Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-5527 State: PUBLISHED Published: 2017-05-09T20:00:00Z Last Updated: 2024-09-16T19:46:16.352Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Server, TIBCO Spotfire Analytics Platform for AWS Marketplace Problem Types: SQL injection attack Description: TIBCO Spotfire Server 7.0.X before 7.0.2, 7.5.x before 7.5.1, 7.6.x before 7.6.1, 7.7.x before 7.7.1, and 7.8.x before 7.8.1 and Spotfire Analytics Platform for AWS Marketplace 7.8.0 and earlier contain multiple vulnerabilities which may allow authorized users to perform SQL injection attacks. Additional Analyst Notes: - CVE Program Container: Refere
h may allow authorized users to perform SQL injection attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/support/advisories/2017/05/tibco-security-advisory-may-9-2017-tibco-spotfire-server - http://www.securityfocus.com/bid/98398
CVE ID: CVE-2017-5528 State: PUBLISHED Published: 2017-06-29T14:00:00Z Last Updated: 2024-09-16T16:58:24.595Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/A:N/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:R) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS Problem Types: Cross site scripting Description: Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. The impact of this vulnerabil
users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. The impact of this vulnerability includes the theoretical disclosure of sensitive information. Affects TIBCO JasperReports Server (versions 6.1.1 and below, 6.2.0, 6.2.1, and 6.3.0), TIBCO JasperReports Server Community Edition (versions 6.3.0 and below), TIBCO JasperReports Server for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO Jaspersoft for AWS with Multi-Tenancy (versions 6.2.0 and below), and TIBCO Jaspersoft Reporting and Analytics for AWS (versions 6.2.0 and below). Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisories/2017/06/tibco-secu
tional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisories/2017/06/tibco-security-advisory-june-28-2017-tibco-jasperreports-server-2017
CVE ID: CVE-2017-5529 State: PUBLISHED Published: 2017-06-29T14:00:00Z Last Updated: 2024-09-17T02:52:33.674Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:C/UI:R) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Professional, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS, TIBCO Jaspersoft Studio for ActiveMatrix BPM Problem Types: Information disclosure Description: JasperReports library components
persoft Studio for ActiveMatrix BPM Problem Types: Information disclosure Description: JasperReports library components contain an information disclosure vulnerability. This vulnerability includes the theoretical disclosure of any accessible information from the host file system. Affects TIBCO JasperReports Library Community Edition (versions 6.4.0 and below), TIBCO JasperReports Library for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO JasperReports Professional (versions 6.2.1 and below, and 6.3.0), TIBCO JasperReports Server (versions 6.1.1 and below, 6.2.0, 6.2.1, 6.3.0), TIBCO JasperReports Server Community Edition (versions 6.3.0 and below), TIBCO JasperReports Server for ActiveMa
6.3.0), TIBCO JasperReports Server Community Edition (versions 6.3.0 and below), TIBCO JasperReports Server for ActiveMatrix BPM (versions 6.2.0 and below), TIBCO Jaspersoft for AWS with Multi-Tenancy (versions 6.3.0 and below), TIBCO Jaspersoft Reporting and Analytics for AWS (versions 6.3.0 and below), and TIBCO Jaspersoft Studio for ActiveMatrix BPM (versions 6.2.0 and below). Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://www.tibco.com/support/advisories/2017/06/tibco-security-advisory-june-28-2017-tibco-jasperreports-server-2017-0 - http://www.oracle.com/technetwork/security-advisory/
-security-advisory-june-28-2017-tibco-jasperreports-server-2017-0 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2017-5530 State: PUBLISHED Published: 2017-12-13T02:00:00Z Last Updated: 2024-09-16T17:39:02.481Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: TIBCO Software Inc. Products: tibbr Community, tibbr Enterprise Problem Types: The impact of this vulnerability includes, for already authorized users, the theoretical escalation of privileges to those of any other user. Description: The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may allow authorized users to impersonate other users, and therefore escalate their access privileges. Affected releases are tibbr Community 5.2.1 and below; 6
te other users, and therefore escalate their access privileges. Affected releases are tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisories/2017/12/tibco-security-advisory-december-12-2017-tibbr-2017-5530
CVE ID: CVE-2017-5531 State: PUBLISHED Published: 2017-10-17T20:00:00 Last Updated: 2024-08-05T15:04:15.327Z Severity: HIGH (CVSS 8 CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:L/S:U/UI:R) Vendors: TIBCO Software Inc. Products: TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Internet Server Problem Types: privilege escalation Description: Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Internet Server versions 8.0.0 and 8.0.1 that enable the Administrator Service may be affected by a vulnerability which may allow any authenticated user to gain administrative control of Managed File Transfer web applications. Addi
ty which may allow any authenticated user to gain administrative control of Managed File Transfer web applications. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101545 - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2017/10/tibco-security-advisory-october-17-2017-tibco-managed-file-transfer
CVE ID: CVE-2017-5532 State: PUBLISHED Published: 2017-11-15T21:00:00Z Last Updated: 2024-09-16T20:48:07.136Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS, TIBCO Jaspersoft Studio, TIBCO Jaspersoft Studio for ActiveMatrix BPM Problem Types: The impact of this vulnerability includes the possibility that a malicious user can gain access
trix BPM Problem Types: The impact of this vulnerability includes the possibility that a malicious user can gain access to a more privileged account. Description: A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS, TIBCO Jaspersoft Studio, and TIBCO Jaspersoft Studio for ActiveMatrix BPM may allow a subset of authorized users to perform persistent cross-site scripting (XSS) attacks. Affected releases
x BPM may allow a subset of authorized users to perform persistent cross-site scripting (XSS) attacks. Affected releases are TIBCO JasperReports Server 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0 and below, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0 and below, TIBCO JasperReports Library 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0; 6.4.1, TIBCO JasperReports Library for ActiveMatrix BPM 6.4.1 and below, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0 and below, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0 and below, TIBCO Jaspersoft Studio 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0, and TIBCO Jaspersoft Studio for Ac
6.4.0 and below, TIBCO Jaspersoft Studio 6.2.3 and below; 6.3.0; 6.3.1; 6.3.2; 6.4.0, and TIBCO Jaspersoft Studio for ActiveMatrix BPM 6.4.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisories/2017/11/tibco-security-advisory-november-15-2017-tibco-jasperreports-2017-5532 - http://www.securityfocus.com/bid/101873
CVE ID: CVE-2017-5533 State: PUBLISHED Published: 2017-11-15T21:00:00Z Last Updated: 2024-09-16T23:06:29.677Z Severity: CRITICAL (CVSS 9.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: TIBCO Software Inc. Products: TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, TIBCO Jaspersoft Reporting and Analytics for AWS Problem Types: The impact includes the possible access to web application configuration files that contain the credentials used by the server. Those credentials could then be used to affect external systems accessed by the JasperReports Server. Description: A
er. Those credentials could then be used to affect external systems accessed by the JasperReports Server. Description: A vulnerability in the server content cache of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability which fails to prevent remote access to all the contents of the web application, including key configuration files. Affected releases are TIBCO JasperReports Server 6.4.0, TIBCO JasperReports Server Community Edition 6.4.0, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0, TIBCO Jas
.0, TIBCO JasperReports Server Community Edition 6.4.0, TIBCO JasperReports Server for ActiveMatrix BPM 6.4.0, TIBCO Jaspersoft for AWS with Multi-Tenancy 6.4.0, TIBCO Jaspersoft Reporting and Analytics for AWS 6.4.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - http://www.tibco.com/support/advisories/2017/11/tibco-security-advisory-november-15-2017-tibco-jasperreports-server-2017 - http://www.securityfocus.com/bid/101878 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.oracl
uoct2018-4428296.html - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.oracle.com/security-alerts/cpuapr2020.html
CVE ID: CVE-2017-5534 State: PUBLISHED Published: 2017-12-13T02:00:00Z Last Updated: 2024-09-16T22:30:39.860Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: tibbr Community, tibbr Enterprise Problem Types: The impact of this vulnerability includes the ability to execute arbitrary code with the privileges of the user that invoked the tibbr server. Description: The tibbr user profiles components of tibbr Community, and tibbr Enterprise expose a weakness in an improperly sandboxed third-party component. Affected releases are TIBCO Software Inc. tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 and below; 6
leases are TIBCO Software Inc. tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisories/2017/12/tibco-security-advisory-december-12-2017-tibbr-2017-5534
CVE ID: CVE-2017-5535 State: PUBLISHED Published: 2018-05-01T18:00:00Z Last Updated: 2024-09-17T03:47:43.629Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: TIBCO Software Inc. Products: TIBCO DataSynapse GridServer Manager Problem Types: A user with access to network traffic between the affected components could potentially examine that traffic, including passwords used to encrypt further communications. Description: The GridServer Broker, GridServer Driver, and GridServer Engine components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities related to both the improper use of encryption mechanisms and the use of weak cipher
ver Manager contain vulnerabilities related to both the improper use of encryption mechanisms and the use of weak ciphers. A malicious actor could theoretically compromise the traffic between any of the components. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5535
CVE ID: CVE-2017-5536 State: PUBLISHED Published: 2018-05-01T18:00:00Z Last Updated: 2024-09-17T03:38:41.007Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N) Vendors: TIBCO Software Inc. Products: TIBCO DataSynapse GridServer Manager Problem Types: The impact of this vulnerability includes the possibility that a malicious actor could gain access to a more privileged account on the affected components or the information managed by those components. Description: The GridServer Broker, and GridServer Director components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an authenticated user to perform cross-site scriptin
aSynapse GridServer Manager contain vulnerabilities which may allow an authenticated user to perform cross-site scripting (XSS). In addition, an authenticated user could be a victim of a cross-site request forgery (CSRF) attack. Affected releases include TIBCO Software Inc.'s TIBCO DataSynapse GridServer Manager: versions up to and including 5.1.3; 6.0.0; 6.0.1; 6.0.2; 6.1.0; 6.1.1; and 6.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/support/advisories/2018/05/security-advisory-may-1-2018-tibco-datasynapse-gridserver-2017-5536
CVE ID: CVE-2017-5537 State: PUBLISHED Published: 2017-03-15T15:00:00 Last Updated: 2024-08-05T15:04:15.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WeblateOrg/weblate/commit/abe0d2a29a1d8e896bfe829c8461bf8b391f1079 - http://www.openwall.com/lists/oss-security/2017/01/18/11 - https://github.com/WeblateOrg/weblate/issues/1317 - http://www.openwall.com/lists/os
/lists/oss-security/2017/01/18/11 - https://github.com/WeblateOrg/weblate/issues/1317 - http://www.openwall.com/lists/oss-security/2017/01/20/1 - http://www.securityfocus.com/bid/95676 - https://github.com/WeblateOrg/weblate/blob/weblate-2.10.1/docs/changes.rst
CVE ID: CVE-2017-5538 State: PUBLISHED Published: 2017-03-23T16:00:00 Last Updated: 2024-08-05T15:04:15.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) and N(7.0) software and Exynos AP chipsets allows attackers to have unspecified impact via unknown vectors, which trigger an out-of-bounds read, aka SVE-2016-6362. Additional Analyst Notes: - CVE Program Container: References: - http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017 - http://www.openwall.com/lists/oss-security/2017/01/19/3 - http://www.openwall.com/lists/oss-security/2017/01/20/2 - http:
ttp://www.openwall.com/lists/oss-security/2017/01/19/3 - http://www.openwall.com/lists/oss-security/2017/01/20/2 - http://www.securityfocus.com/bid/95674
CVE ID: CVE-2017-5539 State: PUBLISHED Published: 2017-01-23T06:49:00 Last Updated: 2024-08-05T15:04:15.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: The patch for directory traversal (CVE-2017-5480) in b2evolution version 6.8.4-stable has a bypass vulnerability. An attacker can use ..\/ to bypass the filter rule. Then, this attacker can exploit this vulnerability to delete or read any files on the server. It can also be used to determine whether a file exists. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/b2evolution/b2evolution/commit/e35f7c195d8c1103d2d981a48cda5ab45ecac48a - http://b2evolution.net/downloads/6-8-5 - http://www.securi
b2evolution/commit/e35f7c195d8c1103d2d981a48cda5ab45ecac48a - http://b2evolution.net/downloads/6-8-5 - http://www.securityfocus.com/bid/95700 - https://github.com/b2evolution/b2evolution/issues/36
CVE ID: CVE-2017-5541 State: PUBLISHED Published: 2017-01-20T08:39:00 Last Updated: 2024-08-05T15:04:15.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to rename arbitrary files via a .. (dot dot) in the existing-folder and new-folder parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/symphonycms/symphony-2/releases/tag/2.6.10 - https://github.com/symphonycms/symphony-2/issues/2639 - http://www.securityfocus.com/bid/95689
CVE ID: CVE-2017-5542 State: PUBLISHED Published: 2017-01-20T08:39:00 Last Updated: 2024-08-05T15:04:15.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to inject arbitrary web script or HTML via the existing-folder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95686 - https://github.com/symphonycms/symphony-2/releases/tag/2.6.10 - https://github.com/symphonycms/symphony-2/issues/2639
CVE ID: CVE-2017-5543 State: PUBLISHED Published: 2017-01-20T08:39:00 Last Updated: 2024-08-05T15:04:15.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/intelliants/subrion/issues/297 - http://www.securityfocus.com/bid/95688
CVE ID: CVE-2017-5544 State: PUBLISHED Published: 2017-01-23T06:49:00 Last Updated: 2024-08-05T15:04:15.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on FiberHome Fengine S5800 switches V210R240. An unauthorized attacker can access the device's SSH service, using a password cracking tool to establish SSH connections quickly. This will trigger an increase in the SSH login timeout (each of the login attempts will occupy a connection slot for a longer time). Once this occurs, legitimate login attempts via SSH/telnet will be refused, resulting in a denial of service; you must restart the device. Additional Analyst Notes: - CVE Program Container: Referenc
sulting in a denial of service; you must restart the device. Additional Analyst Notes: - CVE Program Container: References: - http://www.nfcwar.com - http://www.securityfocus.com/bid/95708
CVE ID: CVE-2017-5545 State: PUBLISHED Published: 2017-01-21T01:00:00 Last Updated: 2024-08-05T15:04:15.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libimobiledevice/libplist/commit/7391a506352c009fe044dead7baad9e22dd279ee - https://github.com/libimobiledevice/libplist/issues/87 - http://www.securityfocus.com/bid/95702 - https://lists.debian.org/debian-lt
ub.com/libimobiledevice/libplist/issues/87 - http://www.securityfocus.com/bid/95702 - https://lists.debian.org/debian-lts-announce/2020/04/msg00002.html
CVE ID: CVE-2017-5546 State: PUBLISHED Published: 2017-02-06T06:04:00 Last Updated: 2024-08-05T15:04:15.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to cause a denial of service (duplicate freelist entries and system crash) or possibly have unspecified other impact in opportunistic circumstances by leveraging the selection of a large value for a random number. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/c4e490cf148e85ead0d1b1c2caaba833f1d5b29f - http://www.openwall.com/lists/oss-security/2017/01/21
m/torvalds/linux/commit/c4e490cf148e85ead0d1b1c2caaba833f1d5b29f - http://www.openwall.com/lists/oss-security/2017/01/21/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1415733 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4e490cf148e85ead0d1b1c2caaba833f1d5b29f - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5 - http://www.securityfocus.com/bid/95711
CVE ID: CVE-2017-5547 State: PUBLISHED Published: 2017-02-06T06:04:00 Last Updated: 2024-08-05T15:04:15.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/hid/hid-corsair.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/21/3 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6 - http://git.kernel.org/
m/lists/oss-security/2017/01/21/3 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6d104af38b570d37aa32a5803b04c354f8ed513d - https://bugzilla.redhat.com/show_bug.cgi?id=1416096 - http://www.securityfocus.com/bid/95709 - https://github.com/torvalds/linux/commit/6d104af38b570d37aa32a5803b04c354f8ed513d
CVE ID: CVE-2017-5548 State: PUBLISHED Published: 2017-02-06T06:04:00 Last Updated: 2024-08-05T15:04:15.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2017/01/21/3 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6 - http://www.securi