Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
usn/USN-2959-1 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://web-in-security.blogspot.ca/2016/05/curious-padding-oracle-in-openssl-cve.html - http://rhn.redhat.com/errata/RHSA-2016-0722.html - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc - https://www.openssl.org/news/secadv/20160503.txt - https://support.apple.com/HT206903 - https://bto.bluecoat.com/security-advisory/sa123 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html - https://www.exploit-db.com/exploits/39768/ - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.p
CVE ID: CVE-2016-2108 State: PUBLISHED Published: 2016-05-05T00:00:00 Last Updated: 2024-08-05T23:17:50.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the "negative zero" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103 - http://rhn.redhat.com/errata/RHSA-2016-2056.html - http://lists.opensuse.org/opensuse-security
ackware-security.542103 - http://rhn.redhat.com/errata/RHSA-2016-2056.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html - http://rhn.redhat.com/errata/RHSA-2016-2073.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us - http://www.debian.org/security/2016/dsa-3566 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http:/
=emr_na-hpesbgn03726en_us - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html - https://security.gentoo.org/glsa/201612-16 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html - http://www.securitytracker.com/id/1035721 - http://support.citrix.com/article/CTX212736 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=f5da52e308a6aeea6d5f3df98c4da295d7e9cc27 - http://lists.opensuse.org/o
s://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=f5da52e308a6aeea6d5f3df98c4da295d7e9cc27 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05149345 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=3661bb4e7934668bd99ca777ea8b30eedfafa871 - https://h2
00010.html - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=3661bb4e7934668bd99ca777ea8b30eedfafa871 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html - http://
rity-announce/2016-05/msg00017.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html - https://www.tenable.com/security/tns-2016-18 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html - https://access.redhat.com/errata/RHSA-2017:0194 - http://source.android.com/security/bulletin/2016-07-01.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804 - https://access.redhat.com/errata/RHSA-2017:0193 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advis
opensuse.org/opensuse-security-announce/2016-05/msg00013.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202 - http://rhn.redhat.com/errata/RHSA-2016-0996.html - https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00067&languageid=en-fr - https://security.netapp.com/advisory/ntap-20160504-0001/ - http://www.securityfocus.com/bid/91787 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html - http://rhn.redhat.com/errata/RHSA-2016-2957.html - http://www.ubuntu.com/usn/USN-2959-1 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - h
- http://www.ubuntu.com/usn/USN-2959-1 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://rhn.redhat.com/errata/RHSA-2016-0722.html - https://www.openssl.org/news/secadv/20160503.txt - https://support.apple.com/HT206903 - https://bto.bluecoat.com/security-advisory/sa123 - http://www.securityfocus.com/bid/89752 - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html - https://access.redhat.com/errata/RHSA-2016:1137 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-2109 State: PUBLISHED Published: 2016-05-05T00:00:00 Last Updated: 2024-08-05T23:17:50.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - http://www.slackware.com/security/viewer.php?l=sla
pe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103 - http://rhn.redhat.com/errata/RHSA-2016-2056.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html - http://rhn.redhat.com/errata/RHSA-2016-2073.html - https://h20566.www2.hpe.com/hpsc/doc/p
nounce/2016-05/msg00029.html - http://rhn.redhat.com/errata/RHSA-2016-2073.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.debian.org/security/2016/dsa-3566 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10160 - http://lists.opensuse.org/opensuse-security-announce/2016-05/
://kc.mcafee.com/corporate/index?page=content&id=SB10160 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html - https://source.android.com/security/bulletin/2017-07-01 - https://security.gentoo.org/glsa/201612-16 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html - http://www.securitytracker.com/id/1035721 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://list
ry/cisco-sa-20160504-openssl - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html - http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html - https://www.tenable.com/se
/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html - https://www.tenable.com/security/tns-2016-18 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202 - http://rhn.redhat.com/errata/RHSA-2016-0996.html - https://security.netapp.com/advisory/ntap-20160504-0001/ - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c62981390d6cf9e3d612c489b8b77c2913b25807 - http://www.securityfocus.com/bid/91
openssl.org/?p=openssl.git%3Ba=commit%3Bh=c62981390d6cf9e3d612c489b8b77c2913b25807 - http://www.securityfocus.com/bid/91787 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html - http://rhn.redhat.com/errata/RHSA-2016-2957.html - http://www.ubuntu.com/usn/USN-2959-1 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://www.securityfocus.com/bid/87940 - http://rhn.redhat.com/errata/RHSA-2016-0722.html - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc - https://www.openssl.org/news/secadv/20160503.txt - https://support.apple.com/HT206903
ies/FreeBSD-SA-16:17.openssl.asc - https://www.openssl.org/news/secadv/20160503.txt - https://support.apple.com/HT206903 - https://bto.bluecoat.com/security-advisory/sa123 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-2110 State: PUBLISHED Published: 2016-04-25T00:00:00 Last Updated: 2024-08-05T23:17:50.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security. Additional Analyst Notes: - CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-s
itional Analyst Notes: - CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html - http://rhn.redhat.com/errata/RHSA-2016-0612.html - http://lists.opensuse.org/opensuse-updates/2016-05/msg00124.html - http://www.ubuntu.com/usn/USN-2950-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html - http://rhn.redhat.com/errata/RHSA-2016-0613.html - http://badlock.org/ - http://rhn.redhat.com/errata/RHSA-2016-0621.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.o
SA-2016-0621.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - http://www.ubuntu.com/usn/USN-2950-5 - https://www.samba.org/samba/history/samba-4.2.10.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html - http://rhn.redhat.com/errata/RHSA-2016-0624.html - http://rhn.redhat.com/errata/RHSA-2016-0618.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html - https://www.samba.org/samba/latest_news.html#4.4.2 - http://www.securitytracker.com
ity-announce/2016-04/msg00021.html - https://www.samba.org/samba/latest_news.html#4.4.2 - http://www.securitytracker.com/id/1035533 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html - http://rhn.redhat.com/errata/RHSA-2016-0614.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html - http://rhn.redhat.com/errata/RHSA-2016-0620.html - http://rhn.redhat.com/errata/RHSA-2016-0611.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - https://bto.bluecoat.com/security-advisory/sa122 - http://www.ubuntu.com/usn/USN-2950-3 - http://li
6-04/msg00047.html - https://bto.bluecoat.com/security-advisory/sa122 - http://www.ubuntu.com/usn/USN-2950-3 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html - https://www.samba.org/samba/security/CVE-2016-2110.html - http://rhn.redhat.com/errata/RHSA-2016-0619.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821 - https://security.gentoo.org/glsa/201612-47 - http://www.debian.org/security/2016/dsa-3548 - http://rhn.redhat.com/errata/RHSA-2016-0623.html - http://ww
/201612-47 - http://www.debian.org/security/2016/dsa-3548 - http://rhn.redhat.com/errata/RHSA-2016-0623.html - http://www.ubuntu.com/usn/USN-2950-2 - http://rhn.redhat.com/errata/RHSA-2016-0625.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399 - http://www.ubuntu.com/usn/USN-2950-4
CVE ID: CVE-2016-2111 State: PUBLISHED Published: 2016-04-25T00:00:00 Last Updated: 2024-08-05T23:17:50.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005. Additional Analyst Notes: - CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackw
- CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html - http://rhn.redhat.com/errata/RHSA-2016-0612.html - http://www.ubuntu.com/usn/USN-2950-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html - http://rhn.redhat.com/errata/RHSA-2016-0613.html - http://badlock.org/ - http://rhn.redhat.com/errata/RHSA-2016-0621.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - http://www.ubuntu.com/usn/U
-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - http://www.ubuntu.com/usn/USN-2950-5 - https://www.samba.org/samba/history/samba-4.2.10.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html - http://rhn.redhat.com/errata/RHSA-2016-0624.html - http://rhn.redhat.com/errata/RHSA-2016-0618.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html - https://www.samba.org/samba/latest_news.html#4.4.2 - http://www.securitytracker.com/id/1035533 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.
http://www.securitytracker.com/id/1035533 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html - http://rhn.redhat.com/errata/RHSA-2016-0614.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html - http://rhn.redhat.com/errata/RHSA-2016-0620.html - http://rhn.redhat.com/errata/RHSA-2016-0611.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - https://bto.bluecoat.com/security-advisory/sa122 - http://www.ubuntu.com/usn/USN-2950-3 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html - http://lists.ope
com/usn/USN-2950-3 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html - http://rhn.redhat.com/errata/RHSA-2016-0619.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964 - https://www.samba.org/samba/security/CVE-2016-2111.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821 - https://security.gentoo.org/glsa/201612-47 - http://www.debian.org/security/2016/dsa-3548 - http://rhn.redhat.com/errata/RHSA-2016-0623.html - http://www.ubuntu.com/usn/USN-2950-2 - http://rhn.redhat.com/errata/RHSA-2016-0625.html - https://h
HSA-2016-0623.html - http://www.ubuntu.com/usn/USN-2950-2 - http://rhn.redhat.com/errata/RHSA-2016-0625.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399 - http://www.ubuntu.com/usn/USN-2950-4
CVE ID: CVE-2016-2112 State: PUBLISHED Published: 2016-04-25T00:00:00 Last Updated: 2024-08-05T23:17:50.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream. Additional Analyst Notes: - CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg0
lackware-security&y=2016&m=slackware-security.458012 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html - http://rhn.redhat.com/errata/RHSA-2016-0612.html - http://www.ubuntu.com/usn/USN-2950-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html - http://rhn.redhat.com/errata/RHSA-2016-0613.html - http://badlock.org/ - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - http://www.ubuntu.com/usn/USN-2950-5 - https://www.samba.org/samba/history/samba-4.2.10.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/1
//www.samba.org/samba/history/samba-4.2.10.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html - http://rhn.redhat.com/errata/RHSA-2016-0624.html - http://rhn.redhat.com/errata/RHSA-2016-0618.html - https://www.samba.org/samba/security/CVE-2016-2112.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html - https://www.samba.org/samba/latest_news.html#4.4.2 - http://www.securitytracker.com/id/1035533 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html - http://rhn.redhat.com/errata/RHSA-2016-0614.html - http://lists.opensuse.
mail/package-announce/2016-April/182272.html - http://rhn.redhat.com/errata/RHSA-2016-0614.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html - http://rhn.redhat.com/errata/RHSA-2016-0620.html - http://rhn.redhat.com/errata/RHSA-2016-0611.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - https://bto.bluecoat.com/security-advisory/sa122 - http://www.ubuntu.com/usn/USN-2950-3 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html - http://rhn.redhat.com/errata/RHSA-2016-0619.html - https://h20566.www2.hpe.com/portal/site/hpsc/
2016-04/msg00048.html - http://rhn.redhat.com/errata/RHSA-2016-0619.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821 - https://security.gentoo.org/glsa/201612-47 - http://www.debian.org/security/2016/dsa-3548 - http://www.ubuntu.com/usn/USN-2950-2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399 - http://www.ubuntu.com/usn/USN-2950-4
CVE ID: CVE-2016-2113 State: PUBLISHED Published: 2016-04-25T00:00:00 Last Updated: 2024-08-05T23:17:50.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html - http://rhn.redhat.com/errata/RHS
y.458012 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html - http://rhn.redhat.com/errata/RHSA-2016-0612.html - http://www.ubuntu.com/usn/USN-2950-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html - http://badlock.org/ - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - http://www.ubuntu.com/usn/USN-2950-5 - https://www.samba.org/samba/history/samba-4.2.10.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html - http://rhn.redhat.com/errata/RHSA-2016-0618.html - http://lists.opensuse.org/opens
age-announce/2016-April/182185.html - http://rhn.redhat.com/errata/RHSA-2016-0618.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html - https://www.samba.org/samba/latest_news.html#4.4.2 - http://www.securitytracker.com/id/1035533 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html - http://rhn.redhat.com/errata/RHSA-2016-0614.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html - http://rhn.redhat.com/errata/RHSA-2016-0620.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - https://bto.bluecoat.