Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-5017 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T00:46:40.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when using the "cmd:" batch mode syntax, allows attackers to have unspecified impact via a long command string. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/17/3 - http://www.securityfocus.com/bid/93044 - https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.h
4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E - https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html - https://git-wip-us.apache.org/repos/asf?p=zookeeper.git%3Ba=commitdiff%3Bh=27ecf981a15554dc8e64a28630af7a5c9e2bdf4f - https://zookeeper.apache.org/security.html#CVE-2016-5017 - http://packetstormsecurity.com/f
dc8e64a28630af7a5c9e2bdf4f - https://zookeeper.apache.org/security.html#CVE-2016-5017 - http://packetstormsecurity.com/files/138755/ZooKeeper-3.4.8-3.5.2-Buffer-Overflow.html - https://git-wip-us.apache.org/repos/asf?p=zookeeper.git%3Ba=commitdiff%3Bh=f09154d6648eeb4ec5e1ac8a2bacbd2f8c87c14a - https://lists.apache.org/thread.html/r4b743f407244294f316325458ccaabfce9cd70ca3a6423dbe574035c%40%3Cnotifications.dubbo.apache.org%3E
CVE ID: CVE-2016-5018 State: PUBLISHED Published: 2017-08-10T16:00:00Z Last Updated: 2024-09-16T18:38:35.797Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Sandbox Escape Description: In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1548 - https://access.redhat.com/errata/RHSA-2017:1549 - http://www.securityfocus.com/bid/93942 - https://access.redhat.co
48 - https://access.redhat.com/errata/RHSA-2017:1549 - http://www.securityfocus.com/bid/93942 - https://access.redhat.com/errata/RHSA-2017:1552 - http://www.securitytracker.com/id/1038757 - https://access.redhat.com/errata/RHSA-2017:2247 - http://rhn.redhat.com/errata/RHSA-2017-1551.html - https://lists.apache.org/thread.html/9b3a63a20c87179815fdea14f6766853bafe79a0042dc0b4aa878a9e%40%3Cannounce.tomcat.apache.org%3E - http://www.securitytracker.com/id/1037142 - http://rhn.redhat.com/errata/RHSA-2017-0457.html - https://access.redhat.com/errata/RHSA-2017:0455 - https://access.redhat.com/errata/RHSA-2017:1550 - http://www.debian.org/security/2016/dsa-3720 - https://access.redhat.com/errata/RHS
s.redhat.com/errata/RHSA-2017:1550 - http://www.debian.org/security/2016/dsa-3720 - https://access.redhat.com/errata/RHSA-2017:0456 - https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959
3dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://list
he.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E - https://usn.ubuntu.com/4557-1/ - https://security.netapp.com/advisory/ntap-20180605-0001/ - https://www.oracle.com/security-alerts/cpuoct2021.html - http://packetstormsecurity.com/files/155873/Tomcat-9.0.0.M1-Sa
https://www.oracle.com/security-alerts/cpuoct2021.html - http://packetstormsecurity.com/files/155873/Tomcat-9.0.0.M1-Sandbox-Escape.html
CVE ID: CVE-2016-5019 State: PUBLISHED Published: 2016-10-03T18:00:00 Last Updated: 2024-08-06T00:46:40.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreResponseStateManager in Apache MyFaces Trinidad 1.0.0 through 1.0.13, 1.2.x before 1.2.15, 2.0.x before 2.0.2, and 2.1.x before 2.1.2 might allow attackers to conduct deserialization attacks via a crafted serialized view state string. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/myfaces-users/201609.mbox/%3CCAM1yOjYM%2BEW3mLUfX0pNAVLfUFRAw-Bhvkp3UE5%3DEQzR8Yxsfw%40mail.gmail.com%3E - http://www.securityfocus.com/bid/93236 - http://www.securitytracker.com/id/10376
3UE5%3DEQzR8Yxsfw%40mail.gmail.com%3E - http://www.securityfocus.com/bid/93236 - http://www.securitytracker.com/id/1037633 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.oracle.com/security-alerts/cpujul2020.html - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - https://www.oracle.com/security-alerts/cpujan2020.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.
work/security-advisory/cpujul2016-2881720.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://packetstormsecurity.com/files/138920/Apache-MyFaces-Trinidad-Information-Disclosure.html - https://issues.apache.org/jira/browse/TRINIDAD-2542
CVE ID: CVE-2016-5020 State: PUBLISHED Published: 2016-06-30T17:00:00 Last Updated: 2024-08-06T00:46:40.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: F5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration of users with the Resource Administration role and gain privilege via a crafted external Extended Application Verification (EAV) monitor script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036131 - http://www.securityfocus.com/bid/91532 - https://support.f5.com/kb/en-us/solutions/public/k/00/sol00265182.html
CVE ID: CVE-2016-5021 State: PUBLISHED Published: 2016-06-24T17:00:00 Last Updated: 2024-08-06T00:46:40.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iControl REST service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF3; BIG-IP DNS 12.x before 12.0.0 HF3; BIG-IP GTM 11.5.x before 11.5.4 and 11.6.x before 11.6.1; BIG-IQ Cloud and Security 4.0.0 through 4.5.0; BIG-IQ Device 4.2.0 through 4.5.0; BIG-IQ ADC 4.5.0; BIG-IQ Centralized Management 4.6.0; and BIG-IQ Cloud and Orchestration 1.0.0 allows remote authenticated administrators to obtain sensitive information via unspecifie
Cloud and Orchestration 1.0.0 allows remote authenticated administrators to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/kb/en-us/solutions/public/k/99/sol99998454/ - http://www.securitytracker.com/id/1036172
CVE ID: CVE-2016-5022 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T00:46:40.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1 HF1, and 12.x before 12.0.0 HF3; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1 HF1, and 12.x before 12.0.0 HF3; BIG-IP DNS 12.x before 12.0.0 HF3; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.x before 11.2.1 HF16 and 11.3.0; BIG-IP GTM 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 HF2, and 11.6.x before 11.6.1 HF1; BIG-IP PSM 1
G-IP GTM 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 HF2, and 11.6.x before 11.6.1 HF1; BIG-IP PSM 11.2.x before 11.2.1 HF16, 11.3.x, and 11.4.0 through 11.4.1; Enterprise Manager 3.1.1; BIG-IQ Cloud and Security 4.0.0 through 4.5.0; BIG-IQ Device 4.2.0 through 4.5.0; BIG-IQ ADC 4.5.0; BIG-IQ Centralized Management 5.0.0; BIG-IQ Cloud and Orchestration 1.0.0; and iWorkflow 2.0.0, when Packet Filtering is enabled on virtual servers and possibly self IP addresses, allow remote attackers to cause a denial of service (Traffic Management Microkernel restart) and possibly have unspecified other impact via crafted network traffic. Additional Analyst Notes: - CVE Program Containe
and possibly have unspecified other impact via crafted network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036710 - https://support.f5.com/kb/en-us/solutions/public/k/06/sol06045217.html - http://www.securitytracker.com/id/1036709
CVE ID: CVE-2016-5023 State: PUBLISHED Published: 2016-08-26T14:00:00 Last Updated: 2024-08-06T00:46:40.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Virtual servers in F5 BIG-IP systems 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3 through 11.5.4, 11.6.0 HF5 through HF7, and 12.0.0, when configured with a TCP profile, allow remote attackers to cause a denial of service (Traffic Management Microkernel restart) via crafted network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036624 - http://www.securityfocus.com/bid/92670 - https://support.f5.com/kb/en-us/solutions/public/k/19/sol19784568.html
CVE ID: CVE-2016-5024 State: PUBLISHED Published: 2017-01-03T21:00:00 Last Updated: 2024-08-06T00:46:40.252Z Vendors: F5 Networks Products: F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM Problem Types: iRules RADIUS message parsing vulnerability Description: Virtual servers in F5 BIG-IP systems 11.6.1 before 11.6.1 HF1 and 12.1.x before 12.1.2, when configured to parse RADIUS messages via an iRule, allow remote attackers to cause a denial of service (Traffic Management Microkernel restart) via crafted network traffic. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/#/article/K92859602 - http://www.securityfocus.com/bid
- CVE Program Container: References: - https://support.f5.com/csp/#/article/K92859602 - http://www.securityfocus.com/bid/95228 - http://www.securitytracker.com/id/1037510
CVE ID: CVE-2016-5025 State: PUBLISHED Published: 2016-11-08T20:37:00 Last Updated: 2024-08-06T00:46:40.221Z Vendors: n/a Products: Quadro, NVS, GeForce (all versions) Problem Types: Denial of Service Description: For the NVIDIA Quadro, NVS, and GeForce products, improper sanitization of parameters in the NVAPI support layer causes a denial of service vulnerability (blue screen crash) within the NVIDIA Windows graphics drivers. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4213 - https://support.lenovo.com/us/en/product_security/ps500070 - http://www.securityfocus.com/bid/93251
CVE ID: CVE-2016-5026 State: PUBLISHED Published: 2017-01-30T22:00:00 Last Updated: 2024-08-06T00:46:40.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/23/5 - https://github.com/micahflee/onionshare - http://www.securityfocus.com/bid/90821 - http://www.openwall.com/lists/oss-security/2016/05/24/9
CVE ID: CVE-2016-5027 State: PUBLISHED Published: 2017-02-24T20:00:00 Last Updated: 2024-08-06T00:46:40.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: dwarf_form.c in libdwarf 20160115 allows remote attackers to cause a denial of service (crash) via a crafted elf file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/24/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1330237 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5028 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an object file with empty bss-like sections. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5029 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted dwarf file. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5030 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5031 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5032 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dwarf_get_xu_hash_entry function in libdwarf before 20160923 allows remote attackers to cause a denial of service (crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5033 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5034 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file, related to relocation records. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5035 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _dwarf_read_line_table_header function in dwarf_line_table_reader.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5036 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted frame data. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5037 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _dwarf_load_section function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5038 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted string offset for .debug_str. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5039 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted object with all-bits on. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5040 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a large length value in a compilation unit header. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5041 State: PUBLISHED Published: 2017-04-10T16:00:00 Last Updated: 2024-08-06T00:46:40.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a debugging information entry using DWARF5 and without a DW_AT_name. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5042 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dwarf_get_aranges_list function in libdwarf before 20160923 allows remote attackers to cause a denial of service (infinite loop and crash) via a crafted DWARF section. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1332145
CVE ID: CVE-2016-5043 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dwarf_dealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted DWARF section. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5044 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T00:46:40.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WRITE_UNALIGNED function in dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted DWARF section. Additional Analyst Notes: - CVE Program Container: References: - https://www.prevanders.net/dwarfbug.html - http://www.openwall.com/lists/oss-security/2016/05/24/1 - http://www.openwall.com/lists/oss-security/2016/05/25/1
CVE ID: CVE-2016-5045 State: PUBLISHED Published: 2017-07-03T16:00:00 Last Updated: 2024-08-06T00:46:40.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp OnCommand System Manager before 9.0 allows remote attackers to obtain sensitive credentials via vectors related to cluster peering setup. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netapp.com/support/s/article/ka51A00000007OTQAY/NTAP-20170323-0001
CVE ID: CVE-2016-5047 State: PUBLISHED Published: 2016-09-01T10:00:00 Last Updated: 2024-08-06T00:46:40.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetApp OnCommand System Manager 8.3.x before 8.3.2P5 allows remote authenticated users to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92685 - https://security.netapp.com/advisory/ntap-20160830-0001/ - http://kb.netapp.com/support/index?page=content&id=9010100