Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
This issue is based on the fact that the PowerDNS server parses all records present in a query regardless of whether they are needed or even legitimate. A specially crafted query containing a large number of records can be used to take advantage of that behaviour. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7068 - https://www.debian.org/security/2017/dsa-3764 - https://www.debian.org/security/2017/dsa-3763 - https://doc.powerdns.com/md/security/powerdns-advisory-2016-02/
CVE ID: CVE-2016-7069 State: PUBLISHED Published: 2018-09-11T13:00:00 Last Updated: 2024-08-06T01:50:47.438Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Open-Xchange Products: dnsdist Problem Types: CWE-20 Description: An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend. When dnsdist is configured to add EDNS Client Subnet to a query, the response may contain an EDNS0 OPT record that has to be removed before forwarding the response to the initial client. On a 32-bit system, the pointer arithmetic used when parsing the received response to remove that record might trigger an undefi
bit system, the pointer arithmetic used when parsing the received response to remove that record might trigger an undefined behavior leading to a crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7069 - http://www.securityfocus.com/bid/100509 - https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2017-01.html
CVE ID: CVE-2016-7070 State: PUBLISHED Published: 2018-09-11T13:00:00 Last Updated: 2024-08-06T01:50:46.627Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Ansible Tower Problem Types: CWE-266 Description: A privilege escalation flaw was found in the Ansible Tower. When Tower before 3.0.3 deploys a PostgreSQL database, it incorrectly configures the trust level of postgres user. An attacker could use this vulnerability to gain admin level access to the database. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7070 - https://docs.ansible.com/ansible-tower/3.0.3/html/upgrade-mi
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7070 - https://docs.ansible.com/ansible-tower/3.0.3/html/upgrade-migration-guide/release_notes.html
CVE ID: CVE-2016-7071 State: PUBLISHED Published: 2018-09-10T15:00:00 Last Updated: 2024-08-06T01:50:47.480Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: CFME Problem Types: CWE-285 Description: It was found that the CloudForms before 5.6.2.2, and 5.7.0.7 did not properly apply permissions controls to VM IDs passed by users. A remote, authenticated attacker could use this flaw to execute arbitrary VMs on systems managed by CloudForms if they know the ID of the VM. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2091.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7071
CVE ID: CVE-2016-7072 State: PUBLISHED Published: 2018-09-10T17:00:00 Last Updated: 2024-08-06T01:50:47.436Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Open-Xchange Products: pdns Problem Types: CWE-20 Description: An issue has been found in PowerDNS Authoritative Server before 3.4.11 and 4.0.2 allowing a remote, unauthenticated attacker to cause a denial of service by opening a large number of TCP connections to the web server. If the web server runs out of file descriptors, it triggers an exception and terminates the whole PowerDNS process. While it's more complicated for an unauthorized attacker to make the web server run out of file descriptors sinc
rocess. While it's more complicated for an unauthorized attacker to make the web server run out of file descriptors since its connection will be closed just after being accepted, it might still be possible. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7072 - https://www.debian.org/security/2017/dsa-3764 - https://doc.powerdns.com/md/security/powerdns-advisory-2016-03/
CVE ID: CVE-2016-7073 State: PUBLISHED Published: 2018-09-11T13:00:00 Last Updated: 2024-08-06T01:50:47.448Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Open-Xchange Products: pdns Problem Types: CWE-20 Description: An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures. A missing check of the TSIG time and fudge values was found in AXFRRetriever, leading to a possible replay attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/
a possible replay attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7073 - https://www.debian.org/security/2017/dsa-3764 - https://doc.powerdns.com/md/security/powerdns-advisory-2016-04/
CVE ID: CVE-2016-7074 State: PUBLISHED Published: 2018-09-11T13:00:00 Last Updated: 2024-08-06T01:50:47.469Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Open-Xchange Products: pdns Problem Types: CWE-20 Description: An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures. A missing check that the TSIG record is the last one, leading to the possibility of parsing records that are not covered by the TSIG signature. Additional Analyst Notes: - CVE Program Container: References: -
ing records that are not covered by the TSIG signature. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7074 - https://www.debian.org/security/2017/dsa-3764 - https://doc.powerdns.com/md/security/powerdns-advisory-2016-04/
CVE ID: CVE-2016-7075 State: PUBLISHED Published: 2018-09-10T14:00:00 Last Updated: 2024-08-06T01:50:47.447Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Red Hat Products: OpenShift Problem Types: CWE-295 Description: It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields. An attacker could use this flaw to bypass authentication requirements by using a specially crafted X.509 certificate. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/34517 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7075 - ht
- https://github.com/kubernetes/kubernetes/issues/34517 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7075 - https://access.redhat.com/errata/RHSA-2016:2064
CVE ID: CVE-2016-7076 State: PUBLISHED Published: 2018-05-29T13:00:00 Last Updated: 2024-08-06T01:50:46.972Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: [UNKNOWN] Products: sudo Problem Types: CWE-184 Description: sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to execute arbitrary commands with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.sudo.ws/alerts/noexec_w
levated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.sudo.ws/alerts/noexec_wordexp.html - http://rhn.redhat.com/errata/RHSA-2016-2872.html - http://www.securityfocus.com/bid/95778 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7076 - https://security.netapp.com/advisory/ntap-20181127-0002/ - https://usn.ubuntu.com/3968-1/ - https://usn.ubuntu.com/3968-3/
CVE ID: CVE-2016-7077 State: PUBLISHED Published: 2018-09-10T15:00:00 Last Updated: 2024-08-06T01:50:47.449Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Foreman Products: foreman Problem Types: CWE-285 Description: foreman before 1.14.0 is vulnerable to an information leak. It was found that Foreman form helper does not authorize options for associated objects. Unauthorized user can see names of such objects if their count is less than 6. Additional Analyst Notes: - CVE Program Container: References: - https://theforeman.org/security.html#2016-7077 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7077 - http://www.securityfocus.com/bid/94230 - http
ml#2016-7077 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7077 - http://www.securityfocus.com/bid/94230 - https://projects.theforeman.org/issues/16971
CVE ID: CVE-2016-7078 State: PUBLISHED Published: 2018-09-10T15:00:00 Last Updated: 2024-08-06T01:50:47.463Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Foreman Products: foreman Problem Types: CWE-285 Description: foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a user is assigned _no_ organizations/locations, they are able to view all resources instead of none (mirroring an administrator's view). The user's actions are still limited by their assigned permissions, e.g. to control viewing, editing and deletion. Additional Analyst Notes: - CVE Program Container: References: - https://gith
to control viewing, editing and deletion. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/theforeman/foreman/commit/5f606e11cf39719bf62f8b1f3396861b32387905 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7078 - http://www.securityfocus.com/bid/96385 - https://theforeman.org/security.html#2016-7078 - https://projects.theforeman.org/issues/16982 - https://seclists.org/oss-sec/2017/q1/470
CVE ID: CVE-2016-7079 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:50:47.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2016-7080. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0014.html - http://www.securityfocus.com/bid/92938 - http://www.securitytracker.com/id/1036804
CVE ID: CVE-2016-7080 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:50:46.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2016-7079. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0014.html - http://www.securityfocus.com/bid/92938 - http://www.securitytracker.com/id/1036804
CVE ID: CVE-2016-7081 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:50:47.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0014.html - http://www.securitytracker.com/id/1036805 - http://www.securityfocus.com/bid/92935
CVE ID: CVE-2016-7082 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:50:47.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via an EMF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0014.html - http://www.securitytracker.com/id/1036805 - http://www.securityfocus.com/bid/92934
CVE ID: CVE-2016-7083 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:50:46.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via TrueType fonts embedded in EMFSPOOL. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0014.html - http://www.securitytracker.com/id/1036805 - https://www.exploit-db.com/exploits/40398/ -
dvisories/VMSA-2016-0014.html - http://www.securitytracker.com/id/1036805 - https://www.exploit-db.com/exploits/40398/ - http://www.securityfocus.com/bid/92934
CVE ID: CVE-2016-7084 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:50:47.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via a JPEG 2000 image. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0014.html - https://www.exploit-db.com/exploits/40399/ - http://www.securitytracker.com/id/1036805 - ht
sories/VMSA-2016-0014.html - https://www.exploit-db.com/exploits/40399/ - http://www.securitytracker.com/id/1036805 - http://www.securityfocus.com/bid/92934
CVE ID: CVE-2016-7085 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:50:47.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0014.html - http://www.securitytracker.com/id/1036805 - http://www.securityfocus.com/bid/92940
CVE ID: CVE-2016-7086 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:50:47.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2016-0014.html - http://www.securitytracker.com/id/1036805 - http://www.securityfocus.com/bid/92941
CVE ID: CVE-2016-7087 State: PUBLISHED Published: 2016-12-29T09:02:00 Last Updated: 2024-08-06T01:50:47.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Connection Server in VMware Horizon View 5.x before 5.3.7, 6.x before 6.2.3, and 7.x before 7.0.1 allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93455 - http://www.vmware.com/security/advisories/VMSA-2016-0015.html - http://www.securitytracker.com/id/1036972
CVE ID: CVE-2016-7089 State: PUBLISHED Published: 2016-08-24T19:00:00 Last Updated: 2024-08-06T01:50:47.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka ESCALATEPLOWMAN. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92638 - http://packetstormsecurity.com/files/138393/ESCALATEPLOWMAN-WatchGuard-Privilege-Escalation.html - https://www.secplicity.org/2016/08/16/nsa-equation-group-exploit-leak-mean/ - https://www.exploit-db.com/exploits/40270/
CVE ID: CVE-2016-7090 State: PUBLISHED Published: 2016-09-29T10:00:00 Last Updated: 2024-08-06T01:50:47.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-16-271-01 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-342135.pdf - http://www.securityfocus.com/bid/93115
CVE ID: CVE-2016-7091 State: PUBLISHED Published: 2016-12-22T21:00:00 Last Updated: 2024-08-06T01:50:47.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw to read content from specially formatted files with elevated privileges provided by sudo. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92615 - https://rhn.redhat.com/errata/RHSA-2016
- CVE Program Container: References: - http://www.securityfocus.com/bid/92615 - https://rhn.redhat.com/errata/RHSA-2016-2593.html - https://lists.gnu.org/archive/html/bug-readline/2016-05/msg00009.html
CVE ID: CVE-2016-7092 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T01:50:47.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://xenbits.xen.org/xsa/xsa185.patch - http://www.debian.org/security/2016/dsa-3663 - http://www.securityfocus.com/bid/92862 - http://support.citrix.com/article/CTX216071 - http://xenbits.xen.org/xsa/adv
- http://www.securityfocus.com/bid/92862 - http://support.citrix.com/article/CTX216071 - http://xenbits.xen.org/xsa/advisory-185.html - https://security.gentoo.org/glsa/201611-09 - http://www.securitytracker.com/id/1036751
CVE ID: CVE-2016-7093 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T01:50:47.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-186.html - http://www.securityfocus.com/bid/92865 - http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch - http://support.citrix.com/article/CTX216071 - http://www.secu
6-emulate-Correct-boundary-interactions-of-emulate.patch - http://support.citrix.com/article/CTX216071 - http://www.securitytracker.com/id/1036752 - https://security.gentoo.org/glsa/201611-09
CVE ID: CVE-2016-7094 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T01:50:47.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.debian.org/security/2016/dsa-3663 - http://www.securityfocus.com/bid/92864 - http://xenbits.xen.org/xsa/advisory-187.html - http://support.citrix.com/article/CTX216071 - http://www.securitytracker
http://xenbits.xen.org/xsa/advisory-187.html - http://support.citrix.com/article/CTX216071 - http://www.securitytracker.com/id/1036753 - https://security.gentoo.org/glsa/201611-09 - http://xenbits.xen.org/xsa/xsa187-0001-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch
CVE ID: CVE-2016-7095 State: PUBLISHED Published: 2016-11-03T10:00:00 Last Updated: 2024-08-06T01:50:47.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprotected folder, one allowing script execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.0 - http://www.securityfocus.com/bid/94121 - http://www.exponentcms.org/news/security-vulnerability-all-exponent-versions-june-2016
CVE ID: CVE-2016-7097 State: PUBLISHED Published: 2016-10-16T21:00:00 Last Updated: 2024-08-06T01:50:47.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3146-2 - http://www.ubuntu.com/usn/USN-3146-1 - https://source.android.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/92659 - https://access.redhat.com/errata/RHSA
ndroid.com/security/bulletin/2017-04-01 - http://www.securityfocus.com/bid/92659 - https://access.redhat.com/errata/RHSA-2017:2669 - http://www.spinics.net/lists/linux-fsdevel/msg98328.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073931017b49d9458aa351605b43a7e34598caef - http://www.openwall.com/lists/oss-security/2016/08/26/3 - http://rhn.redhat.com/errata/RHSA-2017-0817.html - http://www.ubuntu.com/usn/USN-3147-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1368938 - https://github.com/torvalds/linux/commit/073931017b49d9458aa351605b43a7e34598caef - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842 - http:
a7e34598caef - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842 - http://marc.info/?l=linux-fsdevel&m=147162313630259&w=2 - http://www.securitytracker.com/id/1038201 - https://support.f5.com/csp/article/K31603170?utm_source=f5support&amp%3Butm_medium=RSS