Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-2780 State: PUBLISHED Published: 2017-10-16T18:00:00 Last Updated: 2024-08-06T05:24:38.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2015/Mar/155 - https://www.exploit-db.com/exploits/36520/ - http://www.openwall.com/lists/oss-security/2015/03/28/4
CVE ID: CVE-2015-2781 State: PUBLISHED Published: 2015-04-14T14:00:00 Last Updated: 2024-08-06T05:24:38.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi-bin/hotspotlogin.cgi in Hotspot Express hotEx Billing Manager 73 allows remote attackers to inject arbitrary web script or HTML via the reply parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73941 - http://packetstormsecurity.com/files/131297/HotExBilling-Manager-73-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/535186/100/0/threaded - http://seclists.org/fulldisclosure/2015/Apr/18
CVE ID: CVE-2015-2782 State: PUBLISHED Published: 2015-04-08T18:00:00 Last Updated: 2024-08-06T05:24:38.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ARJ archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/03/28/5 - http://www.openwall.com/lists/oss-security/2015/03/29/1 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:201 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154605.html - https://security.gentoo.org
015:201 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154605.html - https://security.gentoo.org/glsa/201612-15 - http://www.securityfocus.com/bid/73413 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155011.html - http://www.debian.org/security/2015/dsa-3213 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154518.html
CVE ID: CVE-2015-2783 State: PUBLISHED Published: 2015-06-09T18:00:00 Last Updated: 2024-08-06T05:24:38.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read and application crash) via a crafted length value in conjunction with crafted serialized data in a phar archive, related to the phar_parse_metadata and phar_parse_pharfile functions. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1187.html - http://rhn.redhat.com/errata
: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1187.html - http://rhn.redhat.com/errata/RHSA-2015-1186.html - http://www.securityfocus.com/bid/74239 - http://www.securitytracker.com/id/1032146 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - http://php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html - https://bugs.php.net/bug.php?id=69324 - https://support.apple.com/HT
/opensuse-security-announce/2015-05/msg00005.html - https://bugs.php.net/bug.php?id=69324 - https://support.apple.com/HT205267 - http://www.debian.org/security/2015/dsa-3280 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.ubuntu.com/usn/USN-2572-1 - http://rhn.redhat.com/errata/RHSA-2015-1135.html - https://support.apple.com/kb/HT205031 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html - http://marc.info/?l=bugtraq&m=143403519711434&w=2 - https://security.gentoo.org/glsa/201606-10 - http://rhn.redhat.com/errata/RHSA-2015-1066.html - http://rhn.redhat.com/errata/RHSA-2015-1218.html
CVE ID: CVE-2015-2784 State: PUBLISHED Published: 2020-01-21T17:41:01 Last Updated: 2024-08-06T05:24:38.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rsantamaria/papercrop/commit/b4ecd95debaf0a8712bd1d34def83f41fc6b3579 - https://github.com/rsantamaria/papercrop/blob/master/CHANGELOG.md
CVE ID: CVE-2015-2785 State: PUBLISHED Published: 2015-03-29T21:00:00 Last Updated: 2024-08-06T05:24:38.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GIF encoder in Byzanz allows remote attackers to cause a denial of service (out-of-bounds heap write and crash) or possibly execute arbitrary code via a crafted Byzanz debug data recording (ByzanzRecording file) to the byzanz-playback command. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778261 - http://www.openwall.com/lists/oss-security/2015/02/06/11 - https://bugzilla.redhat.com/show_bug.cgi?id=852481
CVE ID: CVE-2015-2786 State: PUBLISHED Published: 2015-03-29T21:00:00 Last Updated: 2024-08-06T05:24:38.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in MyBB (aka MyBulletinBoard) before 1.8.4 has unknown attack vectors related to "Group join request notifications sent to wrong group leaders." Additional Analyst Notes: - CVE Program Container: References: - http://blog.mybb.com/2015/02/15/mybb-1-8-4-released-feature-update-security-maintenance-release/ - http://www.securityfocus.com/bid/73394
CVE ID: CVE-2015-2787 State: PUBLISHED Published: 2015-03-30T10:00:00 Last Updated: 2024-08-06T05:24:38.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages use of the unset function within an __wakeup function, a related issue to CVE-2015-0231. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/smalyshev/eea9eafc7c88a4a6d10d - http://www.securitytracker.com/id/1032485 - http://www.sec
s: - https://gist.github.com/smalyshev/eea9eafc7c88a4a6d10d - http://www.securitytracker.com/id/1032485 - http://www.securityfocus.com/bid/73431 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html - https://support.apple.com/HT205267 - http://lists.apple.com/archives/security-announce/2015/Aug/m
015-05/msg00005.html - https://support.apple.com/HT205267 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.ubuntu.com/usn/USN-2572-1 - http://rhn.redhat.com/errata/RHSA-2015-1135.html - https://support.apple.com/kb/HT205031 - https://bugs.php.net/bug.php?id=68976 - http://rhn.redhat.com/errata/RHSA-2015-1053.html - http://lists.opensuse.org/opensuse-updates/2015-04/msg00015.html - https://security.gentoo.org/glsa/201606-10 - http://rhn.redhat.com/errata/RHSA-2015-1066.html - http://rhn.redhat.com/errata/RHSA-2015-1218.html
CVE ID: CVE-2015-2788 State: PUBLISHED Published: 2015-04-14T18:00:00 Last Updated: 2024-08-06T05:24:38.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that trigger an error condition, related to binding octets to columns. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73409 - http://www.debian.org/security/2015/dsa-3219 - http://www.openwall.com/lists/oss-security/2015/03/30/10 - http://www.openwall.com/lists/oss-security/2015/03/30/4 - https://meta
w.openwall.com/lists/oss-security/2015/03/30/10 - http://www.openwall.com/lists/oss-security/2015/03/30/4 - https://metacpan.org/source/DAM/DBD-Firebird-1.19/Changes - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780925
CVE ID: CVE-2015-2789 State: PUBLISHED Published: 2015-03-30T14:00:00 Last Updated: 2024-08-06T05:24:38.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in the Foxit Cloud Safe Update Service in the Cloud plugin in Foxit Reader 6.1 through 7.0.6.1126 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73432 - http://packetstormsecurity.com/files/130840/Foxit-Reader-7.0.6.1126-Privilege-Escalation.html - http://www.securitytracker.com/id/1031879 - http://www.foxitsoftware.com/support/security_bulle
vilege-Escalation.html - http://www.securitytracker.com/id/1031879 - http://www.foxitsoftware.com/support/security_bulletins.php#FRD-25 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5235.php - http://www.exploit-db.com/exploits/36390
CVE ID: CVE-2015-2790 State: PUBLISHED Published: 2015-03-30T14:00:00 Last Updated: 2024-08-06T05:24:38.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash) via a crafted (1) Ubyte Size in a DataSubBlock structure or (2) LZWMinimumCodeSize in a GIF image. Additional Analyst Notes: - CVE Program Container: References: - http://protekresearchlab.com/prl-2015-01prl-foxit-products-gif-conversion-memory-corruption-vulnerabilities-lzwminimumcodesize/ - http://securitytracker.com/id/1031878 - http://www.securityfocus.com/bid/73430 - http://www.osvdb
-lzwminimumcodesize/ - http://securitytracker.com/id/1031878 - http://www.securityfocus.com/bid/73430 - http://www.osvdb.org/119303 - http://www.foxitsoftware.com/support/security_bulletins.php#FRD-23 - http://www.securitytracker.com/id/1031877 - http://www.osvdb.org/119302 - http://www.foxitsoftware.com/support/security_bulletins.php#FRD-24 - http://www.exploit-db.com/exploits/36334 - http://www.exploit-db.com/exploits/36335 - http://protekresearchlab.com/PRL-2015-02/
CVE ID: CVE-2015-2791 State: PUBLISHED Published: 2015-03-30T14:00:00 Last Updated: 2024-08-06T05:24:38.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "menu sync" function in the WPML plugin before 3.1.9 for WordPress allows remote attackers to delete arbitrary posts, pages, and menus via a crafted request to sitepress-multilingual-cms/menu/menus-sync.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpml.org/2015/03/wpml-security-update-bug-and-fix/ - http://klikki.fi/adv/wpml.html - http://seclists.org/fulldisclosure/2015/Mar/71 - http://www.securityfocus.com/archive/1/534862/100/0/threaded - http://packetstormsecurity.com/files/130810/WordP
ar/71 - http://www.securityfocus.com/archive/1/534862/100/0/threaded - http://packetstormsecurity.com/files/130810/WordPress-WPML-XSS-Deletion-SQL-Injection.html
CVE ID: CVE-2015-2792 State: PUBLISHED Published: 2015-03-30T14:00:00Z Last Updated: 2024-09-17T00:20:32.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WPML plugin before 3.1.9 for WordPress does not properly handle multiple actions in a request, which allows remote attackers to bypass nonce checks and perform arbitrary actions via a request containing an action POST parameter, an action GET parameter, and a valid nonce for the action GET parameter. Additional Analyst Notes: - CVE Program Container: References: - http://klikki.fi/adv/wpml.html - http://wpml.org/2015/03/wpml-security-update-bug-and-fix/ - http://seclists.org/fulldisclosure/2015/Mar/79 - http://packetstorm
wpml.org/2015/03/wpml-security-update-bug-and-fix/ - http://seclists.org/fulldisclosure/2015/Mar/79 - http://packetstormsecurity.com/files/130839/WordPress-WPML-Missing-Authentication.html
CVE ID: CVE-2015-2793 State: PUBLISHED Published: 2019-11-21T19:48:14 Last Updated: 2024-08-06T05:24:39.090Z Vendors: ikiwiki Products: ikiwiki Problem Types: Cross-Site Scripting Description: Cross-site scripting (XSS) vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject arbitrary web script or HTML via the openid_identifier parameter in a verify action to ikiwiki.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157025.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157001.html - http://lists.fedoraproject.org/pipermail/p
p://lists.fedoraproject.org/pipermail/package-announce/2015-May/157001.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157023.html - https://ikiwiki.info/bugs/XSS_Alert...__33____33____33__/ - https://bugzilla.redhat.com/show_bug.cgi?id=1207210 - http://source.ikiwiki.branchable.com/?p=source.git%3Ba=commitdiff%3Bh=18dfba868fe2fb9c64706b2123eb0b3a3ce66a77 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781483 - http://openwall.com/lists/oss-security/2015/03/30/5 - http://openwall.com/lists/oss-security/2015/03/31/1
CVE ID: CVE-2015-2794 State: PUBLISHED Published: 2017-02-06T15:00:00 Last Updated: 2024-08-06T05:24:38.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx. Additional Analyst Notes: - CVE Program Container: References: - http://www.dnnsoftware.com/community/security/security-center - https://dotnetnuke.codeplex.com/releases/view/615317 - https://www.exploit-db.com/exploits/39777/ - http://www.securityfocus.com/bid/96373 - http://www.dnnsoftware.com/community-blog/cid/155198/workaround-for-potent
7/ - http://www.securityfocus.com/bid/96373 - http://www.dnnsoftware.com/community-blog/cid/155198/workaround-for-potential-security-issue
CVE ID: CVE-2015-2796 State: PUBLISHED Published: 2018-02-02T21:00:00 Last Updated: 2024-08-06T05:24:38.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Project-Pier ProjectPier-Core allow remote attackers to inject arbitrary web script or HTML via the search_for parameter to (1) search_by_tag.php, (2) search_contacts.php, or (3) search.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Project-Pier/ProjectPier-Core/commit/74ecbd4e939a65ba643a4af05fbdb1bb66992435 - https://github.com/Project-Pier/ProjectPier-Core/issues/37
CVE ID: CVE-2015-2797 State: PUBLISHED Published: 2015-06-19T14:00:00 Last Updated: 2024-08-06T05:24:38.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75355 - https://www.exploit-db.com/exploits/37170/ - http://www.bmicrosystems.com/blog/exploiting-the-airties-air-series/ - https://www.exploit-db.com/expl
exploits/37170/ - http://www.bmicrosystems.com/blog/exploiting-the-airties-air-series/ - https://www.exploit-db.com/exploits/36577/ - http://osvdb.org/show/osvdb/120335
CVE ID: CVE-2015-2798 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-06T05:24:38.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73903 - https://www.exploit-db.com/exploits/36561/
CVE ID: CVE-2015-2800 State: PUBLISHED Published: 2017-06-08T16:00:00 Last Updated: 2024-08-06T05:24:38.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH012 and S7700, S9300, and S9700 with software before V200R001SPH015 allows remote attackers to cause a denial of service (device restart) via vectors involving authentication, which trigger an array access violation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73355 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-418554.
.securityfocus.com/bid/73355 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-418554.htm
CVE ID: CVE-2015-2802 State: PUBLISHED Published: 2020-02-04T20:09:48 Last Updated: 2024-08-06T05:24:38.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem Chargeback 9.40, which could let a remote malicious user obtain sensitive information. This is the TLS vulnerability known as the RC4 cipher Bar Mitzvah vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/75258 - http://marc.info/?l=bugtraq&m=143455780010289&w=2 - http://
iner: References: - http://www.securityfocus.com/bid/75258 - http://marc.info/?l=bugtraq&m=143455780010289&w=2 - http://marc.info/?l=bugtraq&m=143629738517220&w=2 - https://packetstormsecurity.com/files/cve/CVE-2015-2802 - https://securitytracker.com/id/1032599
CVE ID: CVE-2015-2803 State: PUBLISHED Published: 2015-06-17T18:00:00 Last Updated: 2024-08-06T05:24:38.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mod1/index.php in the Akronymmanager (sb_akronymmanager) extension before 7.0.0 for TYPO3 allows remote authenticated users with permission to maintain acronyms to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://typo3.org/extensions/repository/view/sb_akronymmanager - http://packetstormsecurity.com/files/132302/TYPO3-Extension-Akronymmanager-0.5.0-SQL-Injection.html - http://seclists.org/fulldisclosure/2015/Jun/43 - http
s/132302/TYPO3-Extension-Akronymmanager-0.5.0-SQL-Injection.html - http://seclists.org/fulldisclosure/2015/Jun/43 - http://www.securityfocus.com/bid/75191 - http://www.securityfocus.com/archive/1/535765/100/0/threaded - https://www.exploit-db.com/exploits/37301/ - https://www.redteam-pentesting.de/advisories/rt-sa-2015-002
CVE ID: CVE-2015-2804 State: PUBLISHED Published: 2015-06-16T16:00:00 Last Updated: 2024-08-06T05:24:38.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, and 6855 with firmware before 6.6.4.309.R01 and 6.6.5.x before 6.6.5.80.R02 generates weak session identifiers, which allows remote attackers to hijack arbitrary sessions via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.redteam-pentesting.de/en/advisories/rt-sa-2015-003/-alcatel-lucent-omniswitch-web-interface-weak-session-id - http://seclists.org/fulldisclosure/2015/Jun/22 - http://ww
03/-alcatel-lucent-omniswitch-web-interface-weak-session-id - http://seclists.org/fulldisclosure/2015/Jun/22 - http://www.securityfocus.com/archive/1/535731/100/0/threaded - http://packetstormsecurity.com/files/132235/Alcatel-Lucent-OmniSwitch-Web-Interface-Weak-Session-ID.html - http://www.securityfocus.com/bid/75125
CVE ID: CVE-2015-2805 State: PUBLISHED Published: 2015-06-16T16:00:00 Last Updated: 2024-08-06T05:24:38.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in sec/content/sec_asa_users_local_db_add.html in the management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, 6855, 6900, 10K, and 6860 with firmware 6.4.5.R02, 6.4.6.R01, 6.6.4.R01, 6.6.5.R02, 7.3.2.R01, 7.3.3.R01, 7.3.4.R01, and 8.1.1.R01 allows remote attackers to hijack the authentication of administrators for requests that create users via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocu
te users via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/535732/100/0/threaded - https://www.redteam-pentesting.de/advisories/rt-sa-2015-004 - http://www.securitytracker.com/id/1032544 - http://seclists.org/fulldisclosure/2015/Jun/23 - http://www.securityfocus.com/bid/75121 - https://www.exploit-db.com/exploits/37261/ - http://packetstormsecurity.com/files/132236/Alcatel-Lucent-OmniSwitch-Web-Interface-Cross-Site-Request-Forgery.html
CVE ID: CVE-2015-2806 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T05:24:39.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2015:193 - https://security.gentoo.org/glsa/201509-04 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155270.html - http://www.ubuntu.com/usn/USN-2559-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155117.html - http://
w.ubuntu.com/usn/USN-2559-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155117.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155435.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155483.html - http://www.openwall.com/lists/oss-security/2015/03/31/2 - http://www.securitytracker.com/id/1032080 - http://www.securityfocus.com/bid/73436 - https://access.redhat.com/errata/RHSA-2017:1860 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154805.html - http://www.debian.org/security/2015/dsa-3220 - http://lists.fedo
org/pipermail/package-announce/2015-April/154805.html - http://www.debian.org/security/2015/dsa-3220 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154741.html - http://www.openwall.com/lists/oss-security/2015/03/29/4 - http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=4d4f992826a4962790ecd0cce6fbba4a415ce149