Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-7508 State: PUBLISHED Published: 2017-06-27T13:00:00 Last Updated: 2024-08-05T16:04:11.917Z Vendors: OpenVPN Technologies, Inc Products: OpenVPN Problem Types: CVE-2017-7508 Description: OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet. Additional Analyst Notes: - CVE Program Container: References: - https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243 - http://www.securitytracker.com/id/1038768 - http://www.securityfocus.com/bid/99230 - http://www.debian.org/security/2017/dsa-3900
CVE ID: CVE-2017-7509 State: PUBLISHED Published: 2018-07-26T16:00:00 Last Updated: 2024-08-05T16:04:11.860Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Certificate System Problem Types: CWE-20 Description: An input validation error was found in Red Hat Certificate System's handling of client provided certificates before 8.1.20-1. If the certreq field is not present in a certificate an assertion error is triggered causing a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:2560 - http://www.securitytracker.com/id/1039248 - https://bugzilla.redhat.com/show_bug.cgi?
redhat.com/errata/RHSA-2017:2560 - http://www.securitytracker.com/id/1039248 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7509
CVE ID: CVE-2017-7510 State: PUBLISHED Published: 2019-03-25T17:50:15 Last Updated: 2024-08-05T16:04:11.915Z Vendors: [UNKNOWN] Products: RHV Problem Types: CWE-200 Description: In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST interface. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7510
CVE ID: CVE-2017-7511 State: PUBLISHED Published: 2017-05-30T18:00:00 Last Updated: 2024-08-05T16:04:11.847Z Vendors: Poppler Products: poppler Problem Types: CWE-476 Description: poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201801-17 - https://cgit.freedesktop.org/poppler/poppler/commit/?id=5c9b08a875b07853be6c44e43ff5f7f059df666a
CVE ID: CVE-2017-7512 State: PUBLISHED Published: 2017-07-07T22:00:00 Last Updated: 2024-08-05T16:04:11.853Z Vendors: n/a Products: 3scale AMP before 2.0.0 Problem Types: authentication bypass Description: Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation of an access token without a client secret. An attacker could use this flaw to circumvent authentication controls and gain access to restricted APIs. NOTE: some sources have a typo in which CVE-2017-7512 maps to an OpenVPN vulnerability. The proper CVE ID for that OpenVPN vulnerability is CVE-2017-7521. Specifically, CVE-2017-7521 is the correct CVE ID for TWO closely related findings in OpenVPN
rability is CVE-2017-7521. Specifically, CVE-2017-7521 is the correct CVE ID for TWO closely related findings in OpenVPN. Any source that lists BOTH CVE-2017-7512 and CVE-2017-7521 for OpenVPN should have listed ONLY CVE-2017-7521. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/cve-2017-7512 - https://access.redhat.com/errata/RHSA-2017:1712 - https://bugzilla.redhat.com/show_bug.cgi?id=1457997
CVE ID: CVE-2017-7513 State: PUBLISHED Published: 2018-08-22T15:00:00 Last Updated: 2024-08-05T16:04:11.809Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: Red Hat Satellite Problem Types: CWE-295 Description: It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7513
CVE ID: CVE-2017-7514 State: PUBLISHED Published: 2018-07-30T13:00:00 Last Updated: 2024-08-05T16:04:11.837Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Red Hat Products: Red Hat Satellite Problem Types: CWE-79 Description: A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perform XSS attacks against other Satellite users. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1558 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7514
CVE ID: CVE-2017-7515 State: PUBLISHED Published: 2017-06-06T14:00:00 Last Updated: 2024-08-05T16:04:11.824Z Vendors: Red Hat, Inc. Products: poppler Problem Types: CWE-674 Description: poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.freedesktop.org/show_bug.cgi?id=101208
CVE ID: CVE-2017-7516 State: REJECTED Published: 2018-01-29T19:00:00.000Z Last Updated: 2025-02-13T15:46:12.151Z Description: No description available.
CVE ID: CVE-2017-7517 State: PUBLISHED Published: 2022-10-17T00:00:00.000Z Last Updated: 2025-05-13T20:43:30.312Z Vendors: n/a Products: Hawkular Metrics Problem Types: CWE-20 Description: An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces in OpenShift. If a user creates a project called "MyProject", and then later deletes it another user can then create a project called "MyProject" and access the metrics stored from the original "MyProject" instance. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1470414 - https://ac
ogram Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1470414 - https://access.redhat.com/security/cve/CVE-2017-7517
CVE ID: CVE-2017-7518 State: PUBLISHED Published: 2018-07-30T13:00:00 Last Updated: 2024-08-05T16:04:11.892Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: [UNKNOWN] Products: Kernel: Problem Types: CWE-250 Description: A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this. Additional Analyst Notes: - CVE Program Container: Refer
ileges inside the guest. Linux guests are not affected by this. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:0412 - https://access.redhat.com/articles/3290921 - https://usn.ubuntu.com/3619-2/ - https://access.redhat.com/errata/RHSA-2018:0395 - https://usn.ubuntu.com/3754-1/ - http://www.securitytracker.com/id/1038782 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7518 - http://www.openwall.com/lists/oss-security/2017/06/23/5 - https://usn.ubuntu.com/3619-1/ - https://www.debian.org/security/2017/dsa-3981 - https://www.spinics.net/lists/kvm/msg151817.html - http://www.securityfocus.com/bid/99263
CVE ID: CVE-2017-7519 State: PUBLISHED Published: 2018-07-27T14:00:00 Last Updated: 2024-08-05T16:04:11.820Z Severity: LOW (CVSS 2.3 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: [UNKNOWN] Products: ceph Problem Types: CWE-134 Description: In Ceph, a format string flaw was found in the way libradosstriper parses input from user. A user could crash an application or service using the libradosstriper library. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99075 - https://www.debian.org/security/2018/dsa-4339 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7519
CVE ID: CVE-2017-7520 State: PUBLISHED Published: 2017-06-27T13:00:00 Last Updated: 2024-08-05T16:04:11.764Z Vendors: OpenVPN Technologies, Inc Products: OpenVPN Problem Types: CWE-200 Description: OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker. Additional Analyst Notes: - CVE Program Container: References: - https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243 - http://www.securitytracker.com/id/1038768 - http://www.securityfocus.com/bid/99230 - http://www.debian.org/security/2017/dsa-3900
CVE ID: CVE-2017-7521 State: PUBLISHED Published: 2017-06-27T13:00:00 Last Updated: 2024-08-05T16:04:11.856Z Vendors: OpenVPN Technologies, Inc Products: OpenVPN Problem Types: CWE-400 Description: OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extract_x509_extension(). Additional Analyst Notes: - CVE Program Container: References: - https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243 - http://www.securitytracker.com/id/1038768 - http://www.securityfocus.com/bid/99230 - http://www.debian.org/security/2017/dsa-3900
CVE ID: CVE-2017-7522 State: PUBLISHED Published: 2017-06-27T13:00:00 Last Updated: 2024-08-05T16:04:11.857Z Vendors: OpenVPN Technologies, Inc Products: OpenVPN Problem Types: CWE-20 Description: OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character. Additional Analyst Notes: - CVE Program Container: References: - https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243 - http://www.securitytracker.com/id/1038768 - http://www.securityfocus.com/bid/99230
CVE ID: CVE-2017-7523 State: PUBLISHED Published: 2017-07-21T22:00:00Z Last Updated: 2024-09-16T18:03:20.729Z Vendors: Red Hat, Inc. Products: cygwin Problem Types: CWE-787 Description: Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input string. Additional Analyst Notes: - CVE Program Container: References: - https://cygwin.com/ml/cygwin/2017-05/msg00149.html
CVE ID: CVE-2017-7524 State: PUBLISHED Published: 2017-06-27T14:00:00 Last Updated: 2024-08-05T16:04:11.822Z Vendors: TPM 2.0 Tools Products: tpm2-tools Problem Types: CWE-522 Description: tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/01org/tpm2.0-tools/commit/c5d72beaab1cbbbe68271f4bc4b6670d69985157
CVE ID: CVE-2017-7525 State: PUBLISHED Published: 2018-02-06T15:00:00Z Last Updated: 2024-09-17T02:21:29.302Z Vendors: FasterXML Products: jackson-databind Problem Types: CWE-184 Description: A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040360 - https://access.redhat.com/errata/RHSA-2017:1840 - https://access.redhat.com/errata/RHSA-2017:2547 - https://access.redhat.com/errata/RHSA-
hat.com/errata/RHSA-2017:1840 - https://access.redhat.com/errata/RHSA-2017:2547 - https://access.redhat.com/errata/RHSA-2017:1836 - https://access.redhat.com/errata/RHSA-2017:1835 - https://access.redhat.com/errata/RHSA-2018:1449 - http://www.securitytracker.com/id/1039744 - http://www.securitytracker.com/id/1039947 - https://access.redhat.com/errata/RHSA-2017:2635 - https://access.redhat.com/errata/RHSA-2017:2638 - https://access.redhat.com/errata/RHSA-2018:1450 - https://access.redhat.com/errata/RHSA-2017:3458 - https://access.redhat.com/errata/RHSA-2018:0294 - https://access.redhat.com/errata/RHSA-2017:1837 - https://access.redhat.com/errata/RHSA-2017:1834 - https://access.redhat.com/erra
cess.redhat.com/errata/RHSA-2017:1837 - https://access.redhat.com/errata/RHSA-2017:1834 - https://access.redhat.com/errata/RHSA-2017:2546 - https://access.redhat.com/errata/RHSA-2017:2636 - https://access.redhat.com/errata/RHSA-2017:3455 - https://access.redhat.com/errata/RHSA-2017:2477 - https://access.redhat.com/errata/RHSA-2017:3456 - https://access.redhat.com/errata/RHSA-2018:0342 - https://access.redhat.com/errata/RHSA-2017:1839 - http://www.securityfocus.com/bid/99623 - https://access.redhat.com/errata/RHSA-2017:2637 - https://access.redhat.com/errata/RHSA-2017:3454 - https://www.debian.org/security/2017/dsa-4004 - https://access.redhat.com/errata/RHSA-2017:3141 - https://access.redhat
https://www.debian.org/security/2017/dsa-4004 - https://access.redhat.com/errata/RHSA-2017:3141 - https://access.redhat.com/errata/RHSA-2017:2633 - https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E - https://lists.apache.org/thread.html/f60afd3c7e9ebaaf70fad4a4beb75cf8740ac959017a31e7006c7486%40%3Cdev.lucene.apache.org%3E - https://lists.apache.org/thread.html/3c87dc8bca99a2b3b4743713b33d1de05b1d6b761fdf316224e9c81f%40%3Cdev.lucene.apache.org%3E - https://lists.apache.org/thread.html/c2ed4c0126b43e324cf740012a0edd371fd36096fd777be7bfe7a2a6%40%3Cdev.lucene.apache.org%3E - https://lists.apache.org/thread.html/c10a
b43e324cf740012a0edd371fd36096fd777be7bfe7a2a6%40%3Cdev.lucene.apache.org%3E - https://lists.apache.org/thread.html/c10a2bf0fdc3d25faf17bd191d6ec46b29a353fa9c97bebd7c4e5913%40%3Cdev.lucene.apache.org%3E - https://lists.apache.org/thread.html/b1f33fe5ade396bb903fdcabe9f243f7692c7dfce5418d3743c2d346%40%3Cdev.lucene.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:0910 - https://access.redhat.com/errata/RHSA-2019:2858 - https://access.redhat.com/errata/RHSA-2019:3149 - https://lists.apache.org/thread.html/4641ed8616ccc2c1fbddac2c3dc9900c96387bc226eaf0232d61909b%40%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5
commits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/5008bcbd45ee65ce39e4220b6ac53d28a24d6bc67d5804e9773a7399%40%3Csolr-user.lucene.apache.org%3E - https://lists.apache.org/thread.html/c9d5ff20929e8a3c8794facf4c4b326a9c10618812eec356caa20b87%40%3Csolr-user.lucene.apache.org%3E - https://lists.apache.org/thread.html/f095a791bda6c0595f691eddd0febb2d396987eec5cbd29120d8c629%40%3Csolr-user.lucene.apache.org%3E - https://lists.debian.org/debian-lts-announce/2020/01/msg00037.html - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.h
org/debian-lts-announce/2020/01/msg00037.html - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://lists.debian.org/debian-lts-announce/2020/08/msg00039.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://support.hpe.com/hpsc/doc/public/display?docLoca
.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03902en_us - https://github.com/FasterXML/jackson-databind/issues/1723 - https://github.com/FasterXML/jackson-databind/issues/1599 - https://bugzilla.redhat.com/show_bug.cgi?id=1462702 - https://security.netapp.com/advisory/ntap-20171214-0002/ - https://cwiki.apache.org/confluence/display/WW/S2-055 - https://lists.apache.org/thread.html/r68acf97f4526ba59a33cc6e592261ea4f85d890f99e79c82d57dd589%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/rf7f87810c38dc9abf9f93989f76008f504cbf7c1a355214640b2d04c%40%3Ccommits.cassandra.ap
https://lists.apache.org/thread.html/rf7f87810c38dc9abf9f93989f76008f504cbf7c1a355214640b2d04c%40%3Ccommits.cassandra.apache.org%3E - https://lists.apache.org/thread.html/r42ac3e39e6265db12d9fc6ae1cd4b5fea7aed9830dc6f6d58228fed7%40%3Ccommits.cassandra.apache.org%3E
CVE ID: CVE-2017-7526 State: PUBLISHED Published: 2018-07-26T13:00:00 Last Updated: 2024-08-05T16:04:11.873Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: GnuPG Products: libgcrypt Problem Types: CWE-200 Description: libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used. Additional Analyst Notes: - CVE Program Conta
run arbitrary software on the hardware where the private RSA key is used. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3733-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7526 - http://www.securitytracker.com/id/1038915 - https://www.debian.org/security/2017/dsa-3960 - https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=78130828e9a140a9de4dafadbc844dbb64cb709a - https://www.debian.org/security/2017/dsa-3901 - https://usn.ubuntu.com/3733-2/ - https://eprint.iacr.org/2017/627 - http://www.securityfocus.com/bid/99338 - https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html - https://git.gnupg.org/cgi-bin/git
.com/bid/99338 - https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html - https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=e6a3dc9900433bbc8ad362a595a3837318c28fa9 - https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=8725c99ffa41778f382ca97233183bcd687bb0ce
CVE ID: CVE-2017-7527 State: REJECTED Published: 2022-08-08T18:52:41 Last Updated: 2022-08-08T18:52:41 Description: No description available.
CVE ID: CVE-2017-7528 State: PUBLISHED Published: 2018-08-22T16:00:00 Last Updated: 2024-08-05T16:04:11.874Z Severity: MEDIUM (CVSS 5.2 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N) Vendors: Red Hat Products: Ansible Tower Problem Types: CWE-113 Description: Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection. It was found that X-Forwarded-For header allows internal servers to deploy other systems (using callback). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105143 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7528
CVE ID: CVE-2017-7529 State: PUBLISHED Published: 2017-07-13T13:00:00Z Last Updated: 2024-09-16T18:39:56.411Z Vendors: nginx Products: nginx Problem Types: CWE-190 Description: Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://mailman.nginx.org/pipermail/nginx-announce/2017/000200.html - https://access.redhat.com/errata/RHSA-2017:2538 - http://www.securityfocus.com/bid/99534 - http://www.securitytracker.com/id/1039238 - https://puppet.com/securi
17:2538 - http://www.securityfocus.com/bid/99534 - http://www.securitytracker.com/id/1039238 - https://puppet.com/security/cve/cve-2017-7529 - https://support.apple.com/kb/HT212818 - http://seclists.org/fulldisclosure/2021/Sep/36
CVE ID: CVE-2017-7530 State: PUBLISHED Published: 2018-07-26T13:00:00 Last Updated: 2024-08-05T16:04:11.870Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: cfme Problem Types: CWE-862 Description: In CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1, it was found that privilege check is missing when invoking arbitrary methods via filtering on VMs that MiqExpression will execute that is triggerable by API users. An attacker could use this to execute actions they should not be allowed to (e.g. destroying VMs). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100151 - https:
VMs). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100151 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7530 - https://access.redhat.com/errata/RHSA-2017:1758
CVE ID: CVE-2017-7531 State: PUBLISHED Published: 2017-07-17T16:00:00 Last Updated: 2024-08-05T16:04:12.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Moodle 3.3, the course overview block reveals activities in hidden courses. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=355555 - http://www.securityfocus.com/bid/99618
CVE ID: CVE-2017-7532 State: PUBLISHED Published: 2017-07-17T16:00:00 Last Updated: 2024-08-05T16:04:11.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Moodle 3.x, course creators are able to change system default settings for courses. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99617 - https://moodle.org/mod/forum/discuss.php?d=355556
CVE ID: CVE-2017-7533 State: PUBLISHED Published: 2017-08-05T16:00:00 Last Updated: 2024-08-05T16:04:11.899Z Vendors: n/a Products: Linux kernel through 4.12.4 Problem Types: race condition Description: Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3927 - https://patchwork.kernel.org/patch/9755757/ - https://bugzilla.redhat.com/show_bug.cgi?id=1468283 -
rity/2017/dsa-3927 - https://patchwork.kernel.org/patch/9755757/ - https://bugzilla.redhat.com/show_bug.cgi?id=1468283 - http://www.securityfocus.com/bid/100123 - https://access.redhat.com/errata/RHSA-2017:2669 - https://access.redhat.com/errata/RHSA-2017:2473 - http://openwall.com/lists/oss-security/2017/08/03/2 - https://access.redhat.com/errata/RHSA-2017:2585 - https://patchwork.kernel.org/patch/9755753/ - https://github.com/torvalds/linux/commit/49d31c2f389acfe83417083e1208422b4091cd9e - https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1408967.html - http://www.debian.org/security/2017/dsa-3945 - https://source.android.com/security/bulletin/2017-12-01 - http://www.securityt
//www.debian.org/security/2017/dsa-3945 - https://source.android.com/security/bulletin/2017-12-01 - http://www.securitytracker.com/id/1039075 - https://access.redhat.com/errata/RHSA-2017:2770 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=49d31c2f389acfe83417083e1208422b4091cd9e - https://access.redhat.com/errata/RHSA-2017:2869 - http://www.openwall.com/lists/oss-security/2019/06/27/7 - http://www.openwall.com/lists/oss-security/2019/06/28/1 - http://www.openwall.com/lists/oss-security/2019/06/28/2