Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-16879 State: PUBLISHED Published: 2017-11-22T22:00:00 Last Updated: 2024-08-05T20:35:21.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the _nc_write_entry function in tinfo/write_entry.c in ncurses 6.0 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted terminfo file, as demonstrated by tic. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/145045/GNU-ncurses-6.0-tic-Denial-Of-Service.html - https://security.gentoo.org/glsa/201804-13 - http://invisible-island.net/ncurses/NEWS.html#t20171125 - https://tools.cisco.co
://security.gentoo.org/glsa/201804-13 - http://invisible-island.net/ncurses/NEWS.html#t20171125 - https://tools.cisco.com/security/center/viewAlert.x?alertId=57695 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2017-16880 State: PUBLISHED Published: 2017-11-17T21:00:00Z Last Updated: 2024-09-16T22:40:30.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/filp/whoops/commit/c16791d28d1ca3139e398145f0c6565c523c291a
CVE ID: CVE-2017-16881 State: PUBLISHED Published: 2017-11-18T13:00:00Z Last Updated: 2024-09-17T01:00:36.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/avatar, related to processor/AdminProcessor.java, processor/ArticleProcessor.java, processor/UserProcessor.java, service/ArticleQueryService.java, service/AvatarQueryService.java, and service/CommentQueryService.java. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/b3log/symphony/issues/504
CVE ID: CVE-2017-16882 State: PUBLISHED Published: 2017-11-18T18:00:00 Last Updated: 2024-08-05T20:35:21.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account (and similarly can have etc/icinga.cfg owned by a non-root account), which allows local users to gain privileges by leveraging access to this non-root account, a related issue to CVE-2017-14312. This also affects bin/icingastats, bin/ido2db, and bin/log2ido. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Icinga/icinga-core/issues/1601 - https
ditional Analyst Notes: - CVE Program Container: References: - https://github.com/Icinga/icinga-core/issues/1601 - https://security.gentoo.org/glsa/202007-31
CVE ID: CVE-2017-16883 State: PUBLISHED Published: 2017-11-18T18:00:00 Last Updated: 2024-08-05T20:35:21.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/01/msg00014.html - https://github.com/libming/libming/issues/77
CVE ID: CVE-2017-16884 State: PUBLISHED Published: 2017-12-06T16:00:00 Last Updated: 2024-08-05T20:35:21.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MistServer before 2.13 allows remote attackers to inject arbitrary web script or HTML via vectors related to failed authentication requests alerts. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/145182/MistServer-2.12-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2017/Dec/2 - http://hyp3rlinx.altervista.org/advisories/MIST-SERVER-v2.12-UNAUTHENTICATED-PERSISTENT-XSS-CVE-2017-16884.txt - https://www.exploit-db.co
ltervista.org/advisories/MIST-SERVER-v2.12-UNAUTHENTICATED-PERSISTENT-XSS-CVE-2017-16884.txt - https://www.exploit-db.com/exploits/43205/ - https://news.mistserver.org/news/78/Stable+release+2.13+now+available%21
CVE ID: CVE-2017-16885 State: PUBLISHED Published: 2018-01-12T17:00:00 Last Updated: 2024-08-05T20:35:21.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining information about Internet Usage, Changing Passwords, etc.) allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware ID, Connected users to device along their MAC Addresses, etc. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43460/ - http://seclists.org/fulldisclosure/2018/Jan/28
CVE ID: CVE-2017-16886 State: PUBLISHED Published: 2018-01-12T17:00:00 Last Updated: 2024-08-05T20:35:21.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43460/ - http://seclists.org/fulldisclosure/2018/Jan/28
CVE ID: CVE-2017-16887 State: PUBLISHED Published: 2018-01-12T17:00:00 Last Updated: 2024-08-05T20:35:21.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43460/ - http://seclists.org/fulldisclosure/2018/Jan/28
CVE ID: CVE-2017-16890 State: PUBLISHED Published: 2018-07-09T11:00:00 Last Updated: 2024-08-05T20:35:21.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: SWFTools 0.9.2 has a divide-by-zero error in the wav_convert2mono function in lib/wav.c because the align value may be zero. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/57
CVE ID: CVE-2017-16892 State: PUBLISHED Published: 2017-11-19T17:00:00Z Last Updated: 2024-09-16T17:28:59.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Bftpd before 4.7, there is a memory leak in the file rename function. Additional Analyst Notes: - CVE Program Container: References: - http://bftpd.sourceforge.net/news.html#032390 - http://bftpd.sourceforge.net/downloads/CHANGELOG
CVE ID: CVE-2017-16893 State: PUBLISHED Published: 2017-12-01T17:00:00 Last Updated: 2024-08-05T20:35:21.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The application Piwigo is affected by an SQL injection vulnerability in version 2.9.2 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. tags.php is affected: values of the edit_list parameters are not sanitized; these are used to construct an SQL query and retrieve a list of registered users into the application. Additional Analyst Notes: - CVE Program Container: References: - https://github.
registered users into the application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/804
CVE ID: CVE-2017-16894 State: PUBLISHED Published: 2017-11-20T01:00:00 Last Updated: 2024-08-05T20:35:21.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct request for the /.env URI. NOTE: this CVE is only about Laravel framework's writeNewEnvironmentFileWith function in src/Illuminate/Foundation/Console/KeyGenerateCommand.php, which uses file_put_contents without restricting the .env permissions. The .env filename is not used exclusively by Laravel framework. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com
d exclusively by Laravel framework. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/finnwea/status/967709791442341888 - http://whiteboyz.xyz/laravel-env-file-vuln.html - http://packetstormsecurity.com/files/153641/PHP-Laravel-Framework-Token-Unserialize-Remote-Command-Execution.html
CVE ID: CVE-2017-16895 State: PUBLISHED Published: 2017-12-01T17:00:00 Last Updated: 2024-08-05T20:35:21.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges via a crafted data packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43216/ - https://www.arqbackup.com/blog/arq-mac-import-security-update/ - https://m4.rkw.io/blog/cve201716895-local-root-privesc-in-arq-backup--597.html
CVE ID: CVE-2017-16896 State: PUBLISHED Published: 2017-11-20T16:00:00Z Last Updated: 2024-09-16T22:02:07.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter. Additional Analyst Notes: - CVE Program Container: References: - https://git.tt-rss.org/git/tt-rss/commit/2352c320c2ed34ec7df1ad22f0c55a1b26489815 - https://discourse.tt-rss.org/t/sql-injection-in-forgotpass-fixed/669
CVE ID: CVE-2017-16897 State: PUBLISHED Published: 2017-12-23T21:00:00 Last Updated: 2024-08-05T20:35:21.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions < 3.0.5. This vulnerability allows an attacker to impersonate another user and potentially elevate their privileges if the SAML identity provider does not sign the full SAML response (e.g., only signs the assertion within the response). Additional Analyst Notes: - CVE Program Container: References: - https://auth0.com/docs/security/bulletins/cve-2017-16897
CVE ID: CVE-2017-16898 State: PUBLISHED Published: 2017-11-20T17:00:00 Last Updated: 2024-08-05T20:35:21.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attackers to cause a denial of service via a crafted file, a different vulnerability than CVE-2016-9264. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/01/msg00014.html - https://github.com/libming/libming/issues/75
CVE ID: CVE-2017-16899 State: PUBLISHED Published: 2017-11-20T18:00:00Z Last Updated: 2024-09-16T22:50:59.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in dev/gentikz.c, and the read_textobject functions in read.c and read1_3.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881143
CVE ID: CVE-2017-16900 State: PUBLISHED Published: 2020-02-27T17:39:44 Last Updated: 2024-08-05T20:35:21.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect Access Control in Hunesion i-oneNet 3.0.6042.1200 allows the local user to access other user's information which is unauthorized via brute force. Additional Analyst Notes: - CVE Program Container: References: - http://hunesion.com - http://i-onenet.com - https://github.com/summtime/CVE/tree/master/CVE-2017-16900
CVE ID: CVE-2017-16902 State: PUBLISHED Published: 2017-11-20T18:00:00 Last Updated: 2024-08-05T20:35:21.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot. Additional Analyst Notes: - CVE Program Container: References: - http://gh0s7.net/vonage2 - https://www.exploit-db.com/exploits/43164/
CVE ID: CVE-2017-16903 State: PUBLISHED Published: 2017-11-20T19:00:00 Last Updated: 2024-08-05T20:35:21.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences in the dir parameter, in conjunction with PHP code in the content parameter, within a template Style add request to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SQYY/CVE/blob/master/Lvyecms_G.txt
CVE ID: CVE-2017-16904 State: PUBLISHED Published: 2017-11-20T19:00:00 Last Updated: 2024-08-05T20:35:21.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SQYY/CVE/blob/master/Lvyecms_X.txt
CVE ID: CVE-2017-16905 State: PUBLISHED Published: 2018-01-05T08:00:00 Last Updated: 2024-08-05T20:35:21.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP, which allows remote attackers to spoof content, and consequently achieve remote code execution, via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - https://wwws.nightwatchcybersecurity.com/2018/01/04/rce-in-duolingos-tinycards-app-for-android-cve-2017-16905/ - https://hackerone.com/reports/281605
CVE ID: CVE-2017-16906 State: PUBLISHED Published: 2017-11-20T20:00:00 Last Updated: 2024-08-05T20:35:21.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event" action. Additional Analyst Notes: - CVE Program Container: References: - http://code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html - https://github.com/horde/kronolith/commit/09d90141292f9ec516a7a2007bf828ce2bbdf60d - https://github.com/starnightcyber/Miscellaneous/blob/master/Horde/README.md - https://lists.debian.org/debian-lts-announce/2020/08/msg00049.html
CVE ID: CVE-2017-16907 State: PUBLISHED Published: 2017-11-20T20:00:00 Last Updated: 2024-08-05T20:35:21.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action. Additional Analyst Notes: - CVE Program Container: References: - http://code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html - https://github.com/horde/base/commit/fb2113bbcd04bd4a28c46aad0889fb0a3979a230 - https://lists.debian.org/debian-lts-announce/2020/08/msg00046.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00047.html
CVE ID: CVE-2017-16908 State: PUBLISHED Published: 2017-11-20T20:00:00 Last Updated: 2024-08-05T20:35:21.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource. This can be leveraged for remote code execution after compromising an administrator account, because the CVE-2015-7984 CSRF protection mechanism can then be bypassed. Additional Analyst Notes: - CVE Program Container: References: - http://code610.blogspot.com/2017/11/rce-via-xss-horde-5219.html - https://github.com/horde/kronolith/commit/39f740068ad21618f6f70b6e37855c61cadbd716 - https://lists.debian.org/debian-lts-announce/2020/08/m
horde/kronolith/commit/39f740068ad21618f6f70b6e37855c61cadbd716 - https://lists.debian.org/debian-lts-announce/2020/08/msg00048.html
CVE ID: CVE-2017-16909 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T20:35:21.323Z Vendors: n/a Products: LibRaw Problem Types: DoS (Denial of Service) through heap-based buffer overflow Description: An error related to the "LibRaw::panasonic_load_raw()" function (dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause a heap-based buffer overflow and subsequently cause a crash via a specially crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://github.com/LibRaw/LibRaw/commit/f1394822a0152ceed77815eafa5cac4e8baab10a - https://secuniaresearch.
ngelog.txt - https://github.com/LibRaw/LibRaw/commit/f1394822a0152ceed77815eafa5cac4e8baab10a - https://secuniaresearch.flexerasoftware.com/secunia_research/2017-19/ - https://secuniaresearch.flexerasoftware.com/advisories/76000/ - https://usn.ubuntu.com/3615-1/
CVE ID: CVE-2017-16910 State: PUBLISHED Published: 2018-12-07T22:00:00 Last Updated: 2024-08-05T20:35:21.282Z Vendors: n/a Products: LibRaw Problem Types: DoS (Denial of Service) through invalid read memory access Description: An error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt - https://github.com/LibRaw/LibRaw/commit/5563e6ddc3f7cb93d98b491194ceebdee7288d36 - https://secuniaresearch.flexerasoftwa
https://github.com/LibRaw/LibRaw/commit/5563e6ddc3f7cb93d98b491194ceebdee7288d36 - https://secuniaresearch.flexerasoftware.com/secunia_research/2017-19/ - https://secuniaresearch.flexerasoftware.com/advisories/76000/ - https://usn.ubuntu.com/3615-1/
CVE ID: CVE-2017-16911 State: PUBLISHED Published: 2018-01-31T22:00:00Z Last Updated: 2024-09-16T23:06:46.855Z Vendors: Flexera Software LLC Products: Linux Kernel Problem Types: Kernel memory address disclosure Description: The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kernel memory addresses. Successful exploitation requires that a USB device is attached over IP. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3619-2/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114 - https://secuniaresearch.flexerasoftware.com/advisor
/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114 - https://secuniaresearch.flexerasoftware.com/advisories/80454/ - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=2f2d0088eb93db5c649d2a5e34a3800a8a935fc5 - https://www.spinics.net/lists/linux-usb/msg163480.html - https://usn.ubuntu.com/3754-1/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8 - http://www.securityfocus.com/bid/102156 - https://secuniaresearch.flexerasoftware.com/secunia_research/2017-20/ - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html - https://usn.ubuntu.com/3619-1/
CVE ID: CVE-2017-16912 State: PUBLISHED Published: 2018-01-31T22:00:00Z Last Updated: 2024-09-17T03:48:33.745Z Vendors: Flexera Software LLC Products: Linux Kernel Problem Types: Denial of service (out-of-bounds read) Description: The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 allows attackers to cause a denial of service (out-of-bounds read) via a specially crafted USB over IP packet. Additional Analyst Notes: - CVE Program Container: References: - https://secuniaresearch.flexerasoftware.com/secunia_research/2017-21/ - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3619-2/ - https://cdn.kernel.or
search/2017-21/ - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3619-2/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114 - https://www.spinics.net/lists/linux-usb/msg163480.html - https://usn.ubuntu.com/3754-1/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8 - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=635f545a7e8be7596b9b2b6a43cab6bbd5a88e43 - https://secuniaresearch.flexerasoftware.com/advisories/77000/ - http://www.securityfocus.com/bid/102150 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.71 - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html -
ernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.71 - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html - https://usn.ubuntu.com/3619-1/
CVE ID: CVE-2017-16913 State: PUBLISHED Published: 2018-01-31T22:00:00Z Last Updated: 2024-09-16T19:47:31.753Z Vendors: Flexera Software LLC Products: Linux Kernel Problem Types: Denial of service (arbitrary memory allocation) Description: The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMD_SUBMIT packets allows attackers to cause a denial of service (arbitrary memory allocation) via a specially crafted USB over IP packet. Additional Analyst Notes: - CVE Program Container: References: - https://secuniaresearch.flexerasoftware.com/secunia_research/2017-21/ - https://www.debian.org/security/2018/ds
ences: - https://secuniaresearch.flexerasoftware.com/secunia_research/2017-21/ - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3619-2/ - https://secuniaresearch.flexerasoftware.com/advisories/80601/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.114 - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/drivers/usb/usbip?id=c6688ef9f29762e65bce325ef4acd6c675806366 - https://www.spinics.net/lists/linux-usb/msg163480.html - https://usn.ubuntu.com/3754-1/ - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.8 - http://www.securityfocus.com/bid/102150 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.71 - https:
.14.8 - http://www.securityfocus.com/bid/102150 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.71 - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html - https://usn.ubuntu.com/3619-1/
CVE ID: CVE-2017-16914 State: PUBLISHED Published: 2018-01-31T22:00:00Z Last Updated: 2024-09-17T01:42:05.146Z Vendors: Flexera Software LLC Products: Linux Kernel Problem Types: Denial of service (NULL pointer dereference) Description: The "stub_send_ret_submit()" function (drivers/usb/usbip/stub_tx.c) in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows attackers to cause a denial of service (NULL pointer dereference) via a specially crafted USB over IP packet. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.49 - https://secuniaresearch.flexerasoftware.com/secunia_research/2017-21/ - https: