Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-2042 State: PUBLISHED Published: 2016-02-20T01:00:00 Last Updated: 2024-08-05T23:17:50.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request to (1) libraries/phpseclib/Crypt/AES.php or (2) libraries/phpseclib/Crypt/Rijndael.php, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/5a3de108f26e4b0dddadddbe8ccdb1dd5526771f - http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html - http://lists.opensuse.org/opensuse-upd
b1dd5526771f - http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html - http://www.phpmyadmin.net/home_page/security/PMASA-2016-6.php - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html
CVE ID: CVE-2016-2043 State: PUBLISHED Published: 2016-02-20T01:00:00 Last Updated: 2024-08-05T23:17:49.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the goToFinish1NF function in js/normalization.js in phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a table name to the normalization page. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2016-7.php - http://lists.opensuse.org/opensuse-updates/2016-02/msg00049.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html -
opensuse.org/opensuse-updates/2016-02/msg00049.html - http://lists.opensuse.org/opensuse-updates/2016-02/msg00028.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html - https://github.com/phpmyadmin/phpmyadmin/commit/019c4f25d500ec5db9ba3b84cc961a7e4e850738
CVE ID: CVE-2016-2044 State: PUBLISHED Published: 2016-02-20T01:00:00 Last Updated: 2024-08-05T23:17:49.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: libraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security/PMASA-2016-8.php - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html - https://github.com/phpmyadmin/phpmyadmin/commit/c57d3cc7b97b5f32801032f7bb222297aa97dfea - http://lists.
y/176739.html - https://github.com/phpmyadmin/phpmyadmin/commit/c57d3cc7b97b5f32801032f7bb222297aa97dfea - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html
CVE ID: CVE-2016-2045 State: PUBLISHED Published: 2016-02-20T01:00:00 Last Updated: 2024-08-05T23:17:49.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the SQL editor in phpMyAdmin 4.5.x before 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a SQL query that triggers JSON data in a response. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpmyadmin/phpmyadmin/commit/0a24f92d081033576bfdd9d4bdec1a54501734c1 - https://github.com/phpmyadmin/phpmyadmin/commit/11496890d7e21786cbfd9fd17ab968f498116b3f - http://www.phpmyadmin.net/home_page/security/PMASA-2016-9.php - h
dmin/commit/11496890d7e21786cbfd9fd17ab968f498116b3f - http://www.phpmyadmin.net/home_page/security/PMASA-2016-9.php - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176739.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176483.html
CVE ID: CVE-2016-2046 State: PUBLISHED Published: 2016-02-17T15:00:00 Last Updated: 2024-08-05T23:17:50.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web script or HTML via the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035048 - http://seclists.org/fulldisclosure/2016/Feb/60 - http://packetstormsecurity.com/files/135709/Sophos-UTM-9-Cross-Site-Scripting.html - http://www.halock.com/blog/cve-2016-2046-cross-site-scripting-sophos-utm-9/
CVE ID: CVE-2016-2047 State: PUBLISHED Published: 2016-01-27T20:00:00 Last Updated: 2024-08-05T23:17:50.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/
dle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00034.html - http://rhn.redhat.com/errata/RHSA-2016-1481.html - https://access.redhat.com/errata/RHSA-2016:1132 - http://rhn.redhat.com/errata/RHSA-2016-0534.html - http://www.securitytracker.com/id/1035606 - http://www.openwall.com/lists/oss-security/2016/01/26/3 - http://www.ubuntu.com/usn/USN-2953-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-an
racle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html - http://www.ubuntu.com/usn/USN-2954-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00033.html - http://rhn.redhat.com/errata/RHSA-2016-1480.html - http://www.securityfocus.com/bid/81810 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00051.html - https://mariadb.atlassian.net/browse/MDEV-9212 - https://mariadb.com/kb/en/mdb-10023-rn/ - http://www.debian.org/security/2016/dsa-3557 - http://www.debian.org/security/2016/dsa-3453 - https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/ - http://www.orac
/www.debian.org/security/2016/dsa-3453 - https://mariadb.com/kb/en/mariadb/mariadb-5547-release-notes/ - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00053.html - https://mariadb.com/kb/en/mariadb/mariadb-10110-release-notes/ - http://rhn.redhat.com/errata/RHSA-2016-0705.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00035.html
CVE ID: CVE-2016-2048 State: PUBLISHED Published: 2016-02-08T19:00:00 Last Updated: 2024-08-05T23:17:50.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option when editing objects and leveraging the "change" permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.djangoproject.com/weblog/2016/feb/01/releases-192-and-189/ - http://www.securityfocus.com/bid/82329 - http://www.securitytracker.com/id/1034894
CVE ID: CVE-2016-2049 State: PUBLISHED Published: 2016-02-01T21:00:00 Last Updated: 2024-08-05T23:17:49.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: examples/consumer/common.php in JanRain PHP OpenID library (aka php-openid) improperly checks the openid.realm parameter against the SERVER_NAME element in the SERVER superglobal array, which might allow remote attackers to hijack the authentication of arbitrary users via vectors involving a crafted HTTP Host header. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/24/5 - http://www.openwall.com/lists/oss-security/2016/01/24/2
CVE ID: CVE-2016-2050 State: PUBLISHED Published: 2017-01-31T19:00:00 Last Updated: 2024-08-05T23:17:49.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_abbrev_array_info function in libdwarf-20151114 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted elf file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/01/19/9 - http://www.openwall.com/lists/oss-security/2016/01/25/3
CVE ID: CVE-2016-2051 State: PUBLISHED Published: 2016-01-25T11:00:00 Last Updated: 2024-08-05T23:17:50.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0072.html - http://www.ubuntu.com/usn/USN-2877-1 - http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html - http://www.securitytracker.com/id/1034801 - http://www.securityfocus.com/bid/81431
CVE ID: CVE-2016-2052 State: PUBLISHED Published: 2016-01-25T11:00:00 Last Updated: 2024-08-05T23:17:50.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted data, as demonstrated by a buffer over-read resulting from an inverted length check in hb-ot-font.cc, a different issue than CVE-2015-8947. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=544270 - https://code.google.com/p/chromium/issues/detail?id=579625 - http://rh
e.google.com/p/chromium/issues/detail?id=544270 - https://code.google.com/p/chromium/issues/detail?id=579625 - http://rhn.redhat.com/errata/RHSA-2016-0072.html - https://security.gentoo.org/glsa/201701-76 - http://www.ubuntu.com/usn/USN-2877-1 - http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html - http://www.securitytracker.com/id/1034801 - http://www.securityfocus.com/bid/81812 - https://github.com/behdad/harfbuzz/issues/139#issuecomment-148289957 - http://www.ubuntu.com/usn/USN-3067-1 - https://github.com/behdad/harfbuzz/commit/63ef0b41dc48d6112d1918c1b1de9de8ea90adb5 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00070.html
CVE ID: CVE-2016-2053 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-05T23:17:50.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel before 4.3 allows attackers to cause a denial of service (panic) via an ASN.1 BER file that lacks a public key, leading to mishandling by the public_key_verify_signature function in crypto/asymmetric_keys/public_key.c. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html - http://lists.opensuse.
6-06/msg00054.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html - https://bugzilla.redhat.com/show_bug.cgi?id=1300237 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - http://li
-announce/2016-08/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html - http://www.openwall.com/lists/oss-security/2016/01/25/4 - https://github.com/torvalds/linux/commit/0d62e9dd6da45bbf0f33a8617afc5fe774c8f45f - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - http://www.securitytracker.com/id/1036763 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/
tml - http://www.securitytracker.com/id/1036763 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0d62e9dd6da45bbf0f33a8617afc5fe774c8f45f - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.h
ensuse-security-announce/2016-08/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2016-2054 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-05T23:17:50.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a long filename, involving handling a "config" command. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/xymon/code/7859/ - http://www.securityfocus.com/archive/1/537522/100/0/threaded - http://www.debian.org/security/2016/dsa-3495 - http://lists.xymon.com/archive/2016-February/042986.html
00/0/threaded - http://www.debian.org/security/2016/dsa-3495 - http://lists.xymon.com/archive/2016-February/042986.html - https://sourceforge.net/p/xymon/code/7860/ - http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html
CVE ID: CVE-2016-2055 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-05T23:17:50.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files in the configuration directory via a "config" command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/537522/100/0/threaded - http://www.debian.org/security/2016/dsa-3495 - https://sourceforge.net/p/xymon/code/7890/ - http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html
CVE ID: CVE-2016-2056 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-05T23:17:50.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the adduser_name argument in (1) web/useradm.c or (2) web/chpasswd.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/537522/100/0/threaded - https://sourceforge.net/p/xymon/code/7892/ - http://www.debian.org/security/2016/dsa-3495 - http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Informatio
curity/2016/dsa-3495 - http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html - http://packetstormsecurity.com/files/153620/Xymon-useradm-Command-Execution.html
CVE ID: CVE-2016-2057 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-05T23:17:50.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/xymond_ipc.c in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 use weak permissions (666) for an unspecified IPC message queue, which allows local users to inject arbitrary messages by writing to that queue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/537522/100/0/threaded - https://sourceforge.net/p/xymon/code/7891/ - http://www.debian.org/security/2016/dsa-3495 - http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disc
/2016/dsa-3495 - http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html
CVE ID: CVE-2016-2058 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-05T23:17:50.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is not properly handled in the "detailed status" page, or (2) remote authenticated users to inject arbitrary web script or HTML via an acknowledgement message, which is not properly handled in the "status" page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/537522/100/0/thread
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/537522/100/0/threaded - https://sourceforge.net/p/xymon/code/7892/ - http://www.debian.org/security/2016/dsa-3495 - http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html
CVE ID: CVE-2016-2059 State: PUBLISHED Published: 2016-05-05T21:00:00 Last Updated: 2024-08-05T23:17:50.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: The msm_ipc_router_bind_control_port function in net/ipc_router/ipc_router_core.c in the IPC router kernel module for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not verify that a port is a client port, which allows attackers to gain privileges or cause a denial of service (race condition and list corruption) by making many BIND_CONTROL_PORT ioctl calls. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.o
BIND_CONTROL_PORT ioctl calls. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/projects/security-advisories/linux-ipc-router-binding-any-port-control-port-cve-2016-2059 - http://www.securitytracker.com/id/1035765 - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/90230 - https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.18/commit/?id=9e8bdd63f7011dff5523ea435433834b3702398d
CVE ID: CVE-2016-2060 State: PUBLISHED Published: 2016-05-09T10:00:00 Last Updated: 2024-08-05T23:17:50.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: server/TetherController.cpp in the tethering controller in netd, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly validate upstream interface names, which allows attackers to bypass intended access restrictions via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-05-01.html - https://www.codeaurora.org/improper-input-validation-tethering-controller-netd-cve-201
curity/bulletin/2016-05-01.html - https://www.codeaurora.org/improper-input-validation-tethering-controller-netd-cve-2016-2060-0
CVE ID: CVE-2016-2061 State: PUBLISHED Published: 2016-06-13T01:00:00 Last Updated: 2024-08-05T23:17:50.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the MSM V4L2 video driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges or cause a denial of service (array overflow and memory corruption) via a crafted application that triggers an msm_isp_axi_create_stream call. Additional Analyst Notes: - CVE Program Container: References: - https://www.codeaurora.org/array-overflow-msm-v4l2-video-driver-allows-kernel-memory-corruption-cve-2016-
References: - https://www.codeaurora.org/array-overflow-msm-v4l2-video-driver-allows-kernel-memory-corruption-cve-2016-2061 - https://us.codeaurora.org/cgit/quic/la//kernel/msm-3.18/commit/id=79db14ca9f791a14be9376a0340ad3b9b9a4d603 - http://source.android.com/security/bulletin/2016-06-01.html
CVE ID: CVE-2016-2062 State: PUBLISHED Published: 2016-05-05T21:00:00 Last Updated: 2024-08-05T23:17:50.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: The adreno_perfcounter_query_group function in drivers/gpu/msm/adreno_perfcounter.c in the Adreno GPU driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, uses an incorrect integer data type, which allows attackers to cause a denial of service (integer overflow, heap-based buffer overflow, and incorrect memory allocation) or possibly have unspecified other impact via a crafted IOCTL_KGSL_PERFCOUNTER_QUERY ioctl call. Additional Analyst Notes: -
ssibly have unspecified other impact via a crafted IOCTL_KGSL_PERFCOUNTER_QUERY ioctl call. Additional Analyst Notes: - CVE Program Container: References: - https://codeaurora.org/cgit/quic/la/kernel/msm-3.18/commit/?id=27c95b64b2e4b5ff1288cbaa6e353dd803d71576 - https://www.codeaurora.org/buffer-overflow-adreno-gpu-msm-driver-cve-2016-2062 - http://www.securitytracker.com/id/1035766 - http://source.android.com/security/bulletin/2016-06-01.html
CVE ID: CVE-2016-2063 State: PUBLISHED Published: 2016-08-07T21:00:00 Last Updated: 2024-08-05T23:17:50.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the supply_lm_input_write function in drivers/thermal/supply_lm_core.c in the MSM Thermal driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted application that sends a large amount of data through the debugfs interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bi
the debugfs interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92381 - https://us.codeaurora.org/cgit/quic/la/kernel/msm-3.10/commit/?id=ab3f46119ca10de87a11fe966b0723c48f27acd4 - https://www.codeaurora.org/stack-overflow-msm-thermal-driver-allows-kernel-memory-corruption-cve-2016-2063