00 Last Updated: 2024-08-06T02:27:41.284Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Nagios Enterprises Products: nagios Problem Types: CWE-59 Description: A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary files and insecurely changing the ownership afterwards. It's possible for the local attacker to create symbolic links before the files are to be created and possibly escalating the privileges with the ownership change. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4
ownership change. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40774/ - https://github.com/NagiosEnterprises/nagioscore/commit/f2ed227673d3b2da643eb5cad26b2d87674f28c1.patch - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8641 - http://www.securityfocus.com/bid/95121 - https://security.gentoo.org/glsa/201702-26
CVE ID: CVE-2016-8642 State: PUBLISHED Published: 2017-01-20T08:39:00 Last Updated: 2024-08-06T02:27:41.243Z Vendors: n/a Products: Moodle 2.x and 3.x Problem Types: unspecified Description: In Moodle 2.x and 3.x, the question engine allows access to files that should not be available. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=343275 - http://www.securityfocus.com/bid/94441
CVE ID: CVE-2016-8643 State: PUBLISHED Published: 2017-01-20T08:39:00 Last Updated: 2024-08-06T02:27:41.250Z Vendors: n/a Products: Moodle 2.x and 3.x Problem Types: unspecified Description: In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94457 - https://moodle.org/mod/forum/discuss.php?d=343276
CVE ID: CVE-2016-8644 State: PUBLISHED Published: 2017-01-20T08:39:00 Last Updated: 2024-08-06T02:27:41.245Z Vendors: n/a Products: Moodle 2.x and 3.x Problem Types: unspecified Description: In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=343277 - http://www.securityfocus.com/bid/94458
CVE ID: CVE-2016-8645 State: PUBLISHED Published: 2016-11-28T03:01:00 Last Updated: 2024-08-06T02:27:41.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of service (system crash) via a crafted application that makes sendto system calls, related to net/ipv4/tcp_ipv4.c and net/ipv6/tcp_ipv6.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/11/30/3 - https://access.redhat.com/errata/RHSA-2017:2669 - https://bugzilla.redhat.com/show_bug.cgi?id=1393904 - http://www.securityfocus.com/bid/94264 - http:/
a/RHSA-2017:2669 - https://bugzilla.redhat.com/show_bug.cgi?id=1393904 - http://www.securityfocus.com/bid/94264 - http://www.securitytracker.com/id/1037285 - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.10 - http://www.openwall.com/lists/oss-security/2016/11/11/3 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ac6e780070e30e4c35bd395acfe9191e6268bdd3 - https://github.com/torvalds/linux/commit/ac6e780070e30e4c35bd395acfe9191e6268bdd3
CVE ID: CVE-2016-8646 State: PUBLISHED Published: 2016-11-28T03:01:00 Last Updated: 2024-08-06T02:27:41.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hash_accept function in crypto/algif_hash.c in the Linux kernel before 4.3.6 allows local users to cause a denial of service (OOPS) by attempting to trigger use of in-kernel hash algorithms for a socket that has received zero bytes of data. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1388821 - https://access.redhat.com/errata/RHSA-2017:1308 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4afa5f9617927453ac04b24b584f6c718dfb4f45 - h
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4afa5f9617927453ac04b24b584f6c718dfb4f45 - http://www.securityfocus.com/bid/94309 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.6 - https://github.com/torvalds/linux/commit/4afa5f9617927453ac04b24b584f6c718dfb4f45 - https://access.redhat.com/errata/RHSA-2017:1298 - http://www.openwall.com/lists/oss-security/2016/11/15/2 - https://access.redhat.com/errata/RHSA-2017:1297
CVE ID: CVE-2016-8647 State: PUBLISHED Published: 2018-07-26T14:00:00 Last Updated: 2024-08-06T02:27:41.291Z Severity: LOW (CVSS 2.2 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: Red Hat Products: Ansible Problem Types: CWE-20 Description: An input validation vulnerability was found in Ansible's mysql_user module before 2.2.1.0, which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1685 - https://github.com/ansible/ansible-modules-core/pull/5388 - https://bugzilla.redhat.com/sh
t.com/errata/RHSA-2017:1685 - https://github.com/ansible/ansible-modules-core/pull/5388 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8647
CVE ID: CVE-2016-8648 State: PUBLISHED Published: 2018-08-01T14:00:00 Last Updated: 2024-08-06T02:27:41.427Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Apache Software Foundation Products: Karaf Problem Types: CWE-502 Description: It was found that the Karaf container used by Red Hat JBoss Fuse 6.x, and Red Hat JBoss A-MQ 6.x, deserializes objects passed to MBeans via JMX operations. An attacker could use this flaw to execute remote code on the server as the user running the Java Virtual Machine if the target MBean contain deserialization gadgets in its classpath. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.co
n gadgets in its classpath. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94513 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8648
CVE ID: CVE-2016-8649 State: PUBLISHED Published: 2017-05-01T06:08:00 Last Updated: 2024-08-06T02:27:41.373Z Vendors: n/a Products: LXC before 1.0.9 and 2.x before 2.0.6 Problem Types: container bypass Description: lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1398242 - https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1639345 - https://github.com/lxc/lxc/commit/81f466d05f2a89cb4f122ef7f
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1639345 - https://github.com/lxc/lxc/commit/81f466d05f2a89cb4f122ef7f593ff3f279b165c - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845465 - https://security-tracker.debian.org/tracker/CVE-2016-8649 - http://www.securityfocus.com/bid/94498
CVE ID: CVE-2016-8650 State: PUBLISHED Published: 2016-11-28T03:01:00 Last Updated: 2024-08-06T02:27:41.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key system call for an RSA key with a zero exponent. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/f5527fffff3f002b0a6b376163613b82f69de073 - http://www.securitytracker.com/id/1037968 - http://seclists.org/fulldisclosure/2016/Nov/76 - ht
6b376163613b82f69de073 - http://www.securitytracker.com/id/1037968 - http://seclists.org/fulldisclosure/2016/Nov/76 - http://www.openwall.com/lists/oss-security/2016/11/24/8 - https://bugzilla.redhat.com/show_bug.cgi?id=1395187 - https://access.redhat.com/errata/RHSA-2018:1854 - https://access.redhat.com/errata/RHSA-2017:0932 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f5527fffff3f002b0a6b376163613b82f69de073 - https://access.redhat.com/errata/RHSA-2017:0933 - https://access.redhat.com/errata/RHSA-2017:0931 - http://www.securityfocus.com/bid/94532 - https://source.android.com/security/bulletin/2017-03-01.html
CVE ID: CVE-2016-8651 State: PUBLISHED Published: 2018-08-01T16:00:00 Last Updated: 2024-08-06T02:27:41.203Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Red Hat Products: OpenShift Enterprise Problem Types: CWE-20 Description: An input validation flaw was found in the way OpenShift 3 handles requests for images. A user, with a copy of the manifest associated with an image, can pull an image even if they do not have access to the image normally, resulting in the disclosure of any information contained within the image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94935 - https://access.redhat.com/errata/RH
tes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94935 - https://access.redhat.com/errata/RHSA-2016:2915 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8651
CVE ID: CVE-2016-8652 State: PUBLISHED Published: 2017-02-16T18:00:00 Last Updated: 2024-08-06T02:27:41.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without setting a username. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94639 - http://www.openwall.com/lists/oss-security/2016/12/02/4 - http://dovecot.org/pipermail/dovecot-news/2016-December/000333.html - http://www.openwall.com/lists/oss-security/2016/12/05/12
CVE ID: CVE-2016-8653 State: PUBLISHED Published: 2018-08-01T14:00:00 Last Updated: 2024-08-06T02:27:41.292Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Fuse Problem Types: CWE-502 Description: It was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the credentials passed to it. An attacker could use this flaw to launch a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8653 - http://www.securityfocus.com/bid/94544
CVE ID: CVE-2016-8654 State: PUBLISHED Published: 2018-08-01T16:00:00 Last Updated: 2024-08-06T02:27:41.212Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: The Jasper Project Products: jasper Problem Types: CWE-122 Description: A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-3785 - http://www.securityfocus.com/bid/94583 - https://access.redhat.com/errata/RHSA-2017:1208 - https://github.com/mdadams/jasper/issues/93 - https://bugzilla.re
83 - https://access.redhat.com/errata/RHSA-2017:1208 - https://github.com/mdadams/jasper/issues/93 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8654 - https://github.com/mdadams/jasper/commit/4a59cfaf9ab3d48fca4a15c0d2674bf7138e3d1a - https://github.com/mdadams/jasper/issues/94
CVE ID: CVE-2016-8655 State: PUBLISHED Published: 2016-12-08T08:08:00 Last Updated: 2024-08-06T02:27:41.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3151-3 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00044.html - https://github.com/torvalds/linux/commit/84ac7260236a49c79
ensuse.org/opensuse-security-announce/2016-12/msg00044.html - https://github.com/torvalds/linux/commit/84ac7260236a49c79eede91617700174c2c19b0c - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00077.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00067.html - http://www.ubuntu.com/usn/USN-3150-2 - http://www.ubuntu.com/usn/USN-3149-2 - http://www.securityfocus.com/bid/94692 - http://www.securitytracker.com/id/1037968 - http://www.ubuntu.com/usn/USN-3150-1 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00056.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00073.html - http://rhn.redhat.com/errata/RHSA-2017-0402.
ttp://lists.opensuse.org/opensuse-security-announce/2016-12/msg00073.html - http://rhn.redhat.com/errata/RHSA-2017-0402.html - http://www.ubuntu.com/usn/USN-3151-1 - http://rhn.redhat.com/errata/RHSA-2017-0387.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=84ac7260236a49c79eede91617700174c2c19b0c - https://www.exploit-db.com/exploits/40871/ - http://www.ubuntu.com/usn/USN-3149-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1400019 - https://www.exploit-db.com/exploits/44696/ - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00087.html - http://www.ubuntu.com/usn/USN-3151-2 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg000
g00087.html - http://www.ubuntu.com/usn/USN-3151-2 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00070.html - http://packetstormsecurity.com/files/140063/Linux-Kernel-4.4.0-AF_PACKET-Race-Condition-Privilege-Escalation.html - http://www.openwall.com/lists/oss-security/2016/12/06/1 - http://www.ubuntu.com/usn/USN-3152-1 - http://www.ubuntu.com/usn/USN-3152-2 - http://rhn.redhat.com/errata/RHSA-2017-0386.html - http://www.securitytracker.com/id/1037403 - http://www.ubuntu.com/usn/USN-3151-4 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00054.html - https://source.android.com/sec
00055.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00054.html - https://source.android.com/security/bulletin/2017-03-01.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00076.html
CVE ID: CVE-2016-8656 State: PUBLISHED Published: 2018-05-22T17:00:00 Last Updated: 2024-08-06T02:27:41.215Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: jboss Products: jbossas Problem Types: CWE-284 Description: Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script which could result in local privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0250.html - http://rhn.redhat.com/errata/RHSA-2017-0831.html - http://rhn.redhat.com/errata/RHSA-2017-0834.html - https://access.redhat.com/errata/RHSA-2017:3458 - https://access.
l - http://rhn.redhat.com/errata/RHSA-2017-0834.html - https://access.redhat.com/errata/RHSA-2017:3458 - https://access.redhat.com/errata/RHSA-2018:1609 - http://rhn.redhat.com/errata/RHSA-2017-0832.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8656 - http://www.securityfocus.com/bid/96035 - http://rhn.redhat.com/errata/RHSA-2017-0244.html - http://rhn.redhat.com/errata/RHSA-2017-0246.html - https://access.redhat.com/errata/RHSA-2017:3455 - https://access.redhat.com/errata/RHSA-2017:3454 - http://rhn.redhat.com/errata/RHSA-2017-0245.html
CVE ID: CVE-2016-8657 State: PUBLISHED Published: 2018-07-31T19:00:00 Last Updated: 2024-08-06T02:27:41.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files. The file is writable to jboss group (root:jboss, 664). On systems using classic /etc/init.d init scripts (i.e. on Red Hat Enterprise Linux 6 and earlier), the file is sourced by the jboss init script and its content executed with root privileges when jboss service is started, stopped, or restarted. Additional Analyst Notes: - CVE Program Container: References: - http://rh
ss service is started, stopped, or restarted. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0828.html - http://rhn.redhat.com/errata/RHSA-2017-0827.html - https://access.redhat.com/errata/RHSA-2018:1609 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8657 - http://rhn.redhat.com/errata/RHSA-2017-0826.html - http://rhn.redhat.com/errata/RHSA-2017-0829.html - http://www.securityfocus.com/bid/96896
CVE ID: CVE-2016-8658 State: PUBLISHED Published: 2016-10-16T21:00:00 Last Updated: 2024-08-06T02:27:41.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the brcmf_cfg80211_start_ap function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.7.5 allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a long SSID Information Element in a command to a Netlink socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3146-2 - https://github.com/torvalds/linux/commit/ded89912156b1a47d940a0c954c43afbabd0c42c - http:
ww.ubuntu.com/usn/USN-3146-2 - https://github.com/torvalds/linux/commit/ded89912156b1a47d940a0c954c43afbabd0c42c - http://www.ubuntu.com/usn/USN-3146-1 - http://www.ubuntu.com/usn/USN-3145-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ded89912156b1a47d940a0c954c43afbabd0c42c - http://www.openwall.com/lists/oss-security/2016/10/13/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1384403 - http://www.ubuntu.com/usn/USN-3145-2 - http://www.securityfocus.com/bid/93541 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.5
CVE ID: CVE-2016-8659 State: PUBLISHED Published: 2017-02-13T18:00:00 Last Updated: 2024-08-06T02:27:41.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bubblewrap before 0.1.3 sets the PR_SET_DUMPABLE flag, which might allow local users to gain privileges by attaching to the process, as demonstrated by sending commands to a PrivSep socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/13/4 - https://github.com/projectatomic/bubblewrap/issues/107 - http://www.openwall.com/lists/oss-security/2016/10/12/5 - http://www.securityfocus.com/bid/93542
CVE ID: CVE-2016-8660 State: PUBLISHED Published: 2016-10-16T21:00:00 Last Updated: 2024-08-06T02:27:41.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by using the vfs syscall group in the trinity program, related to a "page lock order bug in the XFS seek hole/data implementation." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93558 - http://www.openwall.com/lists/oss-security/2016/10/13/8 - https://bugzilla.redhat.com/show_bug.cgi?id=1384851
CVE ID: CVE-2016-8661 State: PUBLISHED Published: 2016-11-15T15:00:00 Last Updated: 2024-08-06T02:27:41.325Z Vendors: n/a Products: Little Snitch version 3.0 through 3.6.1 Problem Types: escalation of privileges Description: Little Snitch version 3.0 through 3.6.1 suffer from a buffer overflow vulnerability that could be locally exploited which could lead to an escalation of privileges (EoP) and unauthorised ring0 access to the operating system. The buffer overflow is related to insufficient checking of parameters to the "OSMalloc" and "copyin" kernel API calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94352 - https://speakerdeck.com/p
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94352 - https://speakerdeck.com/patrickwardle/defcon-2016-i-got-99-problems-but-little-snitch-aint-one
CVE ID: CVE-2016-8662 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-8663 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-8664 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-8665 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-8666 State: PUBLISHED Published: 2016-10-16T21:00:00 Last Updated: 2024-08-06T02:27:41.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers and GRE headers, a related issue to CVE-2016-7039. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2107.html - https://access.redhat.com/errata/RHSA-2017:0372 - https://bto.bluecoat.com/security-
at.com/errata/RHSA-2016-2107.html - https://access.redhat.com/errata/RHSA-2017:0372 - https://bto.bluecoat.com/security-advisory/sa134 - http://www.securityfocus.com/bid/93562 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fac8e0f579695a3ecbc4d3cac369139d7f819971 - http://rhn.redhat.com/errata/RHSA-2016-2047.html - http://rhn.redhat.com/errata/RHSA-2016-2110.html - http://www.openwall.com/lists/oss-security/2016/10/13/11 - https://github.com/torvalds/linux/commit/fac8e0f579695a3ecbc4d3cac369139d7f819971 - http://rhn.redhat.com/errata/RHSA-2017-0004.html - https://bugzilla.redhat.com/show_bug.cgi?id=1384991 - https://bugzilla.suse.com/show_bug.cgi?id=1001486
CVE ID: CVE-2016-8667 State: PUBLISHED Published: 2016-11-04T21:00:00 Last Updated: 2024-08-06T02:27:41.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large interval timer reload value. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/15/4 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://www.securityfocus.com/bid/93567 - https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg02577.html - ht
html - http://www.securityfocus.com/bid/93567 - https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg02577.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - http://www.openwall.com/lists/oss-security/2016/10/14/6