Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d=swg21678167 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html - http://marc.info/?l=bugtraq&m=140752315422991&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:080 - http://marc.info/?l=bugtraq&m=140389355508263&w=2 - http://marc.info/?l=bugtraq&m=140448122410568&w=2 - http://secunia.com/advisories/59666 - http://marc.info/?l=bugtraq&m=140431828824371&w=2 - http://secunia.com/advisories/59413 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://secunia.com/advisories/59721 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756 - http://www-01.ibm.com/support/docview.wss?uid=swg21676062
bm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756 - http://www-01.ibm.com/support/docview.wss?uid=swg21676062 - http://secunia.com/advisories/58713 - http://www-01.ibm.com/support/docview.wss?uid=swg21673137 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://www-01.ibm.com/support/docview.wss?uid=swg21676035 - http://secunia.com/advisories/59450 - http://secunia.com/advisories/59287 - http://www-01.ibm.com/support/docview.wss?uid=swg21683332 - http://secunia.com/advisories/59491 - http://secunia.com/advisories/58977 - http://lists.opensuse.org/opensuse-updates/2014-05/msg00037.html - https://www.novell.com/support/kb/doc.php?id=7015271 - http://secunia.com/a
org/opensuse-updates/2014-05/msg00037.html - https://www.novell.com/support/kb/doc.php?id=7015271 - http://secunia.com/advisories/60571 - http://www.blackberry.com/btsc/KB36051 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm - http://www-01.ibm.com/support/docview.wss?uid=swg21677527 - http://secunia.com/advisories/59202 - http://secunia.com/advisories/58337 - http://secunia.com/advisories/59162 - http://secunia.com/advisories/59398 - http://secunia.com/advisories/59490 - http://secunia.com/advisories/60049 - https://cert-portal.siemens.com/productcert/pdf/ssa-234763.p
om/advisories/59490 - http://secunia.com/advisories/60049 - https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf
CVE ID: CVE-2014-0199 State: PUBLISHED Published: 2014-05-29T14:00:00 Last Updated: 2024-08-06T09:05:39.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setup script in ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports (rhevm-reports) package before 3.3.3, stores the reports database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67682 - http://rhn.redhat.com/errata/RHSA-2014-0558.html
CVE ID: CVE-2014-0200 State: PUBLISHED Published: 2014-05-29T14:00:00 Last Updated: 2024-08-06T09:05:39.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Red Hat Enterprise Virtualization Manager reports (rhevm-reports) package before 3.3.3-1 uses world-readable permissions on the datasource configuration file (js-jboss7-ds.xml), which allows local users to obtain sensitive information by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67684 - http://rhn.redhat.com/errata/RHSA-2014-0558.html
CVE ID: CVE-2014-0201 State: PUBLISHED Published: 2014-05-29T14:00:00 Last Updated: 2024-08-06T09:05:39.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports package (rhevm-reports) before 3.3.3, uses world-readable permissions on configuration files, which allows local users to obtain sensitive information by reading the files. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0558.html
CVE ID: CVE-2014-0202 State: PUBLISHED Published: 2014-05-30T14:00:00 Last Updated: 2024-08-06T09:05:39.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setup script in ovirt-engine-dwh, as used in the Red Hat Enterprise Virtualization Manager data warehouse (rhevm-dwh) package before 3.3.3, stores the history database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0559.html
CVE ID: CVE-2014-0203 State: PUBLISHED Published: 2014-06-23T10:00:00 Last Updated: 2024-08-06T09:05:39.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause a denial of service (incorrect free operations and system crash) via an open system call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59262 - http://www.securityfocus.com/bid/68125 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=86acdca1b63e689054
focus.com/bid/68125 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=86acdca1b63e6890540fa19495cfc708beff3d8b - http://secunia.com/advisories/59309 - http://secunia.com/advisories/59406 - http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.33 - http://linux.oracle.com/errata/ELSA-2014-0771.html - http://secunia.com/advisories/59560 - http://linux.oracle.com/errata/ELSA-2014-3043.html - https://bugzilla.redhat.com/show_bug.cgi?id=1094363 - https://github.com/torvalds/linux/commit/86acdca1b63e6890540fa19495cfc708beff3d8b
CVE ID: CVE-2014-0204 State: PUBLISHED Published: 2014-11-03T23:00:00 Last Updated: 2024-08-06T09:05:39.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Identity (Keystone) before 2014.1.1 does not properly handle when a role is assigned to a group that has the same ID as a user, which allows remote authenticated users to gain privileges that are assigned to a group with the same ID. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/keystone/+bug/1309228 - https://review.openstack.org/#/c/94396/ - http://www.openwall.com/lists/oss-security/2014/05/21/3
CVE ID: CVE-2014-0205 State: PUBLISHED Published: 2014-09-28T19:00:00 Last Updated: 2024-08-06T09:05:39.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue operations, which allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a crafted application that triggers a zero count. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-1365.html - https://github.com/torvalds/linux/commit/7ada876a8703f23befbb20a7465a702ee39b1704 - http:/
/errata/RHSA-2014-1365.html - https://github.com/torvalds/linux/commit/7ada876a8703f23befbb20a7465a702ee39b1704 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ada876a8703f23befbb20a7465a702ee39b1704 - http://rhn.redhat.com/errata/RHSA-2014-1763.html - http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.37 - https://bugzilla.redhat.com/show_bug.cgi?id=1094455
CVE ID: CVE-2014-0206 State: PUBLISHED Published: 2014-06-25T10:00:00 Last Updated: 2024-08-06T09:05:39.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the aio_read_events_ring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59278 - https://source.android.com/security/bulletin/2017-04-01 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=edfbbf388f29 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=edfbb
inux.git/commit/?id=edfbbf388f29 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=edfbbf388f293d70bf4b7c0bc38774d05e6f711a - http://www.securitytracker.com/id/1030479 - https://github.com/torvalds/linux/commit/edfbbf388f293d70bf4b7c0bc38774d05e6f711a - http://www.securityfocus.com/bid/68176 - https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.46 - https://bugzilla.redhat.com/show_bug.cgi?id=1094602 - https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.3 - https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.24 - https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.10 - http://www.securitytracker.com/id/1038201
CVE ID: CVE-2014-0207 State: PUBLISHED Published: 2014-07-09T10:00:00 Last Updated: 2024-08-06T09:05:39.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1091842 - https://support.apple.com/HT204659 - http://www.securityfocus.com/bid/68243 - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http://www.debian.org
4659 - http://www.securityfocus.com/bid/68243 - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http://www.debian.org/security/2014/dsa-3021 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.debian.org/security/2014/dsa-2974 - http://secunia.com/advisories/59794 - http://www.php.net/ChangeLog-5.php - http://mx.gw.com/pipermail/file/2014/001553.html - https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391 - https://bugs.php.net/bug.php?id=67326 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://support.apple.com/kb/HT6443 - http://www.o
://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://support.apple.com/kb/HT6443 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://secunia.com/advisories/59831 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html
CVE ID: CVE-2014-0208 State: PUBLISHED Published: 2017-10-16T18:00:00 Last Updated: 2024-08-06T09:05:39.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search auto-completion functionality in Foreman before 1.4.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted key name. Additional Analyst Notes: - CVE Program Container: References: - https://theforeman.org/security.html#2014-0208 - https://bugzilla.redhat.com/show_bug.cgi?id=1094642 - http://projects.theforeman.org/issues/5471
CVE ID: CVE-2014-0209 State: PUBLISHED Published: 2014-05-15T14:00:00 Last Updated: 2024-08-06T09:05:39.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html - ht
ware.com/security/advisories/VMSA-2014-0012.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html - http://www.ubuntu.com/usn/USN-2211-1 - http://secunia.com/advisories/59154 - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.debian.org/security/2014/dsa-2927 - http://rhn.redhat.com/errata/RHSA-2014-1893.html - http://www.securityfocus.com/bid/67382 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://lists.x.org/archives/xorg-announce/2014-May/002431.html - http://seclists.org/fulldisclosure/2014/Dec/23 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:145 - http://advisories.mageia.org/MGASA-2014-0278.ht
c/23 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:145 - http://advisories.mageia.org/MGASA-2014-0278.html
CVE ID: CVE-2014-0210 State: PUBLISHED Published: 2014-05-15T14:00:00 Last Updated: 2024-08-06T09:05:39.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply to the (1) _fs_recv_conn_setup, (2) fs_read_open_font, (3) fs_read_query_info, (4) fs_read_extent_info, (5) fs_read_glyphs, (6) fs_read_list, or (7) fs_read_list_info function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg0
http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html - http://www.ubuntu.com/usn/USN-2211-1 - http://secunia.com/advisories/59154 - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.debian.org/security/2014/dsa-2927 - http://rhn.redhat.com/errata/RHSA-2014-1893.html - http://www.securityfocus.com/bid/67382 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://lists.x.org/archives/xorg-announce/2014-May/002431.html - http://seclists.org/fulldisclosure/2014/Dec/23 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:145 - http://advisories.mageia.org/MGAS
losure/2014/Dec/23 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:145 - http://advisories.mageia.org/MGASA-2014-0278.html
CVE ID: CVE-2014-0211 State: PUBLISHED Published: 2014-05-15T14:00:00 Last Updated: 2024-08-06T09:05:39.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html - http://www.ubuntu.com/usn/USN-2211-1 - http://secunia.
ttp://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html - http://www.ubuntu.com/usn/USN-2211-1 - http://secunia.com/advisories/59154 - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.debian.org/security/2014/dsa-2927 - http://rhn.redhat.com/errata/RHSA-2014-1893.html - http://www.securityfocus.com/bid/67382 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://lists.x.org/archives/xorg-announce/2014-May/002431.html - http://seclists.org/fulldisclosure/2014/Dec/23 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:145 - http://advisories.mageia.org/MGASA-2014-0278.html
CVE ID: CVE-2014-0212 State: PUBLISHED Published: 2019-12-13T12:55:25 Last Updated: 2024-08-06T09:05:39.287Z Vendors: qpid-cpp Products: qpid-cpp Problem Types: ACL policy loading enables a denial of service by consuming all available file descriptors Description: qpid-cpp: ACL policies only loaded if the acl-file option specified enabling DoS by consuming all available file descriptors Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-0212 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0212 - https://access.redhat.com/security/cve/cve-2014-0212
CVE ID: CVE-2014-0213 State: PUBLISHED Published: 2014-05-27T00:00:00 Last Updated: 2024-08-06T09:05:39.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in mod/assign/locallib.php in the Assignment subsystem in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allow remote attackers to hijack the authentication of teachers for quick-grading requests. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2014/05/19/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44606 - https://moodle.org/mod/forum/discuss.ph
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44606 - https://moodle.org/mod/forum/discuss.php?d=260361
CVE ID: CVE-2014-0214 State: PUBLISHED Published: 2014-05-27T00:00:00 Last Updated: 2024-08-06T09:05:39.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: login/token.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 creates a MoodleMobile web-service token with an infinite lifetime, which makes it easier for remote attackers to hijack sessions via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43119 - http://openwall.com/lists/oss-security/2014/05/19/1 - https://moodle.org/mod/forum/discuss.php?d=260362
CVE ID: CVE-2014-0215 State: PUBLISHED Published: 2014-05-27T00:00:00 Last Updated: 2024-08-06T09:05:39.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: The blind-marking implementation in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allows remote authenticated users to de-anonymize student identities by (1) using a screen reader or (2) reading the HTML source. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44750 - https://moodle.org/mod/forum/discuss.php?d=260363 - http://openwall.com/lists/oss-security/2014/05/19/1
CVE ID: CVE-2014-0216 State: PUBLISHED Published: 2014-05-27T00:00:00 Last Updated: 2024-08-06T09:05:39.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The My Home implementation in the block_html_pluginfile function in blocks/html/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 does not properly restrict file access, which allows remote attackers to obtain sensitive information by visiting an HTML block. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=260364 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43877 - http://openwall.com/lists/oss-
?d=260364 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43877 - http://openwall.com/lists/oss-security/2014/05/19/1
CVE ID: CVE-2014-0217 State: PUBLISHED Published: 2014-05-27T00:00:00 Last Updated: 2024-08-06T09:05:39.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: enrol/index.php in Moodle 2.6.x before 2.6.3 does not check for the moodle/course:viewhiddencourses capability before listing hidden courses, which allows remote attackers to obtain sensitive name and summary information about these courses by leveraging the guest role and visiting a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=260365 - http://openwall.com/lists/oss-security/2014/05/19/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit
- http://openwall.com/lists/oss-security/2014/05/19/1 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45126
CVE ID: CVE-2014-0218 State: PUBLISHED Published: 2014-05-27T00:00:00 Last Updated: 2024-08-06T09:05:39.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the URL downloader repository in repository/url/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=260366 - http://www.securityfocus.com/bid/67479 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45332 - http://openwall.co
tyfocus.com/bid/67479 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45332 - http://openwall.com/lists/oss-security/2014/05/19/1
CVE ID: CVE-2014-0219 State: PUBLISHED Published: 2017-11-15T18:00:00 Last Updated: 2024-08-06T09:05:39.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1095974 - http://www.securityfocus.com/bid/101872 - http://karaf.apache.org/security/cve-2014-0219.txt
CVE ID: CVE-2014-0220 State: PUBLISHED Published: 2014-06-10T14:00:00 Last Updated: 2024-08-06T09:05:39.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudera Manager before 4.8.3 and 5.x before 5.0.1 allows remote authenticated users to obtain sensitive configuration information via the API. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/532312/100/0/threaded - http://www.cloudera.com/content/cloudera-content/cloudera-docs/SecurityBulletins/Security-Bulletin/csb_topic_2.html - http://packetstormsecurity.com/files/126956/Cloudera-Manager-4.8.2-5.0.0-Information-Disclosure.html - http://www.securityfocus.com/bid/67912
CVE ID: CVE-2014-0221 State: PUBLISHED Published: 2014-06-05T21:00:00 Last Updated: 2024-08-06T09:05:39.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59342 - http://secunia.com/advisories/59669 - http://www.novell.com/support/kb/doc.php?id=7015300 - http://secunia.com/advisories/59990 - http://www.securitytracker.com/id/103
w.novell.com/support/kb/doc.php?id=7015300 - http://secunia.com/advisories/59990 - http://www.securitytracker.com/id/1030337 - http://secunia.com/advisories/59454 - http://secunia.com/advisories/59126 - http://www.novell.com/support/kb/doc.php?id=7015264 - http://secunia.com/advisories/59306 - http://www-01.ibm.com/support/docview.wss?uid=swg21678289 - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://marc.info/?l=bugtraq&m=140266410314613&w=2 - http://secunia.com/advisories/61254 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E - http://secunia.com/advisories/59895 - http://secunia.com/advisories/59449 - http://www-01.ib
&ID=6061&myns=phmc&mync=E - http://secunia.com/advisories/59895 - http://secunia.com/advisories/59449 - http://www-01.ibm.com/support/docview.wss?uid=isg400001843 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946 - http://marc.info/?l=bugtraq&m=140317760000786&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21676879 - http://www-01.ibm.com/support/docview.wss?uid=swg21677828 - http://secunia.com/advisories/59441 - http://marc.info/?l=bugtraq&m=140621259019789&w=2 - http://secunia.com/advisories/59189 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:106 - http://secunia.com/advisories/59300 - http://security.gentoo.org/glsa/glsa-201