Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-7533 State: PUBLISHED Published: 2018-03-14T18:00:00 Last Updated: 2024-08-05T06:31:04.387Z Vendors: n/a Products: OSIsoft PI Data Archive Problem Types: CWE-276 Description: An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system. Additional Analyst Notes: - CVE Program Container: References: - https://ics-cert.us-cert.gov/advisories/ICSA-18-072-02 - http://www.securityfocus.com/bid/103399
CVE ID: CVE-2018-7534 State: PUBLISHED Published: 2018-05-30T21:00:00 Last Updated: 2024-08-05T06:31:04.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Stealth Authorization Server before 3.3.017.0 in Unisys Stealth Solution, an encryption key may be left in memory. Additional Analyst Notes: - CVE Program Container: References: - http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=47
CVE ID: CVE-2018-7535 State: PUBLISHED Published: 2018-07-13T17:00:00 Last Updated: 2024-08-05T06:31:04.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TotalAV v4.1.7. An unprivileged user could modify or overwrite all of the product's files because of weak permissions (Everyone:F) under %PROGRAMFILES%, which allows local users to gain privileges or obtain maximum control over the product. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jul/54
CVE ID: CVE-2018-7536 State: PUBLISHED Published: 2018-03-09T00:00:00 Last Updated: 2024-08-05T06:31:04.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. The django.utils.html.urlize() function was extremely slow to evaluate certain inputs due to catastrophic backtracking vulnerabilities in two regular expressions (only one regular expression for Django 1.8.x). The urlize() function is used to implement the urlize and urlizetrunc template filters, which were thus vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3591-1/ - https://acce
lnerable. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3591-1/ - https://access.redhat.com/errata/RHSA-2019:0051 - https://lists.debian.org/debian-lts-announce/2018/03/msg00006.html - http://www.securityfocus.com/bid/103361 - https://www.djangoproject.com/weblog/2018/mar/06/security-releases/ - https://access.redhat.com/errata/RHSA-2019:0082 - https://access.redhat.com/errata/RHSA-2018:2927 - https://access.redhat.com/errata/RHSA-2019:0265 - https://www.debian.org/security/2018/dsa-4161 - https://github.com/django/django/commit/1ca63a66ef3163149ad822701273e8a1844192c2 - https://github.com/django/django/commit/abf89d729f210c692a50e0ad3f75fb6bec6fae16
63a66ef3163149ad822701273e8a1844192c2 - https://github.com/django/django/commit/abf89d729f210c692a50e0ad3f75fb6bec6fae16 - https://github.com/django/django/commit/e157315da3ae7005fa0683ffc9751dbeca7306c8
CVE ID: CVE-2018-7537 State: PUBLISHED Published: 2018-03-09T20:00:00 Last Updated: 2024-08-05T06:31:04.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars() and words() methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a regular expression. The chars() and words() methods are used to implement the truncatechars_html and truncatewords_html template filters, which were thus vulnerable. Additional Analyst Notes: - CVE Program Container: References: - ht
s_html template filters, which were thus vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3591-1/ - https://lists.debian.org/debian-lts-announce/2018/03/msg00006.html - https://www.djangoproject.com/weblog/2018/mar/06/security-releases/ - https://access.redhat.com/errata/RHSA-2018:2927 - http://www.securityfocus.com/bid/103357 - https://access.redhat.com/errata/RHSA-2019:0265 - https://www.debian.org/security/2018/dsa-4161
CVE ID: CVE-2018-7538 State: PUBLISHED Published: 2018-03-12T21:00:00 Last Updated: 2024-08-05T06:31:04.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering platform before 9.18 allows attackers to execute arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Mar/20 - https://tuleap.net/plugins/tracker/?aid=11192 - https://github.com/cmaruti/reports/blob/master/tuleap.pdf - https://www.exploit-db.com/exploits/44286/
CVE ID: CVE-2018-7539 State: PUBLISHED Published: 2018-04-17T20:00:00 Last Updated: 2024-08-05T06:31:04.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Appear TV XC5000 and XC5100 devices with firmware 3.26.217, it is possible to read OS files with a specially crafted HTTP request (such as GET /../../../../../../../../../../../../etc/passwd) to the web server (fuzzd/0.1.1) running the Maintenance Center on port TCP/8088. This can lead to full compromise of the device. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Apr/34
CVE ID: CVE-2018-7540 State: PUBLISHED Published: 2018-02-27T19:00:00 Last Updated: 2024-08-05T06:31:04.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (host OS CPU hang) via non-preemptable L3/L4 pagetable freeing. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-252.html - https://security.gentoo.org/glsa/201810-06 - http://www.securitytracker.com/id/1040773 - https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html - https://lists.debian.org/debian-lts-announce/2018/03/msg00003.html - http://www.securityfoc
unce/2018/11/msg00013.html - https://lists.debian.org/debian-lts-announce/2018/03/msg00003.html - http://www.securityfocus.com/bid/103174 - https://www.debian.org/security/2018/dsa-4131 - https://support.citrix.com/article/CTX232655 - https://support.citrix.com/article/CTX232096
CVE ID: CVE-2018-7541 State: PUBLISHED Published: 2018-02-27T19:00:00 Last Updated: 2024-08-05T06:31:04.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.10.x allowing guest OS users to cause a denial of service (hypervisor crash) or gain privileges by triggering a grant-table transition from v2 to v1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103177 - https://security.gentoo.org/glsa/201810-06 - https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html - https://xenbits.xen.org/xsa/advisory-255.html - https://lists.debian.org/debian-lts-announce/2018/03/msg00003.html - htt
https://xenbits.xen.org/xsa/advisory-255.html - https://lists.debian.org/debian-lts-announce/2018/03/msg00003.html - http://www.securitytracker.com/id/1040775 - https://www.debian.org/security/2018/dsa-4131 - https://support.citrix.com/article/CTX232655 - https://support.citrix.com/article/CTX232096
CVE ID: CVE-2018-7542 State: PUBLISHED Published: 2018-02-27T19:00:00 Last Updated: 2024-08-05T06:31:04.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen 4.8.x through 4.10.x allowing x86 PVH guest OS users to cause a denial of service (NULL pointer dereference and hypervisor crash) by leveraging the mishandling of configurations that lack a Local APIC. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-256.html - https://security.gentoo.org/glsa/201810-06 - http://www.securitytracker.com/id/1040776 - https://www.debian.org/security/2018/dsa-4131
CVE ID: CVE-2018-7543 State: PUBLISHED Published: 2018-03-26T18:00:00 Last Updated: 2024-08-05T06:31:04.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the json parameter. Additional Analyst Notes: - CVE Program Container: References: - https://snapcreek.com/duplicator/docs/changelog/?lite - https://www.exploit-db.com/exploits/44288/
CVE ID: CVE-2018-7544 State: PUBLISHED Published: 2018-03-16T15:00:00 Last Updated: 2024-11-14T20:46:28.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-protocol scripting issue was discovered in the management interface in OpenVPN through 2.4.5. When this interface is enabled over TCP without a password, and when no other clients are connected to this interface, attackers can execute arbitrary management commands, obtain sensitive information, or cause a denial of service (SIGTERM) by triggering XMLHttpRequest actions in a web browser. This is demonstrated by a multipart/form-data POST to http://localhost:23000 with a "signal SIGTERM" command in a TEXTAREA element. NO
trated by a multipart/form-data POST to http://localhost:23000 with a "signal SIGTERM" command in a TEXTAREA element. NOTE: The vendor disputes that this is a vulnerability. They state that this is the result of improper configuration of the OpenVPN instance rather than an intrinsic vulnerability, and now more explicitly warn against such configurations in both the management-interface documentation, and with a runtime warning Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://blog.0xlabs.com/2018/03/openvpn-remote-information-disclosure.html
CVE ID: CVE-2018-7546 State: PUBLISHED Published: 2018-07-18T16:00:00 Last Updated: 2024-08-05T06:31:04.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of service via a crafted pdf file. Additional Analyst Notes: - CVE Program Container: References: - http://www.cnvd.org.cn/flaw/show/CNVD-2018-04657
CVE ID: CVE-2018-7547 State: PUBLISHED Published: 2018-02-27T21:00:00Z Last Updated: 2024-09-16T16:17:31.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: lyadmin 1.x has XSS via the config[WEB_SITE_TITLE] parameter to the /admin.php?s=/admin/config/groupsave.html URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/imsebao/404team/blob/master/lyadmin/lyadmin.md
CVE ID: CVE-2018-7548 State: PUBLISHED Published: 2018-02-27T22:00:00 Last Updated: 2024-08-05T06:31:04.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using ${(PA)...} on an empty array result. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3593-1/ - https://security.gentoo.org/glsa/201805-10 - https://sourceforge.net/p/zsh/code/ci/110b13e1090bc31ac1352b28adc2d02b6d25a102
CVE ID: CVE-2018-7549 State: PUBLISHED Published: 2018-02-27T22:00:00 Last Updated: 2024-08-05T06:31:04.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3593-1/ - https://security.gentoo.org/glsa/201805-10 - https://sourceforge.net/p/zsh/code/ci/c2cc8b0fbefc9868fa83537f5b6d90fc1ec438dd - https://access.redhat.com/errata/RHSA-2018:3073
CVE ID: CVE-2018-7550 State: PUBLISHED Published: 2018-03-01T00:00:00 Last Updated: 2024-08-05T06:31:04.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value greater than mh_bss_end_addr, which triggers an out-of-bounds read or write memory access. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:1369 - https://lists.gnu.org/archive/html/qemu-devel/2018-02/msg06890.html - https://lists.debian.org/debian-lts-announce/2018/04/msg00016.html - https:/
ive/html/qemu-devel/2018-02/msg06890.html - https://lists.debian.org/debian-lts-announce/2018/04/msg00016.html - https://usn.ubuntu.com/3649-1/ - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://www.debian.org/security/2018/dsa-4213 - https://lists.debian.org/debian-lts-announce/2018/04/msg00015.html - http://www.securityfocus.com/bid/103181 - https://bugzilla.redhat.com/show_bug.cgi?id=1549798 - https://access.redhat.com/errata/RHSA-2018:2462 - https://github.com/orangecertcc/security-research/security/advisories/GHSA-f49v-45qp-cv53
CVE ID: CVE-2018-7551 State: PUBLISHED Published: 2018-02-28T06:00:00 Last Updated: 2024-08-05T06:31:04.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891527 - https://lists.debian.org/debian-lts-announce/2018/04/msg00004.html - https://github.com/pts/sam2p/issues/28
CVE ID: CVE-2018-7552 State: PUBLISHED Published: 2018-02-28T06:00:00 Last Updated: 2024-08-05T06:31:04.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pts/sam2p/issues/30 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891527 - https://lists.debian.org/debian-lts-announce/2018/04/msg00004.html
CVE ID: CVE-2018-7553 State: PUBLISHED Published: 2018-02-28T06:00:00 Last Updated: 2024-08-05T06:31:04.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a heap-based buffer overflow in the pcxLoadRaster function of in_pcx.cpp in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pts/sam2p/issues/32 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891527 - https://lists.debian.org/debian-lts-announce/2018/04/msg00004.html
CVE ID: CVE-2018-7554 State: PUBLISHED Published: 2018-02-28T06:00:00 Last Updated: 2024-08-05T06:31:04.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pts/sam2p/issues/29 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891527 - https://lists.debian.org/debian-lts-announce/2018/04/msg00004.html
CVE ID: CVE-2018-7556 State: PUBLISHED Published: 2018-02-28T07:00:00 Last Updated: 2024-08-05T06:31:04.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: LimeSurvey 2.6.x before 2.6.7, 2.7x.x before 2.73.1, and 3.x before 3.4.2 mishandles application/controller/InstallerController.php after installation, which allows remote attackers to access the configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://www.limesurvey.org/about-us/news/2075-limesurvey-security-advisory-02-2018
CVE ID: CVE-2018-7557 State: PUBLISHED Published: 2018-02-28T07:00:00 Last Updated: 2024-08-05T06:31:04.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_init function in libavcodec/utvideodec.c in FFmpeg 2.8 through 3.4.2 allows remote attackers to cause a denial of service (Out of array read) via an AVI file with crafted dimensions within chroma subsampling data. Additional Analyst Notes: - CVE Program Container: References: - https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/7414d0bda7763f9bd69c26c068e482ab297c1c96 - https://www.debian.org/security/2018/dsa-4249 - https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html - https://security.gentoo.org/glsa/2
/2018/dsa-4249 - https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html - https://security.gentoo.org/glsa/202003-65 - https://github.com/FFmpeg/FFmpeg/commit/e724bd1dd9efea3abb8586d6644ec07694afceae
CVE ID: CVE-2018-7559 State: PUBLISHED Published: 2018-06-13T18:00:00 Last Updated: 2024-08-05T06:31:04.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending carefully constructed bad UserIdentityTokens as part of an oracle attack. Additional Analyst Notes: - CVE Program Container: References: - https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulleti
tainer: References: - https://opcfoundation-onlineapplications.org/faq/SecurityBulletins/OPC_Foundation_Security_Bulletin_CVE-2018-7559.pdf - https://github.com/OPCFoundation/UA-.NETStandard/commit/ebcf026a54dd0c9052cff009d96d827ac923d150 - https://github.com/OPCFoundation/UA-.NET-Legacy/commit/e2a781b38efb8686d2bd850c2f2372b5c670bc45 - http://www.securityfocus.com/bid/108688
CVE ID: CVE-2018-7560 State: PUBLISHED Published: 2018-03-04T20:00:00 Last Updated: 2024-08-05T06:31:04.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service (ReDoS) issue via a crafted multipart/form-data boundary string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/myshenin/aws-lambda-multipart-parser/commit/56ccb03af4dddebc2b2defb348b6558783d5757e
CVE ID: CVE-2018-7561 State: PUBLISHED Published: 2018-03-01T15:00:00 Last Updated: 2024-08-05T06:31:04.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based Buffer Overflow in httpd on Tenda AC9 devices V15.03.05.14_EN allows remote attackers to cause a denial of service or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VulDetailsPublication/Poc/tree/master/Tenda/AC9
CVE ID: CVE-2018-7562 State: PUBLISHED Published: 2018-03-12T21:00:00 Last Updated: 2024-08-05T06:31:04.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable file that will be disallowed. The application allows an authenticated user to upload a file when he/she creates a new ticket via front/fileupload.php. This feature is protected using different types of security features like the check on the file's extension. However, the application uploads and creates a file, though this file is not allowed, and then deletes the file in the uplo
ever, the application uploads and creates a file, though this file is not allowed, and then deletes the file in the uploadFiles method in inc/glpiuploaderhandler.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/pull/3650 - https://membership.backbox.org/glpi-9-2-1-multiple-vulnerabilities/
CVE ID: CVE-2018-7563 State: PUBLISHED Published: 2018-03-12T21:00:00 Last Updated: 2024-08-05T06:31:04.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. The attacker-supplied code can perform a wide variety of actions, such as stealing the victim's session token or login credentials, performing arbitrary actions on the victim's behalf, and logging their keystrokes. Additional Analyst Notes:
edentials, performing arbitrary actions on the victim's behalf, and logging their keystrokes. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/pull/3647 - https://membership.backbox.org/glpi-9-2-1-multiple-vulnerabilities/
CVE ID: CVE-2018-7564 State: PUBLISHED Published: 2018-03-07T20:00:00 Last Updated: 2024-08-05T06:31:04.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS exists on Polycom QDX 6000 devices. Additional Analyst Notes: - CVE Program Container: References: - https://support.polycom.com/content/dam/polycom-support/global/documentation/security-advisory-vulnerabilities-qdx-6000-1-0.pdf
CVE ID: CVE-2018-7565 State: PUBLISHED Published: 2018-03-07T20:00:00 Last Updated: 2024-08-05T06:31:04.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSRF exists on Polycom QDX 6000 devices. Additional Analyst Notes: - CVE Program Container: References: - https://support.polycom.com/content/dam/polycom-support/global/documentation/security-advisory-vulnerabilities-qdx-6000-1-0.pdf
CVE ID: CVE-2018-7566 State: PUBLISHED Published: 2018-03-30T21:00:00 Last Updated: 2024-08-05T06:31:04.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3631-2/ - https://www.debian.org/security/2018/dsa-4187 - https://usn.ubuntu.com/3631-1/ - https://access.redhat.com/errata/RHSA-2018:2390 - https://access.redhat.com/errata/RHSA-2018:2395 - https://access.redhat.com/errata/RHSA-2018:2384 - https://www.debian.org/security/2018/dsa-4188 - https://access.re
95 - https://access.redhat.com/errata/RHSA-2018:2384 - https://www.debian.org/security/2018/dsa-4188 - https://access.redhat.com/errata/RHSA-2018:2948 - http://www.securityfocus.com/bid/103605 - https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html - http://mailman.alsa-project.org/pipermail/alsa-devel/2018-February/132026.html - https://usn.ubuntu.com/3798-1/ - https://usn.ubuntu.com/3798-2/ - http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00067.html - https://access.redhat.com/errata/RHSA-2019:1483 - https://access.redhat.com/errata/RHSA-2019:1487 - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cp
:1487 - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d15d662e89fc667b90cd294b0eb45694e33144da - https://bugzilla.redhat.com/show_bug.cgi?id=1550142