Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-16468 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16469 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16470 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16471 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16472 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16473 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16474 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16475 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16476 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16477 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16478 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16479 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16480 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16481 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16482 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16483 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16484 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16485 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16486 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16487 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16488 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16489 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16490 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16491 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16492 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16493 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16494 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16495 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16496 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16497 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16498 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16499 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16500 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16501 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16502 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16503 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16504 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16505 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16506 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16507 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16508 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16509 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-16510 State: PUBLISHED Published: 2017-11-02T16:00:00 Last Updated: 2024-08-05T20:27:03.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 4.8.3 is affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi) in plugins and themes, as demonstrated by a "double prepare" approach, a different vulnerability than CVE-2017-14723. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WordPress/WordPress/commit/a2693fd8602e3263b5925b9d799ddd577202167d - https://www.debian.org/security/2018/dsa-4090 - https://lists.debian.org/debian-lts-announce/2017/11/msg00
d577202167d - https://www.debian.org/security/2018/dsa-4090 - https://lists.debian.org/debian-lts-announce/2017/11/msg00003.html - http://www.securityfocus.com/bid/101638 - https://wpvulndb.com/vulnerabilities/8941 - https://codex.wordpress.org/Version_4.8.3 - https://blog.ircmaxell.com/2017/10/disclosure-wordpress-wpdb-sql-injection-technical.html - https://wordpress.org/news/2017/10/wordpress-4-8-3-security-release/
CVE ID: CVE-2017-16512 State: PUBLISHED Published: 2018-03-29T22:00:00 Last Updated: 2024-08-05T20:27:04.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local users to steal root privileges via a crafted update request when no updates are available. Additional Analyst Notes: - CVE Program Container: References: - https://m4.rkw.io/blog/cve201716512-hashicorp-vagrantvmwarefusion-v502504-local-root.html
CVE ID: CVE-2017-16513 State: PUBLISHED Published: 2017-11-03T15:00:00 Last Updated: 2024-08-05T20:27:03.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ipswitch WS_FTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations field, aka WSCLT-1729. Additional Analyst Notes: - CVE Program Container: References: - https://www.7elements.co.uk/resources/technical-advisories/ipswitch-ws_ftp-professional-local-buffer-overflow-seh-overwrite/ - https://docs.ipswitch.com/WS_FTP126/ReleaseNotes/English/index.htm - https://www.exploit-db.com/exploits/43115/
CVE ID: CVE-2017-16514 State: PUBLISHED Published: 2018-01-10T17:00:00 Last Updated: 2024-08-05T20:27:03.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple persistent stored Cross-Site-Scripting (XSS) vulnerabilities in the files /wb/admin/admintools/tool.php (Droplet Description) and /install/index.php (Site Title) in WebsiteBaker 2.10.0 allow attackers to insert persistent JavaScript code that gets reflected back to users in multiple areas in the application. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/anonymous/13df19c04c7e86c0f5256b91376d593a
CVE ID: CVE-2017-16516 State: PUBLISHED Published: 2017-11-03T00:00:00 Last Updated: 2024-08-05T20:27:04.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the yajl_string_decode function in yajl_encode.c. This results in the whole ruby process terminating and potentially a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://rubygems.org/gems/yajl-ruby - https://github.com/brianmario/yajl-ruby/issues/176 - https://lists.debian.org/debian-lts-announce/2017/11/msg00010.html - https://lists.debi
rianmario/yajl-ruby/issues/176 - https://lists.debian.org/debian-lts-announce/2017/11/msg00010.html - https://lists.debian.org/debian-lts-announce/2023/07/msg00013.html - https://lists.debian.org/debian-lts-announce/2023/08/msg00003.html
CVE ID: CVE-2017-16520 State: PUBLISHED Published: 2017-11-11T00:00:00 Last Updated: 2024-08-05T20:27:03.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners. Additional Analyst Notes: - CVE Program Container: References: - https://inedo.myjetbrains.com/youtrack/issue/BM-3107 - https://inedo.com/blog/buildmaster-582-released - https://inedo.com/buildmaster/versions#v5.8
CVE ID: CVE-2017-16521 State: PUBLISHED Published: 2017-11-10T09:00:00 Last Updated: 2024-08-05T20:27:03.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used. Additional Analyst Notes: - CVE Program Container: References: - https://inedo.myjetbrains.com/youtrack/issue/EDO-3334 - https://gitlab.com/inedo/buildmaster/commit/4f4c737fefe44c3227535946f535fb7ef468d721 - https://inedo.com/buildmaster/versions#v5.8 - https://inedo.myjetbrains.com/youtrack/issue/BM-3108 - https://inedo.com/blog/buildmaster-582-released
CVE ID: CVE-2017-16522 State: PUBLISHED Published: 2017-11-03T17:00:00Z Last Updated: 2024-09-17T00:21:14.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices allow remote authenticated users to obtain root access by specifying /bin/sh as the command to execute. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/144805/MitraStar-DSL-100HN-T1-GPT-2541GNAC-Privilege-Escalation.html - https://www.exploit-db.com/exploits/43061/
CVE ID: CVE-2017-16523 State: PUBLISHED Published: 2017-11-03T17:00:00 Last Updated: 2024-08-05T20:27:04.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root and undocumented. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/144805/MitraStar-DSL-100HN-T1-GPT-2541GNAC-Privilege-Escalation.html - http://www.securityfocus.com/bid/101672 - https://www.exploit-db.com/exploits/43061/
CVE ID: CVE-2017-16524 State: PUBLISHED Published: 2017-11-06T08:00:00 Last Updated: 2024-08-05T20:27:03.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a direct request to the file in the upload/ directory. To authenticate for this attack, one can obtain web-interface credentials in cleartext by leveraging the existing Local File Read Vulnerability referenced as CVE-2015-8279, which allows remote attacker
rtext by leveraging the existing Local File Read Vulnerability referenced as CVE-2015-8279, which allows remote attackers to read the web-interface credentials via a request for the cslog_export.php?path=/root/php_modules/lighttpd/sbin/userpw URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43138/ - https://github.com/realistic-security/CVE-2017-16524
CVE ID: CVE-2017-16525 State: PUBLISHED Published: 2017-11-04T01:00:00 Last Updated: 2024-08-05T20:27:03.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: The usb_serial_console_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - http://www.securityfocus.com/bid/102028 - https://usn.ubuntu.com/3583-2/ - https://github.com/t
/2017/12/msg00004.html - http://www.securityfocus.com/bid/102028 - https://usn.ubuntu.com/3583-2/ - https://github.com/torvalds/linux/commit/299d7572e46f98534033a9e65973f13ad1ce9047 - https://usn.ubuntu.com/3583-1/ - https://groups.google.com/d/msg/syzkaller/cMACrmo1x0k/4KhRoUgABAAJ - https://github.com/torvalds/linux/commit/bd998c2e0df0469707503023d50d46cf0b10c787
CVE ID: CVE-2017-16526 State: PUBLISHED Published: 2017-11-04T01:00:00 Last Updated: 2024-08-05T20:27:03.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/uwb/uwbd.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (general protection fault and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3754-1/ - https://groups.google.com/d/msg/syzkaller/zROBxKXzHDk/5I6aZ3O2AgAJ - https://github.com/torvalds/linux/commit/bbf26183b7a6236ba602f4d6a2f7cade35bba043 - https://lists.debia
k/5I6aZ3O2AgAJ - https://github.com/torvalds/linux/commit/bbf26183b7a6236ba602f4d6a2f7cade35bba043 - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html
CVE ID: CVE-2017-16527 State: PUBLISHED Published: 2017-11-04T01:00:00 Last Updated: 2024-08-05T20:27:03.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (snd_usb_mixer_interrupt use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/124751d5e63c823092060074bd0abaae61aaa9c4 - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - https://usn.ubuntu.com/3754-1/ - https://groups.google.com/d/msg/syzkaller/jf7GTr_g2CU/
announce/2017/12/msg00004.html - https://usn.ubuntu.com/3754-1/ - https://groups.google.com/d/msg/syzkaller/jf7GTr_g2CU/iVlLhMciCQAJ
CVE ID: CVE-2017-16528 State: PUBLISHED Published: 2017-11-04T01:00:00 Last Updated: 2024-08-05T20:27:03.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: sound/core/seq_device.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service (snd_rawmidi_dev_seq_free use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3619-2/ - https://github.com/torvalds/linux/commit/fc27fe7e8deef2f37cba3f2be2d52b6ca5eb9d57 - https://groups.google.com/d/msg/syzkaller/kuZzDHGkQu8/5du20rZEAAAJ - https://usn.ubuntu.com/3619-1/
CVE ID: CVE-2017-16529 State: PUBLISHED Published: 2017-11-04T01:00:00 Last Updated: 2024-08-05T20:27:04.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: The snd_usb_create_streams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - https://groups.google.com/d/msg/syzkaller/rDzv5RP_f2M/M5au06qmAwAJ - https://usn.ubuntu.com/3754-1/ - https://github.com/torvalds/linux/commit/bfc81a8bc1
yzkaller/rDzv5RP_f2M/M5au06qmAwAJ - https://usn.ubuntu.com/3754-1/ - https://github.com/torvalds/linux/commit/bfc81a8bc18e3c4ba0cbaa7666ff76be2f998991 - http://www.securityfocus.com/bid/103284
CVE ID: CVE-2017-16530 State: PUBLISHED Published: 2017-11-04T01:00:00 Last Updated: 2024-08-05T20:27:03.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device, related to drivers/usb/storage/uas-detect.h and drivers/usb/storage/uas.c. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/d/msg/syzkaller/pCswO77gRlM/VHuPOftgAwAJ - https://github.com/torvalds/linux/commit/786de92b3cb26012d3d0f00ee37adf14527f35c4
CVE ID: CVE-2017-16531 State: PUBLISHED Published: 2017-11-04T01:00:00 Last Updated: 2024-08-05T20:27:03.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/usb/core/config.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device, related to the USB_DT_INTERFACE_ASSOCIATION descriptor. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - https://usn.ubuntu.com/3754-1/ - https://groups.google.com/d/msg/syzkaller/hP6L-m59m_8/Co2ouWeFAwAJ - http://www.securityfocus.
/usn.ubuntu.com/3754-1/ - https://groups.google.com/d/msg/syzkaller/hP6L-m59m_8/Co2ouWeFAwAJ - http://www.securityfocus.com/bid/102025 - https://github.com/torvalds/linux/commit/bd7a3fe770ebd8391d1c7d072ff88e9e76d063eb - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2017-16532 State: PUBLISHED Published: 2017-11-04T01:00:00 Last Updated: 2024-08-05T20:27:04.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3617-1/ - https://usn.ubuntu.com/3619-2/ - https://usn.ubuntu.com/3617-3/ - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - https://usn.ubuntu.com/3754-1/ - https://gith
-3/ - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - https://usn.ubuntu.com/3754-1/ - https://github.com/torvalds/linux/commit/7c80f9e4a588f1925b07134bb2e3689335f6c6d8 - https://groups.google.com/d/msg/syzkaller/l3870gs3LhA/y79DYQdFBAAJ - https://usn.ubuntu.com/3617-2/ - https://usn.ubuntu.com/3619-1/
CVE ID: CVE-2017-16533 State: PUBLISHED Published: 2017-11-04T01:00:00 Last Updated: 2024-08-05T20:27:03.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: The usbhid_parse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - https://github.com/torvalds/linux/commit/f043bfc98c193c284e2cd768fefabe18ac2fed9b - https://usn.ubuntu.com/3754-1/ - http://www.securityfocus.com/bid/
nux/commit/f043bfc98c193c284e2cd768fefabe18ac2fed9b - https://usn.ubuntu.com/3754-1/ - http://www.securityfocus.com/bid/102026 - https://groups.google.com/d/msg/syzkaller/CxkJ9QZgwlM/O3IOvAaGAwAJ
CVE ID: CVE-2017-16534 State: PUBLISHED Published: 2017-11-04T01:00:00 Last Updated: 2024-08-05T20:27:04.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cdc_parse_cdc_header function in drivers/usb/core/message.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html - https://groups.google.com/d/msg/syzkaller/nXnjqI73uPo/6sUyq6kqAgAJ - https://github.com/torvalds/linux/commit/2e1c42391ff2556387b3cb6308b
ogle.com/d/msg/syzkaller/nXnjqI73uPo/6sUyq6kqAgAJ - https://github.com/torvalds/linux/commit/2e1c42391ff2556387b3cb6308b24f6f65619feb
CVE ID: CVE-2017-16535 State: PUBLISHED Published: 2017-11-04T01:00:00 Last Updated: 2024-08-05T20:27:03.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: The usb_get_bos_descriptor function in drivers/usb/core/config.c in the Linux kernel before 4.13.10 allows local users to cause a denial of service (out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102022 - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - https://groups.google.com/d/msg/syzkaller/tzdz2fTB1K0/OvjIgLSTAgAJ - https://usn.ubuntu.com/3754-1/ -
12/msg00004.html - https://groups.google.com/d/msg/syzkaller/tzdz2fTB1K0/OvjIgLSTAgAJ - https://usn.ubuntu.com/3754-1/ - https://github.com/torvalds/linux/commit/1c0edc3633b56000e18d82fc241e3995ca18a69e
CVE ID: CVE-2017-16536 State: PUBLISHED Published: 2017-11-04T01:00:00 Last Updated: 2024-08-05T20:27:03.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3619-2/ - https://lists.debian.org/debian-lts-announce/2017/12/msg00004.html - https://usn.ubuntu.com/3754-1/ - https://groups.google.com/d/msg/syzkaller/WlUAVfDvpRk/1V1xu
nce/2017/12/msg00004.html - https://usn.ubuntu.com/3754-1/ - https://groups.google.com/d/msg/syzkaller/WlUAVfDvpRk/1V1xuEA4AgAJ - https://patchwork.kernel.org/patch/9963527/ - https://usn.ubuntu.com/3619-1/