Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-8934 State: PUBLISHED Published: 2016-09-20T14:00:00 Last Updated: 2024-08-06T08:36:30.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted rar file. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3033-1 - http://rhn.redhat.com/errata/RHSA-2016-1844.html - https://blog.fuzzing-project.org/47-Many-invalid-memory-access-issues-in-libarchive.html - http://www.securityfocus.com/bid/91409 - http://www.oracle.com/technetwork/topi
emory-access-issues-in-libarchive.html - http://www.securityfocus.com/bid/91409 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00025.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://github.com/libarchive/libarchive/issues/521 - http://www.openwall.com/lists/oss-security/2016/06/17/2 - https://security.gentoo.org/glsa/201701-03 - http://www.openwall.com/lists/oss-security/2016/06/17/5 - http://www.debian.org/security/2016/dsa-3657
CVE ID: CVE-2015-8935 State: PUBLISHED Published: 2016-08-07T10:00:00 Last Updated: 2024-08-06T08:36:30.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 supports deprecated line folding without considering browser compatibility, which allows remote attackers to conduct cross-site scripting (XSS) attacks against Internet Explorer by leveraging (1) %0A%20 or (2) %0D%0A%20 mishandling in the header function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/php/php-src/commit/996faf964bba1aec06b153b370a7f20d3dd2bb8b?w=1 - http://lists.open
er: References: - https://github.com/php/php-src/commit/996faf964bba1aec06b153b370a7f20d3dd2bb8b?w=1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.openwall.com/lists/oss-security/2016/06/20/3 - https://bugs.php.net/bug.php?id=68978 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00025.html
CVE ID: CVE-2015-8936 State: PUBLISHED Published: 2017-02-09T15:00:00 Last Updated: 2024-08-06T08:36:31.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in squidGuard.cgi in squidGuard before 1.5 allows remote attackers to inject arbitrary web script or HTML via a blocked site link. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/06/20/6 - http://www.squidguard.org/Downloads/CHANGELOG - http://www.openwall.com/lists/oss-security/2016/06/20/2 - http://www.securityfocus.com/bid/91305 - http://www.squidguard.org/Downloads/Patches/1.4/Readme.Patch-20150201
CVE ID: CVE-2015-8937 State: PUBLISHED Published: 2016-08-06T10:00:00 Last Updated: 2024-08-06T08:36:30.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/char/diag/diagchar_core.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 6, and 7 (2013) devices mishandles a socket process, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28803962 and Qualcomm internal bug CR770548. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92219 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=c6620
1.html - http://www.securityfocus.com/bid/92219 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=c66202b9288cc4ab1c38f7c928fa1005c285c170
CVE ID: CVE-2015-8938 State: PUBLISHED Published: 2016-08-06T10:00:00 Last Updated: 2024-08-06T08:36:30.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MSM camera driver in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate input parameters, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28804030 and Qualcomm internal bug CR766022. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92219 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=51c39420e3a49d1a7f05a77c643
curityfocus.com/bid/92219 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=51c39420e3a49d1a7f05a77c64369b7623088238
CVE ID: CVE-2015-8939 State: PUBLISHED Published: 2016-08-06T10:00:00 Last Updated: 2024-08-06T08:36:30.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/video/msm/mdp4_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not validate r stages, g stages, or b stages data, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28398884 and Qualcomm internal bug CR779021. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92219 - https://source.codeaurora.org/quic/la/kernel/msm/commit/?
tin/2016-08-01.html - http://www.securityfocus.com/bid/92219 - https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=884cff808385788fa620833c7e2160a4b98a21da
CVE ID: CVE-2015-8940 State: PUBLISHED Published: 2016-08-06T10:00:00 Last Updated: 2024-08-06T08:36:31.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in sound/soc/msm/qdsp6v2/q6lsm.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28813987 and Qualcomm internal bug CR792367. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92219 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=e13ebd727d161db7003be6756e61283dce85fa3b
CVE ID: CVE-2015-8941 State: PUBLISHED Published: 2016-08-06T10:00:00 Last Updated: 2024-08-06T08:36:30.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices does not properly validate array indexes, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28814502 and Qualcomm internal bug CR792473. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92219 - https://source.codeaurora.org/quic/
oid.com/security/bulletin/2016-08-01.html - http://www.securityfocus.com/bid/92219 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=d4d4d1dd626b21e68e78395bab3382c1eb04877f
CVE ID: CVE-2015-8942 State: PUBLISHED Published: 2016-08-06T10:00:00 Last Updated: 2024-08-06T08:36:30.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate the stream state, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28814652 and Qualcomm internal bug CR803246. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=9ec380c06bbd79493828fcc3c876d8a53
tin/2016-08-01.html - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=9ec380c06bbd79493828fcc3c876d8a53fd3369f - http://www.securityfocus.com/bid/92219
CVE ID: CVE-2015-8943 State: PUBLISHED Published: 2016-08-06T10:00:00 Last Updated: 2024-08-06T08:36:31.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/video/msm/mdss/mdss_mdp_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a mapping exists before proceeding with an unmap operation, which allows attackers to gain privileges via a crafted application, aka Android internal bug 28815158 and Qualcomm internal bugs CR794217 and CR836226. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - https://source.codeaurora.org/quic/la/kernel/msm/commit/?
http://source.android.com/security/bulletin/2016-08-01.html - https://source.codeaurora.org/quic/la/kernel/msm/commit/?id=ad376e4053b87bd58f62f45b6df2c5544bc21aee - http://www.securityfocus.com/bid/92219
CVE ID: CVE-2015-8944 State: PUBLISHED Published: 2016-08-06T10:00:00 Last Updated: 2024-08-06T08:36:30.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ioresources_init function in kernel/resource.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 6 and 7 (2013) devices, uses weak permissions for /proc/iomem, which allows local users to obtain sensitive information by reading this file, aka Android internal bug 28814213 and Qualcomm internal bug CR786116. NOTE: the permissions may be intentional in most non-Android contexts. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01
Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-08-01.html - http://www.openwall.com/lists/kernel-hardening/2016/04/06/22 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=e758417e7c31b975c862aa55d0ceef28f3cc9104 - http://www.securityfocus.com/bid/92222
CVE ID: CVE-2015-8945 State: PUBLISHED Published: 2016-08-05T15:00:00 Last Updated: 2024-08-06T08:36:31.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: openshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive private key information by reading the systemd journal. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/13/9 - http://www.securityfocus.com/bid/91776 - http://www.openwall.com/lists/oss-security/2016/07/13/10 - https://github.com/openshift/origin/issues/3951
CVE ID: CVE-2015-8946 State: PUBLISHED Published: 2016-07-22T14:00:00 Last Updated: 2024-08-06T08:36:30.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/14/3 - http://www.openwall.com/lists/oss-security/2016/07/13/2 - https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/857 - https://bugs.launchp
ts/oss-security/2016/07/13/2 - https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/857 - https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282 - http://www.ubuntu.com/usn/USN-3032-1
CVE ID: CVE-2015-8947 State: PUBLISHED Published: 2016-07-19T10:00:00 Last Updated: 2024-08-06T08:36:30.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vulnerability than CVE-2016-2052. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0072.html - https://github.com/behdad/harfbuzz/commit/f96664974774bfeb237a7274f512f64aaafb201e - https://security.gentoo.org/glsa/201701-76 - http://www.securityfocus.com/bid/92039 - http://www.ubun
f512f64aaafb201e - https://security.gentoo.org/glsa/201701-76 - http://www.securityfocus.com/bid/92039 - http://www.ubuntu.com/usn/USN-3067-1 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00070.html - https://github.com/behdad/harfbuzz/issues/139#issuecomment-146984679 - https://lists.debian.org/debian-lts-announce/2019/12/msg00022.html
CVE ID: CVE-2015-8948 State: PUBLISHED Published: 2016-09-07T20:00:00 Last Updated: 2024-08-06T08:36:30.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/21/4 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html - http://www.openwall.com/lists/oss-security/2016/07/20/6 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html - http://www.securityfocus.com/bid/92070 - http://
/6 - http://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html - http://www.securityfocus.com/bid/92070 - http://www.debian.org/security/2016/dsa-3658 - https://lists.gnu.org/archive/html/help-libidn/2016-07/msg00009.html - http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=570e68886c41c2e765e6218cb317d9a9a447a041 - http://www.ubuntu.com/usn/USN-3068-1 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2015-8949 State: PUBLISHED Published: 2016-08-19T21:00:00 Last Updated: 2024-08-06T08:36:30.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01 allows attackers to have unspecified impact by leveraging a call to mysql_errno after a failure of my_login. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/perl5-dbi/DBD-mysql/commit/cf0aa7751f6ef8445e9310a64b14dc81460ca156 - https://blog.fuzzing-project.org/50-Use-after-free-in-my_login-function-of-DBDmysql-Perl-module.html - https://github.com/perl5-dbi/DBD-mysql/blob/4.033_01/Changes - https://github.com/
nction-of-DBDmysql-Perl-module.html - https://github.com/perl5-dbi/DBD-mysql/blob/4.033_01/Changes - https://github.com/perl5-dbi/DBD-mysql/pull/45 - http://www.debian.org/security/2016/dsa-3635 - http://www.openwall.com/lists/oss-security/2016/07/27/1 - http://www.openwall.com/lists/oss-security/2016/07/25/13 - http://www.securityfocus.com/bid/92118 - https://security.gentoo.org/glsa/201701-51
CVE ID: CVE-2015-8950 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T08:36:30.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dma_mmap call. Additional Analyst Notes: - CVE Program Container: References: - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=6e2c437a2d0a85d90d3db85a7471f99764f7bbf8 - https://github.com/torvalds/linux/commit/6829e274a623187c24f7cfc0e3d35f25d087fcc5 - h
2d0a85d90d3db85a7471f99764f7bbf8 - https://github.com/torvalds/linux/commit/6829e274a623187c24f7cfc0e3d35f25d087fcc5 - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93318 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.3 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6829e274a623187c24f7cfc0e3d35f25d087fcc5
CVE ID: CVE-2015-8951 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T08:36:31.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 30142668 and Qualcomm internal bug CR 948902. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93317 - https://source.codeaurora.org/quic/la/kernel
ecurity/bulletin/2016-10-01.html - http://www.securityfocus.com/bid/93317 - https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=ccff36b07bfc49efc77b9f1b55ed2bf0900b1d5b
CVE ID: CVE-2015-8952 State: PUBLISHED Published: 2016-10-16T21:00:00 Last Updated: 2024-08-06T08:36:30.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which allows local users to cause a denial of service (soft lockup) via filesystem operations in environments that use many attributes, as demonstrated by Ceph and Samba. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1360968 - https://github.com/torvalds/linux/commit/f9a61eb4e2471c56a63cd804c7474128138c38ac - https://github.com/torvalds
360968 - https://github.com/torvalds/linux/commit/f9a61eb4e2471c56a63cd804c7474128138c38ac - https://github.com/torvalds/linux/commit/82939d7999dfc1f1998c4b1c12e2f19edbdff272 - https://usn.ubuntu.com/3582-1/ - https://bugzilla.kernel.org/show_bug.cgi?id=107301 - http://www.openwall.com/lists/oss-security/2016/08/25/4 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=82939d7999dfc1f1998c4b1c12e2f19edbdff272 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=be0726d33cb8f411945884664924bed3cb8c70ee - http://www.openwall.com/lists/oss-security/2016/08/22/2 - https://github.com/torvalds/linux/commit/be0726d33cb8f411945884664924bed3cb8c70ee - htt
ists/oss-security/2016/08/22/2 - https://github.com/torvalds/linux/commit/be0726d33cb8f411945884664924bed3cb8c70ee - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f9a61eb4e2471c56a63cd804c7474128138c38ac - https://lwn.net/Articles/668718/ - https://usn.ubuntu.com/3582-2/
CVE ID: CVE-2015-8953 State: PUBLISHED Published: 2016-10-16T21:00:00 Last Updated: 2024-08-06T08:36:30.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/overlayfs/copy_up.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path, which allows local users to cause a denial of service (dentry reference leak) via filesystem operations on a large file in a lower overlayfs layer. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/08/23/9 - https://bugzilla.redhat.com/show_bug.cgi?id=1367814 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.6 - http://git.kernel.org/cgit/linux/kernel/git/torvalds
814 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.2.6 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ab79efab0a0ba01a74df782eb7fa44b044dae8b5 - https://github.com/torvalds/linux/commit/ab79efab0a0ba01a74df782eb7fa44b044dae8b5 - http://www.securityfocus.com/bid/92611
CVE ID: CVE-2015-8954 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-06T08:36:31.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusion-prevention functionality via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://suricata-ids.org/2015/01/15/suricata-2-0-6-available/ - https://redmine.openinfosecfoundation.org/issues/1364 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777523
CVE ID: CVE-2015-8955 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T08:36:30.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/arm64/kernel/perf_event.c in the Linux kernel before 4.1 on arm64 platforms allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via vectors involving events that are mishandled during a span of multiple HW PMUs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/8fff105e13041e49b82f92eef034f363a6b1c071 - http://source.android.com/security/bulletin/2016-10-01.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.
ttp://source.android.com/security/bulletin/2016-10-01.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8fff105e13041e49b82f92eef034f363a6b1c071 - http://www.securityfocus.com/bid/93314
CVE ID: CVE-2015-8956 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T08:36:31.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rfcomm_sock_bind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of service (NULL pointer dereference) via vectors involving a bind system call on a Bluetooth RFCOMM socket. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-10-01.html - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://git.kernel.org/cgit/linux/
at.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=951b6a0717db97ce420547222647bcc40bf1eacd - http://www.securityfocus.com/bid/93326 - https://github.com/torvalds/linux/commit/951b6a0717db97ce420547222647bcc40bf1eacd
CVE ID: CVE-2015-8957 State: PUBLISHED Published: 2017-04-20T18:00:00 Last Updated: 2024-08-06T08:36:30.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (application crash) via a crafted SUN file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/78f82d9d1c2944725a279acd573a22168dc6e22a - https://github.com/ImageMagick/ImageMagick/commit/bd96074b254c6607a0f7731e59f923ad19d5a46d - http://www.openwall.com/lists/oss-security/2016/09/22/2 - https://github.com/ImageMagick/ImageMagick/commit/450bd716ed3b9186dd10f9e60
enwall.com/lists/oss-security/2016/09/22/2 - https://github.com/ImageMagick/ImageMagick/commit/450bd716ed3b9186dd10f9e60f630a3d9eeea2a4 - http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26838 - http://www.securityfocus.com/bid/93125 - https://bugzilla.redhat.com/show_bug.cgi?id=1378735
CVE ID: CVE-2015-8958 State: PUBLISHED Published: 2017-04-20T18:00:00 Last Updated: 2024-08-06T08:36:31.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted SUN file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/commit/1aa0c6dab6dcef4d9bc3571866ae1c1ddbec7d8f - http://www.openwall.com/lists/oss-security/2016/09/22/2 - http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26857 - https://github.com/ImageMagick/ImageMagick/commit/6b4aff0f117b978502ee5bcd6e