Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-7098 State: PUBLISHED Published: 2016-09-26T14:00:00 Last Updated: 2024-08-06T01:50:47.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/08/27/2 - http://lists.opensuse.org/opensuse-updates/2017-01/msg00007.html - http://lists.opensuse.org/opensuse-updates/2016-09/msg00044.html - http://www.securityfocus.com/bid/93157 - https://www.exploi
/lists.opensuse.org/opensuse-updates/2016-09/msg00044.html - http://www.securityfocus.com/bid/93157 - https://www.exploit-db.com/exploits/40824/ - http://lists.gnu.org/archive/html/bug-wget/2016-08/msg00083.html - http://lists.gnu.org/archive/html/bug-wget/2016-08/msg00134.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00031.html
CVE ID: CVE-2016-7099 State: PUBLISHED Published: 2016-10-10T16:00:00 Last Updated: 2024-08-06T01:50:47.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93191 - https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/ - https://github.com/nodejs/node/commit/743f0c916469f3129dfa
org/en/blog/vulnerability/september-2016-security-releases/ - https://github.com/nodejs/node/commit/743f0c916469f3129dfae406fa104dc46782e20b - http://rhn.redhat.com/errata/RHSA-2017-0002.html - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html
CVE ID: CVE-2016-7101 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T01:50:47.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large row value in an sgi file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93181 - https://github.com/ImageMagick/ImageMagick/commit/7afcf9f71043df15508e46f079387bd4689a738d - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=836776 - http://www.openwall.com/lists/oss-security/2016/09/26/8 - https://github.com/ImageMagick/ImageMagick/commit/8f8959033
- http://www.openwall.com/lists/oss-security/2016/09/26/8 - https://github.com/ImageMagick/ImageMagick/commit/8f8959033e4e59418d6506b345829af1f7a71127
CVE ID: CVE-2016-7102 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T01:50:47.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud Desktop before 2.2.3 allows local users to execute arbitrary code and possibly gain privileges via a Trojan library in a "special path" in the C: drive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92627 - https://owncloud.org/security/advisory/?id=oc-sa-2016-016
CVE ID: CVE-2016-7103 State: PUBLISHED Published: 2017-03-15T00:00:00 Last Updated: 2024-08-06T01:50:47.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0161.html - http://rhn.redhat.com/errata/RHSA-2016-2933.html - http://rhn.redhat.com/errata/RHSA-2016-2932.html - http://www.securityfocus.com/bid/104823 - https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae8
/www.securityfocus.com/bid/104823 - https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2I4UHPIW26FIALH7GGZ3IYUUA53VOOJ/ - https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.
hread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://www.oracle.com/security-alerts/cpuapr2020.html - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://github.com/jquery/jquery-ui/commit/9
019-5072832.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://github.com/jquery/jquery-ui/commit/9644e7bae9116edaf8d37c5b38cb32b892f10ff6 - https://github.com/jquery/api.jqueryui.com/issues/281 - https://nodesecurity.io/advisories/127 - https://www.tenable.com/security/tns-2016-19 - https://jqueryui.com/changelog/1.12.0/ - https://security.netapp.com/advisory/ntap-20190416-0007/ - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://lists.debian.org/debian-lts-announce/2022/01/msg00014.html - https://www.drupal.org/sa-core-2022-002 - https://lists.fedoraproject.org/archives/list/package-announce%40lis
14.html - https://www.drupal.org/sa-core-2022-002 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4/
CVE ID: CVE-2016-7107 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:50:47.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system data integrity via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-uma-en - http://www.securityfocus.com/bid/92619
CVE ID: CVE-2016-7108 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:50:47.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote authenticated users to obtain the MD5 hashes of arbitrary user passwords via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-02-uma-en - http://www.securityfocus.com/bid/92619
CVE ID: CVE-2016-7109 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:50:47.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7110. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92617 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-uma-en
CVE ID: CVE-2016-7110 State: PUBLISHED Published: 2016-09-07T19:00:00 Last Updated: 2024-08-06T01:50:47.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vulnerability than CVE-2016-7109. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92617 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-uma-en
CVE ID: CVE-2016-7111 State: PUBLISHED Published: 2017-02-17T17:00:00 Last Updated: 2024-08-06T01:50:47.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: MantisBT before 1.3.1 and 2.x before 2.0.0-beta.2 uses a weak Content Security Policy when using the Gravatar plugin, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/08/28/1 - http://www.openwall.com/lists/oss-security/2016/08/29/2 - https://github.com/mantisbt/mantisbt/commit/b3511d2f - https://mantisbt.org/bugs/view.php?id=21263
CVE ID: CVE-2016-7112 State: PUBLISHED Published: 2016-09-06T00:00:00Z Last Updated: 2024-09-16T17:58:01.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. Attackers with network access to the device's web interface (port 80/tcp) could possibly c
U80 : All versions < 1.02.02. Attackers with network access to the device's web interface (port 80/tcp) could possibly circumvent authentication and perform certain administrative operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92747 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf - https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-630413.pdf - http://www.securityfocus.com/bid/99471
CVE ID: CVE-2016-7113 State: PUBLISHED Published: 2016-09-06T00:00:00Z Last Updated: 2024-09-16T16:19:06.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02. Specially crafted packets sent to port 80/tcp could cause the affected device to go into d
U80 : All versions < 1.02.02. Specially crafted packets sent to port 80/tcp could cause the affected device to go into defect mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92748 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf - https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-630413.pdf - http://www.securityfocus.com/bid/99471
CVE ID: CVE-2016-7114 State: PUBLISHED Published: 2016-09-06T00:00:00Z Last Updated: 2024-09-16T22:50:42.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02; SIPROTEC 7SJ686 : All versions < V 4.87; SIPROTEC 7UT686 : All versions < V 4.02; SIPROTEC
U80 : All versions < 1.02.02; SIPROTEC 7SJ686 : All versions < V 4.87; SIPROTEC 7UT686 : All versions < V 4.02; SIPROTEC 7SD686 : All versions < V 4.05; SIPROTEC 7SJ66 : All versions < V 4.30. Attackers with network access to the device's web interface (port 80/tcp) could possibly circumvent authentication and perform certain administrative operations. A legitimate user must be logged into the web interface for the attack to be successful. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92745 - https://www.siemens.com/cert/pool/cert/siemens_security_advisory_SSA-323211.pdf - https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03 - http://www.
ool/cert/siemens_security_advisory_SSA-323211.pdf - https://ics-cert.us-cert.gov/advisories/ICSA-17-187-03 - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-630413.pdf - http://www.securityfocus.com/bid/99471
CVE ID: CVE-2016-7115 State: PUBLISHED Published: 2016-08-30T17:00:00 Last Updated: 2024-08-06T01:50:47.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the handle_packet function in mactelnet.c in the client in MAC-Telnet 0.4.3 and earlier allows remote TELNET servers to execute arbitrary code via a long string in an MT_CPTYPE_PASSSALT control packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/haakonnessjoen/MAC-Telnet/commit/b69d11727d4f0f8cf719c79e3fb700f55ca03e9a - https://github.com/haakonnessjoen/MAC-Telnet/pull/20 - http://www.securityfocus.com/bid/92699
CVE ID: CVE-2016-7116 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T01:50:47.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files outside the export path via a .. (dot dot) in an unspecified string. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03917.html - http://www.openwall.com/lists/oss-security/2016/08/30/3 - http://www.securityfocus.com/bid/92680 - https://security.gentoo.org/glsa/201609-01 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=
curityfocus.com/bid/92680 - https://security.gentoo.org/glsa/201609-01 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=56f101ecce0eafd09e2daf1c4eeb1377d6959261 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - http://www.openwall.com/lists/oss-security/2016/08/30/1 - https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg04231.html
CVE ID: CVE-2016-7117 State: PUBLISHED Published: 2016-10-10T10:00:00 Last Updated: 2024-08-06T01:50:47.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0216.html - https://security-tracker.debian.org/tracker/CVE-2016-7117 - http://source.android.com/security/bulletin/2016-10-01.html - http://rhn.redhat.com/errata/RHSA-2017-0086.ht
2016-7117 - http://source.android.com/security/bulletin/2016-10-01.html - http://rhn.redhat.com/errata/RHSA-2017-0086.html - http://rhn.redhat.com/errata/RHSA-2016-2962.html - http://rhn.redhat.com/errata/RHSA-2017-0113.html - http://rhn.redhat.com/errata/RHSA-2017-0091.html - https://bugzilla.novell.com/show_bug.cgi?id=1003077 - https://bugzilla.redhat.com/show_bug.cgi?id=1382268 - http://rhn.redhat.com/errata/RHSA-2017-0031.html - http://rhn.redhat.com/errata/RHSA-2017-0065.html - https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-7117.html - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.2 - http://www.securityfocus.com/bid/93304 - https://github.com/torvalds/linux
l.org/pub/linux/kernel/v4.x/ChangeLog-4.5.2 - http://www.securityfocus.com/bid/93304 - https://github.com/torvalds/linux/commit/34b88a68f26a75e4fded796f1a49c40f82234b7d - http://rhn.redhat.com/errata/RHSA-2017-0270.html - http://rhn.redhat.com/errata/RHSA-2017-0217.html - http://rhn.redhat.com/errata/RHSA-2017-0036.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=34b88a68f26a75e4fded796f1a49c40f82234b7d - http://rhn.redhat.com/errata/RHSA-2017-0215.html - http://rhn.redhat.com/errata/RHSA-2017-0196.html
CVE ID: CVE-2016-7118 State: PUBLISHED Published: 2016-08-31T14:00:00 Last Updated: 2024-08-06T01:50:47.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/fcntl.c in the "aufs 3.2.x+setfl-debian" patch in the linux-image package 3.2.0-4 (kernel 3.2.81-1) in Debian wheezy mishandles F_SETFL fcntl calls on directories, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via standard filesystem operations, as demonstrated by scp from an AUFS filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92697 - http://www.openwall.com/lists/oss-security/2016/08/31/3 - http://seclists.org
- http://www.securityfocus.com/bid/92697 - http://www.openwall.com/lists/oss-security/2016/08/31/3 - http://seclists.org/oss-sec/2016/q3/395
CVE ID: CVE-2016-7119 State: PUBLISHED Published: 2016-08-31T14:00:00 Last Updated: 2024-08-06T01:50:47.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted onclick attribute in an IMG element. Additional Analyst Notes: - CVE Program Container: References: - http://www.dnnsoftware.com/community/security/security-center - http://www.securityfocus.com/bid/92719
CVE ID: CVE-2016-7122 State: PUBLISHED Published: 2016-12-23T05:00:00 Last Updated: 2024-08-06T01:50:47.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: The avi_read_nikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that has a crafted 'nctg' structure. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/10/08/1 - https://security.gentoo.org/glsa/201701-71 - http://www.securityfocus.com/bid/94839
CVE ID: CVE-2016-7123 State: PUBLISHED Published: 2016-09-02T14:00:00 Last Updated: 2024-08-06T01:50:47.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of administrators. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037160 - http://www.securityfocus.com/bid/92732 - https://bugs.launchpad.net/bugs/1614841
CVE ID: CVE-2016-7124 State: PUBLISHED Published: 2016-09-12T01:00:00 Last Updated: 2024-08-06T01:50:47.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that leads to a (1) __destruct call or (2) magic method call. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036680 - http://www.securityfocus.com/bid/92756
security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036680 - http://www.securityfocus.com/bid/92756 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - https://bugs.php.net/bug.php?id=72663 - http://www.php.net/ChangeLog-5.php - https://www.tenable.com/security/tns-2016-19 - http://openwall.com/lists/oss-security/2016/09/02/9 - https://github.com/php/php-src/commit/20ce2fe8e3c211a42fee05a461a5881be9a8790e?w=1
CVE ID: CVE-2016-7125 State: PUBLISHED Published: 2016-09-12T01:00:00 Last Updated: 2024-08-06T01:50:47.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a way that triggers incorrect parsing, which allows remote attackers to inject arbitrary-type session data by leveraging control of a session name, as demonstrated by object injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-7.php - https://bugs.php.net/bug.php?id=72681 - https://security.gentoo.org/glsa/201611-22 - https://github.com/php/php-src/commit/8763c6090d627d8bb0ee1d030c
id=72681 - https://security.gentoo.org/glsa/201611-22 - https://github.com/php/php-src/commit/8763c6090d627d8bb0ee1d030c30e58f406be9ce?w=1 - http://www.securitytracker.com/id/1036680 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.php.net/ChangeLog-5.php - https://www.tenable.com/security/tns-2016-19 - http://openwall.com/lists/oss-security/2016/09/02/9 - http://www.securityfocus.com/bid/92552
CVE ID: CVE-2016-7126 State: PUBLISHED Published: 2016-09-12T01:00:00 Last Updated: 2024-08-06T01:50:47.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: The imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate the number of colors, which allows remote attackers to cause a denial of service (select_colors allocation error and out-of-bounds write) or possibly have unspecified other impact via a large value in the third argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036680
://www.php.net/ChangeLog-7.php - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036680 - https://github.com/php/php-src/commit/b6f13a5ef9d6280cf984826a5de012a32c396cd4?w=1 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.securityfocus.com/bid/92755 - http://www.php.net/ChangeLog-5.php - https://www.tenable.com/security/tns-2016-19 - http://openwall.com/lists/oss-security/2016/09/02/9 - https://bugs.php.net/bug.php?id=72697 - https://github.com/php/php-src/commit/28022c9b1fd937436ab67bb3d61f652c108baf96
CVE ID: CVE-2016-7127 State: PUBLISHED Published: 2016-09-12T01:00:00 Last Updated: 2024-08-06T01:50:47.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: The imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not properly validate gamma values, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by providing different signs for the second and third arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92757 - http://www.php.net/ChangeLog-7.php - https://bugs.php.net/bug.php?id=72730 - https://security.gentoo.org/gls
bid/92757 - http://www.php.net/ChangeLog-7.php - https://bugs.php.net/bug.php?id=72730 - https://security.gentoo.org/glsa/201611-22 - http://www.securitytracker.com/id/1036680 - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.php.net/ChangeLog-5.php - https://www.tenable.com/security/tns-2016-19 - http://openwall.com/lists/oss-security/2016/09/02/9 - https://github.com/php/php-src/commit/1bd103df00f49cf4d4ade2cfe3f456ac058a4eae?w=1