Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ml/r13a07a09f98b2841193dbf17a47c7f09b464e0747a1d3e7298ad4c81%40%3Cdev.rocketmq.apache.org%3E - https://lists.apache.org/thread.html/rf9e8ae0356af3ec4f7780ca651b770721d287d4d55f62f4f754e0a6f%40%3Cdev.rocketmq.apache.org%3E - https://lists.apache.org/thread.html/rc98eaa3f8223ac75aa5969f717954d8cbc9f3a9d8b7a6156a54fa557%40%3Cdev.rocketmq.apache.org%3E
CVE ID: CVE-2011-1474 State: PUBLISHED Published: 2019-12-26T18:44:27 Last Updated: 2024-08-06T22:28:41.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: A locally locally exploitable DOS vulnerability was found in pax-linux versions 2.6.32.33-test79.patch, 2.6.38-test3.patch, and 2.6.37.4-test14.patch. A bad bounds check in arch_get_unmapped_area_topdown triggered by programs doing an mmap after a MAP_GROWSDOWN mmap will create an infinite loop condition without releasing the VM semaphore eventually leading to a system crash. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-1474 - http://seclists.org/oss-sec/
rogram Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-1474 - http://seclists.org/oss-sec/2011/q1/579
CVE ID: CVE-2011-1475 State: PUBLISHED Published: 2011-04-08T15:00:00 Last Updated: 2024-08-06T22:28:41.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP BIO connector in Apache Tomcat 7.0.x before 7.0.12 does not properly handle HTTP pipelining, which allows remote attackers to read responses intended for other clients in opportunistic circumstances by examining the application data in HTTP packets, related to "a mix-up of responses for requests from different users." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2011/0894 - http://www.securityfocus.com/bid/47199 - https://oval.cisecurity.org/repository/search
om/english/advisories/2011/0894 - http://www.securityfocus.com/bid/47199 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12374 - http://securityreason.com/securityalert/8188 - http://tomcat.apache.org/security-7.html - http://www.securitytracker.com/id?1025303 - https://issues.apache.org/bugzilla/show_bug.cgi?id=50957 - http://www.securityfocus.com/archive/1/517363 - http://svn.apache.org/viewvc?view=revision&revision=1086349 - http://svn.apache.org/viewvc?view=revision&revision=1086352 - http://seclists.org/fulldisclosure/2011/Apr/97 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66676
CVE ID: CVE-2011-1476 State: PUBLISHED Published: 2012-06-21T23:00:00 Last Updated: 2024-08-06T22:28:41.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in the Open Sound System (OSS) subsystem in the Linux kernel before 2.6.39 on unspecified non-x86 platforms allows local users to cause a denial of service (memory corruption) by leveraging write access to /dev/sequencer. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/03/25/1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b769f49463711205d57286e64cf535ed4daf59e9 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/Ch
s/linux-2.6.git%3Ba=commit%3Bh=b769f49463711205d57286e64cf535ed4daf59e9 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - https://github.com/torvalds/linux/commit/b769f49463711205d57286e64cf535ed4daf59e9 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2011-1477 State: PUBLISHED Published: 2012-06-21T23:00:00 Last Updated: 2024-08-06T22:28:41.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple array index errors in sound/oss/opl3.c in the Linux kernel before 2.6.39 allow local users to cause a denial of service (heap memory corruption) or possibly gain privileges by leveraging write access to /dev/sequencer. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/03/25/1 - https://github.com/torvalds/linux/commit/4d00135a680727f6c3be78f8befaac009030e4df - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://git.kernel.org/?p=linux/ker
78f8befaac009030e4df - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4d00135a680727f6c3be78f8befaac009030e4df - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2011-1478 State: PUBLISHED Published: 2011-10-23T10:00:00 Last Updated: 2024-08-06T22:28:41.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: The napi_reuse_skb function in net/core/dev.c in the Generic Receive Offload (GRO) implementation in the Linux kernel before 2.6.38 does not reset the values of certain structure members, which might allow remote attackers to cause a denial of service (NULL pointer dereference) via a malformed VLAN frame. Additional Analyst Notes: - CVE Program Container: References: - http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.38 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://git.kernel.org/?p=linux/ker
2.6/ChangeLog-2.6.38 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6d152e23ad1a7a5b40fef1f42e017d66e6115159 - http://securityreason.com/securityalert/8480 - http://secunia.com/advisories/46397 - https://bugzilla.redhat.com/show_bug.cgi?id=691270 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=66c46d741e2e60f0e8b625b80edb0ab820c46d7a - http://openwall.com/lists/oss-security/2011/03/28/1 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html
CVE ID: CVE-2011-1479 State: PUBLISHED Published: 2012-06-21T23:00:00Z Last Updated: 2024-08-06T22:28:41.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/04/11/1 - https://github.com/torvalds/linux/commit/d0de4dc584ec6aa3b26fffea320a8457827768fc - http://git.kernel.org/?p=linux/kernel/git/
//github.com/torvalds/linux/commit/d0de4dc584ec6aa3b26fffea320a8457827768fc - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d0de4dc584ec6aa3b26fffea320a8457827768fc - https://bugzilla.redhat.com/show_bug.cgi?id=691793 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39
CVE ID: CVE-2011-1480 State: PUBLISHED Published: 2011-06-21T01:00:00Z Last Updated: 2024-09-17T02:36:14.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the chng_uid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/03/23/7 - http://www.openwall.com/lists/oss-security/2011/03/30/6 - http://yehg.net/lab/pr0js/advisories/%5Bphpnuke-8.x%5D_sql_injection
CVE ID: CVE-2011-1481 State: PUBLISHED Published: 2011-06-21T01:00:00Z Last Updated: 2024-09-16T23:51:16.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) sender_name or (2) sender_email parameter in a Feedback action to modules.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/03/23/8 - http://www.openwall.com/lists/oss-security/2011/03/30/7 - http://yehg.net/lab/pr0js/advisories/%5Bphpnuke-8.x%5D_cross_site_scripting
CVE ID: CVE-2011-1482 State: PUBLISHED Published: 2011-06-21T01:00:00Z Last Updated: 2024-09-16T20:47:40.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts or (2) grant the administrative privilege to a user account, related to a Referer check that uses a substring comparison. Additional Analyst Notes: - CVE Program Container: References: - http://yehg.net/lab/pr0js/advisories/%5Bphpnuke-8.x%5D_cross_site_request_forgery - http://www.openwall.com/lists/o
s: - http://yehg.net/lab/pr0js/advisories/%5Bphpnuke-8.x%5D_cross_site_request_forgery - http://www.openwall.com/lists/oss-security/2011/03/30/8 - http://www.openwall.com/lists/oss-security/2011/03/23/9
CVE ID: CVE-2011-1483 State: PUBLISHED Published: 2013-07-28T18:00:00Z Last Updated: 2024-08-06T22:28:41.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterprise BRMS Platform 5.1.0; and JBoss Enterprise Web Platform 5.1.1 does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request c
pansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references, a similar issue to CVE-2003-1564. Additional Analyst Notes: - CVE Program Container: References: - http://source.jboss.org/changelog/JBossWS/?cs=13996 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03824583 - https://bugzilla.redhat.com/show_bug.cgi?id=692584 - https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03824583
CVE ID: CVE-2011-1484 State: PUBLISHED Published: 2011-07-27T01:00:00 Last Updated: 2024-08-06T22:28:41.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.co
a a crafted URL to an application. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-1251.html - https://bugzilla.redhat.com/show_bug.cgi?id=692421 - http://www.redhat.com/support/errata/RHSA-2011-0462.html - http://www.redhat.com/support/errata/RHSA-2011-0463.html - http://www.redhat.com/support/errata/RHSA-2011-0461.html - http://www.redhat.com/support/errata/RHSA-2011-0460.html - http://www.redhat.com/support/errata/RHSA-2011-1148.html - https://docs.redhat.com/docs/en-US/JBoss_Communications_Platform/5.1/html/5.1.1_Release_Notes/ar01s05.html
CVE ID: CVE-2011-1485 State: PUBLISHED Published: 2011-05-31T20:00:00 Last Updated: 2024-08-06T22:28:41.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-0455.html - https://bugzilla.redhat.com/show_bug.cgi?id=692922 - http://www.debian.org/security/2011/dsa-2319 - http://securityreason.com/securityalert/8424 - http://lists.fedorap
922 - http://www.debian.org/security/2011/dsa-2319 - http://securityreason.com/securityalert/8424 - http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059859.html - http://www.ubuntu.com/usn/USN-1117-1 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058752.html - http://security.gentoo.org/glsa/glsa-201204-06.xml - http://secunia.com/advisories/48817 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:086
CVE ID: CVE-2011-1486 State: PUBLISHED Published: 2011-05-31T20:00:00 Last Updated: 2024-08-06T22:28:41.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: libvirtd in libvirt before 0.9.0 does not use thread-safe error reporting, which allows remote attackers to cause a denial of service (crash) by causing multiple threads to report errors at the same time. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/css/P8/documents/100134583 - http://secunia.com/advisories/44459 - http://www.redhat.com/support/errata/RHSA-2011-0479.html - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=f44bfb7fb978c9313ce050a1c4149bf04aa0a670 - http://security
9.html - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=f44bfb7fb978c9313ce050a1c4149bf04aa0a670 - http://securitytracker.com/id?1025477 - http://www.securityfocus.com/bid/47148 - http://www.ubuntu.com/usn/USN-1152-1 - http://www.redhat.com/support/errata/RHSA-2011-0478.html - https://bugzilla.redhat.com/show_bug.cgi?id=693391 - https://www.redhat.com/archives/libvir-list/2011-March/msg01087.html - http://www.debian.org/security/2011/dsa-2280
CVE ID: CVE-2011-1487 State: PUBLISHED Published: 2011-04-11T18:00:00 Last Updated: 2024-08-06T22:28:41.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=692844 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http:/
.redhat.com/show_bug.cgi?id=692844 - http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057891.html - http://secunia.com/advisories/44168 - http://secunia.com/advisories/43921 - http://www.debian.org/security/2011/dsa-2265 - http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057971.html - http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336 - http://www.securityfocus.com/bid/47124 - http://openwall.com/lists/oss-security/2011/04/04/35 - http://perl5.git.perl.org/perl.git/commit/539689e74a3bcb04d29e4cd9396de91a81045b99 - https://bugzilla.redhat.com/show_bug.cgi?id=692898 - http:
rg/perl.git/commit/539689e74a3bcb04d29e4cd9396de91a81045b99 - https://bugzilla.redhat.com/show_bug.cgi?id=692898 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66528 - http://openwall.com/lists/oss-security/2011/04/01/3
CVE ID: CVE-2011-1488 State: PUBLISHED Published: 2019-11-14T01:15:49 Last Updated: 2024-08-06T22:28:41.761Z Vendors: rsyslog Products: rsyslog Problem Types: Memory Leak Description: A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when $RepeatedMsgReduction was enabled. A local attacker could use this flaw to cause a denial of the rsyslogd daemon service by crashing the service via a sequence of repeated log messages sent within short periods of time. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-1488 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1488 - https:
//security-tracker.debian.org/tracker/CVE-2011-1488 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1488 - https://access.redhat.com/security/cve/cve-2011-1488 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html - https://github.com/rsyslog/rsyslog/commit/1ef709cc97d54f74d3fdeb83788cc4b01f4c6a2a
CVE ID: CVE-2011-1489 State: PUBLISHED Published: 2019-11-14T01:25:49 Last Updated: 2024-08-06T22:28:41.423Z Vendors: rsyslog Products: rsyslog Problem Types: Memory Leak Description: A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages were logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-1489 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1489
- https://security-tracker.debian.org/tracker/CVE-2011-1489 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1489 - https://access.redhat.com/security/cve/cve-2011-1489 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html - https://github.com/rsyslog/rsyslog/commit/1ef709cc97d54f74d3fdeb83788cc4b01f4c6a2a
CVE ID: CVE-2011-1490 State: PUBLISHED Published: 2019-11-14T01:37:43 Last Updated: 2024-08-06T22:28:41.394Z Vendors: rsyslog Products: rsyslog Problem Types: Memory Leak Description: A memory leak in rsyslog before 5.7.6 was found in the way deamon processed log messages are logged when multiple rulesets were used and some output batches contained messages belonging to more than one ruleset. A local attacker could cause denial of the rsyslogd daemon service via a log message belonging to more than one ruleset Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2011-1490 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1490 -
https://security-tracker.debian.org/tracker/CVE-2011-1490 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1490 - https://access.redhat.com/security/cve/cve-2011-1490 - http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00005.html - https://github.com/rsyslog/rsyslog/commit/1ef709cc97d54f74d3fdeb83788cc4b01f4c6a2a
CVE ID: CVE-2011-1491 State: PUBLISHED Published: 2011-04-08T15:00:00 Last Updated: 2024-08-06T22:28:41.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login form in Roundcube Webmail before 0.5.1 does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to obtain sensitive information by arranging for a victim to login to the attacker's account and then compose an e-mail message, related to a "login CSRF" issue. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/24/3 - http://trac.roundcube.net/changeset/4490 - http://openwall.com/lists
tp://openwall.com/lists/oss-security/2011/03/24/3 - http://trac.roundcube.net/changeset/4490 - http://openwall.com/lists/oss-security/2011/03/24/4 - http://openwall.com/lists/oss-security/2011/04/04/50 - http://trac.roundcube.net/wiki/Changelog - https://exchange.xforce.ibmcloud.com/vulnerabilities/66815
CVE ID: CVE-2011-1492 State: PUBLISHED Published: 2011-04-08T15:00:00 Last Updated: 2024-08-06T22:28:41.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request for an external Cascading Style Sheets (CSS) stylesheet, which allows remote authenticated users to trigger arbitrary outbound TCP connections from the server, and possibly obtain sensitive information, via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/03/24/3 - http://secunia.com/advisories/44050 - http://openwall.com/lists/oss
ttp://openwall.com/lists/oss-security/2011/03/24/3 - http://secunia.com/advisories/44050 - http://openwall.com/lists/oss-security/2011/03/24/4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/66613 - http://openwall.com/lists/oss-security/2011/04/04/50 - http://trac.roundcube.net/wiki/Changelog - http://trac.roundcube.net/changeset/4488
CVE ID: CVE-2011-1493 State: PUBLISHED Published: 2012-06-21T23:00:00 Last Updated: 2024-08-06T22:28:41.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by composing FAC_NATIONAL_DIGIS data that specifies a large number of digipeaters, and then sending this data to a ROSE socket. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/be20250c13f88375345ad99950190685eda51eb8 - http://git.kernel.org/?
eferences: - https://github.com/torvalds/linux/commit/be20250c13f88375345ad99950190685eda51eb8 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=be20250c13f88375345ad99950190685eda51eb8 - https://bugzilla.redhat.com/show_bug.cgi?id=770777 - http://www.openwall.com/lists/oss-security/2011/04/05/19 - http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2011-1494 State: PUBLISHED Published: 2011-05-03T19:00:00 Last Updated: 2024-08-06T22:28:41.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://lkml.org/lkml/2011/4/5/327 - http://openwall.com/lists/oss-security/2011/04/05/32 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - ht
http://openwall.com/lists/oss-security/2011/04/05/32 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - https://bugzilla.redhat.com/show_bug.cgi?id=694021 - http://openwall.com/lists/oss-security/2011/04/06/2 - https://patchwork.kernel.org/patch/688021/ - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://rhn.redhat.com/errata/RHSA-2011-0833.html - http://downloads.avaya.com/css/P8/documents/100145416 - http://www.securityfocus.com/bid/47185 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE ID: CVE-2011-1495 State: PUBLISHED Published: 2011-05-03T19:00:00 Last Updated: 2024-08-06T22:28:41.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset values before performing memory copy operations, which might allow local users to gain privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions. Additional Analyst Notes: - CVE Program Container: References: - http://lkml.org/lkml/2011/4/5/327 - http://openwall.co