Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-8366 State: PUBLISHED Published: 2020-01-14T15:19:52 Last Updated: 2024-08-06T08:13:32.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors related to indexes. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134573/LibRaw-0.17-Overflow.html - http://www.libraw.org/news/libraw-0-17-1 - http://seclists.org/fulldisclosure/2015/Nov/108
CVE ID: CVE-2015-8367 State: PUBLISHED Published: 2020-01-14T15:19:49 Last Updated: 2024-08-06T08:13:32.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134573/LibRaw-0.17-Overflow.html - http://www.libraw.org/news/libraw-0-17-1 - http://seclists.org/fulldisclosure/2015/Nov/108
CVE ID: CVE-2015-8368 State: PUBLISHED Published: 2015-12-17T19:00:00 Last Updated: 2024-08-06T08:13:32.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/password_reset.lua. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134593/ntop-ng-2.0.15102-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2015/Dec/10 - https://www.exploit-db.com/exploits/38836/
CVE ID: CVE-2015-8369 State: PUBLISHED Published: 2015-12-17T19:00:00 Last Updated: 2024-08-06T08:13:32.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in include/top_graph_header.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rra_id parameter in a properties action to graph.php. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201607-05 - http://bugs.cacti.net/view.php?id=2646 - http://packetstormsecurity.com/files/134724/Cacti-0.8.8f-SQL-Injection.html - http://www.debian.org/security/2015/dsa-3423 - http://seclists.org/fulldisclosure/2015/Dec/8 -
.8f-SQL-Injection.html - http://www.debian.org/security/2015/dsa-3423 - http://seclists.org/fulldisclosure/2015/Dec/8 - http://www.securitytracker.com/id/1034497
CVE ID: CVE-2015-8370 State: PUBLISHED Published: 2015-12-16T00:00:00 Last Updated: 2024-10-21T16:51:57.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get function in lib/crypto.c, which trigger an "Off-by-two" or "Out of bounds overwrite" memory error. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.co
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://packetstormsecurity.com/files/134831/Grub2-Authentication-Bypass.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00043.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00003.html - http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html - http://www.securityfocus.com/bid/79358 - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00037.html - http://www.securitytracker.com/id/1034422 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00
technetwork/topics/security/cpujan2016-2367955.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00040.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.openwall.com/lists/oss-security/2015/12/15/6 - http://www.securityfocus.com/archive/1/537115/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00039.html - http://seclists.org/fulldisclosure/2015/Dec/69 - https://security.gentoo.org/glsa/201512-03 - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173703.html - http://www.ubuntu.com/usn/US
-03 - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173703.html - http://www.ubuntu.com/usn/USN-2836-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/174049.html - http://rhn.redhat.com/errata/RHSA-2015-2623.html - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00044.html - http://www.debian.org/security/2015/dsa-3421 - http://www.openwall.com/lists/oss-security/2024/01/15/3
CVE ID: CVE-2015-8371 State: PUBLISHED Published: 2023-09-21T00:00:00 Last Updated: 2024-09-25T13:30:18.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Composer before 2016-02-10 allows cache poisoning from other projects built on the same host. This results in attacker-controlled code entering a server-side build process. The issue occurs because of the way that dist packages are cached. The cache key is derived from the package name, the dist type, and certain other data from the package repository (which may simply be a commit hash, and thus can be found by an attacker). Versions through 1.0.0-alpha11 are affected, and 1.0.0 is unaffected. Additional Analyst Notes: - CVE P
by an attacker). Versions through 1.0.0-alpha11 are affected, and 1.0.0 is unaffected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://flyingmana.de/blog_en/2016/02/14/composer_cache_injection_vulnerability_cve_2015_8371.html - https://github.com/FriendsOfPHP/security-advisories/blob/e26be423c5bcfdb38478d2f92d1f928c15afb561/composer/composer/CVE-2015-8371.yaml - https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/composer/composer/CVE-2015-8371.yml - https://github.com/composer/composer
CVE ID: CVE-2015-8373 State: PUBLISHED Published: 2015-12-22T23:00:00 Last Updated: 2024-08-06T08:13:32.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging settings are used, allow remote attackers to cause a denial of service (daemon crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - https://kb.isc.org/article/AA-01318 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175337.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175218.html
CVE ID: CVE-2015-8374 State: PUBLISHED Published: 2015-12-28T11:00:00 Last Updated: 2024-08-06T08:13:32.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034895 - https://github.com/torvalds/linux/commit/0305cd5f7fca85dae392b9ba85b116896eb7c1c7 - http://www.ubuntu.com/usn/USN-2887-2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.openwall.co
SN-2887-2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.openwall.com/lists/oss-security/2015/11/27/2 - http://www.ubuntu.com/usn/USN-2886-1 - http://www.ubuntu.com/usn/USN-2887-1 - http://www.ubuntu.com/usn/USN-2890-3 - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://www.ubuntu.com/usn/USN-2889-1 - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://www.ubuntu.com/usn/USN-2889-2 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3 - https://bugzilla.redhat.com/show_bug.cgi?id=1286261 - http://www.securityfocus.com/bid/78219 - http://www.ubuntu.com/usn/USN-2890-2 - http://www.oracle.com/technetwork/topics/security/o
securityfocus.com/bid/78219 - http://www.ubuntu.com/usn/USN-2890-2 - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://www.debian.org/security/2015/dsa-3426 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0305cd5f7fca85dae392b9ba85b116896eb7c1c7 - http://www.ubuntu.com/usn/USN-2890-1 - http://www.ubuntu.com/usn/USN-2888-1
CVE ID: CVE-2015-8375 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T08:13:32.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHP-Fusion 9. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/bscarvell/57f82000bf823071404e - http://www.openwall.com/lists/oss-security/2015/11/29/4 - https://github.com/php-fusion/PHP-Fusion/commit/f1a5fce791e2392d5a23a6d62ab65c481cdd6a66 - http://cve.killedkenny.io/cve/CVE-2015-8375
CVE ID: CVE-2015-8376 State: PUBLISHED Published: 2016-01-08T21:00:00 Last Updated: 2024-08-06T08:13:32.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Navigation Group, or (3) Label parameter to blueprints/sections/edit/1. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Dec/101 - http://seclists.org/fulldisclosure/2015/Dec/7
CVE ID: CVE-2015-8377 State: PUBLISHED Published: 2015-12-15T21:00:00 Last Updated: 2024-08-06T08:13:32.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the host_new_graphs_save function in graphs_new.php in Cacti 0.8.8f and earlier allows remote authenticated users to execute arbitrary SQL commands via crafted serialized data in the selected_graphs_array parameter in a save action. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201607-05 - http://www.debian.org/security/2016/dsa-3494 - http://www.securitytracker.com/id/1034498 - http://seclists.org/fulldisclosure/2015/Dec/57
CVE ID: CVE-2015-8378 State: PUBLISHED Published: 2017-04-10T14:00:00 Last Updated: 2024-08-06T08:13:32.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: In KeePassX before 0.4.4, a cleartext copy of password data is created upon a cancel of an XML export action. This allows context-dependent attackers to obtain sensitive information by reading the .xml dotfile. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/791858 - https://www.keepassx.org/changelog
CVE ID: CVE-2015-8379 State: PUBLISHED Published: 2016-01-26T19:00:00 Last Updated: 2024-08-06T08:13:32.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to bypass the CSRF protection mechanism via the _method parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/135301/CakePHP-3.2.0-CSRF-Bypass.html - http://blog.mindedsecurity.com/2016/01/request-parameter-method-may-lead-to.html - http://www.securityfocus.com/archive/1/537317/100/0/threaded - http://karmainsecurity.com/KIS-2016-01 - http://bakery.cakephp.org/2015/11/29/cakephp_315_released.html - http://se
ed - http://karmainsecurity.com/KIS-2016-01 - http://bakery.cakephp.org/2015/11/29/cakephp_315_released.html - http://seclists.org/fulldisclosure/2016/Jan/42 - https://github.com/cakephp/cakephp/commit/0f818a23a876c01429196bf7623e1e94a50230f0
CVE ID: CVE-2015-8380 State: PUBLISHED Published: 2015-12-02T01:00:00 Last Updated: 2024-08-06T08:13:32.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \01 string, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/29/1 - https://bugs.exim.org/show_bug.cgi?id=1637 - https://blog.fuzzing-projec
.openwall.com/lists/oss-security/2015/11/29/1 - https://bugs.exim.org/show_bug.cgi?id=1637 - https://blog.fuzzing-project.org/29-Heap-Overflow-in-PCRE.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173700.html - http://www.securityfocus.com/bid/77695 - https://bto.bluecoat.com/security-advisory/sa128 - http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup - https://security.gentoo.org/glsa/201607-02
CVE ID: CVE-2015-8381 State: PUBLISHED Published: 2015-12-02T01:00:00 Last Updated: 2024-08-06T08:13:32.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The compile_regex function in pcre_compile.c in PCRE before 8.38 and pcre2_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R')(\k'R')|((?'R')))H'Rk'Rf)|s(?'R'))))/ and /(?J:(?|(:(?|(?'R')(\z(?|(?'R')(\k'R')|((?'R')))k'R')|((?'R')))H'Ak'Rf)|s(?'R')))/ patterns, and related patterns with certain group references, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp o
ow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/29/1 - https://access.redhat.com/errata/RHSA-2016:1132 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.securityfocus.com/bid/76187 - https://bugs.exim.org/show_bug.cgi?id=1667 - https://bugs.exim.org/show_bug.cgi?id=1672 - https://bto.bluecoat.com/security-advisory/sa128 - http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup - https://security.gentoo.org/glsa/201607-02
CVE ID: CVE-2015-8382 State: PUBLISHED Published: 2015-12-02T01:00:00 Last Updated: 2024-08-06T08:13:32.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: The match function in pcre_exec.c in PCRE before 8.37 mishandles the /(?:((abcd))|(((?:(?:(?:(?:abc|(?:abcdef))))b)abcdefghi)abc)|((*ACCEPT)))/ pattern and related patterns involving (*ACCEPT), which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (partially initialized memory and application crash) via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-2547. Additional Analyst Notes: - CVE Program Container:
JavaScript RegExp object encountered by Konqueror, aka ZDI-CAN-2547. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/29/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1187225 - http://www.securityfocus.com/bid/76157 - http://www.openwall.com/lists/oss-security/2015/08/04/3 - https://bugs.exim.org/show_bug.cgi?id=1537 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=c351b47ce85a3a147cfa801fa9f0149ab4160834 - https://bto.bluecoat.com/security-advisory/sa128 - http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup - http://vcs.pcre.org/pcre/code/trunk/pcre_exec.c?r1=1502&r2=1510
CVE ID: CVE-2015-8383 State: PUBLISHED Published: 2015-12-02T00:00:00 Last Updated: 2024-08-06T08:13:32.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/29/1 - https://access.redhat.com/errata/RHSA-2016:1132 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://lists.fedor
https://access.redhat.com/errata/RHSA-2016:1132 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://bto.bluecoat.com/security-advisory/sa128 - http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup - https://security.gentoo.org/glsa/201607-02 - https://security.netapp.com/advisory/ntap-20230216-0002/
CVE ID: CVE-2015-8384 State: PUBLISHED Published: 2015-12-02T01:00:00 Last Updated: 2024-08-06T08:13:32.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\g{d}))/ pattern and related patterns with certain recursive back references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror, a related issue to CVE-2015-8392 and CVE-2015-8395. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/29/1 - https:/
Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/29/1 - https://access.redhat.com/errata/RHSA-2016:1132 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - https://bto.bluecoat.com/security-advisory/sa128 - http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup - https://security.gentoo.org/glsa/201607-02
CVE ID: CVE-2015-8385 State: PUBLISHED Published: 2015-12-02T01:00:00 Last Updated: 2024-08-06T08:13:32.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCRE before 8.38 mishandles the /(?|(\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/29/1 - http://www.securityfocus.com/bid/85572 - https://access.redhat.com/
//www.openwall.com/lists/oss-security/2015/11/29/1 - http://www.securityfocus.com/bid/85572 - https://access.redhat.com/errata/RHSA-2016:1132 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886 - http://rhn.redhat.com/errata/RHSA-2016-1025.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - https://bto.bluecoat.com/security-advisory/sa128 - http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup - https://security.gentoo.org/glsa/201607-02
CVE ID: CVE-2015-8386 State: PUBLISHED Published: 2015-12-02T00:00:00 Last Updated: 2024-08-06T08:13:32.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/29/1 - https://access.redhat.com/errata/RHSA-2016:1132 - http://www.securityfocus.com/
ll.com/lists/oss-security/2015/11/29/1 - https://access.redhat.com/errata/RHSA-2016:1132 - http://www.securityfocus.com/bid/82990 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886 - http://rhn.redhat.com/errata/RHSA-2016-1025.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://bto.bluecoat.com/security-advisory/sa128 - http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup - https://security.gentoo.org/glsa
m/security-advisory/sa128 - http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup - https://security.gentoo.org/glsa/201607-02 - https://security.netapp.com/advisory/ntap-20230216-0002/
CVE ID: CVE-2015-8387 State: PUBLISHED Published: 2015-12-02T00:00:00 Last Updated: 2024-08-06T08:13:32.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/29/1 - http://www.securityfocus.com/bid/82990 - http://lists.fedoraproject.org/pipermail/package-announce/20
ity/2015/11/29/1 - http://www.securityfocus.com/bid/82990 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731 - https://bto.bluecoat.com/security-advisory/sa128 - http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup - https://security.gentoo.org/glsa/201607-02 - https://security.netapp.com/advisory/ntap-20230216-0002/
CVE ID: CVE-2015-8388 State: PUBLISHED Published: 2015-12-02T01:00:00 Last Updated: 2024-08-06T08:13:32.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/29/1 - https://access.redhat.com/errata/RHSA-2016:1132 - http://
s: - http://www.openwall.com/lists/oss-security/2015/11/29/1 - https://access.redhat.com/errata/RHSA-2016:1132 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886 - http://rhn.redhat.com/errata/RHSA-2016-1025.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.securityfocus.com/bid/85576 - https://bto.bluecoat.com/security-advisory/sa128 - http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup - https://security.gentoo.org/glsa/201607-02
CVE ID: CVE-2015-8389 State: PUBLISHED Published: 2015-12-02T00:00:00 Last Updated: 2024-08-06T08:13:32.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (infinite recursion) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/11/29/1 - http://www.securityfocus.com/bid/82990 - http://lists.fedoraproject.org/pipermail/package-announce/2016