Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-4470 State: PUBLISHED Published: 2016-06-27T10:00:00 Last Updated: 2024-08-06T00:32:25.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html - http://lists.opensuse.org/op
3090546.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00023.html - http://www.ubuntu.com/usn/USN-3054-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00017.html - http://rhn.redhat.com/errata/RHSA-2016-1657.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.ubuntu.com/usn/USN-3051-1 - http://rhn.redhat.com/errata/RHSA-2016-2128.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html - http://rhn.redhat.com/errata/RHSA-
8.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html - http://rhn.redhat.com/errata/RHSA-2016-2133.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://www.ubuntu.com/usn/USN-3053-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00012.html - http://www.ubuntu.com/usn/USN-3055-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html - http://www.ubu
.ubuntu.com/usn/USN-3055-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html - http://www.ubuntu.com/usn/USN-3056-1 - http://www.ubuntu.com/usn/USN-3052-1 - http://www.ubuntu.com/usn/USN-3049-1 - http://rhn.redhat.com/errata/RHSA-2016-1541.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00027.html - http://www.debian.org/security/2016/dsa-3607 - http://rhn.redhat.com/errata/RHSA-2016-1539.html - http://www.securitytracker.com/id/1036763 - http://rhn.redhat.com/errata/RHSA-2016-1532.html - http://rhn.redhat.com/errata/RHSA-2016-2006.html - http://lists.opensuse.org/op
.redhat.com/errata/RHSA-2016-1532.html - http://rhn.redhat.com/errata/RHSA-2016-2006.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=38327424b40bcebe2de92d07312c89360ac9229a - http://www.openwall.com/lists/oss-security/2016/06/15/11 - https://bugzilla.redhat.com/show_bug.cgi?id=1341716 - http://www.ubuntu.com/usn/USN-3050-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00013.html - http://lists.opensuse.org/opens
0020.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html - http://rhn.redhat.com/errata/RHSA-2016-2076.html - http://www.ubuntu.com/usn/USN-3057-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html - http://rhn.redhat.com/errata/RHSA-2016-2074.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html - https://github.com/torvalds/linux/commit/38327424b40bcebe2de92d07312c89360ac9229a - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2016-4471 State: PUBLISHED Published: 2017-06-08T18:00:00 Last Updated: 2024-08-06T00:32:25.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: ManageIQ in CloudForms before 4.1 allows remote authenticated users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ManageIQ/manageiq/pull/7856 - https://bugzilla.redhat.com/show_bug.cgi?id=1340763
CVE ID: CVE-2016-4472 State: PUBLISHED Published: 2016-06-30T17:00:00 Last Updated: 2024-08-06T00:32:25.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/tns-2016-20 - https://bugzilla.redhat.com/show_bug.cgi?id=1344251 - http://www.ubuntu.com/usn/USN-3013-1 - http://www.s
/tns-2016-20 - https://bugzilla.redhat.com/show_bug.cgi?id=1344251 - http://www.ubuntu.com/usn/USN-3013-1 - http://www.securityfocus.com/bid/91528 - https://sourceforge.net/p/expat/code_git/ci/f0bec73b018caa07d3e75ec8dd967f3785d71bde - https://security.gentoo.org/glsa/201701-21 - https://kc.mcafee.com/corporate/index?page=content&id=SB10365
CVE ID: CVE-2016-4473 State: PUBLISHED Published: 2017-06-08T20:00:00 Last Updated: 2024-08-06T00:32:25.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: /ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00007.html - http://rhn.redhat.com/errata/RHSA-2016-2750.html - http://www.securityfocus.com/bid/98999 - https://bugzilla.redhat.com/show_bug.cgi?id=1347772
CVE ID: CVE-2016-4474 State: PUBLISHED Published: 2016-06-30T16:00:00 Last Updated: 2024-08-06T00:32:25.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The image build process for the overcloud images in Red Hat OpenStack Platform 8.0 (Liberty) director and Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) director (aka overcloud-full) use a default root password of ROOTPW, which allows attackers to gain access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://rhn.redhat.com/errata/RHSA-2016-1223.html - http://rhn.redhat.com/errata/RHSA-2016-1222.html - https://access.redhat.com/security/vulnerabilities/2359821
CVE ID: CVE-2016-4475 State: PUBLISHED Published: 2016-08-19T21:00:00 Last Updated: 2024-08-06T00:32:25.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1.12.0-RC3 allow remote authenticated users to bypass organization and location restrictions and (a) read, (b) edit, or (c) delete arbitrary organizations or locations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://theforeman.org/security.html#2016-4475 - http://projects.theforeman.org/issues/15268 - https://access.redhat.com/errata/RHBA-2016:1615 - http://projects.theforeman.org/pro
jects.theforeman.org/issues/15268 - https://access.redhat.com/errata/RHBA-2016:1615 - http://projects.theforeman.org/projects/foreman/repository/revisions/a30ab44ed6f140f1791afc51a1e448afc2ff28f9 - http://www.securityfocus.com/bid/92125
CVE ID: CVE-2016-4476 State: PUBLISHED Published: 2016-05-09T10:00:00 Last Updated: 2024-08-06T00:32:25.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in passphrase parameters, which allows remote attackers to cause a denial of service (daemon outage) via a crafted WPS operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/03/12 - http://www.ubuntu.com/usn/USN-3455-1
CVE ID: CVE-2016-4477 State: PUBLISHED Published: 2016-05-09T10:00:00 Last Updated: 2024-08-06T00:32:25.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: wpa_supplicant 0.4.0 through 2.5 does not reject \n and \r characters in passphrase parameters, which allows local users to trigger arbitrary library loading and consequently gain privileges, or cause a denial of service (daemon outage), via a crafted (1) SET, (2) SET_CRED, or (3) SET_NETWORK command. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-05-01.html - http://www.openwall.com/lists/oss-security/2016/05/03/12 - http://www.ubuntu.com/usn/USN-3455-1
CVE ID: CVE-2016-4478 State: PUBLISHED Published: 2016-06-13T19:00:00 Last Updated: 2024-08-06T00:32:25.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the xmlrpc_char_encode function in modules/transport/xmlrpc/xmlrpclib.c in Atheme before 7.2.7 allows remote attackers to cause a denial of service via vectors related to XMLRPC response encoding. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/03/1 - https://github.com/atheme/atheme/commit/87580d767868360d2fed503980129504da84b63e - http://lists.opensuse.org/opensuse-updates/2016-05/msg00061.html - http://www.debian.org/security/2016/dsa-358
a84b63e - http://lists.opensuse.org/opensuse-updates/2016-05/msg00061.html - http://www.debian.org/security/2016/dsa-3586 - http://www.openwall.com/lists/oss-security/2016/05/02/2
CVE ID: CVE-2016-4480 State: PUBLISHED Published: 2016-05-18T14:00:00 Last Updated: 2024-08-06T00:32:25.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table levels, which might allow local guest OS users to gain privileges via a crafted mapping of memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.securityfocus.com/bid/90710 - http://www.securitytracker.com/id/1035901 - http://www.debian.org/
90546.html - http://www.securityfocus.com/bid/90710 - http://www.securitytracker.com/id/1035901 - http://www.debian.org/security/2016/dsa-3633 - http://xenbits.xen.org/xsa/advisory-176.html
CVE ID: CVE-2016-4482 State: PUBLISHED Published: 2016-05-23T10:00:00 Last Updated: 2024-08-06T00:32:25.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://www.securityfocus.com/bid/90029 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - https:/
//www.securityfocus.com/bid/90029 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - https://bugzilla.redhat.com/show_bug.cgi?id=1332931 - http://www.ubuntu.com/usn/USN-3017-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://www.ubuntu.com/usn/USN-3017-3 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - http://www.ubuntu.com/usn/USN-3018-2 - http://www.ubuntu.com/usn/USN-3021-2 - http://www.ubuntu.com/usn/USN-3017-2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=681fef8380eb818c0b845fca5d2ab1dcbab114ee - http://www.ubuntu.com/usn/USN-3019-1 - http://lists.opensuse.org/op
ommit/?id=681fef8380eb818c0b845fca5d2ab1dcbab114ee - http://www.ubuntu.com/usn/USN-3019-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-3016-2 - http://www.ubuntu.com/usn/USN-3016-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://www.ubuntu.com/usn/USN-3021-1 - http://www.ubuntu.com/usn/USN-3018-1 - http://www.openwall.com/lists/oss-security/2016/05/04/2 - https://github.com/torvalds/linux/commit/681fef8380eb818c0b845fca5d2ab1dcbab114ee - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184414.html - http://lists.opensuse.org/op
bab114ee - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184414.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://www.ubuntu.com/usn/USN-3016-3 - http://www.ubuntu.com/usn/USN-3016-4 - http://www.ubuntu.com/usn/USN-3020-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2016-4483 State: PUBLISHED Published: 2017-04-11T16:00:00 Last Updated: 2024-08-06T00:32:25.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/03/8 - http://www.openwall.com/lists/oss-security/2016/05/04/7 - https://git.gnome.org/browse/libxml2/commit/?id=c97750d1
3/8 - http://www.openwall.com/lists/oss-security/2016/05/04/7 - https://git.gnome.org/browse/libxml2/commit/?id=c97750d11bb8b6f3303e7131fe526a61ac65bcfd - http://www.openwall.com/lists/oss-security/2016/06/07/5 - http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html - http://www.securityfocus.com/bid/90013 - https://www.tenable.com/security/tns-2016-18 - http://www.debian.org/security/2016/dsa-3593 - http://www.openwall.com/lists/oss-security/2016/06/07/4 - http://rhn.redhat.com/errata/RHSA-2016-2957.html - https://security.gentoo.org/glsa/201701-37 - http://www.securitytracker.com/id/1036348 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c279522
- http://www.securitytracker.com/id/1036348 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2016-4484 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T00:32:25.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/11/14/13 - http://hmarco.org/bugs/CVE-2016-4484/CVE-2016-4484_cryptsetup_initrd_shell.html - http://www.openwall.com/lists/oss-security/2016/11/15/1 - http://www.openwall.com/lists/oss-security/2016/11/15/4 - http://www.securityfocus.c
m/lists/oss-security/2016/11/15/1 - http://www.openwall.com/lists/oss-security/2016/11/15/4 - http://www.securityfocus.com/bid/94315 - https://gitlab.com/cryptsetup/cryptsetup/commit/ef8a7d82d8d3716ae9b58179590f7908981fa0cb - http://www.openwall.com/lists/oss-security/2016/11/16/6
CVE ID: CVE-2016-4485 State: PUBLISHED Published: 2016-05-23T10:00:00 Last Updated: 2024-08-06T00:32:25.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory by reading a message. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-3006-1 - http://www.ubuntu.com/usn/USN-3004-1 - http://www.ubuntu.com/usn/USN-3001-1 - http://www.openwall.com/lists/oss-security/2016/05/04/26 - http://www.ubuntu.com/usn/USN-3005-1 - http://git.kernel.org/cgi
p://www.openwall.com/lists/oss-security/2016/05/04/26 - http://www.ubuntu.com/usn/USN-3005-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b8670c09f37bdf2847cc44f36511a53afc6161fd - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - http://www.ubuntu.com/usn/USN-2997-1 - http://www.ubuntu.com/usn/USN-3000-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1333309 - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-3002-1 - http://www.ubuntu.com/usn/USN-2996-1 - https://github.com/torvalds/linux/commit/b8670c09f37bdf2847cc44f36511a53afc61
1 - http://www.ubuntu.com/usn/USN-2996-1 - https://github.com/torvalds/linux/commit/b8670c09f37bdf2847cc44f36511a53afc6161fd - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://www.ubuntu.com/usn/USN-2989-1 - http://www.ubuntu.com/usn/USN-3007-1 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5 - http://www.securityfocus.com/bid/90015 - http://www.ubuntu.com/usn/USN-3003-1 - http://www.ubuntu.com/usn/USN-2998-1
CVE ID: CVE-2016-4486 State: PUBLISHED Published: 2016-05-23T10:00:00 Last Updated: 2024-08-06T00:32:25.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://www.ubuntu.com/usn/USN-3006-1 - http://www.ubuntu.com/usn/USN-3004-1 - http://www.ubuntu.com/usn/USN-3001-1 - https://bugzilla.redhat.
/usn/USN-3006-1 - http://www.ubuntu.com/usn/USN-3004-1 - http://www.ubuntu.com/usn/USN-3001-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1333316 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - https://github.com/torvalds/linux/commit/5f8e44741f9f216e33736ea4ec65ca9ac03036e6 - http://www.securityfocus.com/bid/90051 - http://www.ubuntu.com/usn/USN-3005-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html - https://www.exploit-db.com/exploits/46006/ - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - http://www.ubuntu.com/usn/USN-299
/46006/ - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - http://www.ubuntu.com/usn/USN-2997-1 - http://www.ubuntu.com/usn/USN-3000-1 - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-3002-1 - http://www.ubuntu.com/usn/USN-2996-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://www.ubuntu.com/usn/USN-2989-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5f8e44741f9f216e33736ea4ec65ca9ac03036e6 - http://www.ubuntu.com/usn/USN-3007-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5 -
use.org/opensuse-security-announce/2016-08/msg00038.html - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5 - http://www.ubuntu.com/usn/USN-3003-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html - http://www.ubuntu.com/usn/USN-2998-1 - http://www.openwall.com/lists/oss-security/2016/05/04/27 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html
CVE ID: CVE-2016-4487 State: PUBLISHED Published: 2017-02-24T20:00:00 Last Updated: 2024-08-06T00:32:25.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "btypevec." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90025 - http://www.openwall.com/lists/oss-security/2016/05/05/5 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70481
CVE ID: CVE-2016-4488 State: PUBLISHED Published: 2017-02-24T20:00:00 Last Updated: 2024-08-06T00:32:25.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "ktypevec." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90025 - http://www.openwall.com/lists/oss-security/2016/05/05/5 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70481
CVE ID: CVE-2016-4489 State: PUBLISHED Published: 2017-02-24T20:00:00 Last Updated: 2024-08-06T00:32:25.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to the "demangling of virtual tables." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/05/5 - http://www.securityfocus.com/bid/90017 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70492
CVE ID: CVE-2016-4490 State: PUBLISHED Published: 2017-02-24T20:00:00 Last Updated: 2024-08-06T00:32:25.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to inconsistent use of the long and int types for lengths. Additional Analyst Notes: - CVE Program Container: References: - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70498 - http://www.openwall.com/lists/oss-security/2016/05/05/5 - http://www.securityfocus.com/bid/90019
CVE ID: CVE-2016-4491 State: PUBLISHED Published: 2017-02-24T20:00:00 Last Updated: 2024-08-06T00:32:25.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, which triggers infinite recursion and a buffer overflow, related to a node having "itself as ancestor more than once." Additional Analyst Notes: - CVE Program Container: References: - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70909 - http://www.openwall.com/lists/oss-security/2016/05/05/5 - http://www.securityfocus.com/bid/90016 - https://gcc.gnu.org/ml/gcc-patches
enwall.com/lists/oss-security/2016/05/05/5 - http://www.securityfocus.com/bid/90016 - https://gcc.gnu.org/ml/gcc-patches/2016-05/msg00105.html
CVE ID: CVE-2016-4492 State: PUBLISHED Published: 2017-02-24T20:00:00 Last Updated: 2024-08-06T00:32:25.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary. Additional Analyst Notes: - CVE Program Container: References: - https://gcc.gnu.org/ml/gcc-patches/2016-05/msg00223.html - http://www.openwall.com/lists/oss-security/2016/05/05/5 - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70926 - http://www.securityfocus.com/bid/90014