Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ocview.wss?uid=isg3T1021279 - https://support.citrix.com/article/CTX200223 - http://linux.oracle.com/errata/ELSA-2014-3077.html - http://www-01.ibm.com/support/docview.wss?uid=swg21686447 - http://secunia.com/advisories/62228 - http://marc.info/?l=bugtraq&m=141330468527613&w=2 - http://secunia.com/advisories/61855 - http://marc.info/?l=bugtraq&m=141235957116749&w=2 - http://secunia.com/advisories/60044 - http://secunia.com/advisories/61291 - http://marc.info/?l=bugtraq&m=141345648114150&w=2 - http://secunia.com/advisories/59737 - http://secunia.com/advisories/61287 - http://marc.info/?l=bugtraq&m=141383353622268&w=2 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://marc.info/?l=bu
/marc.info/?l=bugtraq&m=141383353622268&w=2 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://secunia.com/advisories/61711 - http://marc.info/?l=bugtraq&m=142113462216480&w=2 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361 - http://marc.info/?l=bugtraq&m=141383304022067&w=2 - http://rhn.redhat.com/errata/RHSA-2014-1311.html - http://secunia.com/advisories/61128 - http://www.debian.org/security/2014/dsa-3035 - https://support.citrix.com/article/CTX200217 - http://secunia.com/advisories/61471 - http://secunia.com/advisories/60055 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-b
/secunia.com/advisories/60055 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash - http://secunia.com/advisories/61550 - http://secunia.com/advisories/61633 - http://www-01.ibm.com/support/docview.wss?uid=swg21686494 - http://linux.oracle.com/errata/ELSA-2014-1306.html - https://kb.bluecoat.com/index?page=content&id=SA82 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html - http://secunia.com/advisories/61328 - http://www-01.ibm.com/support/docview.wss?uid=swg21685733 - http://secunia.com/advisories/61129 - http://secunia.com/advisories/61700 - http://secunia.com/advisories/61626 - http://secunia.com/advisories/61603 - http:
http://secunia.com/advisories/61700 - http://secunia.com/advisories/61626 - http://secunia.com/advisories/61603 - http://secunia.com/advisories/61857 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879 - https://www.arista.com/en/support/advisories-notices/security-advisories/1008-security-advisory-0006
CVE ID: CVE-2014-7170 State: PUBLISHED Published: 2014-12-17T19:00:00 Last Updated: 2024-08-06T12:40:19.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Puppet Server 0.2.0 allows local users to obtain sensitive information by accessing it in between package installation or upgrade and the start of the service. Additional Analyst Notes: - CVE Program Container: References: - http://puppetlabs.com/security/cve/cve-2014-7170
CVE ID: CVE-2014-7173 State: PUBLISHED Published: 2020-06-01T16:43:48 Last Updated: 2024-08-06T12:40:19.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: FarLinX X25 Gateway through 2014-09-25 allows command injection via shell metacharacters to sysSaveMonitorData.php, fsx25MonProxy.php, syseditdate.php, iframeupload.php, or sysRestoreX25Cplt.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.justanotherhacker.com/2016/09/jahx164_-_farlinx_x25_gateway_multiple_vulnerabilities.html
CVE ID: CVE-2014-7174 State: PUBLISHED Published: 2020-06-01T16:42:02 Last Updated: 2024-08-06T12:40:19.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: FarLinX X25 Gateway through 2014-09-25 allows directory traversal via the log-handling feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.justanotherhacker.com/2016/09/jahx164_-_farlinx_x25_gateway_multiple_vulnerabilities.html
CVE ID: CVE-2014-7175 State: PUBLISHED Published: 2020-06-01T16:42:50 Last Updated: 2024-08-06T12:40:19.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: FarLinX X25 Gateway through 2014-09-25 allows attackers to write arbitrary data to fsUI.xyz via fsSaveUIPersistence.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.justanotherhacker.com/2016/09/jahx164_-_farlinx_x25_gateway_multiple_vulnerabilities.html
CVE ID: CVE-2014-7176 State: PUBLISHED Published: 2014-11-04T15:00:00 Last Updated: 2024-08-06T12:40:19.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobal_txt parameter to plugins/docman. Additional Analyst Notes: - CVE Program Container: References: - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-7176/ - http://www.exploit-db.com/exploits/35098 - http://seclists.org/fulldisclosure/2014/Oct/119 - http://www.securityfocus.com/bid/70773 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
lldisclosure/2014/Oct/119 - http://www.securityfocus.com/bid/70773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/98307 - https://www.tuleap.org/recent-vulnerabilities - http://packetstormsecurity.com/files/128875/Tuleap-7.4.99.5-Blind-SQL-Injection.html
CVE ID: CVE-2014-7177 State: PUBLISHED Published: 2014-10-31T14:00:00 Last Updated: 2024-08-06T12:40:19.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML External Entity vulnerability in Enalean Tuleap 7.2 and earlier allows remote authenticated users to read arbitrary files via a crafted xml document in a create action to plugins/tracker/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70771 - https://tuleap.net/plugins/git/tuleap/tuleap/stable?p=tuleap%2Fstable.git&a=blob&h=aed26cbae81410a981c4615bd7da1518f31c50d0&hb=29cbe3557a07c74f3d910648b8c5307e8faef65a&f=ChangeLog - https://tuleap.net/plugins/tracker/?aid=7458 - http
18f31c50d0&hb=29cbe3557a07c74f3d910648b8c5307e8faef65a&f=ChangeLog - https://tuleap.net/plugins/tracker/?aid=7458 - http://seclists.org/fulldisclosure/2014/Oct/120 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-7177/ - http://www.osvdb.org/113680 - https://www.tuleap.org/recent-vulnerabilities - https://exchange.xforce.ibmcloud.com/vulnerabilities/98308
CVE ID: CVE-2014-7178 State: PUBLISHED Published: 2014-11-28T15:00:00 Last Updated: 2024-08-06T12:40:19.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Enalean Tuleap before 7.5.99.6 allows remote attackers to execute arbitrary commands via the User-Agent header, which is provided to the passthru PHP function. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2014/Oct/121 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-7178/ - https://www.tuleap.org/recent-vulnerabilities
CVE ID: CVE-2014-7180 State: PUBLISHED Published: 2014-10-25T00:00:00 Last Updated: 2024-08-06T12:40:19.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Electric Cloud ElectricCommander before 4.2.6 and 5.x before 5.0.3 uses world-writable permissions for (1) eccert.pl and (2) ecconfigure.pl, which allows local users to execute arbitrary Perl code by modifying these files. Additional Analyst Notes: - CVE Program Container: References: - http://www.secureworks.com/cyber-threat-intelligence/advisories/SWRX-2014-010/ - http://www.securityfocus.com/bid/70722 - http://www.secureworks.com/advisories/SWRX-2014-010/SWRX-2014-010.pdf - http://docs.electric-cloud.com/commander_doc/5_0_3
tp://www.secureworks.com/advisories/SWRX-2014-010/SWRX-2014-010.pdf - http://docs.electric-cloud.com/commander_doc/5_0_3/HTML5/ReleaseNotes/commander_releasenotes.htm - http://packetstormsecurity.com/files/128819/ElectricCommander-4.2.4.71224-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2014/Oct/104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97735
CVE ID: CVE-2014-7181 State: PUBLISHED Published: 2014-10-16T19:00:00 Last Updated: 2024-08-06T12:40:19.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Max Foundry MaxButtons plugin before 1.26.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter in a button action on the maxbuttons-controller page to wp-admin/admin.php, related to the button creation page. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128693/WordPress-MaxButtons-1.26.0-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/533700/100/0/threaded - h
WordPress-MaxButtons-1.26.0-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/533700/100/0/threaded - https://wordpress.org/plugins/maxbuttons/changelog - https://www.htbridge.com/advisory/HTB23237
CVE ID: CVE-2014-7182 State: PUBLISHED Published: 2014-10-22T14:00:00 Last Updated: 2024-08-06T12:40:19.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the poly_id parameter in an (1) edit_poly, (2) edit_polyline, or (3) edit_marker action in the wp-google-maps-menu page to wp-admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-google-maps/changelog - http://www.securityfocus.com/archive/1/533699/100/0/threaded - http://www.securityfocus.com/
/wp-google-maps/changelog - http://www.securityfocus.com/archive/1/533699/100/0/threaded - http://www.securityfocus.com/bid/70597 - http://packetstormsecurity.com/files/128694/WordPress-WP-Google-Maps-6.0.26-Cross-Site-Scripting.html - https://www.htbridge.com/advisory/HTB23236
CVE ID: CVE-2014-7183 State: PUBLISHED Published: 2014-10-22T14:00:00 Last Updated: 2024-08-06T12:40:19.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the search.php in LiteCart 1.1.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) query parameter or (2) QUERY_STRING. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128768/LiteCart-1.1.2.1-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/533748/100/0/threaded - https://www.netsparker.com/xss-vulnerabilities-in-litecart/ - http://seclists.org/fulldisclosure/2015/
/100/0/threaded - https://www.netsparker.com/xss-vulnerabilities-in-litecart/ - http://seclists.org/fulldisclosure/2015/Nov/84 - http://www.securityfocus.com/bid/70662
CVE ID: CVE-2014-7185 State: PUBLISHED Published: 2014-10-08T17:00:00 Last Updated: 2024-08-06T12:40:19.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/09/25/47 - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139663.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/96193 - https://bugzilla.redhat.com/show_bug.cgi?id=1146026 - http://www.
//exchange.xforce.ibmcloud.com/vulnerabilities/96193 - https://bugzilla.redhat.com/show_bug.cgi?id=1146026 - http://www.openwall.com/lists/oss-security/2014/09/23/5 - http://rhn.redhat.com/errata/RHSA-2015-1064.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://bugs.python.org/issue21831 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://security.gentoo.org/glsa/201503-10 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://rhn.redhat.com/errata/RHSA-2015-1330.html - http://lists.opensuse.org/opensuse-updates/2014-10/msg00016.html - https://support.apple.com/kb/HT20503
2015-1330.html - http://lists.opensuse.org/opensuse-updates/2014-10/msg00016.html - https://support.apple.com/kb/HT205031 - http://www.securityfocus.com/bid/70089
CVE ID: CVE-2014-7186 State: PUBLISHED Published: 2014-09-28T19:00:00 Last Updated: 2024-08-06T12:40:19.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack" issue. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897 - http://www-01.ibm.com/support/doc
Advisory-2014-0010.html - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897 - http://www-01.ibm.com/support/docview.wss?uid=swg21685749 - http://marc.info/?l=bugtraq&m=141577137423233&w=2 - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts - http://marc.info/?l=bugtraq&m=141383138121313&w=2 - http://marc.info/?l=bugtraq&m=142721162228379&w=2 - http://www.securityfocus.com/archive/1/533593/100/0/threaded - http://marc.info/?l=bugtraq&m=142358026505815&w=2 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html - http://www-01.ibm.com/support/docview.wss?uid=swg21686084 - http://ww
opensuse-security-announce/2014-09/msg00038.html - http://www-01.ibm.com/support/docview.wss?uid=swg21686084 - http://www-01.ibm.com/support/docview.wss?uid=swg21686479 - http://secunia.com/advisories/61188 - http://jvn.jp/en/jp/JVN55667175/index.html - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html - http://secunia.com/advisories/60433 - http://openwall.com/lists/oss-security/2014/09/25/32 - http://marc.info/?l=bugtraq&m=141383026420882&w=2 - http://marc.info/?l=bugtraq&m=141585637922673&w=2 - http://marc.info/?l=bugtraq&m=141576728022234&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21685541 - http://www.oracle.com/technetwork/topics/security/bashcve-20
http://www-01.ibm.com/support/docview.wss?uid=swg21685541 - http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html - http://secunia.com/advisories/61636 - http://secunia.com/advisories/61816 - http://secunia.com/advisories/61442 - http://marc.info/?l=bugtraq&m=142358078406056&w=2 - http://secunia.com/advisories/61283 - http://marc.info/?l=bugtraq&m=142113462216480&w=2 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10085 - http://secunia.com/advisories/61654 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315 - http://secunia.com/advisories/62312 - https://
://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315 - http://secunia.com/advisories/62312 - https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html - http://marc.info/?l=bugtraq&m=141879528318582&w=2 - http://rhn.redhat.com/errata/RHSA-2014-1312.html - http://www-01.ibm.com/support/docview.wss?uid=swg21685604 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://secunia.com/advisories/61703 - http://www.ubuntu.com/usn/USN-2364-1 - http://secunia.com/advisories/61065 - http://marc.info/?l=bugtraq&m=141383196021590&w=2 - http://marc.info/?l=bugtraq&m=141383081521087&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21686445 - http://www-01.ibm.c
.info/?l=bugtraq&m=141383081521087&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21686445 - http://www-01.ibm.com/support/docview.wss?uid=swg21686131 - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126 - http://marc.info/?l=bugtraq&m=141879528318582&w=2 - http://secunia.com/advisories/61641 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00042.html - https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898 - http://www-01.ibm.com/support/docview.wss?uid=swg21685914 - http://seclists.org/fulldisclosure/2014/Oct/0 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:164 - https://support.hpe.com/
g/fulldisclosure/2014/Oct/0 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:164 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04497075 - https://support.apple.com/HT205267 - http://marc.info/?l=bugtraq&m=142721162228379&w=2 - http://secunia.com/advisories/60024 - http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html - http://secunia.com/advisories/61622 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash - http://support.novell.com/security/cve/CVE-2014-7186.html - http://openwall.com/lists/oss-security/2014/09/28/10 - http://secunia.com/advisories/62343 - http://secunia.c
186.html - http://openwall.com/lists/oss-security/2014/09/28/10 - http://secunia.com/advisories/62343 - http://secunia.com/advisories/61565 - https://www.suse.com/support/shellshock/ - http://support.apple.com/HT204244 - http://marc.info/?l=bugtraq&m=141450491804793&w=2 - http://secunia.com/advisories/61313 - http://marc.info/?l=bugtraq&m=142289270617409&w=2 - http://marc.info/?l=bugtraq&m=142358026505815&w=2 - http://secunia.com/advisories/61873 - http://openwall.com/lists/oss-security/2014/09/26/2 - http://secunia.com/advisories/61485 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00041.html - http://secunia.com/advisories/61618 - https://support.hpe.com/hpsc/doc/public/
security-announce/2014-09/msg00041.html - http://secunia.com/advisories/61618 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183 - http://marc.info/?l=bugtraq&m=141577297623641&w=2 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272 - http://marc.info/?l=bugtraq&m=141383244821813&w=2 - http://secunia.com/advisories/61312 - http://secunia.com/advisories/60193 - http://www.vmware.com/security/advisories/VMSA-2014-0010.html - http://secunia.com/advisories/61479 - http://secunia.com/advisories/60063 - http://secunia.com/advisories/60034 - http://secunia.com/advisories/59907 - http://secunia.com/advisories/58200 - http://marc.info/?l=bugtraq&m=141577
60034 - http://secunia.com/advisories/59907 - http://secunia.com/advisories/58200 - http://marc.info/?l=bugtraq&m=141577241923505&w=2 - http://secunia.com/advisories/61643 - http://www.novell.com/support/kb/doc.php?id=7015721 - http://www-01.ibm.com/support/docview.wss?uid=swg21687079 - http://secunia.com/advisories/61503 - http://www-01.ibm.com/support/docview.wss?uid=swg21686246 - http://rhn.redhat.com/errata/RHSA-2014-1354.html - http://marc.info/?l=bugtraq&m=142289270617409&w=2 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915 - http://www.qnap.com/i/en/support/con_show.php?cid=61 - http://marc.info/?l=bugtraq&m=141694386919794&w=2 - http://secunia.com/advisories/61552 - http:
rt/con_show.php?cid=61 - http://marc.info/?l=bugtraq&m=141694386919794&w=2 - http://secunia.com/advisories/61552 - http://secunia.com/advisories/61780 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279 - https://support.citrix.com/article/CTX200223 - http://www-01.ibm.com/support/docview.wss?uid=swg21686447 - http://secunia.com/advisories/62228 - http://marc.info/?l=bugtraq&m=141330468527613&w=2 - http://secunia.com/advisories/60044 - http://secunia.com/advisories/61291 - http://marc.info/?l=bugtraq&m=141345648114150&w=2 - http://secunia.com/advisories/61287 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://secunia.com/
p://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://secunia.com/advisories/61711 - http://marc.info/?l=bugtraq&m=142113462216480&w=2 - http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html - http://marc.info/?l=bugtraq&m=141383304022067&w=2 - http://rhn.redhat.com/errata/RHSA-2014-1311.html - http://secunia.com/advisories/61128 - https://support.citrix.com/article/CTX200217 - http://secunia.com/advisories/61471 - http://secunia.com/advisories/60055 - http://secunia.com/advisories/61550 - http://secunia.com/advisories/61633 - http://www-01.ibm.com/support/doc
es/60055 - http://secunia.com/advisories/61550 - http://secunia.com/advisories/61633 - http://www-01.ibm.com/support/docview.wss?uid=swg21686494 - https://kb.bluecoat.com/index?page=content&id=SA82 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00048.html - http://secunia.com/advisories/61328 - http://www-01.ibm.com/support/docview.wss?uid=swg21685733 - http://secunia.com/advisories/61129 - http://secunia.com/advisories/61603 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879
CVE ID: CVE-2014-7187 State: PUBLISHED Published: 2014-09-28T19:00:00 Last Updated: 2024-08-06T12:40:19.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-0010.html - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897 - http://www-01.ibm.com
re-Security-Advisory-2014-0010.html - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897 - http://www-01.ibm.com/support/docview.wss?uid=swg21685749 - http://marc.info/?l=bugtraq&m=141577137423233&w=2 - https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102673&src=securityAlerts - http://marc.info/?l=bugtraq&m=141383138121313&w=2 - http://marc.info/?l=bugtraq&m=142721162228379&w=2 - http://www.securityfocus.com/archive/1/533593/100/0/threaded - http://marc.info/?l=bugtraq&m=142358026505815&w=2 - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00038.html - http://www-01.ibm.com/support/docview.wss?uid=swg21686084
pensuse.org/opensuse-security-announce/2014-09/msg00038.html - http://www-01.ibm.com/support/docview.wss?uid=swg21686084 - http://www-01.ibm.com/support/docview.wss?uid=swg21686479 - http://secunia.com/advisories/61188 - http://jvn.jp/en/jp/JVN55667175/index.html - http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html - http://secunia.com/advisories/60433 - http://openwall.com/lists/oss-security/2014/09/25/32 - http://marc.info/?l=bugtraq&m=141383026420882&w=2 - http://marc.info/?l=bugtraq&m=141585637922673&w=2 - http://marc.info/?l=bugtraq&m=141576728022234&w=2 - http://support.novell.com/security/cve/CVE-2014-7187.html - http://www.oracle.com/technetwork/topics/securit
22234&w=2 - http://support.novell.com/security/cve/CVE-2014-7187.html - http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html - http://secunia.com/advisories/61636 - http://secunia.com/advisories/61816 - http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html - http://secunia.com/advisories/61442 - http://marc.info/?l=bugtraq&m=142358078406056&w=2 - http://secunia.com/advisories/61283 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10085 - http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html - http://secunia.com/advisories/61654 - http://www-947.ibm.com/support