Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
10/7 - http://openwall.com/lists/oss-security/2011/03/05/8 - http://openwall.com/lists/oss-security/2011/03/04/22 - http://openwall.com/lists/oss-security/2011/03/11/5 - http://openwall.com/lists/oss-security/2011/03/04/27 - http://www.vupen.com/english/advisories/2011/0872 - http://openwall.com/lists/oss-security/2011/03/04/32 - http://openwall.com/lists/oss-security/2011/03/14/26 - http://openwall.com/lists/oss-security/2011/03/04/24 - http://openwall.com/lists/oss-security/2011/03/06/4 - http://openwall.com/lists/oss-security/2011/03/06/6 - http://openwall.com/lists/oss-security/2011/03/04/33
CVE ID: CVE-2011-1155 State: PUBLISHED Published: 2011-03-30T22:00:00 Last Updated: 2024-08-06T22:14:27.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (rotation outage) via a (1) \n (newline) or (2) \ (backslash) character in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/04/19 - http://openwall.com/lists/oss-security/2011/03/04/16 - http://open
ttp://openwall.com/lists/oss-security/2011/03/04/19 - http://openwall.com/lists/oss-security/2011/03/04/16 - http://openwall.com/lists/oss-security/2011/03/04/25 - http://openwall.com/lists/oss-security/2011/03/04/30 - http://openwall.com/lists/oss-security/2011/03/04/26 - http://openwall.com/lists/oss-security/2011/03/10/3 - http://openwall.com/lists/oss-security/2011/03/04/28 - http://openwall.com/lists/oss-security/2011/03/08/5 - http://secunia.com/advisories/43955 - http://openwall.com/lists/oss-security/2011/03/07/5 - http://openwall.com/lists/oss-security/2011/03/04/31 - http://www.vupen.com/english/advisories/2011/0961 - http://openwall.com/lists/oss-security/2011/03/04/17 - http://op
1 - http://www.vupen.com/english/advisories/2011/0961 - http://openwall.com/lists/oss-security/2011/03/04/17 - http://openwall.com/lists/oss-security/2011/03/10/6 - http://openwall.com/lists/oss-security/2011/03/06/3 - http://openwall.com/lists/oss-security/2011/03/04/29 - http://openwall.com/lists/oss-security/2011/03/07/6 - http://openwall.com/lists/oss-security/2011/03/05/6 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html - http://openwall.com/lists/oss-security/2011/03/05/4 - http://www.vupen.com/english/advisories/2011/0791 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:065 - http://openwall.com/lists/oss-security/2011/03/07/11 - http://o
w.mandriva.com/security/advisories?name=MDVSA-2011:065 - http://openwall.com/lists/oss-security/2011/03/07/11 - http://openwall.com/lists/oss-security/2011/03/23/11 - http://openwall.com/lists/oss-security/2011/03/06/5 - http://openwall.com/lists/oss-security/2011/03/04/18 - http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html - http://openwall.com/lists/oss-security/2011/03/10/2 - https://bugzilla.redhat.com/show_bug.cgi?id=680797 - http://www.redhat.com/support/errata/RHSA-2011-0407.html - http://openwall.com/lists/oss-security/2011/03/11/3 - http://openwall.com/lists/oss-security/2011/03/10/7 - http://openwall.com/lists/oss-security/2011/03/05/8 - http://openwa
ttp://openwall.com/lists/oss-security/2011/03/10/7 - http://openwall.com/lists/oss-security/2011/03/05/8 - http://openwall.com/lists/oss-security/2011/03/04/22 - http://openwall.com/lists/oss-security/2011/03/11/5 - http://openwall.com/lists/oss-security/2011/03/04/27 - http://www.vupen.com/english/advisories/2011/0872 - http://openwall.com/lists/oss-security/2011/03/04/32 - http://openwall.com/lists/oss-security/2011/03/14/26 - http://openwall.com/lists/oss-security/2011/03/04/24 - http://openwall.com/lists/oss-security/2011/03/06/4 - http://openwall.com/lists/oss-security/2011/03/06/6 - http://openwall.com/lists/oss-security/2011/03/04/33
CVE ID: CVE-2011-1156 State: PUBLISHED Published: 2011-04-11T18:00:00 Last Updated: 2024-08-06T22:14:27.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/14/18 - http://support.novell.com/security/cve/CVE-2011-1156.html - http://secunia.com/advisories/43730 - https://code.google.com/p/feedparser/issues/detail?id=91 - http://www.securityfocus.com/bid/46867 - https://bugzil
730 - https://code.google.com/p/feedparser/issues/detail?id=91 - http://www.securityfocus.com/bid/46867 - https://bugzilla.redhat.com/show_bug.cgi?id=684877 - http://secunia.com/advisories/44074 - http://openwall.com/lists/oss-security/2011/03/15/11 - http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.html - https://bugzilla.novell.com/show_bug.cgi?id=680074 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:082
CVE ID: CVE-2011-1157 State: PUBLISHED Published: 2011-04-11T18:00:00 Last Updated: 2024-08-06T22:14:28.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/14/18 - https://code.google.com/p/feedparser/issues/detail?id=254 - http://secunia.com/advisories/43730 - http://support.novell.com/security/cve/CVE-2011-1157.html - http://www.securityfocus.
p://secunia.com/advisories/43730 - http://support.novell.com/security/cve/CVE-2011-1157.html - http://www.securityfocus.com/bid/46867 - https://bugzilla.redhat.com/show_bug.cgi?id=684877 - http://secunia.com/advisories/44074 - http://openwall.com/lists/oss-security/2011/03/15/11 - http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.html - https://bugzilla.novell.com/show_bug.cgi?id=680074 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:082
CVE ID: CVE-2011-1158 State: PUBLISHED Published: 2011-04-11T18:00:00 Last Updated: 2024-08-06T22:14:27.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/14/18 - http://support.novell.com/security/cve/CVE-2011-1158.html - http://secunia.com/advisories/43730 - https://code.google.com/p/feedparser/issues/d
om/security/cve/CVE-2011-1158.html - http://secunia.com/advisories/43730 - https://code.google.com/p/feedparser/issues/detail?id=255 - http://www.securityfocus.com/bid/46867 - https://bugzilla.redhat.com/show_bug.cgi?id=684877 - http://secunia.com/advisories/44074 - http://openwall.com/lists/oss-security/2011/03/15/11 - http://lists.opensuse.org/opensuse-updates/2011-04/msg00026.html - https://bugzilla.novell.com/show_bug.cgi?id=680074 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:082
CVE ID: CVE-2011-1159 State: PUBLISHED Published: 2011-10-05T01:00:00Z Last Updated: 2024-09-16T20:57:51.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service (daemon hang) via a crafted application that performs a connect system call but no read system calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45915 - http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059880.html - http://secunia.com/advisories/44621 - http:
://lists.fedoraproject.org/pipermail/package-announce/2011-May/059880.html - http://secunia.com/advisories/44621 - http://secunia.com/advisories/42947 - http://www.openwall.com/lists/oss-security/2011/03/15/7 - https://bugzilla.redhat.com/show_bug.cgi?id=688698 - http://www.openwall.com/lists/oss-security/2011/01/19/4 - http://www.openwall.com/lists/oss-security/2011/03/15/12 - http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060053.html
CVE ID: CVE-2011-1160 State: PUBLISHED Published: 2012-06-21T23:00:00Z Last Updated: 2024-08-06T22:14:27.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, which allows local users to obtain potentially sensitive information from kernel memory via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1309d7afbed112f0e8e90be9af975550caa0076b - https://bugzilla.redhat.com/show_bug.cgi?id=684671 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6
aa0076b - https://bugzilla.redhat.com/show_bug.cgi?id=684671 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - https://github.com/torvalds/linux/commit/1309d7afbed112f0e8e90be9af975550caa0076b - http://www.openwall.com/lists/oss-security/2011/03/15/13
CVE ID: CVE-2011-1161 State: REJECTED Published: 2011-12-12T18:00:00Z Last Updated: 2024-09-16T22:41:32.525Z Description: No description available.
CVE ID: CVE-2011-1162 State: PUBLISHED Published: 2012-01-27T15:00:00Z Last Updated: 2024-08-06T22:14:27.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=732629 - http://www.securityfocus.com/bid/50764
CVE ID: CVE-2011-1163 State: PUBLISHED Published: 2011-04-10T01:00:00 Last Updated: 2024-08-06T22:14:27.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing. Additional Analyst Notes: - CVE Program Container: References: - http://www.spinics.net/lists/mm-commits/msg82737.html - http://www.securityfocus.com/bid/46878 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1e
p://www.securityfocus.com/bid/46878 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1eafbfeb7bdf59cfe173304c76188f3fd5f1fd05 - https://bugzilla.redhat.com/show_bug.cgi?id=688021 - http://securityreason.com/securityalert/8189 - http://securitytracker.com/id?1025225 - http://openwall.com/lists/oss-security/2011/03/15/14 - http://rhn.redhat.com/errata/RHSA-2011-0833.html - http://openwall.com/lists/oss-security/2011/03/15/9 - http://www.pre-cert.de/advisories/PRE-SA-2011-02.txt - http://downloads.avaya.com/css/P8/documents/100145416 - http://www.securityfocus.com/archive/1/517050 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38 - http://lists.open
ww.securityfocus.com/archive/1/517050 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2011-1164 State: PUBLISHED Published: 2013-03-12T22:00:00Z Last Updated: 2024-08-06T22:14:28.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which might make it easier for remote attackers to perform attacks. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0169.html - https://bugzilla.gnome.org/show_bug.cgi?id=596190 - https://bugzilla.redhat.com/show_bug.cgi?id=553477
CVE ID: CVE-2011-1165 State: PUBLISHED Published: 2013-03-12T22:00:00Z Last Updated: 2024-08-06T22:14:28.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vino, possibly before 3.2, does not properly document that it opens ports in UPnP routers when the "Configure network to automatically accept connections" setting is enabled, which might make it easier for remote attackers to perform further attacks. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-0169.html - https://bugzilla.gnome.org/show_bug.cgi?id=594521 - https://bugzilla.redhat.com/show_bug.cgi?id=678846 - http://git.gnome.org/browse/vino/commit/?id=410bbf8e284409b
94521 - https://bugzilla.redhat.com/show_bug.cgi?id=678846 - http://git.gnome.org/browse/vino/commit/?id=410bbf8e284409bdef02322af4d4a3a388419566 - http://www.dslreports.com/forum/r25446313-Ubuntu-computer-hijacked-by-hacker~start=40
CVE ID: CVE-2011-1166 State: PUBLISHED Published: 2014-01-07T19:00:00 Last Updated: 2024-08-06T22:14:27.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen, possibly before 4.0.2, allows local 64-bit PV guests to cause a denial of service (host crash) by specifying user mode execution without user-mode pagetables. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.xen.org/wiki/Security_Announcements#XSA-1_Host_crash_due_to_failure_to_correctly_validate_PV_kernel_execution_state. - http://rhn.redhat.com/errata/RHSA-2011-0833.html - http://downloads.avaya.com/css/P8/documents/100145416
CVE ID: CVE-2011-1167 State: PUBLISHED Published: 2011-03-28T16:00:00 Last Updated: 2024-08-06T22:14:27.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0795 - http://secunia.com/advisories/43974 - http://ubuntu.com/usn/usn-1102-1 - http://www.vupen.com/english/advisories/2011/0845 - https://bugzilla.redhat.com/sh
- http://ubuntu.com/usn/usn-1102-1 - http://www.vupen.com/english/advisories/2011/0845 - https://bugzilla.redhat.com/show_bug.cgi?id=684939 - http://www.vupen.com/english/advisories/2011/0860 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html - http://support.apple.com/kb/HT5503 - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.587820 - http://support.apple.com/kb/HT5130 - http://secunia.com/advisories/43900 - http://www.osvdb.org/71256 - http://secunia.com/advisories/43934 - http://www.securityfocus.com/bid/46951 - http://lists.fedoraproject.org/pip
1256 - http://secunia.com/advisories/43934 - http://www.securityfocus.com/bid/46951 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057763.html - http://www.vupen.com/english/advisories/2011/0905 - http://www.debian.org/security/2011/dsa-2210 - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/66247 - http://blackberry.com/btsc/KB27244 - http://www.securitytracker.com/id?1025257 - http://www.securityfocus.com/archive/1/517101/100/0/threaded - http://bugzilla.maptools.org/show_bug.cgi?id=2300 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://www.vupen.com/english/advisories/2011/09
w_bug.cgi?id=2300 - http://security.gentoo.org/glsa/glsa-201209-02.xml - http://www.vupen.com/english/advisories/2011/0930 - http://www.zerodayinitiative.com/advisories/ZDI-11-107 - http://secunia.com/advisories/44135 - http://www.vupen.com/english/advisories/2011/0960 - http://securityreason.com/securityalert/8165 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:064 - http://www.vupen.com/english/advisories/2011/0859 - http://secunia.com/advisories/44117 - http://www.redhat.com/support/errata/RHSA-2011-0392.html - http://support.apple.com/kb/HT5281 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057840.html - http://lists.apple.com/archives/security-annou
sts.fedoraproject.org/pipermail/package-announce/2011-April/057840.html - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html - http://secunia.com/advisories/50726
CVE ID: CVE-2011-1168 State: PUBLISHED Published: 2011-04-18T18:00:00 Last Updated: 2024-08-06T22:14:27.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an unavailable web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0990 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:075 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - h
security/advisories?name=MDVSA-2011:075 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://www.securityfocus.com/archive/1/517433/100/0/threaded - http://secunia.com/advisories/44108 - http://www.securityfocus.com/bid/47304 - http://www.securityfocus.com/archive/1/517432/100/0/threaded - http://www.ubuntu.com/usn/USN-1110-1 - http://www.vupen.com/english/advisories/2011/0928 - http://secunia.com/advisories/44065 - https://bugzilla.redhat.com/show_bug.cgi?id=695398 - http://securityreason.com/securityalert/8208 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66697 - http://www.vupen.com/english/advisories/2011/0927 - http://slackware.com/security/view
cloud.com/vulnerabilities/66697 - http://www.vupen.com/english/advisories/2011/0927 - http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.329727 - http://www.kde.org/info/security/advisory-20110411-1.txt - http://www.nth-dimension.org.uk/pub/NDSA20110321.txt.asc - http://securitytracker.com/id?1025322
CVE ID: CVE-2011-1169 State: PUBLISHED Published: 2011-05-03T19:00:00Z Last Updated: 2024-08-06T22:21:33.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the asihpi_hpi_ioctl function in sound/pci/asihpi/hpioctl.c in the AudioScience HPI driver in the Linux kernel before 2.6.38.1 might allow local users to cause a denial of service (memory corruption) or possibly gain privileges via a crafted adapter index value that triggers access to an invalid kernel pointer. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=688898 - http://openwall.com/lists/oss-security/2011/03/18/1 - http://git.kernel.org/?p=
illa.redhat.com/show_bug.cgi?id=688898 - http://openwall.com/lists/oss-security/2011/03/18/1 - http://git.kernel.org/?p=linux/kernel/git/tiwai/sound-2.6.git%3Ba=commit%3Bh=4a122c10fbfe9020df469f0f669da129c5757671 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.1 - http://openwall.com/lists/oss-security/2011/03/18/2
CVE ID: CVE-2011-1170 State: PUBLISHED Published: 2011-06-22T22:00:00 Last Updated: 2024-08-06T22:21:33.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityale
modprobe process. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8282 - https://bugzilla.redhat.com/show_bug.cgi?id=689321 - http://www.openwall.com/lists/oss-security/2011/03/18/15 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=42eab94fff18cb1091d3501cd284d6bd6cc9c143 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://rhn.redhat.com/errata/RHSA-2011-0833.html - http://marc.info/?l=netfilter-devel&m=129978081009955&w=2 - http://downloads.avaya.com/css/P8/documents/100145416 - http://www.openwall.com/lists/oss-security/2011/03/21/4 - http://securityreason.com/securityalert/8278 -
ts/100145416 - http://www.openwall.com/lists/oss-security/2011/03/21/4 - http://securityreason.com/securityalert/8278 - http://www.openwall.com/lists/oss-security/2011/03/21/1
CVE ID: CVE-2011-1171 State: PUBLISHED Published: 2011-06-22T22:00:00 Last Updated: 2024-08-06T22:21:32.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityaler
odprobe process. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8283 - http://www.openwall.com/lists/oss-security/2011/03/18/15 - https://bugzilla.redhat.com/show_bug.cgi?id=689327 - http://marc.info/?l=linux-kernel&m=129978077609894&w=2 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://rhn.redhat.com/errata/RHSA-2011-0833.html - http://downloads.avaya.com/css/P8/documents/100145416 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=78b79876761b86653df89c48a7010b5cbd41a84a - http://www.openwall.com/lists/oss-security/2011/03/21/4 - http://securityreason.com/securityalert/8278 - http
bd41a84a - http://www.openwall.com/lists/oss-security/2011/03/21/4 - http://securityreason.com/securityalert/8278 - http://www.openwall.com/lists/oss-security/2011/03/21/1
CVE ID: CVE-2011-1172 State: PUBLISHED Published: 2011-06-22T22:00:00 Last Updated: 2024-08-06T22:21:32.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability to issue a crafted request, and then reading the argument to the resulting modprobe process. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-sec
modprobe process. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/03/18/15 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6a8ab060779779de8aea92ce3337ca348f973f54 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - https://bugzilla.redhat.com/show_bug.cgi?id=689345 - http://marc.info/?l=linux-kernel&m=129978086410061&w=2 - http://rhn.redhat.com/errata/RHSA-2011-0833.html - http://downloads.avaya.com/css/P8/documents/100145416 - http://www.openwall.com/lists/oss-security/2011/03/21/4 - http://securityreason.com/securityalert/8278 - http://www.openwall.com/lists/oss-security/2011/03