Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-9054 State: PUBLISHED Published: 2017-01-26T21:00:00 Last Updated: 2024-08-06T02:42:09.764Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Aerospike Products: Database Server Problem Types: stack-based buffer overflow Description: An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow in the function as_sindex__simatch_list_by_set_binid resulting in remote code execution. An attacker can simply connect to the port to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: R
acker can simply connect to the port to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95421 - http://www.talosintelligence.com/reports/TALOS-2016-0268/
CVE ID: CVE-2016-9055 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9056 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9057 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9058 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9059 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9060 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9061 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:09.920Z Vendors: Mozilla Products: Firefox Problem Types: API key (glocation) in broadcast protected with signature-level permission can be accessed by an application installed beforehand that defines the same permissions Description: A previously installed malicious Android application which defines a specific signature-level permissions used by Firefox can access API keys meant for Firefox only. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: Re
g systems are unaffected. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94337 - http://www.securitytracker.com/id/1037298 - https://bugzilla.mozilla.org/show_bug.cgi?id=1245795 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-9062 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:09.929Z Vendors: Mozilla Products: Firefox Problem Types: Private browsing browser traces (Android) in browser.db and wal file Description: Private browsing mode leaves metadata information, such as URLs, for sites visited in "browser.db" and "browser.db-wal" files within the Firefox profile after the mode is exited. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1294438 - http://www.secu
yst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1294438 - http://www.securityfocus.com/bid/94337 - http://www.securitytracker.com/id/1037298 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-9063 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:10.630Z Vendors: Mozilla Products: Firefox Problem Types: Possible integer overflow to fix inside XML_Parse in Expat Description: An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-3898 - http://www.securityfocus.com/bid/94337 - https://bugzilla.mozilla.org/show_bug.cgi?id=1274777 - http://www.securitytracker.com/id/1037298 - http://www.securitytracker.com/id/1039427 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-9064 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:10.023Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: Add-ons update must verify IDs match between current and new versions Description: Add-on updates failed to verify that the add-on ID inside the signed package matched the ID of the add-on being updated. An attacker who could perform a man-in-the-middle attack on the user's connection to the update server and defeat the certificate pinning protection could provide a malicious signed add-on instead of a valid update. This vulnerability affects Firefox ESR < 45.5 and Firefox < 50. Additional Analyst Notes: - CVE Program Cont
lid update. This vulnerability affects Firefox ESR < 45.5 and Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1303418 - http://www.securitytracker.com/id/1037298 - https://security.gentoo.org/glsa/201701-15 - http://www.securityfocus.com/bid/94336 - http://rhn.redhat.com/errata/RHSA-2016-2780.html - https://www.mozilla.org/security/advisories/mfsa2016-89/ - https://www.mozilla.org/security/advisories/mfsa2016-90/
CVE ID: CVE-2016-9065 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:10.011Z Vendors: Mozilla Products: Firefox Problem Types: Firefox for Android location bar spoofing using fullscreen Description: The location bar in Firefox for Android can be spoofed by forcing a user into fullscreen mode, blocking its exiting, and creating of a fake location bar without any user notification. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94342 - https://bugzilla.mozilla.org/show_
otes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94342 - https://bugzilla.mozilla.org/show_bug.cgi?id=1306696 - http://www.securitytracker.com/id/1037298 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-9066 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:09.998Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Integer overflow leading to a buffer overflow in nsScriptLoadHandler Description: A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2016/dsa-3730 - http://www.securitytracker.com/id/1037298 - https://bugzilla.mozilla.org/show_bug.cgi?id=12996
/security/2016/dsa-3730 - http://www.securitytracker.com/id/1037298 - https://bugzilla.mozilla.org/show_bug.cgi?id=1299686 - https://security.gentoo.org/glsa/201701-15 - http://www.securityfocus.com/bid/94336 - https://www.mozilla.org/security/advisories/mfsa2016-93/ - http://rhn.redhat.com/errata/RHSA-2016-2780.html - https://www.mozilla.org/security/advisories/mfsa2016-89/ - https://www.mozilla.org/security/advisories/mfsa2016-90/
CVE ID: CVE-2016-9067 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:10.040Z Vendors: Mozilla Products: Firefox Problem Types: heap-use-after-free in nsINode::ReplaceOrInsertBefore Description: Two use-after-free errors during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1301777 - http://www.securityfocus.com/bid/94337 - http://www.securitytracker.com/id/1037298 - https://bugzilla.mozilla.org/show_bug.cgi?id=1308922 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-9068 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:10.523Z Vendors: Mozilla Products: Firefox Problem Types: heap-use-after-free in nsRefreshDriver Description: A use-after-free during web animations when working with timelines resulting in a potentially exploitable crash. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94337 - https://bugzilla.mozilla.org/show_bug.cgi?id=1302973 - http://www.securitytracker.com/id/1037298 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-9069 State: PUBLISHED Published: 2018-10-18T13:00:00 Last Updated: 2024-08-06T02:42:10.295Z Vendors: Mozilla Products: Firefox Problem Types: heap-use-after-free in nsINode::ReplaceOrInsertBefore Description: A use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94337 - http://www.securitytracker.com/id/1037298 - https://bugzilla.mozilla.org/show_bug.cgi?id=1308922 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-9070 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:09.992Z Vendors: Mozilla Products: Firefox Problem Types: Sidebar bookmark can have reference to chrome window Description: A maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged chrome window and engage in limited JavaScript operations violating cross-origin protections. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94337 - https://bugzilla.mozilla.org/show_bug.cgi?id=1281071 - http://www.securitytracker.com/id/1037298 - https://www.mozilla.org/security/advisor
zilla.org/show_bug.cgi?id=1281071 - http://www.securitytracker.com/id/1037298 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-9071 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:10.012Z Vendors: Mozilla Products: Firefox Problem Types: Probe browser history via HSTS/301 redirect + CSP Description: Content Security Policy combined with HTTP to HTTPS redirection can be used by malicious server to verify whether a known site is within a user's browser history. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94337 - http://www.securitytracker.com/id/1037298 - https://bugzilla.mozilla.org/show_bug.cgi?id=1285003 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-9072 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:10.276Z Vendors: Mozilla Products: Firefox Problem Types: 64-bit NPAPI sandbox isn't enabled on fresh profile Description: When a new Firefox profile is created on 64-bit Windows installations, the sandbox for 64-bit NPAPI plugins is not enabled by default. Note: This issue only affects 64-bit Windows. 32-bit Windows and other operating systems are unaffected. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94337 - http://www.securitytracker.com/id/1037298 - https://bugzilla.mozilla.org/show_bug.cgi?id=
.securityfocus.com/bid/94337 - http://www.securitytracker.com/id/1037298 - https://bugzilla.mozilla.org/show_bug.cgi?id=1300083 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-9073 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:10.032Z Vendors: Mozilla Products: Firefox Problem Types: windows.create schema doesn't specify "format": "relativeUrl" Description: WebExtensions can bypass security checks to load privileged URLs and potentially escape the WebExtension sandbox. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94337 - http://www.securitytracker.com/id/1037298 - https://bugzilla.mozilla.org/show_bug.cgi?id=1289273 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-9074 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:09.995Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Insufficient timing side-channel resistance in divSpoiler Description: An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in Network Security Services (NSS) 3.26.1. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2016/dsa-3730 - https://bugzilla.mozilla.org/show_bug.cgi?id=1293334 - https://security.gentoo.org/gls
bian.org/security/2016/dsa-3730 - https://bugzilla.mozilla.org/show_bug.cgi?id=1293334 - https://security.gentoo.org/glsa/201701-46 - http://www.securityfocus.com/bid/94341 - http://www.securitytracker.com/id/1037298 - https://security.gentoo.org/glsa/201701-15 - https://www.mozilla.org/security/advisories/mfsa2016-93/ - https://www.mozilla.org/security/advisories/mfsa2016-89/ - https://www.mozilla.org/security/advisories/mfsa2016-90/
CVE ID: CVE-2016-9075 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:10.013Z Vendors: Mozilla Products: Firefox Problem Types: WebExtensions can access the mozAddonManager API and use it to gain elevated privileges Description: An issue where WebExtensions can use the mozAddonManager API to elevate privilege due to privileged pages being allowed in the permissions list. This allows a malicious extension to then install additional extensions without explicit user permission. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1295324 - http://www.securityfocus.com
CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1295324 - http://www.securityfocus.com/bid/94337 - http://www.securitytracker.com/id/1037298 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-9076 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:10.046Z Vendors: Mozilla Products: Firefox Problem Types: select dropdown menu can be used for URL bar spoofing on e10s Description: An issue where a "<select>" dropdown menu can be used to cover location bar content, resulting in potential spoofing attacks. This attack requires e10s to be enabled in order to function. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94337 - http://www.securitytracker.com/id/1037298 - https://bugzilla.mozilla.org/show_bug.cgi?id=1276976 - https://www.mozilla.org/security
securitytracker.com/id/1037298 - https://bugzilla.mozilla.org/show_bug.cgi?id=1276976 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-9077 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:10.400Z Vendors: Mozilla Products: Firefox Problem Types: Canvas filters allow feDisplacementMaps to be applied to cross-origin images, allowing timing attacks on them Description: Canvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin. The rendering by the filter is variable depending on the input pixel, allowing for timing attacks when the images are loaded from third party locations. This vulnerability affects Firefox < 50. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94337 - http://www.securitytracker.com/
t Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94337 - http://www.securitytracker.com/id/1037298 - https://bugzilla.mozilla.org/show_bug.cgi?id=1298552 - https://www.mozilla.org/security/advisories/mfsa2016-89/
CVE ID: CVE-2016-9078 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:10.435Z Vendors: Mozilla Products: Firefox Problem Types: data: URL can inherit wrong origin after an HTTP redirect Description: Redirection from an HTTP connection to a "data:" URL assigns the referring site's origin to the "data:" URL in some circumstances. This can result in same-origin violations against a domain if it loads resources from malicious sites. Cross-origin setting of cookies has been demonstrated without the ability to read them. Note: This issue only affects Firefox 49 and 50. This vulnerability affects Firefox < 50.0.1. Additional Analyst Notes: - CVE Program Container: Ref
s Firefox 49 and 50. This vulnerability affects Firefox < 50.0.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94569 - https://www.mozilla.org/security/advisories/mfsa2016-91/ - http://www.securitytracker.com/id/1037353 - https://bugzilla.mozilla.org/show_bug.cgi?id=1317641
CVE ID: CVE-2016-9079 State: PUBLISHED Published: 2018-06-11T21:00:00.000Z Last Updated: 2025-10-21T23:45:50.578Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Use-after-free in SVG Animation Description: A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.debian.org/security/2016/dsa-3730 - http://rhn.redhat.com/errata/RHSA-2016-284
P Vulnrichment: References: - https://www.debian.org/security/2016/dsa-3730 - http://rhn.redhat.com/errata/RHSA-2016-2843.html - https://security.gentoo.org/glsa/201701-35 - http://www.securitytracker.com/id/1037370 - https://www.exploit-db.com/exploits/42327/ - http://rhn.redhat.com/errata/RHSA-2016-2850.html - https://www.mozilla.org/security/advisories/mfsa2016-92/ - http://www.securityfocus.com/bid/94591 - https://security.gentoo.org/glsa/201701-15 - https://www.exploit-db.com/exploits/41151/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1321066
CVE ID: CVE-2016-9080 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-06T02:42:10.040Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 50.1 Description: Memory safety bugs were reported in Firefox 50.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 50.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2016-94/ - http://www.securityfocus.com/bid/94883 - http://www.securitytracker.com/id/1037461 - https://bugzilla.mozilla.or
6-94/ - http://www.securityfocus.com/bid/94883 - http://www.securitytracker.com/id/1037461 - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1289701%2C1314401%2C1315848
CVE ID: CVE-2016-9081 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T02:42:10.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group assignments and possibly perform other user account modifications via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93969 - https://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html
CVE ID: CVE-2016-9082 State: PUBLISHED Published: 2017-02-03T15:00:00 Last Updated: 2024-08-06T02:42:10.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference) via a large svg file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1312337 - https://bugs.freedesktop.org/show_bug.cgi?id=98165 - http://www.securityfocus.com/bid/93931 - http://www.openwall.com/lists/oss-security/2016/10/27/2 - https://bugs.freedesktop.org/attachment.cgi?id=127421 - https://security.gentoo.org/glsa/201904-0
ecurity/2016/10/27/2 - https://bugs.freedesktop.org/attachment.cgi?id=127421 - https://security.gentoo.org/glsa/201904-01
CVE ID: CVE-2016-9083 State: PUBLISHED Published: 2016-11-28T03:01:00 Last Updated: 2024-08-06T02:42:10.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corruption) or have unspecified other impact, by leveraging access to a vfio PCI device file for a VFIO_DEVICE_SET_IRQS ioctl call, aka a "state machine confusion bug." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/26/11 - https://patchwork.kernel.org/patch/9373631/ - http://rhn.redhat.com/errata/RHSA-2017
/lists/oss-security/2016/10/26/11 - https://patchwork.kernel.org/patch/9373631/ - http://rhn.redhat.com/errata/RHSA-2017-0387.html - https://bugzilla.redhat.com/show_bug.cgi?id=1389258 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=05692d7005a364add85c6e25a6c4447ce08f913a - https://github.com/torvalds/linux/commit/05692d7005a364add85c6e25a6c4447ce08f913a - http://rhn.redhat.com/errata/RHSA-2017-0386.html - http://www.securityfocus.com/bid/93929
CVE ID: CVE-2016-9084 State: PUBLISHED Published: 2016-11-28T03:01:00 Last Updated: 2024-08-06T02:42:10.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/vfio/pci/vfio_pci_intrs.c in the Linux kernel through 4.8.11 misuses the kzalloc function, which allows local users to cause a denial of service (integer overflow) or have unspecified other impact by leveraging access to a vfio PCI device file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1389259 - http://www.openwall.com/lists/oss-security/2016/10/26/11 - http://www.securityfocus.com/bid/93930 - https://patchwork.kernel.org/patch/9373631/ - http://rhn.red
ty/2016/10/26/11 - http://www.securityfocus.com/bid/93930 - https://patchwork.kernel.org/patch/9373631/ - http://rhn.redhat.com/errata/RHSA-2017-0387.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=05692d7005a364add85c6e25a6c4447ce08f913a - https://github.com/torvalds/linux/commit/05692d7005a364add85c6e25a6c4447ce08f913a - http://rhn.redhat.com/errata/RHSA-2017-0386.html
CVE ID: CVE-2016-9085 State: PUBLISHED Published: 2017-02-03T15:00:00 Last Updated: 2024-08-06T02:42:10.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://chromium.googlesource.com/webm/libwebp/+/e2affacc35f1df6cc3b1a9fa0ceff5ce2d0cce83 - http://www.securityfocus.com/bid/93928 - http://www.openwall.com/lists/oss-security/2016/10/27/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTR2ZW67TMT7KC24RBENIF25KWUJ7VPD/ - https://security.gentoo.org/glsa/201701-