Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-4418 State: PUBLISHED Published: 2016-05-01T01:00:00 Last Updated: 2024-08-06T00:32:24.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet that triggers an empty set. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html - http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12106 - http://www.oracle.
/opensuse-updates/2016-03/msg00015.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12106 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://www.wireshark.org/security/wnpa-sec-2016-15.html
CVE ID: CVE-2016-4419 State: PUBLISHED Published: 2016-05-01T01:00:00Z Last Updated: 2024-09-16T22:35:31.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-spice.c in the SPICE dissector in Wireshark 2.x before 2.0.2 mishandles capability data, which allows remote attackers to cause a denial of service (large loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12151 - https://www.wireshark.org/security/wnpa-sec-2016-16.html
CVE ID: CVE-2016-4420 State: PUBLISHED Published: 2016-05-01T01:00:00Z Last Updated: 2024-09-16T21:04:05.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NFS dissector in Wireshark 2.x before 2.0.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2016-17.html
CVE ID: CVE-2016-4421 State: PUBLISHED Published: 2016-05-01T01:00:00 Last Updated: 2024-08-06T00:32:24.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (deep recursion, stack consumption, and application crash) via a packet that specifies deeply nested data. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html - http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html - https://www.wireshark.org/security/wnpa-sec-2016-18.html - ht
ists.opensuse.org/opensuse-updates/2016-03/msg00015.html - https://www.wireshark.org/security/wnpa-sec-2016-18.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11822
CVE ID: CVE-2016-4422 State: PUBLISHED Published: 2016-05-06T17:00:00 Last Updated: 2024-08-06T00:32:24.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pam_sm_authenticate function in pam_sshauth.c in libpam-sshauth might allow context-dependent attackers to bypass authentication or gain privileges via a system user account. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2016/dsa-3567 - https://bazaar.launchpad.net/~ltsp-upstream/ltsp/libpam-sshauth/revision/114#src/pam_sshauth.c
CVE ID: CVE-2016-4423 State: PUBLISHED Published: 2016-06-01T22:00:00 Last Updated: 2024-08-06T00:32:24.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: The attemptAuthentication function in Component/Security/Http/Firewall/UsernamePasswordFormAuthenticationListener.php in Symfony before 2.3.41, 2.7.x before 2.7.13, 2.8.x before 2.8.6, and 3.0.x before 3.0.6 does not limit the length of a username stored in a session, which allows remote attackers to cause a denial of service (session storage consumption) via a series of authentication attempts with long, non-existent usernames. Additional Analyst Notes: - CVE Program Container: References: - https://symfony.com/blog/cve-2016-
-existent usernames. Additional Analyst Notes: - CVE Program Container: References: - https://symfony.com/blog/cve-2016-4423-large-username-storage-in-session - https://github.com/symfony/symfony/pull/18733 - http://www.debian.org/security/2016/dsa-3588
CVE ID: CVE-2016-4425 State: PUBLISHED Published: 2016-05-17T14:00:00 Last Updated: 2024-08-06T00:32:24.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/03/3 - http://www.openwall.com/lists/oss-security/2016/05/01/5 - http://www.openwall.com/lists/oss-security/2016/05/02/1 - https://github.com/akheron/jansson/issues/282 - https://github.com/akheron/jansson/pull/284 - https://github.com/akheron/jansson/pull/2
com/akheron/jansson/issues/282 - https://github.com/akheron/jansson/pull/284 - https://github.com/akheron/jansson/pull/284/commits/64ce0ad3731ebd77e02897b07920eadd0e2cc318 - http://www.debian.org/security/2015/dsa-3577
CVE ID: CVE-2016-4426 State: PUBLISHED Published: 2022-07-28T16:31:52 Last Updated: 2024-08-06T00:32:24.649Z Vendors: n/a Products: zulip Problem Types: CWE-284 Description: In zulip before 1.3.12, bot API keys were accessible to other users in the same realm. Additional Analyst Notes: - CVE Program Container: References: - https://zulip.readthedocs.io/en/2.1.7/overview/changelog.html#id35
CVE ID: CVE-2016-4427 State: PUBLISHED Published: 2022-07-28T16:32:08 Last Updated: 2024-08-06T00:32:25.441Z Vendors: n/a Products: zulip Problem Types: CWE-284 Description: In zulip before 1.3.12, deactivated users could access messages if SSO was enabled. Additional Analyst Notes: - CVE Program Container: References: - https://zulip.readthedocs.io/en/2.1.7/overview/changelog.html#id35
CVE ID: CVE-2016-4428 State: PUBLISHED Published: 2016-07-12T19:00:00 Last Updated: 2024-08-06T00:32:24.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:1268 - https://access.redhat.com/errata/RHSA-2016:1270 - http://www.debian.org/security/2016/dsa-3617 - https://access.redhat.com/errata/RHSA-2016:1272 - https://security.openstac
tp://www.debian.org/security/2016/dsa-3617 - https://access.redhat.com/errata/RHSA-2016:1272 - https://security.openstack.org/ossa/OSSA-2016-010.html - https://review.openstack.org/329997 - https://bugs.launchpad.net/horizon/+bug/1567673 - https://access.redhat.com/errata/RHSA-2016:1269 - http://www.openwall.com/lists/oss-security/2016/06/17/4 - https://access.redhat.com/errata/RHSA-2016:1271 - https://review.openstack.org/329998 - https://review.openstack.org/329996
CVE ID: CVE-2016-4429 State: PUBLISHED Published: 2016-06-10T15:00:00 Last Updated: 2024-08-06T00:32:24.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3759-2/ - http://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html - https://usn.ubuntu.com/3759-1/ - http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html - http:/
g00039.html - https://usn.ubuntu.com/3759-1/ - http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html - http://www.securityfocus.com/bid/102073 - https://lists.debian.org/debian-lts-announce/2020/06/msg00027.html - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - https://www.oracle.com//security-alerts/cpujul2021.html - https://sourceware.org/bugzilla/show_bug.cgi?id=20112 - https://source.android.com/security/bulletin/2017-12-01 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=bc779a1a5b3035133024b21e2f339fe4219fb11c
CVE ID: CVE-2016-4430 State: PUBLISHED Published: 2016-07-04T22:00:00 Last Updated: 2024-08-06T00:32:24.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Struts 2 2.3.20 through 2.3.28.1 mishandles token validation, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://struts.apache.org/docs/s2-038.html - https://bugzilla.redhat.com/show_bug.cgi?id=1348249 - http://www-01.ibm.com/support/docview.wss?uid=swg21987854 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000111 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009282 - http://jvn.jp/en/jp/JVN4
b.jvn.jp/jvndb/JVNDB-2016-000111 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009282 - http://jvn.jp/en/jp/JVN45093481/index.html - http://www.securityfocus.com/bid/91281 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
CVE ID: CVE-2016-4431 State: PUBLISHED Published: 2016-07-04T22:00:00 Last Updated: 2024-08-06T00:32:25.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks by leveraging a default method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91284 - https://bugzilla.redhat.com/show_bug.cgi?id=1348252 - http://www-01.ibm.com/support/docview.wss?uid=swg21987854 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009282 - https://struts.apache.org/docs/s2-040.html - http://jvn.jp/en/jp/JVN45093481/index.h
port/docview.wss?uid=ssg1S1009282 - https://struts.apache.org/docs/s2-040.html - http://jvn.jp/en/jp/JVN45093481/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000113 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
CVE ID: CVE-2016-4432 State: PUBLISHED Published: 2016-06-01T20:00:00 Last Updated: 2024-08-06T00:32:24.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication and consequently perform actions via vectors related to connection state logging. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/538508/100/0/threaded - http://www.securitytracker.com/id/1035983 - https://svn.apache.org/viewvc?view=revision&revision=1743393 - https://svn.apache.org/viewvc?view=revision&revision=1743161 - http://pack
e.org/viewvc?view=revision&revision=1743393 - https://svn.apache.org/viewvc?view=revision&revision=1743161 - http://packetstormsecurity.com/files/137216/Apache-Qpid-Java-Broker-6.0.2-Authentication-Bypass.html - http://mail-archives.apache.org/mod_mbox/qpid-users/201605.mbox/%3CCAFEMS4tXDKYxKVMmU0zTb_7uzduoUS4_RePnUwz1tj%2BGQLNw5Q%40mail.gmail.com%3E - https://issues.apache.org/jira/browse/QPID-7257
CVE ID: CVE-2016-4433 State: PUBLISHED Published: 2016-07-04T22:00:00 Last Updated: 2024-08-06T00:32:24.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://struts.apache.org/docs/s2-039.html - http://www.securityfocus.com/bid/91282 - http://www-01.ibm.com/support/docview.wss?uid=swg21987854 - https://bugzilla.redhat.com/show_bug.cgi?id=1348251 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009282 - http://jvn.jp/en/jp/JVN45093481/index.html - htt
=1348251 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009282 - http://jvn.jp/en/jp/JVN45093481/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000112 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
CVE ID: CVE-2016-4434 State: PUBLISHED Published: 2017-09-29T20:00:00 Last Updated: 2024-08-06T00:32:25.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML External Entity (XXE) attacks via vectors involving (1) spreadsheets in OOXML files and (2) XMP metadata in PDF and other file formats, a related issue to CVE-2016-2175. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/538500/100/0/threaded - https://mail-archives.apache.org/mod_mbox/tika-dev/201605.mbox/%3C1705136517.1175366.14642781352
538500/100/0/threaded - https://mail-archives.apache.org/mod_mbox/tika-dev/201605.mbox/%3C1705136517.1175366.1464278135251.JavaMail.yahoo%40mail.yahoo.com%3E - http://rhn.redhat.com/errata/RHSA-2017-0272.html - http://rhn.redhat.com/errata/RHSA-2017-0248.html - http://rhn.redhat.com/errata/RHSA-2017-0249.html - https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E
CVE ID: CVE-2016-4435 State: PUBLISHED Published: 2017-05-25T17:00:00 Last Updated: 2024-08-06T00:32:24.614Z Vendors: Pivotal Products: Cloud Foundry Problem Types: DoS Description: An endpoint of the Agent running on the BOSH Director VM with stemcell versions prior to 3232.6 and 3146.13 may allow unauthenticated clients to read or write blobs or cause a denial of service attack on the Director VM. This vulnerability requires that the unauthenticated clients guess or find a URL matching an existing GUID. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2016-4435
CVE ID: CVE-2016-4436 State: PUBLISHED Published: 2016-10-03T15:00:00 Last Updated: 2024-08-06T00:32:24.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91280 - http://www-01.ibm.com/support/docview.wss?uid=swg21987854 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009282 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - https://struts.apache.org/docs/s2-035.html
CVE ID: CVE-2016-4437 State: PUBLISHED Published: 2016-06-07T14:00:00.000Z Last Updated: 2025-10-21T23:55:51.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2016-2035.html - https://lists.apache.org/thread.html/ef3a800c7d727a00e04b78e2f06c5cd8960f09ca28c9b69d94c3c4c4%40%3Cannouncements.aurora.apache.org%3E - http://packetstormsecur
3a800c7d727a00e04b78e2f06c5cd8960f09ca28c9b69d94c3c4c4%40%3Cannouncements.aurora.apache.org%3E - http://packetstormsecurity.com/files/137310/Apache-Shiro-1.2.4-Information-Disclosure.html - http://rhn.redhat.com/errata/RHSA-2016-2036.html - http://www.securityfocus.com/bid/91024 - http://www.securityfocus.com/archive/1/538570/100/0/threaded - http://packetstormsecurity.com/files/157497/Apache-Shiro-1.2.4-Remote-Code-Execution.html
CVE ID: CVE-2016-4438 State: PUBLISHED Published: 2016-07-04T22:00:00 Last Updated: 2024-08-06T00:32:24.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1348238 - http://www.securityfocus.com/bid/91275 - https://struts.apache.org/docs/s2-037.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000110 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://jvn.jp/en/jp/JVN07710476/index.html
CVE ID: CVE-2016-4439 State: PUBLISHED Published: 2016-05-20T14:00:00 Last Updated: 2024-08-06T00:32:25.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or potentially execute arbitrary code on the QEMU host via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3047-1 - http://www.securityfocus.com/bid/90760 - https://security.gentoo.org/glsa/201609-01
p://www.ubuntu.com/usn/USN-3047-1 - http://www.securityfocus.com/bid/90760 - https://security.gentoo.org/glsa/201609-01 - http://www.ubuntu.com/usn/USN-3047-2 - https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg03273.html - http://www.openwall.com/lists/oss-security/2016/05/19/3 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - https://bugzilla.redhat.com/show_bug.cgi?id=1337502
CVE ID: CVE-2016-4440 State: PUBLISHED Published: 2016-06-27T10:00:00 Last Updated: 2024-08-06T00:32:24.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MSR access on the host OS, and consequently cause a denial of service (host OS crash) or possibly execute arbitrary code on the host OS, via x2APIC mode. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1337806 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3ce424e45411cf5a13105e0386b6ecf6eeb4f66f - http
ttp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3ce424e45411cf5a13105e0386b6ecf6eeb4f66f - http://www.openwall.com/lists/oss-security/2016/05/20/2 - https://github.com/torvalds/linux/commit/3ce424e45411cf5a13105e0386b6ecf6eeb4f66f
CVE ID: CVE-2016-4441 State: PUBLISHED Published: 2016-05-20T14:00:00 Last Updated: 2024-08-06T00:32:25.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg03274.html - http://www.ubuntu.com/usn/USN-3047-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1337505 - https
16-05/msg03274.html - http://www.ubuntu.com/usn/USN-3047-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1337505 - https://security.gentoo.org/glsa/201609-01 - http://www.ubuntu.com/usn/USN-3047-2 - http://www.openwall.com/lists/oss-security/2016/05/19/4 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html - http://www.securityfocus.com/bid/90762
CVE ID: CVE-2016-4442 State: PUBLISHED Published: 2017-05-02T14:00:00 Last Updated: 2024-08-06T00:32:24.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rack-mini-profiler gem before 0.10.1 for Ruby allows remote attackers to obtain sensitive information about allocated strings and objects by leveraging incorrect ordering of security checks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MiniProfiler/rack-mini-profiler/blob/v0.10.1/CHANGELOG.md - http://www.openwall.com/lists/oss-security/2016/06/10/2 - https://github.com/MiniProfiler/rack-mini-profiler/commit/4273771d65f1a7411e3ef5843329308d0e2d257c
CVE ID: CVE-2016-4443 State: PUBLISHED Published: 2016-12-14T18:00:00 Last Updated: 2024-08-06T00:32:25.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92751 - http://www.securitytracker.com/id/1036863 - http://rhn.redhat.com/errata/RHSA-2016-1929.html - https://bugzilla.redhat.com/show_bug.cgi?id=1335106
CVE ID: CVE-2016-4444 State: PUBLISHED Published: 2017-04-11T18:00:00 Last Updated: 2024-08-06T00:32:24.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: The allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the commands.getstatusoutput function. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2016-1267.html - http://www.securityfocus.com/bid/91476 - http://www.securitytracker.com/id/1036144 - http://seclists.org/oss-sec/2016/q2/575 - https://access.redhat.com/errata/RHSA-2016:1293 - https://g
r.com/id/1036144 - http://seclists.org/oss-sec/2016/q2/575 - https://access.redhat.com/errata/RHSA-2016:1293 - https://github.com/fedora-selinux/setroubleshoot/commit/5cd60033ea7f5bdf8c19c27b23ea2d773d9b09f5 - https://bugzilla.redhat.com/show_bug.cgi?id=1332644
CVE ID: CVE-2016-4445 State: PUBLISHED Published: 2017-04-11T18:00:00 Last Updated: 2024-08-06T00:32:25.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fix_lookup_id function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands as root by triggering an SELinux denial with a crafted file name, related to executing external commands with the commands.getstatusoutput function. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2016-1267.html - https://bugzilla.redhat.com/show_bug.cgi?id=1339183 - http://www.securityfocus.com/bid/91430 - http://www.securitytracker.com/id/1036144 - http://s
/show_bug.cgi?id=1339183 - http://www.securityfocus.com/bid/91430 - http://www.securitytracker.com/id/1036144 - http://seclists.org/oss-sec/2016/q2/575 - https://github.com/fedora-selinux/setroubleshoot/commit/2d12677629ca319310f6263688bb1b7f676c01b7
CVE ID: CVE-2016-4446 State: PUBLISHED Published: 2017-04-11T18:00:00 Last Updated: 2024-08-06T00:32:25.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to the commands.getoutput function. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2016-1267.html - https://github.com/fedora-selinux/setroubleshoot/commit/eaccf4c0d20a27d3df5ff6de8c9dcc80f6f40718 - https://bugzilla.redhat.com/show_bug.cgi?id=1339250 - http://www.securityfocus.com/bid/91427 - http://www.secu
6f40718 - https://bugzilla.redhat.com/show_bug.cgi?id=1339250 - http://www.securityfocus.com/bid/91427 - http://www.securitytracker.com/id/1036144 - http://seclists.org/oss-sec/2016/q2/575 - https://access.redhat.com/errata/RHSA-2016:1293