Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1756 State: PUBLISHED Published: 2011-06-21T01:00:00 Last Updated: 2024-08-06T22:37:25.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://code.citadel.org/cgit.cgi/git.citadel.org/commit/?id=27c991cc2059f5530d3d4e9689dc976b745f5b0c - http://www.securityfocus.com/bid/48071 - http:/
gi/git.citadel.org/commit/?id=27c991cc2059f5530d3d4e9689dc976b745f5b0c - http://www.securityfocus.com/bid/48071 - http://packages.debian.org/changelogs/pool/main/c/citadel/citadel_7.37-8+lenny1/changelog - http://www.debian.org/security/2011/dsa-2250 - http://security.debian.org/debian-security/pool/updates/main/c/citadel/citadel_7.83-2squeeze2.diff.gz - http://secunia.com/advisories/44788 - http://packages.debian.org/changelogs/pool/main/c/citadel/citadel_7.83-2squeeze2/changelog - http://code.citadel.org/cgit.cgi/git.citadel.org/commit/?id=95040add546a705cc2d1d8f16293141f9f9845a6
CVE ID: CVE-2011-1757 State: PUBLISHED Published: 2011-06-21T01:00:00Z Last Updated: 2024-09-17T00:26:22.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/group/djabberd/msg/e3b250f3c1877ede?dmode=source
CVE ID: CVE-2011-1758 State: PUBLISHED Published: 2011-05-26T18:00:00Z Last Updated: 2024-08-06T22:37:25.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: The krb5_save_ccname_done function in providers/krb5/krb5_auth.c in System Security Services Daemon (SSSD) 1.5.x before 1.5.7, when automatic ticket renewal and offline authentication are configured, uses a pathname string as a password, which allows local users to bypass Kerberos authentication by listing the /tmp directory to obtain the pathname. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=700867 - https://fedorahosted.org/sssd/ticket/856 - http://openwall.com
s: - https://bugzilla.redhat.com/show_bug.cgi?id=700867 - https://fedorahosted.org/sssd/ticket/856 - http://openwall.com/lists/oss-security/2011/04/29/4 - http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059619.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059532.html - https://fedorahosted.org/pipermail/sssd-devel/2011-April/006138.html - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.7 - http://git.fedorahosted.org/git/?p=sssd.git%3Ba=commit%3Bh=fffdae81651b460f3d2c119c56d5caa09b4de42a - https://bugzilla.redhat.com/show_bug.cgi?id=700891
CVE ID: CVE-2011-1759 State: PUBLISHED Published: 2012-06-13T10:00:00Z Last Updated: 2024-08-06T22:37:25.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the sys_oabi_semtimedop function in arch/arm/kernel/sys_oabi-compat.c in the Linux kernel before 2.6.39 on the ARM platform, when CONFIG_OABI_COMPAT is enabled, allows local users to gain privileges or cause a denial of service (heap memory corruption) by providing a crafted argument and leveraging a race condition. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/05/02/16 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=
ww.openwall.com/lists/oss-security/2011/05/02/16 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0f22072ab50cac7983f9660d33974b45184da4f9 - https://github.com/torvalds/linux/commit/0f22072ab50cac7983f9660d33974b45184da4f9 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39
CVE ID: CVE-2011-1760 State: PUBLISHED Published: 2011-06-09T19:00:00 Last Updated: 2024-08-06T22:37:25.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e argument. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/04/29/3 - http://openwall.com/lists/oss-security/2011/05/01/1 - http://openwall.com/lists/oss-security/2011/05/10/7 - https://bugzilla.redhat.com/show_bug.cgi?id=700883 - http://openwall.com/lists/oss-security/2011/05/11/1 - http://secunia.com/advisories
.redhat.com/show_bug.cgi?id=700883 - http://openwall.com/lists/oss-security/2011/05/11/1 - http://secunia.com/advisories/45205 - http://openwall.com/lists/oss-security/2011/05/02/17 - http://www.securityfocus.com/bid/47652 - http://secunia.com/advisories/44790 - http://openwall.com/lists/oss-security/2011/05/03/2 - http://openwall.com/lists/oss-security/2011/05/10/6 - http://www.ubuntu.com/usn/USN-1166-1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624212 - http://openwall.com/lists/oss-security/2011/05/01/2 - http://www.debian.org/security/2011/dsa-2254
CVE ID: CVE-2011-1761 State: PUBLISHED Published: 2012-06-07T19:00:00Z Last Updated: 2024-08-06T22:37:25.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in libmodplug before 0.8.8.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ABC file. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2012/dsa-2415 - http://secunia.com/advisories/44870 - http://www.osvdb.org/72157 - http://ubuntu.co
.debian.org/security/2012/dsa-2415 - http://secunia.com/advisories/44870 - http://www.osvdb.org/72157 - http://ubuntu.com/usn/usn-1148-1 - http://secunia.com/advisories/44695 - http://secunia.com/advisories/48058 - http://www.exploit-db.com/exploits/17222 - http://secunia.com/advisories/45742 - http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html - http://www.openwall.com/lists/oss-security/2011/05/02/19 - http://www.openwall.com/lists/oss-security/2011/05/02/1 - http://secunia.com/advisories/44388 - http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060520.html
CVE ID: CVE-2011-1762 State: PUBLISHED Published: 2022-04-18T16:20:38 Last Updated: 2024-08-06T22:37:25.769Z Vendors: n/a Products: wordpress Problem Types: CWE-284 Description: A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had 'publish_posts' permission. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/support/wordpress-version/version-3-1-2/
CVE ID: CVE-2011-1763 State: PUBLISHED Published: 2014-01-07T19:00:00 Last Updated: 2024-08-06T22:37:25.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_free_port function in Xen allows local authenticated DomU users to cause a denial of service or possibly gain privileges via unspecified vectors involving a new event channel port. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2011-0833.html - https://bugzilla.redhat.com/show_bug.cgi?id=701240 - http://downloads.avaya.com/css/P8/documents/100145416
CVE ID: CVE-2011-1764 State: PUBLISHED Published: 2011-10-05T01:00:00 Last Updated: 2024-08-06T22:37:25.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/51155 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://www.debian.o
.com/advisories/51155 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://www.debian.org/security/2011/dsa-2232 - http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8 - https://bugzilla.redhat.com/show_bug.cgi?id=702474 - http://bugs.exim.org/show_bug.cgi?id=1106 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670
CVE ID: CVE-2011-1765 State: PUBLISHED Published: 2011-05-23T22:00:00 Last Updated: 2024-08-06T22:37:25.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.5, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .shtml at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1578 and CVE-2011-1587. Additional Analyst Notes: - CVE Program Container: Ref
because of an incomplete fix for CVE-2011-1578 and CVE-2011-1587. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060496.html - https://bugzilla.redhat.com/show_bug.cgi?id=702512 - http://secunia.com/advisories/44684 - http://www.securityfocus.com/bid/47722 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-May/000098.html - https://bugzilla.wikimedia.org/show_bug.cgi?id=28534 - http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060435.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060507.html
CVE ID: CVE-2011-1766 State: PUBLISHED Published: 2011-05-23T22:00:00 Last Updated: 2024-08-06T22:37:25.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: includes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not clear certain cached data after verification of an auth token fails, which allows remote attackers to bypass authentication by creating crafted wikiUserID and wikiUserName cookies, or by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060496.html - https://bugzilla.redhat.com/show_bug.cgi?id=702512 - https://bugzill
g/pipermail/package-announce/2011-May/060496.html - https://bugzilla.redhat.com/show_bug.cgi?id=702512 - https://bugzilla.wikimedia.org/show_bug.cgi?id=28639 - http://secunia.com/advisories/44684 - http://www.securityfocus.com/bid/47722 - http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-May/000098.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060435.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060507.html
CVE ID: CVE-2011-1767 State: PUBLISHED Published: 2012-06-13T10:00:00Z Last Updated: 2024-08-06T22:37:25.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/ipv4/ip_gre.c in the Linux kernel before 2.6.34, when ip_gre is configured as a module, allows remote attackers to cause a denial of service (OOPS) by sending a packet during module loading. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c2892f02712e9516d72841d5c019ed6916329794 - https://bugzilla.redhat.com/show_bug.cgi?id=702303 - http://www.openwall.com/lists/os
712e9516d72841d5c019ed6916329794 - https://bugzilla.redhat.com/show_bug.cgi?id=702303 - http://www.openwall.com/lists/oss-security/2011/05/05/6 - https://github.com/torvalds/linux/commit/c2892f02712e9516d72841d5c019ed6916329794
CVE ID: CVE-2011-1768 State: PUBLISHED Published: 2012-06-13T10:00:00Z Last Updated: 2024-08-06T22:37:25.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tunnels implementation in the Linux kernel before 2.6.34, when tunnel functionality is configured as a module, allows remote attackers to cause a denial of service (OOPS) by sending a packet during module loading. Additional Analyst Notes: - CVE Program Container: References: - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 - https://bugzilla.redhat.com/show_bug.cgi?id=702303 - http://www.openwall.com/lists/oss-security/2011/05/05/6 - https://github.com/torvalds/linux/commit/d5aa407f59f5b83d2c50ec88f5bf56d40
penwall.com/lists/oss-security/2011/05/05/6 - https://github.com/torvalds/linux/commit/d5aa407f59f5b83d2c50ec88f5bf56d40f1f8978 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d5aa407f59f5b83d2c50ec88f5bf56d40f1f8978
CVE ID: CVE-2011-1769 State: PUBLISHED Published: 2011-08-29T21:00:00 Last Updated: 2024-08-06T22:37:25.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: SystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs context variable access. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/44802 - https://bugzilla.redhat.com/show_bug.cgi?id=702687 - http://sourceware.org/git/?p=systemtap.git%3Ba=commit%3Bh=fa2e3415185a28542d419a641ec
edhat.com/show_bug.cgi?id=702687 - http://sourceware.org/git/?p=systemtap.git%3Ba=commit%3Bh=fa2e3415185a28542d419a641ecd6cddd52e3cd9 - http://www.securityfocus.com/bid/47934 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:154 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:155 - https://rhn.redhat.com/errata/RHSA-2011-0842.html - http://openwall.com/lists/oss-security/2011/05/20/2
CVE ID: CVE-2011-1770 State: PUBLISHED Published: 2011-06-24T20:00:00 Last Updated: 2024-08-06T22:37:25.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel before 2.6.33.14 allows remote attackers to cause a denial of service via a Datagram Congestion Control Protocol (DCCP) packet with an invalid feature options length, which triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025592 - http://marc.info/?l=linux-kernel&m=130468845209036&w=2 - http://www.securityfocus.com/bid/47769 - http://marc.info/?l=linux-ker
marc.info/?l=linux-kernel&m=130468845209036&w=2 - http://www.securityfocus.com/bid/47769 - http://marc.info/?l=linux-kernel&m=130469305815140&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=703011 - http://secunia.com/advisories/44932 - http://securityreason.com/securityalert/8286 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061236.html - http://www.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.33/ChangeLog-2.6.33.14 - http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061366.html
CVE ID: CVE-2011-1771 State: PUBLISHED Published: 2011-09-06T16:00:00 Last Updated: 2024-08-06T22:37:25.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cifs_close function in fs/cifs/file.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact by setting the O_DIRECT flag during an attempt to open a file on a CIFS filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=linux-cifs&m=130204730006155&w=2 - http://marc.info/?l=linux-cifs&m=130204357001849&w=2 - http://www.openwall.com/lists/oss-security/2011/05/09/2 - http://securit
marc.info/?l=linux-cifs&m=130204357001849&w=2 - http://www.openwall.com/lists/oss-security/2011/05/09/2 - http://securityreason.com/securityalert/8367 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - https://bugzilla.redhat.com/show_bug.cgi?id=703016 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7797069305d13252fd66cf722aa8f2cbeb3c95cd
CVE ID: CVE-2011-1772 State: PUBLISHED Published: 2011-05-13T17:00:00 Last Updated: 2024-08-06T22:37:25.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) an action name, (2) the action attribute of an s:submit element, or (3) the method attribute of an s:submit element. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/1198 - http://www.securityfocus.com/bid/47784 - http://struts.apache.org/
- http://www.vupen.com/english/advisories/2011/1198 - http://www.securityfocus.com/bid/47784 - http://struts.apache.org/2.x/docs/s2-006.html - http://jvndb.jvn.jp/jvndb/JVNDB-2011-000106 - http://jvn.jp/en/jp/JVN25435092/index.html - http://secureappdev.blogspot.com/2011/05/Struts_2_XWork_WebWork_XSS_in_error_pages.html - http://struts.apache.org/2.2.3/docs/version-notes-223.html - http://www.ventuneac.net/security-advisories/MVSA-11-006 - https://issues.apache.org/jira/browse/WW-3579 - http://secureappdev.blogspot.com/2011/05/apache-struts-2-xwork-webwork-reflected.html
CVE ID: CVE-2011-1773 State: PUBLISHED Published: 2014-02-08T00:00:00 Last Updated: 2024-08-06T22:37:25.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password. Additional Analyst Notes: - CVE Program Container: References: - https://git.fedorahosted.org/cgit/virt-v2v.git/commit/?id=7e9393129116699d1228bb02b9f65b78584582c1 - http://rhn.redhat.com/errata/RHSA-2011-1615.html - https://bugzilla.redhat.com/show_bug.cgi?id=702754 - http://secunia.com/advisories/47086 - http://www.osvdb.org/77558
CVE ID: CVE-2011-1774 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T22:37:25.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site. NOTE: this may overlap CVE-2011-1425. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/8481 - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.ht
ives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-1775 State: PUBLISHED Published: 2011-05-26T18:00:00 Last Updated: 2024-08-06T22:37:25.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CSecurityTLS::processMsg function in common/rfb/CSecurityTLS.cxx in the vncviewer component in TigerVNC 1.1beta1 does not properly verify the server's X.509 certificate, which allows man-in-the-middle attackers to spoof a TLS VNC server via an arbitrary certificate. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/05/06/2 - http://openwall.com/lists/oss-security/2011/05/09/7 - http://www.mail-archive.com/tigervnc-devel%40lists.sourceforge.net/msg01342.html - http:
sts/oss-security/2011/05/09/7 - http://www.mail-archive.com/tigervnc-devel%40lists.sourceforge.net/msg01342.html - http://www.mail-archive.com/tigervnc-devel%40lists.sourceforge.net/msg01345.html - https://bugzilla.redhat.com/show_bug.cgi?id=702672 - http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060567.html - https://bugzilla.redhat.com/show_bug.cgi?id=702470 - http://www.redhat.com/support/errata/RHSA-2011-0871.html - http://secunia.com/advisories/44939 - http://www.securityfocus.com/bid/47738 - http://www.mail-archive.com/tigervnc-devel%40lists.sourceforge.net/msg01347.html
CVE ID: CVE-2011-1776 State: PUBLISHED Published: 2011-09-06T16:00:00 Last Updated: 2024-08-06T22:37:25.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface (EFI) GUID Partition Table (GPT) entry, which allows physically proximate attackers to cause a denial of service (heap-based buffer overflow and OOPS) or obtain sensitive information from kernel heap memory by connecting a crafted GPT storage device, a different vulnerability than CVE-2011-1577. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errat
ability than CVE-2011-1577. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2011-0927.html - http://openwall.com/lists/oss-security/2011/05/10/4 - http://securityreason.com/securityalert/8369 - http://www.securityfocus.com/bid/47796 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa039d5f6b126fbd65eefa05db2f67e44df8f121 - http://www.pre-cert.de/advisories/PRE-SA-2011-04.txt - https://bugzilla.redhat.com/show_bug.cgi?id=703026
CVE ID: CVE-2011-1777 State: PUBLISHED Published: 2012-04-13T20:00:00 Last Updated: 2024-08-06T22:37:25.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the (1) heap_add_entry and (2) relocate_dir functions in archive_read_support_format_iso9660.c in libarchive through 2.8.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted ISO9660 image. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48034 - https://rhn.redhat.com/errata/RHSA-2011-1507.html - https://bugzilla.redhat.com/show_bug.cgi?id=705849 - http://code.google.com/p/libarchive/
m/errata/RHSA-2011-1507.html - https://bugzilla.redhat.com/show_bug.cgi?id=705849 - http://code.google.com/p/libarchive/source/detail?r=3158 - http://www.debian.org/security/2012/dsa-2413 - http://support.apple.com/kb/HT5281 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
CVE ID: CVE-2011-1778 State: PUBLISHED Published: 2012-04-13T20:00:00 Last Updated: 2024-08-06T22:37:25.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in libarchive through 2.8.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TAR archive. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48034 - https://rhn.redhat.com/errata/RHSA-2011-1507.html - https://bugzilla.redhat.com/show_bug.cgi?id=705849 - http://code.google.com/p/libarchive/source/detail?r=3160 - http://www.debian.org/security/2012/dsa-2413 - http://support.apple.com/kb/HT5281 - ht
libarchive/source/detail?r=3160 - http://www.debian.org/security/2012/dsa-2413 - http://support.apple.com/kb/HT5281 - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html