Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-5651 State: PUBLISHED Published: 2017-04-17T16:00:00 Last Updated: 2024-08-05T15:11:47.130Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Information Disclosure Description: In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could result in the same Processor being used for multiple requests which in turn could lead to unexpected errors and/or response mix-up. Additional Analyst Notes: - CVE Program Container: References:
n could lead to unexpected errors and/or response mix-up. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97544 - https://security.gentoo.org/glsa/201705-09 - https://security.netapp.com/advisory/ntap-20180614-0001/ - https://lists.apache.org/thread.html/6694538826b87522fb723d2dcedd537e14ebe0a381d92e5525a531d8%40%3Cannounce.tomcat.apache.org%3E - http://www.securitytracker.com/id/1038219 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - https://bz.apache.org/bugzilla/show_bug.cgi?id=60918 - https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E
s://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338b
493745af9a17a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2017-5652 State: PUBLISHED Published: 2017-07-10T20:00:00Z Last Updated: 2024-09-16T16:42:27.591Z Vendors: Apache Software Foundation Products: Apache Impala Problem Types: Information Disclosure Description: During a routine security analysis, it was found that one of the ports in Apache Impala (incubating) 2.7.0 to 2.8.0 sent data in plaintext even when the cluster was configured to use TLS. The port in question was used by the StatestoreSubscriber class which did not use the appropriate secure Thrift transport when TLS was turned on. It was therefore possible for an adversary, with access to the network, to eavesdrop on the packets going to and coming from that port and view t
for an adversary, with access to the network, to eavesdrop on the packets going to and coming from that port and view the data in plaintext. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/5bab4424f23aebefc8108a0e30273c2a543a289df8113c461f930143%40%3Cdev.impala.apache.org%3E - http://www.securityfocus.com/archive/1/540831/100/0/threaded
CVE ID: CVE-2017-5653 State: PUBLISHED Published: 2017-04-18T16:00:00 Last Updated: 2024-08-05T15:11:48.424Z Vendors: Apache Software Foundation Products: Apache CXF Problem Types: XML Security streaming clients do not validate that the service response was secured. Description: JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1832 - http://cxf.apache.org/security-advisories.data/CVE-2017-5653.txt.asc?version=1&modificationDate=1492515074710&api
1832 - http://cxf.apache.org/security-advisories.data/CVE-2017-5653.txt.asc?version=1&modificationDate=1492515074710&api=v2 - http://www.securitytracker.com/id/1038279 - http://www.securityfocus.com/bid/97968 - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommi
pache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2017-5654 State: PUBLISHED Published: 2017-05-12T21:00:00 Last Updated: 2024-08-05T15:11:48.668Z Vendors: Apache Software Foundation Products: Apache Ambari Problem Types: XML injection Description: In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthorized read access to files on the host where the Ambari server executes. Additional Analyst Notes: - CVE Program Container: References: - https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.4.3 - https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.1
CVE ID: CVE-2017-5655 State: PUBLISHED Published: 2017-05-15T14:00:00 Last Updated: 2024-08-05T15:11:47.387Z Vendors: Apache Software Foundation Products: Apache Ambari Problem Types: exposure of sensitive data Description: In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host. Additional Analyst Notes: - CVE Program Container: References: - https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.4.3 - https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabili
ilities-FixedinAmbari2.4.3 - https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities#AmbariVulnerabilities-FixedinAmbari2.5.1
CVE ID: CVE-2017-5656 State: PUBLISHED Published: 2017-04-18T16:00:00 Last Updated: 2024-08-05T15:11:48.432Z Vendors: Apache Software Foundation Products: Apache CXF Problem Types: Apache CXF's STSClient uses a flawed way of caching tokens that are associated with delegation tokens. Description: Apache CXF's STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token which would return an identifer corresponding to a cached token for another user. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1832 - http://www.securitytracker.co
: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1832 - http://www.securitytracker.com/id/1038282 - http://cxf.apache.org/security-advisories.data/CVE-2017-5656.txt.asc?version=1&modificationDate=1492515113282&api=v2 - http://www.securityfocus.com/bid/97971 - https://access.redhat.com/errata/RHSA-2018:1694 - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3
.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
CVE ID: CVE-2017-5657 State: PUBLISHED Published: 2017-05-22T18:00:00 Last Updated: 2024-08-05T15:11:48.764Z Vendors: Apache Software Foundation Products: Apache Archiva Problem Types: Apache Archiva CSRF vulnerabilities for various REST endpoints Description: Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks. A malicious site opened in the same browser as the archiva site, may send an HTML response that performs arbitrary actions on archiva services, with the same rights as the active archiva session (e.g. administrator rights). Additional Analyst Notes: - CVE Program Container: References: - http://archiva.apache.org/securi
administrator rights). Additional Analyst Notes: - CVE Program Container: References: - http://archiva.apache.org/security.html#CVE-2017-5657 - http://www.securityfocus.com/bid/98570 - http://www.securitytracker.com/id/1038528 - https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E
CVE ID: CVE-2017-5658 State: PUBLISHED Published: 2018-10-04T14:00:00Z Last Updated: 2024-09-16T20:42:58.859Z Vendors: Apache Software Foundation Products: Apache Pony Mail Problem Types: Information Disclosure Description: The statistics generator in Apache Pony Mail 0.7 to 0.9 was found to be returning timestamp data without proper authorization checks. This could lead to derived information disclosure on private lists about the timing of specific email subjects or text bodies, though without disclosing the content itself. As this was primarily used as a caching feature for faster loading times, the caching was disabled by default to prevent this. Users using 0.9 should upgrade to 0.10 to
or faster loading times, the caching was disabled by default to prevent this. Users using 0.9 should upgrade to 0.10 to address this issue. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/6a18cf5690d54231836f277f2b4346b53da3b6b6b08fee4c4ef4977e%40%3Cdev.ponymail.apache.org%3E
CVE ID: CVE-2017-5659 State: PUBLISHED Published: 2017-04-17T18:00:00 Last Updated: 2024-08-05T15:11:48.217Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: DoS attack Description: Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/TS-4819 - http://www.securityfocus.com/bid/97949 - http://www.securitytracker.com/id/1038275
CVE ID: CVE-2017-5660 State: PUBLISHED Published: 2018-02-27T20:00:00Z Last Updated: 2024-09-17T00:37:13.932Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: Information Disclosure Description: There is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with the Host header and line folding. This can have issues when interacting with upstream proxies and the wrong host being used. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4128 - https://lists.apache.org/thread.html/22d84783d94c53a5132ec89f002fe5165c87561a9428bcb6713b3c98%40%3Cdev.trafficserver.apache.org%3E
CVE ID: CVE-2017-5661 State: PUBLISHED Published: 2017-04-18T14:00:00 Last Updated: 2024-08-05T15:11:48.294Z Vendors: Apache Software Foundation Products: Apache FOP Problem Types: XXE Description: In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full compromise of the server - including confidential or sensitive files - would be possible. XXE can also be used to attack the availability of the server via denial of service as the references within a xml do
e. XXE can also be used to attack the availability of the server via denial of service as the references within a xml document can trivially trigger an amplification attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3864 - http://www.securityfocus.com/bid/97947 - https://xmlgraphics.apache.org/security.html - https://www.tenable.com/security/tns-2021-14
CVE ID: CVE-2017-5662 State: PUBLISHED Published: 2017-04-18T14:00:00 Last Updated: 2024-08-05T15:11:47.301Z Vendors: Apache Software Foundation Products: Apache Batik Problem Types: XXE Description: In Apache Batik before 1.9, files lying on the filesystem of the server which uses batik can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full compromise of the server - including confidential or sensitive files - would be possible. XXE can also be used to attack the availability of the server via denial of service as the references within a
ossible. XXE can also be used to attack the availability of the server via denial of service as the references within a xml document can trivially trigger an amplification attack. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:2547 - https://access.redhat.com/errata/RHSA-2018:0319 - http://www.securitytracker.com/id/1038334 - https://www.debian.org/security/2018/dsa-4215 - https://access.redhat.com/errata/RHSA-2017:2546 - http://www.securityfocus.com/bid/97948 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.oracl
cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://xmlgraphics.apache.org/security.html - https://www.oracle.com/security-alerts/cpuoct2020.html
CVE ID: CVE-2017-5663 State: PUBLISHED Published: 2017-12-14T15:00:00Z Last Updated: 2024-09-17T01:05:44.339Z Vendors: Apache Software Foundation Products: Apache Fineract Problem Types: SQL Injection Vulnerability Description: In Apache Fineract 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating, an authenticated user with client/loan/center/staff/group read permissions is able to inject malicious SQL into SELECT queries. The 'sqlSearch' parameter on a number of endpoints is not sanitized and appended directly to the query. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/757feeffe45a75d3c0d08b551e71fabdae5d352543be2342b6ba2c93%40%3
tainer: References: - https://lists.apache.org/thread.html/757feeffe45a75d3c0d08b551e71fabdae5d352543be2342b6ba2c93%40%3Cdev.fineract.apache.org%3E
CVE ID: CVE-2017-5664 State: PUBLISHED Published: 2017-06-06T14:00:00 Last Updated: 2024-08-05T15:11:48.039Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Security Constrainy Bypass Description: The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the request is presented to the error page with the original HTTP method. If the error page is a static file, expected behaviour is to serve content of the file as if processing a GET request, regardless of the actual HTTP method. The De
d behaviour is to serve content of the file as if processing a GET request, regardless of the actual HTTP method. The Default Servlet in Apache Tomcat 9.0.0.M1 to 9.0.0.M20, 8.5.0 to 8.5.14, 8.0.0.RC1 to 8.0.43 and 7.0.0 to 7.0.77 did not do this. Depending on the original request this could lead to unexpected and undesirable results for static error pages including, if the DefaultServlet is configured to permit writes, the replacement or removal of the custom error page. Notes for other user provided error pages: (1) Unless explicitly coded otherwise, JSPs ignore the HTTP method. JSPs used as error pages must must ensure that they handle any error dispatch as a GET request, regardless of th
method. JSPs used as error pages must must ensure that they handle any error dispatch as a GET request, regardless of the actual method. (2) By default, the response generated by a Servlet does depend on the HTTP method. Custom Servlets used as error pages must ensure that they handle any error dispatch as a GET request, regardless of the actual method. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3891 - https://security.netapp.com/advisory/ntap-20171019-0002/ - http://www.securityfocus.com/bid/98888 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cp
racle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - https://access.redhat.com/errata/RHSA-2017:3080 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03828en_us - https://access.redhat.com/errata/RHSA-2017:1801 - https://access.redhat.com/errata/RHSA-2017:2635 - https://access.redhat.com/errata/RHSA-2017:2638 - https://access.redhat.com/errata/RHSA-2017:2494 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://lists.apache.org/thread.html/a42c48e37398d763
oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://lists.apache.org/thread.html/a42c48e37398d76334e17089e43ccab945238b8b7896538478d76066%40%3Cannounce.tomcat.apache.org%3E - https://access.redhat.com/errata/RHSA-2017:2636 - https://access.redhat.com/errata/RHSA-2017:1809 - https://access.redhat.com/errata/RHSA-2017:2637 - http://www.securitytracker.com/id/1038641 - http://www.debian.org/security/2017/dsa-3892 - https://access.redhat.com/errata/RHSA-2017:2633 - https://access.redhat.com/errata/RHSA-2017:1802 - https://access.redhat.com/errata/RHSA-2017:2493 - https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.a
7:2493 - https://lists.apache.org/thread.html/eb6efa8d59c45a7a9eff94c4b925467d3b3fec8ba7697f3daa314b04%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/5c0e00fd31efc11e147bf99d0f03c00a734447d3b131ab0818644cdb%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75
63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E - https://lis
che.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r48c1444845fe15a
a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2017-5665 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:11:47.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The splt_cue_export_to_file function in cue.c in libmp3splt 0.9.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95906 - https://blogs.gentoo.org/ago/2017/01/29/mp3splt-null-pointer-dereference-in-splt_cue_export_to_file-cue-c/
CVE ID: CVE-2017-5666 State: PUBLISHED Published: 2017-03-01T15:00:00 Last Updated: 2024-08-05T15:11:47.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: The free_options function in options_manager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service (invalid free and crash) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://blogs.gentoo.org/ago/2017/01/29/mp3splt-invalid-free-in-free_options-options_manager-c/ - http://www.securityfocus.com/bid/95908
CVE ID: CVE-2017-5667 State: PUBLISHED Published: 2017-03-16T15:00:00 Last Updated: 2024-08-05T15:11:48.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vectors involving the data transfer length. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - http://www.openwall.com/lists/oss-security/2017/01/30/2 - https://security.gentoo.org/glsa/201702-28 - http:/
007.html - http://www.openwall.com/lists/oss-security/2017/01/30/2 - https://security.gentoo.org/glsa/201702-28 - http://www.securityfocus.com/bid/95885 - http://www.openwall.com/lists/oss-security/2017/02/12/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1417559 - http://www.openwall.com/lists/oss-security/2017/01/31/10 - http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=42922105beb14c2fc58185ea022b9f72fb5465e9