Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
nce/2016-09/msg00005.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://security.gentoo.org/glsa/201610-08 - http://www.securityfocus.com/bid/91918 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html - https://security.netapp.com/advisory/ntap-20160721-0001/ - https://access.redhat.com/errata/RHSA-2016:1475 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html - http:
rity-announce/2016-09/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html - http://rhn.redhat.com/errata/RHSA-2016-1587.html - http://www.securitytracker.com/id/1036365 - https://security.gentoo.org/glsa/201701-43 - http://rhn.redhat.com/errata/RHSA-2016-1589.html - http://www.ubuntu.com/usn/USN-3062-1 - http://www.securityfocus.com/bid/91787 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html - https://access.redhat.com/errata/RHSA-2017:1216 - https://access.redhat.com/errata/RHSA-2016:1458 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html - http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.
suse.org/opensuse-security-announce/2016-08/msg00032.html - http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html - http://rhn.redhat.com/errata/RHSA-2016-1588.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html - http://rhn.redhat.com/errata/RHSA-2016-1504.html
CVE ID: CVE-2016-3599 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3600 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3601 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3602 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3603 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3604 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3605 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3606 State: PUBLISHED Published: 2016-07-21T10:00:00 Last Updated: 2024-10-11T20:41:04.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.ubuntu.com/usn/USN-3043-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://security.gentoo.org/glsa/201610-08
ttp://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://security.gentoo.org/glsa/201610-08 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html - http://www.debian.org/security/2016/dsa-3641 - https://security.netapp.com/advisory/ntap-20160721-0001/ - https://access.redhat.com/errata/RHSA-2016:1475 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html - http://www.securitytracker.com/id/1036365 - https://security.gentoo.org/glsa/201701-43 - http://www.securityfocus.com/bid/91912 - http://www.ubuntu.com/usn/USN-3062-1 - http://www.securityfoc
/glsa/201701-43 - http://www.securityfocus.com/bid/91912 - http://www.ubuntu.com/usn/USN-3062-1 - http://www.securityfocus.com/bid/91787 - https://access.redhat.com/errata/RHSA-2016:1476 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html - https://access.redhat.com/errata/RHSA-2016:1458 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html - http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html - http://www.ubuntu.com/usn/USN-3077-1 - http://rhn.redhat.com/errata/RHSA-2016-1776.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html - http://rhn.redhat.com/errata/RHSA-2016-1504.html
CVE ID: CVE-2016-3607 State: PUBLISHED Published: 2016-07-21T10:00:00 Last Updated: 2024-10-11T20:40:55.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.securitytracker.com/id/1036371 - http://www.sec
e.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.securitytracker.com/id/1036371 - http://www.securityfocus.com/bid/91787
CVE ID: CVE-2016-3608 State: PUBLISHED Published: 2016-07-21T10:00:00 Last Updated: 2024-10-11T20:40:50.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.securitytracker.com/id/1036371 - http://www.securityfocus.com/bid/92031 - http://www.securityfocus.com/bid/91787
CVE ID: CVE-2016-3609 State: PUBLISHED Published: 2016-07-21T10:00:00 Last Updated: 2024-10-11T20:40:43.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the OJVM component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/91890 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.securitytracker.com/id/1036363 - http://www.securityfocus.com/bid/91787
CVE ID: CVE-2016-3610 State: PUBLISHED Published: 2016-07-21T10:00:00 Last Updated: 2024-10-11T20:40:35.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3598. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.ubuntu.com/usn/USN-3043-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https
/linuxbulletinjul2016-3090544.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://security.gentoo.org/glsa/201610-08 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html - https://security.netapp.com/advisory/ntap-20160721-0001/ - https://access.redhat.com/errata/RHSA-2016:1475 - http://www.securityfocus.com/bid/91930 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html - http://www.securitytracker.com/id/1036365 - https://security.gentoo.org/glsa/201701-43 - http://www.ubuntu.com/usn/USN-3062-1 - http://www.securityfocus.com/bi
65 - https://security.gentoo.org/glsa/201701-43 - http://www.ubuntu.com/usn/USN-3062-1 - http://www.securityfocus.com/bid/91787 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html - https://access.redhat.com/errata/RHSA-2016:1458 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html - http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html - http://rhn.redhat.com/errata/RHSA-2016-1504.html
CVE ID: CVE-2016-3611 State: PUBLISHED Published: 2016-07-21T10:00:00 Last Updated: 2024-10-11T20:40:28.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail Applications 15.0 allows remote attackers to affect confidentiality and integrity via vectors related to System Administration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.securitytracker.com/id/1036397 - http://www.securityfocus.com/bid/91787 - http://www.securityfocus.com/bid/91901
CVE ID: CVE-2016-3612 State: PUBLISHED Published: 2016-07-21T10:00:00 Last Updated: 2024-10-11T20:40:21.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.22 allows remote attackers to affect confidentiality via vectors related to Core. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/91860 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.securitytracker.com/id/1036384 - http://www.securityfocus.com/bid/91787
CVE ID: CVE-2016-3613 State: PUBLISHED Published: 2016-07-21T10:00:00 Last Updated: 2024-10-11T20:40:14.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, and 5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to OpenSSL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.securitytracker.com/id/1036391 - http://www.securityfocus.com/bid/91787 - http://www.securityfocus.com/bid/91856
CVE ID: CVE-2016-3614 State: PUBLISHED Published: 2016-07-21T10:00:00 Last Updated: 2024-10-11T20:40:07.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Security: Encryption. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.ubuntu.com/usn/USN-3040-1 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://rhn.redhat.com/errata/RHSA-2016-1601.html - http://www.securitytracker.com/id/1036362 - http://www.securityfocus.com/bid/919
redhat.com/errata/RHSA-2016-1601.html - http://www.securitytracker.com/id/1036362 - http://www.securityfocus.com/bid/91992 - http://www.securityfocus.com/bid/91787
CVE ID: CVE-2016-3615 State: PUBLISHED Published: 2016-07-21T10:00:00 Last Updated: 2024-10-11T20:39:58.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: DML. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.ubuntu.com/usn/USN-3040-1 - http://rhn.redhat.com/errata/RHSA-2016-1603.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544
n.redhat.com/errata/RHSA-2016-1603.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.securityfocus.com/bid/91960 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.debian.org/security/2016/dsa-3632 - https://mariadb.com/kb/en/mariadb/mariadb-10026-release-notes/ - http://rhn.redhat.com/errata/RHSA-2016-1480.html - https://mariadb.com/kb/en/mariadb/mariadb-10115-release-notes/ - http://rhn.redhat.com/errata/RHSA-2016-1601.html - http://www-01.ibm.com/support/docview.wss?uid=isg3T1024168 - http://www.securitytracker.com/id/1036362 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html - ht
4168 - http://www.securitytracker.com/id/1036362 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html - http://www.debian.org/security/2016/dsa-3624 - http://rhn.redhat.com/errata/RHSA-2016-1637.html - http://rhn.redhat.com/errata/RHSA-2016-1602.html - https://mariadb.com/kb/en/mariadb/mariadb-5550-release-notes/ - http://www.securityfocus.com/bid/91787 - http://rhn.redhat.com/errata/RHSA-2016-1604.html
CVE ID: CVE-2016-3616 State: PUBLISHED Published: 2017-02-13T18:00:00 Last Updated: 2024-08-06T00:03:34.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3706-2/ - https://usn.ubuntu.com/3706-1/ - https://lists.debian.org/debian-lts-announce/2019/01/msg00015.html - https://bugzilla.redhat.com/show_bug.cgi?id=1318509 - https://bugzilla.redhat.com/show_bug.cgi?id=1319661 - https://access.redhat.com/errata/RHSA-2019:2052
CVE ID: CVE-2016-3619 State: PUBLISHED Published: 2016-10-03T16:00:00 Last Updated: 2024-08-06T00:03:34.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c none" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035508 - http://www.openwall.com/lists/oss-security/2016/04/07/1 - https://security.gentoo.org/glsa/201701-16 - http://bugzilla.maptools.org/show_bug.cgi?id=2567 - http://www.securityfocus.com/bid/85919
CVE ID: CVE-2016-3620 State: PUBLISHED Published: 2016-10-03T16:00:00 Last Updated: 2024-08-06T00:03:34.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035508 - http://bugzilla.maptools.org/show_bug.cgi?id=2570 - https://security.gentoo.org/glsa/201701-16 - http://www.openwall.com/lists/oss-security/2016/04/07/2
CVE ID: CVE-2016-3621 State: PUBLISHED Published: 2016-10-03T16:00:00 Last Updated: 2024-08-06T00:03:34.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LZWEncode function in tif_lzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035508 - http://www.openwall.com/lists/oss-security/2016/04/07/3 - http://bugzilla.maptools.org/show_bug.cgi?id=2565 - https://security.gentoo.org/glsa/201701-16
CVE ID: CVE-2016-3622 State: PUBLISHED Published: 2016-10-03T16:00:00 Last Updated: 2024-08-06T00:03:34.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035508 - http://www.securityfocus.com/bid/85917 - https://security.gentoo.org/glsa/201701-16 - http://www.openwall.com/lists/oss-security/2016/04/07/4 - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-3623 State: PUBLISHED Published: 2016-10-03T16:00:00 Last Updated: 2024-08-06T00:03:34.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/85952 - http://bugzilla.maptools.org/show_bug.cgi?id=2569 - https://security.gentoo.org/glsa/201701-16 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html - http://www.openwall.com/lists/oss-security/2016/04/08/3 - http://www.debian.org/security/2017/dsa-
16-09/msg00039.html - http://www.openwall.com/lists/oss-security/2016/04/08/3 - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-3624 State: PUBLISHED Published: 2016-10-03T16:00:00 Last Updated: 2024-08-06T00:03:34.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) by setting the "-v" option to -1. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/04/08/4 - https://security.gentoo.org/glsa/201701-16 - http://www.securityfocus.com/bid/85956 - http://bugzilla.maptools.org/show_bug.cgi?id=2568 - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-3625 State: PUBLISHED Published: 2016-10-03T16:00:00 Last Updated: 2024-08-06T00:03:34.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: tif_read.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201701-16 - http://www.openwall.com/lists/oss-security/2016/04/08/5 - http://bugzilla.maptools.org/show_bug.cgi?id=2566
CVE ID: CVE-2016-3627 State: PUBLISHED Published: 2016-05-17T14:00:00 Last Updated: 2024-08-06T00:03:34.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2016/May/10 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_n
security/ovmbulletinjul2016-3090546.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157239 - https://kc.mcafee.com/corporate/index?page=content&id=SB10170 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00127.html - http://lists.opensuse.org/opensuse-updates/2016-05/msg00055.html - https://access.redhat.com/errata/RHSA-2016:1292 - http://www.openwall.com/lists/oss-security/2016/03/21/2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://www.debian.org/security/2016/dsa-3593 - http://www.securitytracker.com/id/1035335 - http://www.ubuntu.com/usn/USN-2994-1 - http://www.oracle.com/technetwork/topics/se
/www.securitytracker.com/id/1035335 - http://www.ubuntu.com/usn/USN-2994-1 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.securityfocus.com/bid/84992 - https://www.tenable.com/security/tns-2016-18 - http://rhn.redhat.com/errata/RHSA-2016-2957.html - https://security.gentoo.org/glsa/201701-37 - http://www.openwall.com/lists/oss-security/2016/03/21/3
CVE ID: CVE-2016-3628 State: PUBLISHED Published: 2016-04-20T10:00:00 Last Updated: 2024-08-06T00:03:34.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in tibemsd in the server in TIBCO Enterprise Message Service (EMS) before 8.3.0 and EMS Appliance before 2.4.0 allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via crafted inbound data. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/mk/advisory.jsp - http://www.tibco.com/assets/blt8a2d9978616c21fe/2016-001-advisory.txt
CVE ID: CVE-2016-3629 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3630 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-06T00:03:34.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b) short records. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181505.html - https://security.gentoo.org/glsa/201612-19 - http://www.debian.org/security/2016/dsa-3542 - https://selenic.com/repo/hg-stable/rev/b9714d958e89 - https://selenic.com/re
p://www.debian.org/security/2016/dsa-3542 - https://selenic.com/repo/hg-stable/rev/b9714d958e89 - https://selenic.com/repo/hg-stable/rev/b6ed2505d6cf - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00018.html - https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_3.7.3_.282016-3-29.29 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00016.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181542.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00043.html
CVE ID: CVE-2016-3631 State: PUBLISHED Published: 2016-10-03T16:00:00 Last Updated: 2024-08-06T00:03:34.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) cpStrips and (2) cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the bytecounts[] array variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035508 - https://security.gentoo.org/glsa/201701-16 - http://www.openwall.com/lists/oss-security/2016/04/08/10
CVE ID: CVE-2016-3632 State: PUBLISHED Published: 2016-09-21T18:00:00 Last Updated: 2024-08-06T00:03:34.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://bugzilla.maptools.org/show_bug.cgi?id=2549 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.