Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-0762 State: PUBLISHED Published: 2017-08-10T16:00:00Z Last Updated: 2024-09-17T01:36:51.388Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Timing Attack Description: The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied password if the supplied user name did not exist. This made a timing attack possible to determine valid user names. Note that the default configuration includes the LockOutRealm which makes exploitation of this vulnerability harder. Additional Analyst Notes: - CVE Program Container: References: - http://www.sec
ploitation of this vulnerability harder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037144 - https://lists.apache.org/thread.html/1872f96bad43647832bdd84a408794cd06d9cbb557af63085ca10009%40%3Cannounce.tomcat.apache.org%3E - https://access.redhat.com/errata/RHSA-2017:2247 - http://rhn.redhat.com/errata/RHSA-2017-0457.html - https://access.redhat.com/errata/RHSA-2017:0455 - http://www.securityfocus.com/bid/93939 - http://www.debian.org/security/2016/dsa-3720 - https://access.redhat.com/errata/RHSA-2017:0456 - https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - http
sts.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85
dcd903b%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thre
/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E - https://usn.ubuntu.com/4557-1/ - https://www.oracle.com//security-alerts/cpujul2021.html - https://security.netapp.com/advisory/ntap-20180605-0001/ - https://www.oracle.com/security-alerts/cpuoct2021.html
CVE ID: CVE-2016-0763 State: PUBLISHED Published: 2016-02-25T01:00:00 Last Updated: 2024-08-05T22:30:04.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass intended SecurityManager restrictions and read or write to arbitrary application data, or cause a denial of service (application disruption), via a web application that sets a crafted global context. Additional Analyst Notes: - CVE Pr
e (application disruption), via a web application that sets a crafted global context. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201705-09 - http://svn.apache.org/viewvc?view=revision&revision=1725931 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00085.html - http://tomcat.apache.org/security-9.html - http://www.ubuntu.com/usn/USN-3024-1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00047.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755 - http://www.debian.org/security/2016/dsa-3530 - http://tomcat.apache.org/security-7.html - http://seclists.org/bugtr
55 - http://www.debian.org/security/2016/dsa-3530 - http://tomcat.apache.org/security-7.html - http://seclists.org/bugtraq/2016/Feb/147 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://rhn.redhat.com/errata/RHSA-2016-1089.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179356.html - http://tomcat.apache.org/security-8.html - https://access.redhat.com/errata/RHSA-2016:1087 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.securitytracker.com/id/1035069 - https://bto.bluecoat.com/security-advisory/sa118 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c0515
ecoat.com/security-advisory/sa118 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150442 - http://rhn.redhat.com/errata/RHSA-2016-2807.html - https://access.redhat.com/errata/RHSA-2016:1088 - https://security.netapp.com/advisory/ntap-20180531-0001/ - http://rhn.redhat.com/errata/RHSA-2016-2808.html - http://svn.apache.org/viewvc?view=revision&revision=1725929 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00069.html - http://rhn.redhat.com/errata/RHSA-2016-2599.html - http://www.securityfocus.com/bid/83326 - http://www.debian.org/security/2016/dsa-3609 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c0515
debian.org/security/2016/dsa-3609 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158626 - http://www.debian.org/security/2016/dsa-3552 - http://svn.apache.org/viewvc?view=revision&revision=1725926 - https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2016-0764 State: PUBLISHED Published: 2017-07-14T20:00:00 Last Updated: 2024-08-05T22:30:04.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2581.html - https://bugzilla.redhat.com/show_bug.cgi?id=1324025
CVE ID: CVE-2016-0765 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-05T22:30:04.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/02/3 - http://www.securityfocus.com/bid/82347 - http://www.vapid.dhs.org/advisory.php?v=160
CVE ID: CVE-2016-0766 State: PUBLISHED Published: 2016-02-17T15:00:00 Last Updated: 2024-08-05T22:30:03.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which allows attackers to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html - http://www.postgresql.org/docs/current/static/release-9-3-11.html - http://lists.opensuse.org/opensuse-security-a
html - http://www.postgresql.org/docs/current/static/release-9-3-11.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html - http://www.postgresql.org/docs/current/static/release-9-2-15.html - http://www.postgresql.org/docs/current/static/release-9-5-1.html - https://security.gentoo.org/glsa/201701-33 - http://www.postgresql.org/about/news/1644/ - http://www.securitytracker.com/id/1035005 - http://www.securityfocus.com/bid/83184 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html - http://www.postgresql.org/docs/current/static/release-9-4-6.html - http://www.ubuntu
ty-announce/2016-02/msg00056.html - http://www.postgresql.org/docs/current/static/release-9-4-6.html - http://www.ubuntu.com/usn/USN-2894-1 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html - http://www.postgresql.org/docs/current/static/release-9-1-20.html - http://www.debian.org/security/2016/dsa-3476 - http://www.debian.org/security/2016/dsa-3475
CVE ID: CVE-2016-0767 State: PUBLISHED Published: 2017-06-06T18:00:00 Last Updated: 2024-08-05T22:30:04.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the public schema to alter the public schema classpath. Additional Analyst Notes: - CVE Program Container: References: - https://tada.github.io/pljava/releasenotes.html
CVE ID: CVE-2016-0768 State: PUBLISHED Published: 2017-06-06T18:00:00 Last Updated: 2024-08-05T22:30:04.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL PL/Java after 9.0 does not honor access controls on large objects. Additional Analyst Notes: - CVE Program Container: References: - https://tada.github.io/pljava/releasenotes.html
CVE ID: CVE-2016-0769 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-05T22:30:04.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow (1) remote administrators to execute arbitrary SQL commands via the delid parameter or remote authenticated users to execute arbitrary SQL commands via the (2) view, (3) mark, or (4) change parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/02/02/3 - http://www.securityfocus.com/bid/82347 - http://www.vapid.dhs.org/advisory.php?v=160
CVE ID: CVE-2016-0770 State: PUBLISHED Published: 2017-03-16T15:00:00 Last Updated: 2024-08-05T22:30:04.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includes/admin/pages/manage.php in the Connections Business Directory plugin before 8.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=161 - https://wordpress.org/plugins/connections/changelog/ - http://www.openwall.com/lists/oss-security/2016/02/02/1 - http://www.securityfocus.com/bid/82355
CVE ID: CVE-2016-0771 State: PUBLISHED Published: 2016-03-13T22:00:00 Last Updated: 2024-08-05T22:30:04.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00063.html - https://www.samba.org/samba/security/CVE-2016-0771.html -
ensuse.org/opensuse-security-announce/2016-03/msg00063.html - https://www.samba.org/samba/security/CVE-2016-0771.html - https://bugzilla.samba.org/show_bug.cgi?id=11128 - https://bugzilla.samba.org/show_bug.cgi?id=11686 - http://www.securityfocus.com/bid/84273 - http://www.ubuntu.com/usn/USN-2922-1 - http://www.debian.org/security/2016/dsa-3514 - http://www.securitytracker.com/id/1035219
CVE ID: CVE-2016-0772 State: PUBLISHED Published: 2016-09-02T14:00:00 Last Updated: 2024-08-05T22:30:04.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack." Additional Analyst Notes: - CVE Program Container: References: - https://hg.python.org/cpython/rev/d590114c2394 - http://www.splunk.com/view/SP-CAAAPUE - http://rhn.redhat.com
rences: - https://hg.python.org/cpython/rev/d590114c2394 - http://www.splunk.com/view/SP-CAAAPUE - http://rhn.redhat.com/errata/RHSA-2016-1630.html - http://rhn.redhat.com/errata/RHSA-2016-1627.html - https://hg.python.org/cpython/rev/b3ce713fb9be - http://rhn.redhat.com/errata/RHSA-2016-1629.html - http://www.splunk.com/view/SP-CAAAPSV - https://lists.debian.org/debian-lts-announce/2019/02/msg00011.html - https://bugzilla.redhat.com/show_bug.cgi?id=1303647 - https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-5 - http://www.openwall.com/lists/oss-security/2016/06/14/9 - https://hg.python.org/cpython/raw-file/v2.7.12/Misc/NEWS - https://security.gentoo.org/glsa/201701-18 - https:/
6/14/9 - https://hg.python.org/cpython/raw-file/v2.7.12/Misc/NEWS - https://security.gentoo.org/glsa/201701-18 - https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-2 - http://www.securityfocus.com/bid/91225 - http://rhn.redhat.com/errata/RHSA-2016-1628.html - http://rhn.redhat.com/errata/RHSA-2016-1626.html - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
CVE ID: CVE-2016-0773 State: PUBLISHED Published: 2016-02-17T15:00:00 Last Updated: 2024-08-05T22:30:04.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service (infinite loop or buffer overflow and crash) via a large Unicode character range in a regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00054.html - https://puppet.com/security/cve/CVE-2016-0773 - http://www.postgresql.org/docs/current/static/release-9-3-11.html - http
https://puppet.com/security/cve/CVE-2016-0773 - http://www.postgresql.org/docs/current/static/release-9-3-11.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00052.html - http://www.postgresql.org/docs/current/static/release-9-2-15.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10152 - http://www.postgresql.org/docs/current/static/release-9-5-1.html - https://security.gentoo.org/glsa/201701-33 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.postgresql.org/about/news/1644/ - http://www.securitytracker.com/id/1035005 - http://list
2016-2867209.html - http://www.postgresql.org/about/news/1644/ - http://www.securitytracker.com/id/1035005 - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177878.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177820.html - http://rhn.redhat.com/errata/RHSA-2016-1060.html - http://www.securityfocus.com/bid/83184 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00056.html - http://www.postgresql.org/docs/current/static/release-9-4-6.html - http://www.ubuntu.com/usn/USN-2894-1 - http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00049.html - http://www.postgresql.org/docs/current/static/release-9-1-20.html -
g/opensuse-security-announce/2016-02/msg00049.html - http://www.postgresql.org/docs/current/static/release-9-1-20.html - http://www.debian.org/security/2016/dsa-3476 - http://www.debian.org/security/2016/dsa-3475
CVE ID: CVE-2016-0774 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-05T22:30:04.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." NOTE: this vu
e (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2967-1 - http://source.android.com/security/bulletin/2016-05-01.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00027.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://www.debian.org/security/2016/dsa-3503 - http://lists.opensuse.org/opensuse-security-announce/2016-04/
2096.html - http://www.debian.org/security/2016/dsa-3503 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00028.html - http://www.ubuntu.com/usn/USN-2967-2 - http://rhn.redhat.com/errata/RHSA-2016-0494.html - http://www.ubuntu.com/usn/USN-2968-1 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00029.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00036.html - http://www.ubuntu.com/usn/USN-2968-2 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html - http://list
www.ubuntu.com/usn/USN-2968-2 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00032.html - http://rhn.redhat.com/errata/RHSA-2016-0617.html - https://security-tracker.debian.org/tracker/CVE-2016-0774 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00034.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00037.html - http://www.securityfocus.com/bid/84126 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00033.html - https://bugzilla.redhat.com/show_bug.cgi?id=1303961
CVE ID: CVE-2016-0775 State: PUBLISHED Published: 2016-04-13T16:00:00 Last Updated: 2024-08-05T22:30:04.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201612-52 - https://github.com/python-pillow/Pillow/commit/893a40850c2d5da41537958e40569c029a6e127b - http://www.debian.org/security/2016/dsa-3499 - https://github.com/python-pillow/Pillow/blob/c3cb690fed5d4bf0c45576759de55d054916c165/CHANGES.rst
CVE ID: CVE-2016-0776 State: REJECTED Published: 2017-05-09T15:00:00 Last Updated: 2017-05-09T14:57:01 Description: No description available.
CVE ID: CVE-2016-0777 State: PUBLISHED Published: 2016-01-14T00:00:00 Last Updated: 2024-08-05T22:30:04.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/ - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html - https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-rele
ensuse.org/opensuse-security-announce/2016-01/msg00006.html - https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/ - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375 - http://www.securityfocus.com/archive/1/537295/100/0/threaded - https://support.apple.com/HT206167 - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734 - http://www.securityfocus.com/bid/80695 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://security.FreeBS
695 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.openssh.com/txt/release-7.1p2 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html - https://bto.bluecoat.com/security-advisory/sa109 - http://www.securitytracker.com/id/1034671 - http://lists.opensuse.org/opensuse-security-announce/2016-01
dvisory/sa109 - http://www.securitytracker.com/id/1034671 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html - https://security.gentoo.org/glsa/201601-01 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://www.openwall.com/lists/oss-security/2016/01/14/7 - http://seclists.org/fulldisclosure/2016/Jan/44 - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html - http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-Janua
/opensuse-security-announce/2016-01/msg00007.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html - http://www.ubuntu.com/usn/USN-2869-1 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - http://www.debian.org/security/2016/dsa-3446 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf