Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-5125 State: PUBLISHED Published: 2015-08-14T01:00:00 Last Updated: 2024-08-06T06:32:32.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201508-01 - http://www.securityfocus.com/bid/76291 - https://h20566.www2.hpe.com/portal/site/hpsc/p
rity.gentoo.org/glsa/201508-01 - http://www.securityfocus.com/bid/76291 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://helpx.adobe.com/security/products/flash-player/apsb15-19.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html - http://www.securitytracker.com/id/1033235 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
CVE ID: CVE-2015-5126 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-5127 State: PUBLISHED Published: 2015-08-14T01:00:00 Last Updated: 2024-08-06T06:32:32.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565. Ad
15-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://security.gentoo.org/glsa/201508-01 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://www.exploit-db.com/exploits/37861/ - https://helpx.adobe.com/security/products/flash-player/apsb15-19.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html - http://www.securitytracker.com/id/1033235 - http://www.securityfocus.com/bid/76288 - https://h20
2015-10/msg00018.html - http://www.securitytracker.com/id/1033235 - http://www.securityfocus.com/bid/76288 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388 - http://rhn.redhat.com/errata/RHSA-2015-1603.html
CVE ID: CVE-2015-5128 State: REJECTED Published: 2015-10-08T10:00:00 Last Updated: 2015-10-08T02:57:01 Description: No description available.
CVE ID: CVE-2015-5129 State: PUBLISHED Published: 2015-08-14T01:00:00 Last Updated: 2024-08-06T06:32:32.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5541. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76282 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05
p://www.securityfocus.com/bid/76282 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://security.gentoo.org/glsa/201508-01 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://helpx.adobe.com/security/products/flash-player/apsb15-19.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html - http://www.securitytracker.com/id/1033235 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388 - http://rhn.redhat.com/errata/RHSA-2015-1603.html
CVE ID: CVE-2015-5130 State: PUBLISHED Published: 2015-08-14T01:00:00 Last Updated: 2024-08-06T06:32:32.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565. Ad
15-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://security.gentoo.org/glsa/201508-01 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://helpx.adobe.com/security/products/flash-player/apsb15-19.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html - http://www.securitytracker.com/id/1033235 - http://www.securityfocus.com/bid/76288 - https://www.exploit-db.com/exploits/37854/ - https://h20
acker.com/id/1033235 - http://www.securityfocus.com/bid/76288 - https://www.exploit-db.com/exploits/37854/ - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388 - http://rhn.redhat.com/errata/RHSA-2015-1603.html
CVE ID: CVE-2015-5131 State: PUBLISHED Published: 2015-08-14T01:00:00 Last Updated: 2024-08-06T06:32:32.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5132 and CVE-2015-5133. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://security.gentoo.o
: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://security.gentoo.org/glsa/201508-01 - https://www.exploit-db.com/exploits/37856/ - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://www.securityfocus.com/bid/76284 - https://helpx.adobe.com/security/products/flash-player/apsb15-19.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html - http://www.securitytracker.com/id/1033235 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388 - http://rhn.redhat.com/errata/RHSA-2015-1603.html
CVE ID: CVE-2015-5132 State: PUBLISHED Published: 2015-08-14T01:00:00 Last Updated: 2024-08-06T06:32:32.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5133. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://security.gentoo.o
: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://security.gentoo.org/glsa/201508-01 - https://www.exploit-db.com/exploits/37857/ - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://www.securityfocus.com/bid/76284 - https://helpx.adobe.com/security/products/flash-player/apsb15-19.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html - http://www.securitytracker.com/id/1033235 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388 - http://rhn.redhat.com/errata/RHSA-2015-1603.html
CVE ID: CVE-2015-5133 State: PUBLISHED Published: 2015-08-14T01:00:00 Last Updated: 2024-08-06T06:32:32.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5132. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://security.gentoo.o
: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://security.gentoo.org/glsa/201508-01 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://www.securityfocus.com/bid/76284 - https://www.exploit-db.com/exploits/37858/ - https://helpx.adobe.com/security/products/flash-player/apsb15-19.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html - http://www.securitytracker.com/id/1033235 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388 - http://rhn.redhat.com/errata/RHSA-2015-1603.html
CVE ID: CVE-2015-5134 State: PUBLISHED Published: 2015-08-14T01:00:00 Last Updated: 2024-08-06T06:32:32.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565. Ad
15-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680 - https://www.exploit-db.com/exploits/37852/ - https://security.gentoo.org/glsa/201508-01 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - https://helpx.adobe.com/security/products/flash-player/apsb15-19.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00018.html - http://www.securitytracker.com/id/1033235 - http://www.securityfocus.com/bid/76288 - https://h20
CVE ID: CVE-2015-5143 State: PUBLISHED Published: 2015-07-14T17:00:00 Last Updated: 2024-08-06T06:32:32.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172084.html - https://security.gentoo.org/glsa/201510-06 - https://www.djangoproject.com/weblog/2015/jul/08/security-releases/ - http://lists.opensuse.org/o
o.org/glsa/201510-06 - https://www.djangoproject.com/weblog/2015/jul/08/security-releases/ - http://lists.opensuse.org/opensuse-updates/2015-10/msg00043.html - http://lists.opensuse.org/opensuse-updates/2015-10/msg00046.html - http://www.debian.org/security/2015/dsa-3305 - http://rhn.redhat.com/errata/RHSA-2015-1678.html - http://www.securityfocus.com/bid/75666 - http://rhn.redhat.com/errata/RHSA-2015-1686.html - http://www.ubuntu.com/usn/USN-2671-1 - http://www.securitytracker.com/id/1032820 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-5144 State: PUBLISHED Published: 2015-07-14T17:00:00 Last Updated: 2024-08-06T06:32:32.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-an
or. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172084.html - https://security.gentoo.org/glsa/201510-06 - https://www.djangoproject.com/weblog/2015/jul/08/security-releases/ - http://lists.opensuse.org/opensuse-updates/2015-10/msg00043.html - http://lists.opensuse.org/opensuse-updates/2015-10/msg00046.html - http://www.debian.org/security/2015/dsa-3305 - http://www.securityfocus.com/bid/75665 - http://www.ubuntu.com/usn/USN-2671-1 - http://www.securitytracker.com/id/1032820 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-5145 State: PUBLISHED Published: 2015-07-14T17:00:00 Last Updated: 2024-08-06T06:32:32.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201510-06 - https://www.djangoproject.com/weblog/2015/jul/08/security-releases/ - http://www.securityfocus.com/bid/75691 - http://www.securitytracker.com/id/1032820
CVE ID: CVE-2015-5146 State: PUBLISHED Published: 2017-08-24T20:00:00 Last Updated: 2024-08-06T06:32:32.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the configuration password and access to a computer entrusted to perform remote configuration to cause a denial of service (service crash) via a NULL byte in a crafted configuration directive packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1238136 - http://www.securityfocus.com/bid/75589 - https://security.gentoo.org/glsa/201509-01 - http://lists.f
ug.cgi?id=1238136 - http://www.securityfocus.com/bid/75589 - https://security.gentoo.org/glsa/201509-01 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170926.html - http://www.securitytracker.com/id/1034168 - http://www.debian.org/security/2015/dsa-3388 - http://bugs.ntp.org/show_bug.cgi?id=2853 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169167.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166992.html - http://support.ntp.org/bin/view/Main/SecurityNotice#March_2017_ntp_4_2_8p10_NTP_Secu - https://security.netapp.com/advisory/ntap-20180731-0003/
CVE ID: CVE-2015-5147 State: PUBLISHED Published: 2015-07-14T16:00:00 Last Updated: 2024-08-06T06:32:32.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the header_anchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vmg/redcarpet/blob/master/CHANGELOG.md - http://www.openwall.com/lists/oss-security/2015/06/29/3 - http://www.openwall.com/lists/oss-security/2015/06/30/10 - http://www.securityfocus.com/bid/75508
CVE ID: CVE-2015-5148 State: PUBLISHED Published: 2015-06-30T14:00:00Z Last Updated: 2024-09-16T16:43:32.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in LivelyCart 1.2.0 allows remote attackers to execute arbitrary SQL commands via the search_query parameter to product/search. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37325/
CVE ID: CVE-2015-5149 State: PUBLISHED Published: 2015-06-30T14:00:00 Last Updated: 2024-08-06T06:32:32.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Zoho ManageEngine SupportCenter Plus 7.90 allows remote authenticated users to write to arbitrary files via a .. (dot dot) in the component parameter in the Request component to workorder/Attachment.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37322/ - http://packetstormsecurity.com/files/132376/ManageEngine-SupportCenter-Plus-7.90-XSS-Traversal-Password-Disclosure.html - http://www.vulnerability-lab.com/get_content.php?id=1501 -
ortCenter-Plus-7.90-XSS-Traversal-Password-Disclosure.html - http://www.vulnerability-lab.com/get_content.php?id=1501 - http://www.securityfocus.com/bid/75512
CVE ID: CVE-2015-5150 State: PUBLISHED Published: 2015-06-30T14:00:00Z Last Updated: 2024-09-16T19:41:16.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.90 allow remote authenticated users to inject arbitrary web script or HTML via the (1) query parameter in the run_query_editor_query module to CustomReportHandler.do, (2) compAcct parameter to jsp/ResetADPwd.jsp, or (3) redirectTo parameter to jsp/CacheScreenWidth.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37322/ - http://packetstormsecurity.com/files/132376/ManageEngine-
er: References: - https://www.exploit-db.com/exploits/37322/ - http://packetstormsecurity.com/files/132376/ManageEngine-SupportCenter-Plus-7.90-XSS-Traversal-Password-Disclosure.html - http://www.vulnerability-lab.com/get_content.php?id=1501
CVE ID: CVE-2015-5151 State: PUBLISHED Published: 2015-06-30T14:00:00 Last Updated: 2024-08-06T06:32:32.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Slider Revolution (revslider) plugin 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the client_action parameter in a revslider_ajax_action action to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/132366/WordPress-Revslider-4.2.2-XSS-Information-Disclosure.html - http://www.securityfocus.com/bid/75303
CVE ID: CVE-2015-5152 State: PUBLISHED Published: 2017-07-14T20:00:00 Last Updated: 2024-08-06T06:32:32.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true, which allows remote attackers to obtain user credentials via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://projects.theforeman.org/issues/11119 - https://bugzilla.redhat.com/show_bug.cgi?id=1243571
CVE ID: CVE-2015-5153 State: PUBLISHED Published: 2017-08-18T18:00:00 Last Updated: 2024-08-06T06:32:32.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted object via creating an object with the same name. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1243526
CVE ID: CVE-2015-5154 State: PUBLISHED Published: 2015-08-12T14:00:00 Last Updated: 2024-08-06T06:32:32.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76048 - http://xenbits.xen.org/xsa/advisory-138.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html - https://security.gentoo.org/glsa/201510-02 - http://www.securitytracke
pensuse-security-announce/2015-09/msg00027.html - https://security.gentoo.org/glsa/201510-02 - http://www.securitytracker.com/id/1033074 - http://www.debian.org/security/2015/dsa-3348 - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html - http://rhn.redhat.com/errata/RHSA-2015-1508.html - http://rhn.redhat.com/errata/RHSA-2015-1507.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163681.html - http://rhn.redhat.com/errata/RHSA-2015-1512.html - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00041.html - http://lists.opensuse.org/opensuse-security-an
p://lists.opensuse.org/opensuse-security-announce/2015-07/msg00041.html - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163658.html - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html - https://security.gentoo.org/glsa/201604-03 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00017.html - http://support.citrix.com/article/CTX201593 - http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163472.html
CVE ID: CVE-2015-5155 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2015-5156 State: PUBLISHED Published: 2015-10-19T10:00:00 Last Updated: 2024-08-06T06:32:32.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation, which allows guest OS users to cause a denial of service (buffer overflow and memory corruption) via a crafted sequence of fragmented packets. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html - http://rhn.redhat.com/errata/RHSA-2016-0855.html - http://www.debian.org/security/2015/d
nnounce/2015-12/msg00018.html - http://rhn.redhat.com/errata/RHSA-2016-0855.html - http://www.debian.org/security/2015/dsa-3364 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00009.html - http://rhn.redhat.com/errata/RHSA-2015-1978.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171454.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=48900cb6af4282fa0fb6ff4d72a81aa3dadb5c39 - https://github.com/torvalds/linux/commit/48900cb6af4282fa0fb6ff4d72