Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-6327 State: PUBLISHED Published: 2016-10-16T21:00:00 Last Updated: 2024-08-06T01:29:19.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/infiniband/ulp/srpt/ib_srpt.c in the Linux kernel before 4.5.1 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an ABORT_TASK command to abort a device write operation. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2584.html - http://rhn.redhat.com/errata/RHSA-2016-2574.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=51093254bf879bc9ce96590400a87897c7498463 - https://github.com/
l.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=51093254bf879bc9ce96590400a87897c7498463 - https://github.com/torvalds/linux/commit/51093254bf879bc9ce96590400a87897c7498463 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1 - http://www.securityfocus.com/bid/92549 - http://www.openwall.com/lists/oss-security/2016/08/19/5 - https://bugzilla.redhat.com/show_bug.cgi?id=1354525
CVE ID: CVE-2016-6328 State: PUBLISHED Published: 2018-10-31T21:00:00 Last Updated: 2024-08-06T01:29:19.973Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L) Vendors: [UNKNOWN] Products: libexif Problem Types: CWE-190 Description: A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications' private data). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-6328 - https://usn.ubuntu.com/4277-1/ - https://lists.debian.or
: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-6328 - https://usn.ubuntu.com/4277-1/ - https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html - https://security.gentoo.org/glsa/202007-05
CVE ID: CVE-2016-6329 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T01:29:18.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack. Additional Analyst Notes: - CVE Program Container: References: - https://sweet32.info/ - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403 - http://www.securitytracker.com/id/1036695 - http://www-01.ibm.com/support/docview.
b/docDisplay?docId=emr_na-c05369403 - http://www.securitytracker.com/id/1036695 - http://www-01.ibm.com/support/docview.wss?uid=swg21995039 - http://www-01.ibm.com/support/docview.wss?uid=swg21991482 - https://security.gentoo.org/glsa/201611-02 - https://community.openvpn.net/openvpn/wiki/SWEET32 - http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697 - http://www.securityfocus.com/bid/92631 - https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf
CVE ID: CVE-2016-6330 State: PUBLISHED Published: 2016-09-27T15:00:00 Last Updated: 2024-08-06T01:29:18.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured for JON server / agent communication, allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-3737. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2016-22 - https://bugzilla.redhat.com/show_bug.cgi?id=1368864 - http://www.securityfocus.com/
.com/security/research/tra-2016-22 - https://bugzilla.redhat.com/show_bug.cgi?id=1368864 - http://www.securityfocus.com/bid/92568
CVE ID: CVE-2016-6331 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-06T01:29:19.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: ApiParse in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to bypass intended per-title read restrictions via a parse action to api.php. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html - https://bugzilla.redhat.com/show_bug.cgi?id=1369613 - https://phabricator.wikimedia.org/T115333
CVE ID: CVE-2016-6332 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-06T01:29:19.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1, when $wgBlockDisablesLogin is true, might allow remote attackers to obtain sensitive information by leveraging failure to terminate sessions when a user account is blocked. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html - https://bugzilla.redhat.com/show_bug.cgi?id=1369613 - https://phabricator.wikimedia.org/T129738
CVE ID: CVE-2016-6333 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-06T01:29:19.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the CSS user subpage preview feature in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrary web script or HTML via the edit box in Special:MyPage/common.css. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html - https://bugzilla.redhat.com/show_bug.cgi?id=1369613 - https://phabricator.wikimedia.org/T133147 - http://www.security
- https://bugzilla.redhat.com/show_bug.cgi?id=1369613 - https://phabricator.wikimedia.org/T133147 - http://www.securityfocus.com/bid/98053
CVE ID: CVE-2016-6334 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-06T01:29:19.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Parser::replaceInternalLinks2 method in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving replacement of percent encoding in unclosed internal links. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98057 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html - https://bugzilla.redhat.com/show_bug.
https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html - https://bugzilla.redhat.com/show_bug.cgi?id=1369613 - https://phabricator.wikimedia.org/T137264
CVE ID: CVE-2016-6335 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-06T01:29:18.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 does not generate head items in the context of a given title, which allows remote attackers to obtain sensitive information via a parse action to api.php. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T139570 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html - https://bugzilla.redhat.com/show_bug.cgi?id=1369613 - https://phabricator.wikimedia.org/T139565
CVE ID: CVE-2016-6336 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-06T01:29:19.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote authenticated users with undelete permissions to bypass intended suppressrevision and deleterevision restrictions and remove the revision deletion status of arbitrary file revisions by using Special:Undelete. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html - https://bugzilla.redhat.com/show_bug.cgi?id=1369613 - https://phabricator.wikimedia.org/
ounce/2016-August/000195.html - https://bugzilla.redhat.com/show_bug.cgi?id=1369613 - https://phabricator.wikimedia.org/T132926
CVE ID: CVE-2016-6337 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-06T01:29:19.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access restrictions by leveraging a call to the UserGetRights function after Session::getAllowedUserRights. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T139670 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-August/000195.html
CVE ID: CVE-2016-6338 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-06T01:29:19.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for Servers and RHEV-M 4.0, allows physically proximate attackers to bypass a webadmin session timeout restriction via vectors related to UI selections, which trigger repeating queries. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92666 - https://access.redhat.com/errata/RHSA-2017:3427 - https://bugzilla.redhat.com/show_bug.cgi?id=1369285
CVE ID: CVE-2016-6339 State: REJECTED Published: 2016-08-29T17:00:00 Last Updated: 2016-08-29T17:57:01 Description: No description available.
CVE ID: CVE-2016-6340 State: PUBLISHED Published: 2016-09-22T15:00:00 Last Updated: 2024-08-06T01:29:19.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kickstart file in Red Hat QuickStart Cloud Installer (QCI) forces use of MD5 passwords on deployed systems, which makes it easier for attackers to determine cleartext passwords via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1370315 - http://www.securityfocus.com/bid/92655
CVE ID: CVE-2016-6341 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-06T01:29:20.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: oVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log files, which allows local users to obtain sensitive password information by reading engine log files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92665 - https://bugzilla.redhat.com/show_bug.cgi?id=1363816 - https://www.ovirt.org/release/4.0.3/ - https://bugzilla.redhat.com/show_bug.cgi?id=1369793
CVE ID: CVE-2016-6342 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-06T01:29:19.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: elog 3.1.1 allows remote attackers to post data as any username in the logbook. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N4ZQOPXSMJAJIXH5MRPQS2ZISYJPSLQK/ - https://bugzilla.redhat.com/show_bug.cgi?id=1371328
CVE ID: CVE-2016-6343 State: PUBLISHED Published: 2018-10-31T13:00:00 Last Updated: 2024-08-06T01:29:19.536Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: [UNKNOWN] Products: Dashbuilder Problem Types: CWE-79 Description: JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder (usually admins) to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of script code within the context of the affected user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus
context of the affected user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96987 - http://rhn.redhat.com/errata/RHSA-2017-0557.html - https://access.redhat.com/errata/RHSA-2018:0296 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-6343
CVE ID: CVE-2016-6344 State: PUBLISHED Published: 2016-09-07T18:00:00 Last Updated: 2024-08-06T01:29:19.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1371807 - http://rhn.redhat.com/errata/RHSA-2017-0248.html - http://rhn.redhat.com/errata/RHSA-2017-0249.html - http://www.securityfocus.com/bid/92714
CVE ID: CVE-2016-6345 State: PUBLISHED Published: 2016-09-07T18:00:00 Last Updated: 2024-08-06T01:29:19.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1372117 - http://www.securityfocus.com/bid/92746
CVE ID: CVE-2016-6346 State: PUBLISHED Published: 2016-09-07T18:00:00 Last Updated: 2024-08-06T01:29:19.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0828.html - http://rhn.redhat.com/errata/RHSA-2017-0827.html - https://access.redhat.com/errata/RHSA-2018:2143 - https://access.redhat.com/errata/RHSA-2017:1675 - https://access.redhat.com/errata/RHSA-2018:0002 - http://www.securityfocus.com/bid/92744 - http://rhn.redhat.com/errata/RHSA-2017-0517.html - https
rrata/RHSA-2018:0002 - http://www.securityfocus.com/bid/92744 - http://rhn.redhat.com/errata/RHSA-2017-0517.html - https://access.redhat.com/errata/RHSA-2018:0004 - http://rhn.redhat.com/errata/RHSA-2017-0826.html - https://access.redhat.com/errata/RHSA-2018:0003 - http://rhn.redhat.com/errata/RHSA-2017-0829.html - https://bugzilla.redhat.com/show_bug.cgi?id=1372120 - https://access.redhat.com/errata/RHSA-2018:0005 - https://access.redhat.com/errata/RHSA-2017:1676 - https://access.redhat.com/errata/RHSA-2019:1222
CVE ID: CVE-2016-6347 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-06T01:29:19.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92759 - https://bugzilla.redhat.com/show_bug.cgi?id=1372124
CVE ID: CVE-2016-6348 State: PUBLISHED Published: 2017-04-12T22:00:00 Last Updated: 2024-08-06T01:29:19.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1372129
CVE ID: CVE-2016-6349 State: PUBLISHED Published: 2017-03-29T20:00:00 Last Updated: 2024-08-06T01:29:19.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/26/9 - https://bugzilla.redhat.com/show_bug.cgi?id=1360634 - http://www.openwall.com/lists/oss-security/2016/10/13/7 - https://github.com/projectatomic/oci-register-machine/pull/22 - http://www.securityfocus.com/bid/92143
CVE ID: CVE-2016-6350 State: PUBLISHED Published: 2017-03-07T16:00:00 Last Updated: 2024-08-06T01:29:19.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (NULL pointer dereference and panic) via a sysctl call with a path starting with 10,9. Additional Analyst Notes: - CVE Program Container: References: - http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/kern/vfs_subr.c.diff?r1=1.248&r2=1.249 - http://www.openwall.com/lists/oss-security/2016/07/26/6 - http://www.openwall.com/lists/oss-security/2016/07/26/8 - http://www.securityfocus.com/bid/92140 - http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/tmpfs/tmpfs_vfso
016/07/26/8 - http://www.securityfocus.com/bid/92140 - http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/tmpfs/tmpfs_vfsops.c.diff?r1=1.9&r2=1.10
CVE ID: CVE-2016-6351 State: PUBLISHED Published: 2016-09-07T18:00:00 Last Updated: 2024-08-06T01:29:19.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: The esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP/NCR53C9x controller emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or execute arbitrary code on the QEMU host via vectors involving DMA read into ESP command buffer. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3047-1 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=cc96677469388bad3d66479379735cf75db069e3
www.ubuntu.com/usn/USN-3047-1 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=cc96677469388bad3d66479379735cf75db069e3 - http://www.ubuntu.com/usn/USN-3047-2 - http://www.openwall.com/lists/oss-security/2016/07/25/14 - http://www.openwall.com/lists/oss-security/2016/07/26/7 - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=926cde5f3e4d2504ed161ed0cb771ac7cad6fd11 - http://www.securityfocus.com/bid/92119 - https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
CVE ID: CVE-2016-6352 State: PUBLISHED Published: 2016-10-03T18:00:00 Last Updated: 2024-08-06T01:29:19.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an ICO file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/26/11 - https://git.gnome.org/browse/gdk-pixbuf/tree/NEWS?id=640134c46221689d263369872937192e4484c83b - http://www.ubuntu.com/usn/USN-3085-1 - http://www.openwall.com/lists/oss-security/2016/07/13/11 - https://git.gnome.org/brows
//www.ubuntu.com/usn/USN-3085-1 - http://www.openwall.com/lists/oss-security/2016/07/13/11 - https://git.gnome.org/browse/gdk-pixbuf/commit/?id=88af50a864195da1a4f7bda5f02539704fbda599 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00040.html - https://bugzilla.gnome.org/show_bug.cgi?id=769170 - https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html
CVE ID: CVE-2016-6353 State: PUBLISHED Published: 2019-11-26T13:48:22 Last Updated: 2024-08-06T01:29:19.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level security via the RealTimeGetHandler. Additional Analyst Notes: - CVE Program Container: References: - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_165
CVE ID: CVE-2016-6354 State: PUBLISHED Published: 2016-09-21T14:00:00 Last Updated: 2024-08-06T01:29:19.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/07/18/8 - http://www.openwall.com/lists/oss-security/2016/07/26/12 - https://github.com/westes/flex/commit/a5cbe929ac3255d371e698f62dc256afe7006466 - http://www.debian.org/security/2016/dsa-3653 -
github.com/westes/flex/commit/a5cbe929ac3255d371e698f62dc256afe7006466 - http://www.debian.org/security/2016/dsa-3653 - https://security.gentoo.org/glsa/201701-31
CVE ID: CVE-2016-6355 State: PUBLISHED Published: 2016-08-23T01:00:00 Last Updated: 2024-08-06T01:29:19.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service (control-plane protocol outage) via crafted fragmented packets, aka Bug ID CSCux26791. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036585 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160810-iosxr - http://www.securityfocus.com/bid/92399
CVE ID: CVE-2016-6356 State: PUBLISHED Published: 2016-10-28T10:00:00 Last Updated: 2024-08-06T01:29:19.250Z Vendors: n/a Products: Cisco AsyncOS through 9.7.0-125 Problem Types: unspecified Description: A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to cause an affected device to stop scanning and forwarding email messages due to a denial of service (DoS) condition. Affected Products: This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is
of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter or content filter to incoming email attachments. The vulnerability is not limited to any specific rules or actions for a message filter or content filter. More Information: CSCuz63143. Known Affected Releases: 8.5.7-042 9.7.0-125. Known Fixed Releases: 10.0.0-125 9.1.1-038 9.7.2-047. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037122 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esa3 - http://www.securityfocus.com/bid/93907
CVE ID: CVE-2016-6357 State: PUBLISHED Published: 2016-10-28T10:00:00 Last Updated: 2024-08-06T01:29:19.255Z Vendors: n/a Products: Cisco AsyncOS through 9.9.6-026 Problem Types: unspecified Description: A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass a configured drop filter by using an email with a corrupted attachment. More Information: CSCuz01651. Known Affected Releases: 10.0.9-015 9.7.1-066 9.9.6-026. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/c
st Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esa5 - http://www.securityfocus.com/bid/93909 - http://www.securitytracker.com/id/1037114