Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-6291 State: PUBLISHED Published: 2016-07-25T14:00:00 Last Updated: 2024-08-06T01:22:20.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (out-of-bounds array access and memory corruption), obtain sensitive information from process memory, or possibly have unspecified other impact via a crafted JPEG image. Additional Analyst Notes: - CVE Program Container: References: - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=eebcbd5de38a0f1c2876035402cb770e37476519 - http://lists.apple.com/arc
- http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=eebcbd5de38a0f1c2876035402cb770e37476519 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - https://security.gentoo.org/glsa/201611-22 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://php.net/ChangeLog-5.php - https://bugs.php.net/72603 - http://www.securityfocus.com/bid/92073 - http://www.securitytracker.com/id/1036430 - http://www.debian.org/security/2016/dsa-3631 - http://php.net/ChangeLog-7.php - http://openwall.com/lists/oss-security/2016/07/24/2 - https://support.apple.com/HT207170
CVE ID: CVE-2016-6292 State: PUBLISHED Published: 2016-07-25T14:00:00 Last Updated: 2024-08-06T01:22:20.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: The exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted JPEG image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - https://security.gentoo.org/glsa/201611-22 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://git.php.net/?p=php-src.git%3Ba=commit%3
o.org/glsa/201611-22 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=41131cd41d2fd2e0c2f332a27988df75659c42e4 - https://bugs.php.net/72618 - http://www.securityfocus.com/bid/92078 - http://php.net/ChangeLog-5.php - http://www.securitytracker.com/id/1036430 - http://www.debian.org/security/2016/dsa-3631 - http://php.net/ChangeLog-7.php - http://openwall.com/lists/oss-security/2016/07/24/2 - https://support.apple.com/HT207170
CVE ID: CVE-2016-6293 State: PUBLISHED Published: 2016-07-25T14:00:00 Last Updated: 2024-08-06T01:22:20.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not ensure that there is a '\0' character at the end of a certain temporary array, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long httpAcceptLanguage argument. Additional Analyst Notes: - CVE Program Container: References: - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=aa82e99ed8003c01f1ef4f0940e
tes: - CVE Program Container: References: - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=aa82e99ed8003c01f1ef4f0940e56b85c5b032d4 - https://bugs.php.net/72533 - https://security.gentoo.org/glsa/201701-58 - http://openwall.com/lists/oss-security/2016/07/24/2 - http://www.securityfocus.com/bid/92127 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
CVE ID: CVE-2016-6294 State: PUBLISHED Published: 2016-07-25T14:00:00 Last Updated: 2024-08-06T01:22:20.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: The locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly restrict calls to the ICU uloc_acceptLanguageFromHTTP function, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92115 - http://lists.apple.com/archives/security-announce/20
m Container: References: - http://www.securityfocus.com/bid/92115 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - https://security.gentoo.org/glsa/201611-22 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=aa82e99ed8003c01f1ef4f0940e56b85c5b032d4 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - https://bugs.php.net/72533 - http://php.net/ChangeLog-5.php - http://www.securitytracker.com/id/1036430 - http://www.debian.org/security/2016/dsa-3631 - http://php.net/ChangeLog-7.php - http://openwall.com/lists/oss-security/2016/07/24/2 - https://support.apple.com/HT207170
CVE ID: CVE-2016-6295 State: PUBLISHED Published: 2016-07-25T14:00:00 Last Updated: 2024-08-06T01:22:20.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via crafted serialized data, a related issue to CVE-2016-5773. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.php.net/72479 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html -
r: References: - https://bugs.php.net/72479 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - https://security.gentoo.org/glsa/201611-22 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=cab1c3b3708eead315e033359d07049b23b147a3 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://php.net/ChangeLog-5.php - http://www.securityfocus.com/bid/92094 - http://www.securitytracker.com/id/1036430 - http://www.debian.org/security/2016/dsa-3631 - http://php.net/ChangeLog-7.php - http://openwall.com/lists/oss-security/2016/07/24/2 - https://support.apple.com/HT207170
CVE ID: CVE-2016-6296 State: PUBLISHED Published: 2016-07-25T14:00:00 Last Updated: 2024-08-06T01:22:20.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a long first argument to the PHP xmlrpc_encode_request function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92095 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=e6c4
Container: References: - http://www.securityfocus.com/bid/92095 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=e6c48213c22ed50b2b987b479fcc1ac709394caa - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - https://security.gentoo.org/glsa/201611-22 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.ubuntu.com/usn/USN-3059-1 - https://bugs.php.net/72606 - http://php.net/ChangeLog-5.php - http://www.securitytracker.com/id/1036430 - http://www.debian.org/security/2016/dsa-3631 - http://php.net/ChangeLog-7.php - http://openwall.com/lists/oss-security/2016/07/24/2 - https://support.apple.com/HT207170 - https://lists.debian.org/debian-lts-announce/2019/11/m
/oss-security/2016/07/24/2 - https://support.apple.com/HT207170 - https://lists.debian.org/debian-lts-announce/2019/11/msg00029.html
CVE ID: CVE-2016-6297 State: PUBLISHED Published: 2016-07-25T14:00:00 Last Updated: 2024-08-06T01:22:20.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted zip:// URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - https://security.gentoo.org/glsa/201611-22 - https://bugs.php.net/72520 - http://rhn.redhat.com/er
6/Sep/msg00006.html - https://security.gentoo.org/glsa/201611-22 - https://bugs.php.net/72520 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://fortiguard.com/advisory/fortinet-discovers-php-stack-based-buffer-overflow-vulnerabilities - http://php.net/ChangeLog-5.php - http://www.securitytracker.com/id/1036430 - http://www.debian.org/security/2016/dsa-3631 - http://php.net/ChangeLog-7.php - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=81406c0c1d45f75fcc7972ed974d2597abb0b9e9 - http://openwall.com/lists/oss-security/2016/07/24/2 - https://support.apple.com/HT207170 - http://www.securityfocus.com/bid/92099
CVE ID: CVE-2016-6298 State: PUBLISHED Published: 2016-09-01T23:00:00 Last Updated: 2024-08-06T01:22:20.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack (MMA). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/latchset/jwcrypto/issues/65 - https://github.com/latchset/jwcrypto/pull/66 - http://www.securityfocus.com/bid/92729 - https://github.com/latchset/jwcrypto/releases/tag/v0.3.2 - https://github.com/latchset/
ww.securityfocus.com/bid/92729 - https://github.com/latchset/jwcrypto/releases/tag/v0.3.2 - https://github.com/latchset/jwcrypto/commit/eb5be5bd94c8cae1d7f3ba9801377084d8e5a7ba
CVE ID: CVE-2016-6299 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-06T01:22:20.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1375490 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5PH2YGYWYUAYPHK32SGUZGZXQEBEYNK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VYLMPA5VLLX67DUJ6XLJ2TIW6CX2CFL4/ -
.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VYLMPA5VLLX67DUJ6XLJ2TIW6CX2CFL4/ - http://www.openwall.com/lists/oss-security/2016/09/13/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFC4LU6GYYEVUK6LQ2FKUGMZXRTLLL5A/ - http://www.securityfocus.com/bid/92948
CVE ID: CVE-2016-6300 State: REJECTED Published: 2016-08-04T14:00:00 Last Updated: 2016-08-04T13:57:01 Description: No description available.
CVE ID: CVE-2016-6301 State: PUBLISHED Published: 2016-12-09T20:00:00 Last Updated: 2024-08-06T01:22:20.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/08/03/7 - https://bugzilla.redhat.com/show_bug.cgi?id=1363710 - http://www.securityfocus.com/bid/92277 - https://security.gentoo.org/glsa/201701-05 - https://git.busybox.net/busybox/commit/?id=150dc7
rityfocus.com/bid/92277 - https://security.gentoo.org/glsa/201701-05 - https://git.busybox.net/busybox/commit/?id=150dc7a2b483b8338a3e185c478b4b23ee884e71 - http://seclists.org/fulldisclosure/2019/Jun/18 - https://seclists.org/bugtraq/2019/Jun/14 - http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html - http://seclists.org/fulldisclosure/2019/Sep/7 - https://seclists.org/bugtraq/2019/Sep/7 - http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html - http://seclists.org/fulldisclosure/2020/Mar/15 - http://seclists.org/fulldisclosure/2020/Aug/20
CVE ID: CVE-2016-6302 State: PUBLISHED Published: 2016-09-16T00:00:00 Last Updated: 2024-08-06T01:29:18.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2016-20 - https://access.redhat.com/errata/RHSA-2018:2185 - https://access.redhat.com/errata/RHSA-2018:2186 - http://www.splunk.com/view/SP-CAAAPUE - http://www.oracle.com/technetwork/security-ad
redhat.com/errata/RHSA-2018:2186 - http://www.splunk.com/view/SP-CAAAPUE - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://rhn.redhat.com/errata/RHSA-2016-1940.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.securityfocus.com/bid/92628 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=e97763c92c655dcf4af2860b3abd2bc4c8a267f9 - http://www.splunk.com/view/SP-CAAAPSV - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - http://www.securitytracker.com/id/1036885 - http://www.oracle.com/technetwork/security-advisory/cpuo
s?uid=swg21995039 - http://www.securitytracker.com/id/1036885 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://www.tenable.com/security/tns-2016-16 - https://www.tenable.com/security/tns-2016-21 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - https://bto.bluecoat.com/security-advisory/sa132 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - https://securi
m/security-advisory/sa132 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc - https://access.redhat.com/errata/RHSA-2018:2187 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-6303 State: PUBLISHED Published: 2016-09-16T00:00:00 Last Updated: 2024-08-06T01:29:18.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2016-20 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312 - http://www-01.i
visory/cpujan2018-3236628.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312 - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - http://www.securitytracker.com/id/1036885 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/ - https://www.tenable.com/security/tns-2016-16 - https://www.tenable.com/security/tns-2016-21 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.securityfocus.com/bid/92984 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://bugzilla.redhat.com/show_bug.cgi?id=1
p://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://bugzilla.redhat.com/show_bug.cgi?id=1370146 - https://bto.bluecoat.com/security-advisory/sa132 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=55d83bf7c10c7b205fffa23fa7c3977491e56c07 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-6304 State: PUBLISHED Published: 2016-09-26T00:00:00 Last Updated: 2024-08-06T01:29:18.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions. Additional Analyst Notes: - CVE Program Container: References: - https://www.openssl.org/news/secadv/20160922.txt - https://www.tenable.com/security/tns-2016-20 - http://www.splunk.com/view/SP-CAAAPUE - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://rhn.redhat.com/errata/RH
-CAAAPUE - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://rhn.redhat.com/errata/RHSA-2017-1659.html - https://access.redhat.com/errata/RHSA-2017:1658 - http://rhn.redhat.com/errata/RHSA-2016-1940.html - http://www.securityfocus.com/bid/93150 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://rhn.redhat.com/errata/RHSA-2016-2802.html - https://security.gentoo.org/glsa/201612-16 - https://access.redhat.com/errata/RHSA-2017:1801 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312 - http://www.securitytracker.com/id/1036878 - http://www.splunk.com/view/SP-CAAAPSV - https://access.redhat.com/erra
312 - http://www.securitytracker.com/id/1036878 - http://www.splunk.com/view/SP-CAAAPSV - https://access.redhat.com/errata/RHSA-2017:1413 - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/ - https://www.tenable.com/security/tns-2016-16 - https://access.redhat.com/errata/RHSA-2017:2494 - http://www.securitytracker.com/id/1037640 - https://www.tenable.com/security/tns-2016-21 - https://kc.mcafee.com/corporate/index?page=content&id=SB10171 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://git.ope
?page=content&id=SB10171 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=2c0d295e26306e15a92eb23a84a1802005c1c137 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://access.redhat.com/errata/RHSA-2017:1414 - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - https://bto.bluecoat.com/security-advisory/sa132 - http://rhn.redhat.com/errata/RHSA-2017-1415.html - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc - http://lists.opensuse.org/opensuse-
236622.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html - https://access.redhat.com/errata/RHSA-2017:1802 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://access.redhat.com/errata/RHSA-2017:2493 - https://kc.mcafee.com/corporate/index?page=content&id=SB10215 - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html - http://www.ubuntu.com/usn/USN-3087-1 - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html - http://seclists.org/fulldisclosure/201
ml - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html - http://seclists.org/fulldisclosure/2016/Oct/62 - http://www.ubuntu.com/usn/USN-3087-2 - http://seclists.org/fulldisclosure/2016/Dec/47 - http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html - http://seclists.org/fulldisclosure/2017/Jul/31 - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html - http://www.debian.org/security/2016/dsa-3673 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html -
-security-announce/2016-09/msg00023.html - http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html - http://packetstormsecurity.com/files/139091/OpenSSL-x509-Parsing-Double-Free-Invalid-Free.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2016-11/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2016-11/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html - http://www.huawei.com
16-10/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en - https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-6305 State: PUBLISHED Published: 2016-09-26T00:00:00 Last Updated: 2024-08-06T01:29:19.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call. Additional Analyst Notes: - CVE Program Container: References: - https://www.openssl.org/news/secadv/20160922.txt - https://www.tenable.com/security/tns-2016-20 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://www.securitytracker.com/id/1036879 - https://security.gentoo.org/glsa/2016
ity-advisory/cpujan2018-3236628.html - http://www.securitytracker.com/id/1036879 - https://security.gentoo.org/glsa/201612-16 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=63658103d4441924f8dbfc517b99bb54758a98b9 - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://www.tenable.com/security/tns-2016-16 - https://www.tenable.com/security/tns-2016-21 - http://www.securityfocus.com/bid/93149 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://github.com/openssl/openssl/issues/1563
://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://github.com/openssl/openssl/issues/1563 - https://bto.bluecoat.com/security-advisory/sa132 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf