Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-9556 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:50:38.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94492 - https://github.com/ImageMagick/ImageMagick/commit/ce98a7acbcfca7f0a178f4b1e7b957e419e0cc99 - https://blogs.gentoo.org/ago/2016/11/19/imagemagick-heap-based-buffer-overflow-in-ispixelgray-pixel-accessor-h - http://lists.opensuse.org/opensuse-u
2016/11/19/imagemagick-heap-based-buffer-overflow-in-ispixelgray-pixel-accessor-h - http://lists.opensuse.org/opensuse-updates/2016-12/msg00040.html - http://www.openwall.com/lists/oss-security/2016/11/23/1 - http://www.openwall.com/lists/oss-security/2016/12/02/12 - http://www.openwall.com/lists/oss-security/2016/12/01/4 - https://bugzilla.redhat.com/show_bug.cgi?id=1398198 - http://www.debian.org/security/2016/dsa-3726
CVE ID: CVE-2016-9557 State: PUBLISHED Published: 2017-03-23T18:00:00 Last Updated: 2024-08-06T02:50:38.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a denial of service (application crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94490 - https://blogs.gentoo.org/ago/2016/11/19/jasper-signed-integer-overflow-in-jas_image-c - https://bugzilla.redhat.com/show_bug.cgi?id=1398251 - https://github.com/mdadams/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a - http://www.openwall.com/lists/oss-security/2016/1
b.com/mdadams/jasper/commit/d42b2388f7f8e0332c846675133acea151fc557a - http://www.openwall.com/lists/oss-security/2016/11/23/2
CVE ID: CVE-2016-9558 State: PUBLISHED Published: 2017-02-28T18:00:00 Last Updated: 2024-08-06T02:50:38.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote attackers to have unspecified impact via a crafted bit pattern in a signed leb number, aka a "negation overflow." Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/11/19/6 - http://www.securityfocus.com/bid/94491 - https://blogs.gentoo.org/ago/2016/11/19/libdwarf-negation-overflow-in-dwarf_leb-c/ - http://www.openwall.com/lis
94491 - https://blogs.gentoo.org/ago/2016/11/19/libdwarf-negation-overflow-in-dwarf_leb-c/ - http://www.openwall.com/lists/oss-security/2016/11/23/3 - https://sourceforge.net/p/libdwarf/code/ci/4f19e1050cd8e9ddf2cb6caa061ff2fec4c9b5f9/#diff-5
CVE ID: CVE-2016-9559 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-06T02:50:38.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/tiff.c in ImageMagick before 7.0.3.7 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94489 - http://www.openwall.com/lists/oss-security/2016/11/23/4 - https://github.com/ImageMagick/ImageMagick/commit/b61d35eaccc0a7ddeff8a1c3abfcd0a43ccf210b - http://www.openwall.com/lists/oss-security/2016/11/19/7 - https://github.com/ImageMagick/ImageMagick/issues/298 - https:
http://www.openwall.com/lists/oss-security/2016/11/19/7 - https://github.com/ImageMagick/ImageMagick/issues/298 - https://blogs.gentoo.org/ago/2016/11/19/imagemagick-null-pointer-must-never-be-null-tiff-c/ - http://www.debian.org/security/2016/dsa-3726
CVE ID: CVE-2016-9560 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T02:50:38.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspecified impact via a crafted image. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3785 - https://access.redhat.com/errata/RHSA-2017:1208 - https://github.com/mdadams/jasper/commit/1abc2e5a401a4bf1d5ca4df91358ce5df111f495 - https://blogs.gentoo.org/ago/2016/11/20/jasper-stack-based-buffer-overflow-in-jpc_tsfb_getbands2-jpc_tsfb-c/ -
11f495 - https://blogs.gentoo.org/ago/2016/11/20/jasper-stack-based-buffer-overflow-in-jpc_tsfb_getbands2-jpc_tsfb-c/ - http://www.openwall.com/lists/oss-security/2016/11/23/5 - http://www.securityfocus.com/bid/94428 - http://www.openwall.com/lists/oss-security/2016/11/20/1 - https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2016-9560
CVE ID: CVE-2016-9561 State: PUBLISHED Published: 2016-12-23T05:00:00 Last Updated: 2024-08-06T02:50:38.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service (allocation of huge memory, and being killed by the OS) via a crafted MOV file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/08/1 - http://www.securityfocus.com/bid/94756
CVE ID: CVE-2016-9562 State: PUBLISHED Published: 2016-11-23T02:00:00 Last Updated: 2024-08-06T02:50:38.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP NetWeaver AS JAVA 7.4 allows remote attackers to cause a Denial of Service (null pointer exception and icman outage) via an HTTPS request to the sap.com~P4TunnelingApp!web/myServlet URI, aka SAP Security Note 2313835. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92418 - https://erpscan.io/advisories/erpscan-16-033-sap-netweaver-java-icman-dos-vulnerability/ - http://www.securityfocus.com/bid/95363
CVE ID: CVE-2016-9563 State: PUBLISHED Published: 2016-11-23T02:00:00.000Z Last Updated: 2025-10-21T23:55:47.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.com~tc~bpem~him~uwlconn~provider~web/bpemuwlconn URI, aka SAP Security Note 2296909. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/92419 - https://erpscan.io/advisories/erpscan-16-034-sap-netweaver-java-xxe-vulnerability-bc-bmt-bpm-dsk-component/ - https://launchpad.support.sap.com/#/notes/2296909
CVE ID: CVE-2016-9564 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-06T02:50:38.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an HTTP GET request requesting a long URI with only '/' and '.' characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.ljcusack.io/cve-2016-9564-stack-based-buffer-overflow-in-boa-0-dot-92r - http://www.securityfocus.com/bid/94599
CVE ID: CVE-2016-9565 State: PUBLISHED Published: 2016-12-15T22:00:00 Last Updated: 2024-08-06T02:50:38.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201710-20 - http://www.securityfocus.com/archive/1/539925/100/0/threaded - http://www.securitytracker.com/id/1037488 - http://www.securityfocus.com/bid
focus.com/archive/1/539925/100/0/threaded - http://www.securitytracker.com/id/1037488 - http://www.securityfocus.com/bid/94922 - http://rhn.redhat.com/errata/RHSA-2017-0258.html - http://rhn.redhat.com/errata/RHSA-2017-0212.html - http://rhn.redhat.com/errata/RHSA-2017-0213.html - http://packetstormsecurity.com/files/140169/Nagios-Core-Curl-Command-Injection-Code-Execution.html - http://seclists.org/fulldisclosure/2016/Dec/57 - https://www.exploit-db.com/exploits/40920/ - https://www.nagios.org/projects/nagios-core/history/4x/ - https://security.gentoo.org/glsa/201702-26 - http://rhn.redhat.com/errata/RHSA-2017-0259.html - https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-
http://rhn.redhat.com/errata/RHSA-2017-0259.html - https://legalhackers.com/advisories/Nagios-Exploit-Command-Injection-CVE-2016-9565-2008-4796.html - http://rhn.redhat.com/errata/RHSA-2017-0214.html - http://rhn.redhat.com/errata/RHSA-2017-0211.html
CVE ID: CVE-2016-9566 State: PUBLISHED Published: 2016-12-15T22:00:00 Last Updated: 2024-08-06T02:50:38.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201710-20 - https://www.exploit-db.com/exploits/40921/ - http://www.securityfocus.com/bid/94919 - https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4 -
yfocus.com/bid/94919 - https://github.com/NagiosEnterprises/nagioscore/commit/c29557dec91eba2306f5fb11b8da4474ba63f8c4 - http://rhn.redhat.com/errata/RHSA-2017-0258.html - https://security.gentoo.org/glsa/201612-51 - http://rhn.redhat.com/errata/RHSA-2017-0212.html - http://rhn.redhat.com/errata/RHSA-2017-0213.html - https://www.nagios.org/projects/nagios-core/history/4x/ - https://security.gentoo.org/glsa/201702-26 - https://lists.debian.org/debian-lts-announce/2018/12/msg00014.html - http://rhn.redhat.com/errata/RHSA-2017-0259.html - http://www.securitytracker.com/id/1037487 - http://seclists.org/fulldisclosure/2016/Dec/58 - https://bugzilla.redhat.com/show_bug.cgi?id=1402869 - https://leg
487 - http://seclists.org/fulldisclosure/2016/Dec/58 - https://bugzilla.redhat.com/show_bug.cgi?id=1402869 - https://legalhackers.com/advisories/Nagios-Exploit-Root-PrivEsc-CVE-2016-9566.html - http://rhn.redhat.com/errata/RHSA-2017-0214.html - http://rhn.redhat.com/errata/RHSA-2017-0211.html
CVE ID: CVE-2016-9567 State: PUBLISHED Published: 2016-11-23T11:00:00 Last Updated: 2024-08-06T02:50:38.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mDNIe system service on Samsung Mobile S7 devices with M(6.0) software does not properly restrict setmDNIeScreenCurtain API calls, enabling attackers to control a device's screen. This can be exploited via a crafted application to eavesdrop after phone shutdown or record a conversation. The Samsung ID is SVE-2016-6343. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94494 - http://security.samsungmobile.com/smrupdate.html#SMR-NOV-2016
CVE ID: CVE-2016-9568 State: PUBLISHED Published: 2018-02-19T19:00:00 Last Updated: 2024-08-06T02:50:38.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: A security design issue can allow an unprivileged user to interact with the Carbon Black Sensor and perform unauthorized actions. Additional Analyst Notes: - CVE Program Container: References: - https://labs.nettitude.com/blog/carbon-black-security-advisories-cve-2016-9570-cve-2016-9568-and-cve-2016-9569/
CVE ID: CVE-2016-9569 State: PUBLISHED Published: 2018-02-12T18:00:00 Last Updated: 2024-08-06T02:50:38.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial of service (out-of-bounds read and system crash) via a large counter value in an 0x62430028 IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - https://labs.nettitude.com/blog/carbon-black-security-advisories-cve-2016-9570-cve-2016-9568-and-cve-2016-9569/
CVE ID: CVE-2016-9570 State: PUBLISHED Published: 2018-02-12T18:00:00 Last Updated: 2024-08-06T02:50:38.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: cb.exe in Carbon Black 5.1.1.60603 allows attackers to cause a denial of service (out-of-bounds read, invalid pointer dereference, and application crash) by leveraging access to the NetMon named pipe. Additional Analyst Notes: - CVE Program Container: References: - https://labs.nettitude.com/blog/carbon-black-security-advisories-cve-2016-9570-cve-2016-9568-and-cve-2016-9569/
CVE ID: CVE-2016-9571 State: REJECTED Published: 2017-03-07T15:00:00 Last Updated: 2017-03-28T14:57:01 Description: No description available.
CVE ID: CVE-2016-9572 State: PUBLISHED Published: 2018-08-01T16:00:00 Last Updated: 2024-08-06T02:50:38.672Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: The OpenJPEG Project Products: openjpeg Problem Types: CWE-476 Description: A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201710-26 - https://github.com/szukw000/openjpeg/commit/7b28bd2b7
tainer: References: - https://security.gentoo.org/glsa/201710-26 - https://github.com/szukw000/openjpeg/commit/7b28bd2b723df6be09fe7791eba33147c1c47d0d - https://github.com/uclouvain/openjpeg/issues/863 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9572 - https://www.debian.org/security/2017/dsa-3768 - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - http://www.securityfocus.com/bid/109233
CVE ID: CVE-2016-9573 State: PUBLISHED Published: 2018-08-01T06:00:00 Last Updated: 2024-08-06T02:59:01.681Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: The OpenJPEG Project Products: openjpeg Problem Types: CWE-125 Description: An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uclouvain/openjpeg/issues/862 - https://security.gentoo.org/glsa/201710-26 - http://www.securityfocus.com/b
//github.com/uclouvain/openjpeg/issues/862 - https://security.gentoo.org/glsa/201710-26 - http://www.securityfocus.com/bid/97073 - https://github.com/szukw000/openjpeg/commit/7b28bd2b723df6be09fe7791eba33147c1c47d0d - http://rhn.redhat.com/errata/RHSA-2017-0838.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9573 - https://www.debian.org/security/2017/dsa-3768
CVE ID: CVE-2016-9574 State: PUBLISHED Published: 2018-07-19T13:00:00 Last Updated: 2024-08-06T02:59:02.263Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: [UNKNOWN] Products: nss Problem Types: CWE-325 Description: nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1320695 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9574
CVE ID: CVE-2016-9575 State: PUBLISHED Published: 2018-03-13T13:00:00Z Last Updated: 2024-09-16T22:51:45.662Z Vendors: FreeIPA Products: ipa Problem Types: CWE-863 Description: Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1395311 - http://www.security
Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1395311 - http://www.securityfocus.com/bid/95068 - http://rhn.redhat.com/errata/RHSA-2017-0001.html
CVE ID: CVE-2016-9576 State: PUBLISHED Published: 2016-12-28T07:42:00 Last Updated: 2024-08-06T02:59:01.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the type of iterator, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00057.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00088.html - http://git.
nnounce/2016-12/msg00057.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00088.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ac402cfcdc904f9772e1762b3fda112dcc56a0 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00040.html - https://github.com/torvalds/linux/commit/a0ac402cfcdc904f9772e1762b3fda112dcc56a0 - https://access.redhat.com/errata/RHSA-2017:2669 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00072.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00062.html - http://lists.opensuse.org/opensu
041.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00062.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00075.html - http://rhn.redhat.com/errata/RHSA-2017-0817.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00081.html - https://bugzilla.redhat.com/show_bug.cgi?id=1403145 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14 - http://www.openwall.com/lists/oss-security/2016/12/08/19 - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842 - http://www.securityfocus.com/bid/94821 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00091.html
CVE ID: CVE-2016-9577 State: PUBLISHED Published: 2018-07-27T20:00:00 Last Updated: 2024-08-06T02:59:02.309Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: spice Problem Types: CWE-20, CWE-122 Description: A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An authenticated attacker could send crafted messages to the SPICE server causing a heap overflow leading to a crash or possible code execution. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:0552 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9577 - https://access.redhat.com/errata/
om/errata/RHSA-2017:0552 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9577 - https://access.redhat.com/errata/RHSA-2017:0254 - https://www.debian.org/security/2017/dsa-3790 - http://www.securityfocus.com/bid/96040 - http://rhn.redhat.com/errata/RHSA-2017-0253.html - http://rhn.redhat.com/errata/RHSA-2017-0549.html
CVE ID: CVE-2016-9578 State: PUBLISHED Published: 2018-07-27T21:00:00 Last Updated: 2024-08-06T02:59:02.515Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: spice Problem Types: CWE-20, CWE-770 Description: A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An attacker able to connect to the SPICE server could send crafted messages which would cause the process to crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9578 - https://access.redhat.com/errata/RHSA-2017:0552 - https://access.redhat.com/errata/RHSA-2017:0254 - http://www.s
-9578 - https://access.redhat.com/errata/RHSA-2017:0552 - https://access.redhat.com/errata/RHSA-2017:0254 - http://www.securityfocus.com/bid/96118 - https://www.debian.org/security/2017/dsa-3790 - http://rhn.redhat.com/errata/RHSA-2017-0253.html - http://rhn.redhat.com/errata/RHSA-2017-0549.html
CVE ID: CVE-2016-9579 State: PUBLISHED Published: 2018-08-01T16:00:00 Last Updated: 2024-08-06T02:59:01.690Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: ceph Problem Types: CWE-20 Description: A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2954.html - http://rh
ional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2954.html - http://rhn.redhat.com/errata/RHSA-2016-2995.html - http://www.securityfocus.com/bid/94936 - http://rhn.redhat.com/errata/RHSA-2016-2994.html - http://tracker.ceph.com/issues/18187 - http://rhn.redhat.com/errata/RHSA-2016-2956.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9579
CVE ID: CVE-2016-9580 State: PUBLISHED Published: 2018-08-01T16:00:00 Last Updated: 2024-08-06T02:59:01.677Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: The OpenJPEG Project Products: openjpeg2 Problem Types: CWE-190, CWE-122 Description: An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uclouvain/openjpeg/issues/871 - https://security.gentoo.org/glsa/201710-26 - http://www.securityfocus.com/bid/94822 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9580 - https://github.com/szukw000/openjpeg/commit
.com/bid/94822 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9580 - https://github.com/szukw000/openjpeg/commit/cadff5fb6e73398de26a92e96d3d7cac893af255
CVE ID: CVE-2016-9581 State: PUBLISHED Published: 2018-08-01T14:00:00 Last Updated: 2024-08-06T02:59:03.021Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: The OpenJPEG Project Products: openjpeg2 Problem Types: CWE-835, CWE-122 Description: An infinite loop vulnerability in tiftoimage that results in heap buffer overflow in convert_32s_C1P1 was found in openjpeg 2.1.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uclouvain/openjpeg/issues/872 - https://security.gentoo.org/glsa/201710-26 - http://www.securityfocus.com/bid/94822 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9581 - https://github.com/szukw000/openj
urityfocus.com/bid/94822 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9581 - https://github.com/szukw000/openjpeg/commit/cadff5fb6e73398de26a92e96d3d7cac893af255
CVE ID: CVE-2016-9582 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.