Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-7967 State: PUBLISHED Published: 2016-12-23T22:00:00 Last Updated: 2024-08-06T02:13:21.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93360 - http://www.openwall.com/lists/oss-security/2016/10/05/1
CVE ID: CVE-2016-7968 State: PUBLISHED Published: 2016-12-23T22:00:00 Last Updated: 2024-08-06T02:13:21.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. HTML Mail contents were not sanitized for JavaScript and included code was executed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93360 - http://www.openwall.com/lists/oss-security/2016/10/05/1
CVE ID: CVE-2016-7969 State: PUBLISHED Published: 2017-03-03T16:00:00 Last Updated: 2024-08-06T02:13:21.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wrap_lines_smart function in ass_render.c in libass before 0.13.4 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, related to "0/3 line wrapping equalization." Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-25 - http://www.securityfocus.com/bid/93358 - https://github.com/libass/libass/releases/tag/0.13.4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KW6DNERYHPI5Y6S
.13.4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KW6DNERYHPI5Y6SQYU3XKTVSCOWMIHUC/ - https://bugzilla.redhat.com/show_bug.cgi?id=1381960 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUOUOK3VULMMZTNSCRFCNPDAPDWAVK7X/ - http://lists.opensuse.org/opensuse-updates/2016-12/msg00068.html - http://www.openwall.com/lists/oss-security/2016/10/05/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7JJ2SGVOX6UQQIRMVC3QACJLKHE2PYN/ - https://github.com/libass/libass/commit/f4f48950788b91c6a30029cc28a240b834713ea7
CVE ID: CVE-2016-7970 State: PUBLISHED Published: 2017-03-03T16:00:00 Last Updated: 2024-08-06T02:13:21.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the calc_coeff function in libass/ass_blur.c in libass before 0.13.4 allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-25 - http://www.securityfocus.com/bid/93358 - https://github.com/libass/libass/releases/tag/0.13.4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KW6DNERYHPI5Y6SQYU3XKTVSCOWMIHUC/ - https://bugzilla.redhat.com
/list/package-announce%40lists.fedoraproject.org/message/KW6DNERYHPI5Y6SQYU3XKTVSCOWMIHUC/ - https://bugzilla.redhat.com/show_bug.cgi?id=1381960 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUOUOK3VULMMZTNSCRFCNPDAPDWAVK7X/ - http://www.openwall.com/lists/oss-security/2016/10/05/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7JJ2SGVOX6UQQIRMVC3QACJLKHE2PYN/ - https://github.com/libass/libass/pull/240/commits/08e754612019ed84d1db0d1fc4f5798248decd75
CVE ID: CVE-2016-7971 State: REJECTED Published: 2017-03-03T16:00:00 Last Updated: 2017-03-03T15:57:01 Description: No description available.
CVE ID: CVE-2016-7972 State: PUBLISHED Published: 2017-03-03T16:00:00 Last Updated: 2024-08-06T02:13:21.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: The check_allocations function in libass/ass_shaper.c in libass before 0.13.4 allows remote attackers to cause a denial of service (memory allocation failure) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-25 - https://github.com/libass/libass/pull/240/commits/aa54e0b59200a994d50a346b5d7ac818ebcf2d4b - http://www.securityfocus.com/bid/93358 - https://github.com/libass/libass/releases/tag/0.13.4 - https://lists.fedoraproject.org/archives/list/pac
com/bid/93358 - https://github.com/libass/libass/releases/tag/0.13.4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KW6DNERYHPI5Y6SQYU3XKTVSCOWMIHUC/ - https://bugzilla.redhat.com/show_bug.cgi?id=1381960 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUOUOK3VULMMZTNSCRFCNPDAPDWAVK7X/ - http://lists.opensuse.org/opensuse-updates/2016-12/msg00068.html - http://www.openwall.com/lists/oss-security/2016/10/05/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7JJ2SGVOX6UQQIRMVC3QACJLKHE2PYN/
CVE ID: CVE-2016-7973 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-06T02:13:21.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2016-7974 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-06T02:13:21.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2016-7975 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-06T02:13:21.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-tcp.c:tcp_print(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2016-7976 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-06T02:13:21.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3691 - https://bugs.ghostscript.com/show_bug.cgi?id=697178 - http://www.openwall.com/lists/oss-security/2016/10/19/6 - http://git.ghostscript.com/?p=user/chrisl/ghostpdl.git%3Ba=commit%3Bh=6d444c273da5499a4cd72f21cb6d4c9a5256807d - https://security.gentoo.org/glsa/201702-31 - http://www.securityfocus.com
3Bh=6d444c273da5499a4cd72f21cb6d4c9a5256807d - https://security.gentoo.org/glsa/201702-31 - http://www.securityfocus.com/bid/95332
CVE ID: CVE-2016-7977 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T02:13:21.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3691 - http://www.securityfocus.com/bid/95334 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://rhn.redhat.com/errata/RHSA-2017-0013.html - http://git.ghostscript.com/?p=ghostpdl.git
/cpujan2018-3236628.html - http://rhn.redhat.com/errata/RHSA-2017-0013.html - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=8abd22010eb4db0fb1b10e430d5f5d83e015ef70 - http://www.openwall.com/lists/oss-security/2016/09/29/28 - http://rhn.redhat.com/errata/RHSA-2017-0014.html - https://bugs.ghostscript.com/show_bug.cgi?id=697169 - http://www.openwall.com/lists/oss-security/2016/10/05/15 - https://ghostscript.com/doc/9.21/History9.htm - https://security.gentoo.org/glsa/201702-31
CVE ID: CVE-2016-7978 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T02:13:21.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3691 - http://www.securityfocus.com/bid/95336 - http://rhn.redhat.com/errata/RHSA-2017-0013.html - https://bugs.ghostscript.com/show_bug.cgi?id=697179 - http://www.openwall.com/lists/oss-security/2016/10/05/15 - https://security.gentoo.org/glsa/201702-31
CVE ID: CVE-2016-7979 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T02:13:21.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3691 - http://rhn.redhat.com/errata/RHSA-2017-0013.html - https://bugs.ghostscript.com/show_bug.cgi?id=697190 - http://rhn.redhat.com/errata/RHSA-2017-0014.html - http://git.ghostscript.com/?p=ghostpdl.git%3Bh=875a0095f37626a721c7ff
http://rhn.redhat.com/errata/RHSA-2017-0014.html - http://git.ghostscript.com/?p=ghostpdl.git%3Bh=875a0095f37626a721c7ff57d606a0f95af03913 - http://www.openwall.com/lists/oss-security/2016/10/05/15 - http://www.securityfocus.com/bid/95337 - https://security.gentoo.org/glsa/201702-31
CVE ID: CVE-2016-7980 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T02:13:21.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted valider_xml request. NOTE: this issue can be combined with CVE-2016-7998 to execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - https://sysdream.com/news/lab/2016-10-19-spip-3-1-2-exec-code-cross-site-request-forgery-cve-2016-7980/ - http://
ces: - https://sysdream.com/news/lab/2016-10-19-spip-3-1-2-exec-code-cross-site-request-forgery-cve-2016-7980/ - http://www.securityfocus.com/bid/93451 - http://www.openwall.com/lists/oss-security/2016/10/12/6 - https://core.spip.net/projects/spip/repository/revisions/23203 - http://www.openwall.com/lists/oss-security/2016/10/06/6 - http://www.openwall.com/lists/oss-security/2016/10/05/17 - https://core.spip.net/projects/spip/repository/revisions/23202 - https://core.spip.net/projects/spip/repository/revisions/23201
CVE ID: CVE-2016-7981 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T02:13:21.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the var_url parameter in a valider_xml action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93451 - http://www.openwall.com/lists/oss-security/2016/10/12/7 - https://core.spip.net/projects/spip/repository/revisions/23200 - http://www.openwall.com/lists/oss-security/2016/10/06/6 - http://www.openwall.com/lists/oss-security/20
evisions/23200 - http://www.openwall.com/lists/oss-security/2016/10/06/6 - http://www.openwall.com/lists/oss-security/2016/10/05/17 - https://core.spip.net/projects/spip/repository/revisions/23202 - https://core.spip.net/projects/spip/repository/revisions/23201
CVE ID: CVE-2016-7982 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T02:13:21.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on the system via the var_url parameter in a valider_xml action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93451 - https://core.spip.net/projects/spip/repository/revisions/23200 - http://www.openwall.com/lists/oss-security/2016/10/06/6 - http://www.openwall.com/lists/oss-security/2016/10/05/17 - https://sysdream.com/news/lab/2016-10-19-
rity/2016/10/06/6 - http://www.openwall.com/lists/oss-security/2016/10/05/17 - https://sysdream.com/news/lab/2016-10-19-spip-3-1-1-3-1-2-file-enumeration-path-traversal-cve-2016-7982/ - http://www.openwall.com/lists/oss-security/2016/10/12/8
CVE ID: CVE-2016-7983 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-06T02:13:21.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2016-7984 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-06T02:13:21.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftp_print(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2016-7985 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-06T02:13:21.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calm_fast_print(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2016-7986 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-06T02:13:21.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2016-7987 State: PUBLISHED Published: 2017-02-13T21:00:00 Last Updated: 2024-08-06T02:13:21.788Z Vendors: n/a Products: Siemens SICAM RTU Devices before 08 Problem Types: Siemens SICAM RTU Devices Denial-of-Service Vulnerability Description: An issue was discovered in Siemens ETA4 firmware (all versions prior to Revision 08) of the SM-2558 extension module for: SICAM AK, SICAM TM 1703, SICAM BC 1703, and SICAM AK 3. Specially crafted packets sent to Port 2404/TCP could cause the affected device to go into defect mode. A cold start might be required to recover the system, a Denial-of-Service Vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www
e system, a Denial-of-Service Vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93832 - https://ics-cert.us-cert.gov/advisories/ICSA-16-299-01
CVE ID: CVE-2016-7988 State: PUBLISHED Published: 2016-10-31T10:00:00 Last Updated: 2024-08-06T02:13:21.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver responsible for handling the com.[Samsung].android.intent.action.SET_WIFI intent leads to unsolicited configuration messages being handled by wifi-service.jar within the Android Framework, a subset of SVE-2016-6542. Additional Analyst Notes: - CVE Program Container: References: - http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016 - http://www.securityfocus.com/bid/94081
CVE ID: CVE-2016-7989 State: PUBLISHED Published: 2016-10-31T10:00:00 Last Updated: 2024-08-06T02:13:21.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Samsung Galaxy S4 through S7 devices, a malformed OTA WAP PUSH SMS containing an OMACP message sent remotely triggers an unhandled ArrayIndexOutOfBoundsException in Samsung's implementation of the WifiServiceImpl class within wifi-service.jar. This causes the Android runtime to continually crash, rendering the device unusable until a factory reset is performed, a subset of SVE-2016-6542. Additional Analyst Notes: - CVE Program Container: References: - http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016 - http://ww
Notes: - CVE Program Container: References: - http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016 - http://www.securityfocus.com/bid/94082
CVE ID: CVE-2016-7990 State: PUBLISHED Published: 2016-10-31T10:00:00 Last Updated: 2024-08-06T02:13:21.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing OMACP messages (within WAP Push SMS messages) leading to a heap corruption that can result in Denial of Service and potentially remote code execution, a subset of SVE-2016-6542. Additional Analyst Notes: - CVE Program Container: References: - http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016 - http://www.securityfocus.com/bid/94086
CVE ID: CVE-2016-7991 State: PUBLISHED Published: 2016-10-31T10:00:00 Last Updated: 2024-08-06T02:13:21.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages resulting in remote unsolicited WAP Push SMS messages being accepted, parsed, and handled by the device, leading to unauthorized configuration changes, a subset of SVE-2016-6542. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94088 - http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016
CVE ID: CVE-2016-7992 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-06T02:13:21.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-cip.c:cip_if_print(). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2016-7993 State: PUBLISHED Published: 2017-01-28T01:33:00 Last Updated: 2024-08-06T02:13:21.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: A bug in util-print.c:relts_print() in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037755 - http://www.debian.org/security/2017/dsa-3775 - https://access.redhat.com/errata/RHSA-2017:1871 - https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gent
com/debian-bugs-dist%40lists.debian.org/msg1494526.html - http://www.securityfocus.com/bid/95852 - https://security.gentoo.org/glsa/201702-30
CVE ID: CVE-2016-7994 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T02:13:21.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the virtio_gpu_resource_create_2d function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_CREATE_2D commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93453 - https://security.gentoo.org/glsa/201611-11 - http://www.openwall.com/lists/oss-security/2016/10/07/2 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00
-11 - http://www.openwall.com/lists/oss-security/2016/10/07/2 - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg04083.html - http://www.openwall.com/lists/oss-security/2016/10/08/3
CVE ID: CVE-2016-7995 State: PUBLISHED Published: 2016-12-10T00:00:00 Last Updated: 2024-08-06T02:13:21.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of crafted buffer page select (PG) indexes. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg06609.html - http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b16c129daf0fed91febbb88de23dae8271c889
se-updates/2016-12/msg00140.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b16c129daf0fed91febbb88de23dae8271c8898a - http://www.openwall.com/lists/oss-security/2016/10/07/3 - http://www.openwall.com/lists/oss-security/2016/10/08/4 - http://www.securityfocus.com/bid/93454
CVE ID: CVE-2016-7996 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T02:13:21.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact via a colormap with a large number of entries. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93464 - http://www.debian.org/security/2016/dsa-3746 - http://www.openwall.com/lists/oss-security/2016/10/07/4 - http://www.openwall.com/lists/oss-security/2016/10/08/5