Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
iscourse-server/viewtopic.php?f=3&t=26857 - https://github.com/ImageMagick/ImageMagick/commit/6b4aff0f117b978502ee5bcd6e753c17aec5a961 - https://github.com/ImageMagick/ImageMagick/commit/b8f17d08b7418204bf8a05a5c24e87b2fc395b75 - https://github.com/ImageMagick/ImageMagick/commit/8ea44b48a182dd46d018f4b4f09a5e2ee9638105 - http://www.securityfocus.com/bid/93124 - https://bugzilla.redhat.com/show_bug.cgi?id=1378736
CVE ID: CVE-2015-8959 State: PUBLISHED Published: 2017-04-20T18:00:00 Last Updated: 2024-08-06T08:36:30.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (CPU consumption) via a crafted DDS file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93230 - http://www.openwall.com/lists/oss-security/2016/09/22/2 - http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26861 - https://bugzilla.redhat.com/show_bug.cgi?id=1378738 - https://github.com/ImageMagick/ImageMagick/commit/3ab016764c7f787829d9065440d86f5609765110 - https:
bug.cgi?id=1378738 - https://github.com/ImageMagick/ImageMagick/commit/3ab016764c7f787829d9065440d86f5609765110 - https://github.com/ImageMagick/ImageMagick/commit/9b428b7af688fe319320aed15f2b94281d1e37b4 - https://github.com/ImageMagick/ImageMagick/commit/cc2a4d2ba5371d25c58763e4db2dbc1f4691c0f7
CVE ID: CVE-2015-8960 State: PUBLISHED Published: 2016-09-21T01:00:00 Last Updated: 2024-08-06T08:36:30.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" iss
of the secret key for an arbitrary installed client X.509 certificate, aka the "Key Compromise Impersonation (KCI)" issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/09/20/4 - http://twitter.com/matthew_d_green/statuses/630908726950674433 - http://www.securityfocus.com/bid/93071 - https://security.netapp.com/advisory/ntap-20180626-0002/ - https://www.usenix.org/system/files/conference/woot15/woot15-paper-hlauschek.pdf - https://kcitls.org
CVE ID: CVE-2015-8961 State: PUBLISHED Published: 2016-11-16T04:49:00 Last Updated: 2024-08-06T08:36:31.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __ext4_journal_stop function in fs/ext4/ext4_jbd2.c in the Linux kernel before 4.3.3 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging improper access to a certain error field. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6934da9238da947628be83635e365df41064b09b - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3 - https://github.com/torvalds/linux/commit/6934da9238da947628
ttp://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.3 - https://github.com/torvalds/linux/commit/6934da9238da947628be83635e365df41064b09b - https://source.android.com/security/bulletin/2016-11-01.html - http://www.securityfocus.com/bid/94135
CVE ID: CVE-2015-8962 State: PUBLISHED Published: 2016-11-16T04:49:00 Last Updated: 2024-08-06T08:36:30.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (memory corruption and system crash) by detaching a device during an SG_IO ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f3951a3709ff50990bf3e188c27d346792103432 - https://source.android.com/security/bulletin/2016-11-01.html - https://github.com/torv
9ff50990bf3e188c27d346792103432 - https://source.android.com/security/bulletin/2016-11-01.html - https://github.com/torvalds/linux/commit/f3951a3709ff50990bf3e188c27d346792103432 - http://www.securityfocus.com/bid/94187
CVE ID: CVE-2015-8963 State: PUBLISHED Published: 2016-11-16T04:49:00 Last Updated: 2024-10-15T19:01:34.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging incorrect handling of an swevent data structure during a CPU unplug operation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=12ca6ad2e3a896256f086497a7c7406a547ee373 - http://source.android.com/security/bulletin/2016-11-01.html - http://www.secur
2ca6ad2e3a896256f086497a7c7406a547ee373 - http://source.android.com/security/bulletin/2016-11-01.html - http://www.securityfocus.com/bid/94207 - https://github.com/torvalds/linux/commit/12ca6ad2e3a896256f086497a7c7406a547ee373
CVE ID: CVE-2015-8964 State: PUBLISHED Published: 2016-11-16T04:49:00 Last Updated: 2024-08-06T08:36:30.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel before 4.5 allows local users to obtain sensitive information from kernel memory by reading a tty data structure. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2016-11-01.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dd42bf1197144ede075a9d4793123f7689e164bc - https://github.com/torvalds/linux/commit/dd42bf1197144ede075a9d4793123f7689e164bc - http://w
e075a9d4793123f7689e164bc - https://github.com/torvalds/linux/commit/dd42bf1197144ede075a9d4793123f7689e164bc - http://www.securityfocus.com/bid/94138
CVE ID: CVE-2015-8965 State: PUBLISHED Published: 2017-04-06T21:00:00 Last Updated: 2024-08-06T08:36:31.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rogue Wave JViews before 8.8 patch 21 and 8.9 before patch 1 allows remote attackers to execute arbitrary Java code that exists in the classpath, such as test code or administration code. The issue exists because the ilog.views.faces.IlvFacesController servlet in jviews-framework-all.jar does not require explicit configuration of servlets that can be called. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://www.oracle.com/secu
References: - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://www.oracle.com/security-alerts/cpujan2021.html - https://rwkbp.makekb.com/?View=entry&EntryID=2521
CVE ID: CVE-2015-8966 State: PUBLISHED Published: 2016-12-08T21:00:00 Last Updated: 2024-08-06T08:36:30.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/arm/kernel/sys_oabi-compat.c in the Linux kernel before 4.4 allows local users to gain privileges via a crafted (1) F_OFD_GETLK, (2) F_OFD_SETLK, or (3) F_OFD_SETLKW command in an fcntl64 system call. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=76cc404bfdc0d419c720de4daaf2584542734f42 - https://github.com/torvalds/linux/commit/76cc404bfdc0d419c720de4daaf2584542734f42 - http://www.securityfocus.com/bid/94673 - http://source.andr
alds/linux/commit/76cc404bfdc0d419c720de4daaf2584542734f42 - http://www.securityfocus.com/bid/94673 - http://source.android.com/security/bulletin/2016-12-01.html
CVE ID: CVE-2015-8967 State: PUBLISHED Published: 2016-12-08T21:00:00 Last Updated: 2024-08-06T08:36:30.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the "strict page permissions" protection mechanism and modify the system-call table, and consequently gain privileges, by leveraging write access. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c623b33b4e9599c6ac5076f7db7369eb9869aa04 - https://github.com/torvalds/linux/commit/c623b33b4e9599c6ac5076f7db7369eb9869aa04 - http://www.securityfocus.com/bid/94
https://github.com/torvalds/linux/commit/c623b33b4e9599c6ac5076f7db7369eb9869aa04 - http://www.securityfocus.com/bid/94680 - http://source.android.com/security/bulletin/2016-12-01.html
CVE ID: CVE-2015-8968 State: PUBLISHED Published: 2016-11-03T10:00:00 Last Updated: 2024-08-06T08:36:30.547Z Vendors: n/a Products: git-fastclone ruby gem All versions before 1.0.1 Problem Types: Arbitrary Command Execution Description: git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone, they could exploit this. The ext command will be run if the repository is recursively cloned or if submodules are updated. This attack works when cloning both local
l be run if the repository is recursively cloned or if submodules are updated. This attack works when cloning both local and remote repositories. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/104465 - http://www.securityfocus.com/bid/81433 - https://github.com/square/git-fastclone/pull/2
CVE ID: CVE-2015-8969 State: PUBLISHED Published: 2016-11-03T10:00:00 Last Updated: 2024-08-06T08:36:30.998Z Vendors: n/a Products: git-fastclone ruby gem All versions before 1.0.5 Problem Types: Arbitrary Command Execution Description: git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command. An attacker can execute malicious commands by modifying the strings that are passed as arguments to "cd " and "git clone " commands in the library. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/81433 - https://github.com/square/git-fastclone/pull/5 - https://hackerone.com/reports/105190
CVE ID: CVE-2015-8970 State: PUBLISHED Published: 2016-11-28T03:01:00 Last Updated: 2024-08-06T08:36:30.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: crypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AF_ALG socket before an accept system call is processed, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted application that does not supply a key, related to the lrw_crypt function in crypto/lrw.c. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:2437 - http://www.kernel.org/pub/linux/ker
E Program Container: References: - https://access.redhat.com/errata/RHSA-2017:2437 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dd504589577d8e8e70f51f997ad487a4cb6c026f - https://access.redhat.com/errata/RHSA-2017:2444 - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842 - https://github.com/torvalds/linux/commit/dd504589577d8e8e70f51f997ad487a4cb6c026f - http://www.openwall.com/lists/oss-security/2016/11/04/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1386286 - http://www.securityfocus.com/bid/94217 - https://groups.google.com/forum/#%21msg/syzkaller
com/show_bug.cgi?id=1386286 - http://www.securityfocus.com/bid/94217 - https://groups.google.com/forum/#%21msg/syzkaller/frb2XrB5aWk/xCXzkIBcDAAJ
CVE ID: CVE-2015-8971 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T08:36:31.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window title and then are written to the terminal, a similar issue to CVE-2003-0063. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/11/04/15 - http://www.securityfocus.com/bid/94132 - http://www.openwall.com/lists/oss-security/2016/11/04/12 - http://www.openwall.com/lists/oss-security/2016/11/07/1 - http://www.debian.org/security/2016/dsa-3712 - https://g
/12 - http://www.openwall.com/lists/oss-security/2016/11/07/1 - http://www.debian.org/security/2016/dsa-3712 - https://git.enlightenment.org/apps/terminology.git/commit/?id=b80bedc7c21ecffe99d8d142930db696eebdd6a5
CVE ID: CVE-2015-8972 State: PUBLISHED Published: 2017-01-23T21:00:00 Last Updated: 2024-08-06T08:36:31.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/11/13/2 - http://www.openwall.com/lists/oss-security/2016/11/14/12 - http://www.openwall.com/lists/oss-security/2016/11/14/11 - http://svn.savannah.gnu.org/viewvc/chess?revision=134&
4/12 - http://www.openwall.com/lists/oss-security/2016/11/14/11 - http://svn.savannah.gnu.org/viewvc/chess?revision=134&view=revision - http://lists.gnu.org/archive/html/bug-gnu-chess/2015-10/msg00002.html
CVE ID: CVE-2015-8973 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T08:36:30.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote attackers to bypass intended access restrictions via vectors related to the forum password. Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2015/09/07/mybb-1-8-6-1-6-18-merge-system-1-8-6-release/ - http://www.securityfocus.com/bid/94397 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8
CVE ID: CVE-2015-8974 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T08:36:30.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Group Promotions module in the admin control panel in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2015/09/07/mybb-1-8-6-1-6-18-merge-system-1-8-6-release/ - http://www.securityfocus.com/bid/94397 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openw
e/ - http://www.securityfocus.com/bid/94397 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8
CVE ID: CVE-2015-8975 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T08:36:30.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the error handler in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2015/09/07/mybb-1-8-6-1-6-18-merge-system-1-8-6-release/ - http://www.securityfocus.com/bid/94397 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/
w.securityfocus.com/bid/94397 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8
CVE ID: CVE-2015-8976 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T08:36:31.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 might allow remote attackers to inject arbitrary web script or HTML via vectors related to "old upgrade files." Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2015/09/07/mybb-1-8-6-1-6-18-merge-system-1-8-6-release/ - http://www.securityfocus.com/bid/94397 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/os
securityfocus.com/bid/94397 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8
CVE ID: CVE-2015-8977 State: PUBLISHED Published: 2017-01-31T22:00:00 Last Updated: 2024-08-06T08:36:30.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allow remote attackers to obtain the installation path via vectors involving error log files. Additional Analyst Notes: - CVE Program Container: References: - https://blog.mybb.com/2015/09/07/mybb-1-8-6-1-6-18-merge-system-1-8-6-release/ - http://www.securityfocus.com/bid/94397 - http://www.openwall.com/lists/oss-security/2016/11/18/1 - http://www.openwall.com/lists/oss-security/2016/11/10/8
CVE ID: CVE-2015-8978 State: PUBLISHED Published: 2016-11-22T17:00:00 Last Updated: 2024-08-06T08:36:30.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Soap Lite (aka the SOAP::Lite extension for Perl) 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copies of the first entity. The amount of computer memory used for handling an external SOAP call would likely exceed that available to the process parsing the XML. Additional Analyst Notes: - CVE Program Container: References: - http://w
that available to the process parsing the XML. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94487 - http://cpansearch.perl.org/src/PHRED/SOAP-Lite-1.20/Changes
CVE ID: CVE-2015-8979 State: PUBLISHED Published: 2017-02-15T15:00:00 Last Updated: 2024-08-06T08:36:31.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a long string sent to TCP port 4242. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/140191/DCMTK-storescp-DICOM-storage-C-STORE-SCP-Remote-Stack-Buffer-Overflow.html - http://www.securityfocus.com/bid/94951 - http://www.debian.org/security/2016/dsa-3749 - http://www.openwall.com/lists
- http://www.securityfocus.com/bid/94951 - http://www.debian.org/security/2016/dsa-3749 - http://www.openwall.com/lists/oss-security/2016/12/18/2 - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5384.php - https://bugzilla.redhat.com/show_bug.cgi?id=1405919
CVE ID: CVE-2015-8980 State: PUBLISHED Published: 2019-11-04T20:27:33 Last Updated: 2024-08-06T08:36:31.253Z Vendors: n/a Products: php-gettext Problem Types: Other Description: The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95754 - http://lists.opensuse.org/opensuse-updates/2017-02/msg00015.html - http://www.openwall.com/lists/oss-security/2017/01/18/4 - https://bugzilla.redhat.com/show_bug.cgi?id=1367462 - https://lwn.net/Alerts/708838/ - http://seclists.org/fulldisclosure/2016/Aug/76 - https://launchpad.net/p
i?id=1367462 - https://lwn.net/Alerts/708838/ - http://seclists.org/fulldisclosure/2016/Aug/76 - https://launchpad.net/php-gettext/trunk/1.0.12
CVE ID: CVE-2015-8981 State: PUBLISHED Published: 2017-03-16T15:00:00 Last Updated: 2024-08-06T08:36:31.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vectors related to m_offsets.size. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/podofo/mailman/message/34205419/ - http://www.openwall.com/lists/oss-security/2017/02/01/20 - http://www.openwall.com/lists/oss-security/2017/02/02/15 - https://sourceforge.net/p/podofo/code/1672
CVE ID: CVE-2015-8982 State: PUBLISHED Published: 2017-03-15T19:00:00 Last Updated: 2024-08-06T08:36:31.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the strxfrm function in the GNU C Library (aka glibc or libc6) before 2.21 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/14/9 - http://www.securityfocus.com/bid/72602 - https://sourceware.org/bugzilla/show_bug.cgi?id=16009 - https://sourceware.org/git/gitweb.cgi?p=glibc
us.com/bid/72602 - https://sourceware.org/bugzilla/show_bug.cgi?id=16009 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=0f9e585480ed - http://www.openwall.com/lists/oss-security/2015/02/13/3 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2015-8983 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-06T08:36:31.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to computing a size in bytes, which triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/14/9 - https://sourceware.org/bugzilla/show_bug.cgi?id=17269 - https://www.sou
w.openwall.com/lists/oss-security/2017/02/14/9 - https://sourceware.org/bugzilla/show_bug.cgi?id=17269 - https://www.sourceware.org/ml/libc-alpha/2015-08/msg00609.html - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=bdf1ff052a8e23d637f2c838fa5642d78fcedc33 - http://www.securityfocus.com/bid/72740
CVE ID: CVE-2015-8984 State: PUBLISHED Published: 2017-03-20T16:00:00 Last Updated: 2024-08-06T08:36:31.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fnmatch function in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to cause a denial of service (application crash) via a malformed pattern, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/02/14/9 - http://www.securityfocus.com/bid/72789 - http://www.openwall.com/lists/oss-security/2015/02/26/5 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=4a28f4d55a6cc33474c0792fe93b5
om/lists/oss-security/2015/02/26/5 - https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=4a28f4d55a6cc33474c0792fe93b5942d81bf185 - https://www.sourceware.org/ml/libc-alpha/2015-08/msg00609.html - https://sourceware.org/bugzilla/show_bug.cgi?id=18032