Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
t is possible to access every directory on the underlying operating system. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Apr/9 - https://www.securityfocus.com/bid/97394/ - https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2016-9491.html
CVE ID: CVE-2016-9492 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T02:50:38.408Z Vendors: PHP FormMail Products: Generator Problem Types: CWE-434 Description: The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to unrestricted upload of dangerous file types. In the generated form.lib.php file, upload file types are checked against a hard-coded list of dangerous extensions. This list does not include all variations of PHP files, which may lead to execution of the contained PHP code if the attacker can guess the uploaded filename. The form by default appends a short random string to the end of the filename. Additional Analyst Notes:
oaded filename. The form by default appends a short random string to the end of the filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96718 - https://www.kb.cert.org/vuls/id/608591
CVE ID: CVE-2016-9493 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T02:50:38.435Z Vendors: PHP FormMail Products: Generator Problem Types: CWE-80 Description: The code generated by PHP FormMail Generator prior to 17 December 2016 is vulnerable to stored cross-site scripting. In the generated form.lib.php file, upload file types are checked against a hard-coded list of dangerous extensions. This list does not include all variations of PHP files, which may lead to execution of the contained PHP code if the attacker can guess the uploaded filename. The form by default appends a short random string to the end of the filename. Additional Analyst Notes: - CVE Program Con
he form by default appends a short random string to the end of the filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96718 - https://www.kb.cert.org/vuls/id/608591
CVE ID: CVE-2016-9494 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T02:50:38.659Z Vendors: Hughes Satellite Modem Products: HN7740S, DW7000, HN7000S/SM Problem Types: CWE-20 Description: Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, are potentially vulnerable to improper input validation. The device's advanced status web page that is linked to from the basic status web page does not appear to properly parse malformed GET requests. This may lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/96244 - https://www.kb.cert.org/vuls/id/614751
CVE ID: CVE-2016-9495 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T02:50:38.460Z Vendors: Hughes Satellite Modem Products: HN7740S, DW7000, HN7000S/SM Problem Types: CWE-798 Description: Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, uses hard coded credentials. Access to the device's default telnet port (23) can be obtained through using one of a few default credentials shared among all devices. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/96244 - https://www.kb.cert.org/vuls/id/614751
CVE ID: CVE-2016-9496 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T02:50:38.632Z Vendors: Hughes Satellite Modem Products: HN7740S, DW7000, HN7000S/SM Problem Types: CWE-306 Description: Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthenticated user may send an HTTP GET request to http://[ip]/com/gatewayreset or http://[ip]/cgi/reboot.bin to cause the modem to reboot. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/96244 - https://www.kb.cert.org/vuls/id/614751
CVE ID: CVE-2016-9497 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T02:50:38.663Z Vendors: Hughes Satellite Modem Products: HN7740S, DW7000, HN7000S/SM Problem Types: CWE-288 Description: Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel. By default, port 1953 is accessible via telnet and does not require authentication. An unauthenticated remote user can access many administrative commands via this interface, including rebooting the modem. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/96244 - https://
dem. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/96244 - https://www.kb.cert.org/vuls/id/614751
CVE ID: CVE-2016-9498 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T02:50:38.639Z Vendors: ManageEngine Products: Applications Manager Problem Types: CWE-502 Description: ManageEngine Applications Manager 12 and 13 before build 13200, allows unserialization of unsafe Java objects. The vulnerability can be exploited by remote user without authentication and it allows to execute remote code compromising the application as well as the operating system. As Application Manager's RMI registry is running with privileges of system administrator, by exploiting this vulnerability an attacker gains highest privileges on the underlying operating system. Additional Analyst Note
ting this vulnerability an attacker gains highest privileges on the underlying operating system. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2017/Apr/9 - https://www.securityfocus.com/bid/97394/ - https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2016-9498.html
CVE ID: CVE-2016-9499 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T02:50:38.579Z Vendors: Accellion Products: FTP Server Problem Types: CWE-204 Description: Accellion FTP server prior to version FTA_9_12_220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts and enumerate them. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualys.com/2016/12/06/qsa-2016-12-06/qsa-2016-12-06.pdf - https://www.securityfocus.com/bid/96154 - https://www.kb.cert.org/vuls/id/745607
CVE ID: CVE-2016-9500 State: PUBLISHED Published: 2018-07-13T20:00:00 Last Updated: 2024-08-06T02:50:38.629Z Vendors: Accellion Products: FTP Server Problem Types: CWE-80 Description: Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable to cross-site scripting. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualys.com/2016/12/06/qsa-2016-12-06/qsa-2016-12-06.pdf - https://www.securityfocus.com/bid/96154 - https://www.kb.cert.org/vuls/id/745607
CVE ID: CVE-2016-9501 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9502 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9503 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9504 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9505 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9506 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9507 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9508 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9509 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9510 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9511 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9512 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9513 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9514 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9515 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9516 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9517 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9518 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9519 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9520 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9521 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9522 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9523 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9524 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9525 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9526 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9527 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9528 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9529 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9530 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9531 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9532 State: PUBLISHED Published: 2017-02-06T17:00:00 Last Updated: 2024-08-06T02:50:38.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94424 - https://bugzilla.redhat.com/show_bug.cgi?id=1397726 - https://security.gentoo.org/glsa/201701-16 - http://www.openwall.com/lists/oss-security/2016/11/22/1 - http://www.openwall.com/lists/oss-security/2016/11/11/14 - http://bugzil
.openwall.com/lists/oss-security/2016/11/22/1 - http://www.openwall.com/lists/oss-security/2016/11/11/14 - http://bugzilla.maptools.org/show_bug.cgi?id=2592 - http://www.debian.org/security/2017/dsa-3762 - http://www.openwall.com/lists/oss-security/2016/11/21/1
CVE ID: CVE-2016-9533 State: PUBLISHED Published: 2016-11-22T19:00:00 Last Updated: 2024-08-06T02:50:38.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094, aka "PixarLog horizontalDifference heap-buffer-overflow." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94742 - http://rhn.redhat.com/errata/RHSA-2017-0225.html - http://www.securityfocus.com/bid/94484 - http://www.debian.org/security/2017/dsa-3762 - https://github.com/vadz/libtiff/commit/83a4b92815ea04969d494416eaae3d4c6b338e4a#diff-bdc795f6afeb9558c1012
17/dsa-3762 - https://github.com/vadz/libtiff/commit/83a4b92815ea04969d494416eaae3d4c6b338e4a#diff-bdc795f6afeb9558c1012b3cfae729ef
CVE ID: CVE-2016-9534 State: PUBLISHED Published: 2016-11-22T19:00:00 Last Updated: 2024-08-06T02:50:38.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: tif_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't reset the tif_rawcc and tif_rawcp members. Reported as MSVR 35095, aka "TIFFFlushData1 heap-buffer-overflow." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94743 - https://github.com/vadz/libtiff/commit/83a4b92815ea04969d494416eaae3d4c6b338e4a#diff-5be5ce02d0dea67050d5b2a10102d1ba - http://rhn.redhat.com/errata/RHSA-2017-0225.html - http://www.securityfocus.com/bid/94484 - http://
7050d5b2a10102d1ba - http://rhn.redhat.com/errata/RHSA-2017-0225.html - http://www.securityfocus.com/bid/94484 - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-9535 State: PUBLISHED Published: 2016-11-22T19:00:00 Last Updated: 2024-08-06T02:50:38.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow." Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3844 - https://github.com/vadz/libtiff/commit/3ca657a8793dd011bf869695d72ad31c779c3cc1 - https://github.com/vadz/libtiff/commit/6a984bf7905c6621281
adz/libtiff/commit/3ca657a8793dd011bf869695d72ad31c779c3cc1 - https://github.com/vadz/libtiff/commit/6a984bf7905c6621281588431f384e79d11a2e33 - http://rhn.redhat.com/errata/RHSA-2017-0225.html - http://www.securityfocus.com/bid/94744 - http://www.securityfocus.com/bid/94484
CVE ID: CVE-2016-9536 State: PUBLISHED Published: 2016-11-22T19:00:00 Last Updated: 2024-08-06T02:50:38.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg_strip(). Reported as MSVR 35098, aka "t2p_process_jpeg_strip heap-buffer-overflow." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0225.html - http://www.securityfocus.com/bid/94484 - http://www.debian.org/security/2017/dsa-3762 - http://www.securityfocus.com/bid/94745 - https://github.com/vadz/libtiff/commit/83a4b92815ea04969d494416eaae3d4c6b338e4a#dif
://www.securityfocus.com/bid/94745 - https://github.com/vadz/libtiff/commit/83a4b92815ea04969d494416eaae3d4c6b338e4a#diff-5173a9b3b48146e4fd86d7b9b346115e
CVE ID: CVE-2016-9537 State: PUBLISHED Published: 2016-11-22T19:00:00 Last Updated: 2024-08-06T02:50:38.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. Reported as MSVR 35093, MSVR 35096, and MSVR 35097. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94746 - http://rhn.redhat.com/errata/RHSA-2017-0225.html - http://www.securityfocus.com/bid/94484 - https://github.com/vadz/libtiff/commit/83a4b92815ea04969d494416eaae3d4c6b338e4a#diff-c8b4b355f9b5c06d585b23138e1c185f - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-9538 State: PUBLISHED Published: 2016-11-22T19:00:00 Last Updated: 2024-08-06T02:50:38.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94753 - http://www.securityfocus.com/bid/94484 - https://github.com/vadz/libtiff/commit/43c0b81a818640429317c80fea1e66771e85024b#diff-c8b4b355f9b5c06d585b23138e1c185f - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-9539 State: PUBLISHED Published: 2016-11-22T19:00:00 Last Updated: 2024-08-06T02:50:38.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer(). Reported as MSVR 35092. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94484 - http://www.securityfocus.com/bid/94754 - https://github.com/vadz/libtiff/commit/ae9365db1b271b62b35ce018eac8799b1d5e8a53
CVE ID: CVE-2016-9540 State: PUBLISHED Published: 2016-11-22T19:00:00 Last Updated: 2024-08-06T02:50:38.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka "cpStripToTile heap-buffer-overflow." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vadz/libtiff/commit/5ad9d8016fbb60109302d558f7edb2cb2a3bb8e3 - http://www.securityfocus.com/bid/94747 - http://rhn.redhat.com/errata/RHSA-2017-0225.html - http://www.securityfocus.com/bid/94484 - http://www.debian.org/security/2017/dsa-3762
CVE ID: CVE-2016-9553 State: PUBLISHED Published: 2017-01-28T12:38:00 Last Updated: 2024-08-06T02:50:38.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sophos Web Appliance (version 4.2.1.3) is vulnerable to two Remote Command Injection vulnerabilities affecting its web administrative interface. These vulnerabilities occur in the MgrReport.php (/controllers/MgrReport.php) component responsible for blocking and unblocking IP addresses from accessing the device. The device doesn't properly escape the information passed in the variables 'unblockip' and 'blockip' before calling the shell_exec() function which allows for system commands to be injected into the device. The code
ckip' before calling the shell_exec() function which allows for system commands to be injected into the device. The code erroneously suggests that the information handled is protected by utilizing the variable name 'escapedips' - however this was not the case. The Sophos ID is NSWA-1258. Additional Analyst Notes: - CVE Program Container: References: - http://swa.sophos.com/rn/swa/concepts/ReleaseNotes_4.3.1.html - http://www.securityfocus.com/bid/95853 - https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-version-4-3-1 - http://pastebin.com/DUYuN0U5
CVE ID: CVE-2016-9554 State: PUBLISHED Published: 2017-01-28T12:38:00 Last Updated: 2024-08-06T02:50:38.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. These vulnerabilities occur in MgrDiagnosticTools.php (/controllers/MgrDiagnosticTools.php), in the component responsible for performing diagnostic tests with the UNIX wget utility. The application doesn't properly escape the information passed in the 'url' variable before calling the executeCommand class function ($this->dtObj->executeCommand). This functi
assed in the 'url' variable before calling the executeCommand class function ($this->dtObj->executeCommand). This function calls exec() with unsanitized user input allowing for remote command injection. The page that contains the vulnerabilities, /controllers/MgrDiagnosticTools.php, is accessed by a built-in command answered by the administrative interface. The command that calls to that vulnerable page (passed in the 'section' parameter) is: 'configuration'. Exploitation of this vulnerability yields shell access to the remote machine under the 'spiderman' user account. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95858 - http://pastebin.c
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95858 - http://pastebin.com/UB8Ye6ZU - https://community.sophos.com/products/web-appliance/b/blog/posts/release-of-swa-version-4-3-1
CVE ID: CVE-2016-9555 State: PUBLISHED Published: 2016-11-28T03:01:00 Last Updated: 2024-08-06T02:50:38.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00044.html - https://bto.bluecoat.com/security-advisory/sa134 - http://lists.opensuse.org/opensuse-security-announce
/msg00044.html - https://bto.bluecoat.com/security-advisory/sa134 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00077.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00067.html - http://www.securitytracker.com/id/1037339 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00056.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00073.html - https://github.com/torvalds/linux/commit/bf911e985d6bbaa328c20c3e05f4eb03de11fdd6 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.8 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bf911e985d6bbaa328c20c3e05f4eb03de11fdd6 - https://groups.go
nel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bf911e985d6bbaa328c20c3e05f4eb03de11fdd6 - https://groups.google.com/forum/#%21topic/syzkaller/pAUcHsUJbjk - http://rhn.redhat.com/errata/RHSA-2017-0086.html - http://rhn.redhat.com/errata/RHSA-2017-0113.html - http://rhn.redhat.com/errata/RHSA-2017-0091.html - http://www.securityfocus.com/bid/94479 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00087.html - http://www.openwall.com/lists/oss-security/2016/11/22/18 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00070.html - https://bugzilla.redhat.com/show_bug.cgi?id=1397930 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00055.
s://bugzilla.redhat.com/show_bug.cgi?id=1397930 - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00054.html - http://rhn.redhat.com/errata/RHSA-2017-0307.html - http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00076.html