Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-17530 State: PUBLISHED Published: 2017-12-14T16:00:00 Last Updated: 2024-08-05T20:51:32.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: common/help.c in Geomview 1.9.5 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: this is disputed by a third party because no untrusted input can be used for the injection Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2017-17530 - https://bugs.gentoo.org/650894#c2
CVE ID: CVE-2017-17531 State: PUBLISHED Published: 2017-12-14T16:00:00 Last Updated: 2024-08-05T20:51:31.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: gozilla.c in GNU GLOBAL 4.8.6 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2017-17531 - https://security.gentoo.org/glsa/202008-02
CVE ID: CVE-2017-17532 State: PUBLISHED Published: 2017-12-14T16:00:00 Last Updated: 2024-08-05T20:51:32.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: examples/framework/news/news3.py in Kiwi 1.9.22 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2017-17532
CVE ID: CVE-2017-17533 State: PUBLISHED Published: 2017-12-14T16:00:00 Last Updated: 2024-08-05T20:51:32.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: default.tcl in Tkabber 1.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has indicated that the attack cannot occur because of the argument-parsing behavior of the Tcl exec function Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2017-17533
CVE ID: CVE-2017-17534 State: PUBLISHED Published: 2017-12-14T16:00:00 Last Updated: 2024-08-05T20:51:31.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: uiutil.c in Mensis 0.0.080507 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, a different vulnerability than CVE-2017-17521. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2017-17534
CVE ID: CVE-2017-17535 State: PUBLISHED Published: 2017-12-14T16:00:00 Last Updated: 2024-08-05T20:51:32.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/gui.py in Bob Hepple gjots2 2.4.1 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2017-17535
CVE ID: CVE-2017-17536 State: PUBLISHED Published: 2017-12-11T07:00:00Z Last Updated: 2024-09-16T22:40:41.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phabricator before 2017-11-10 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary code by using the web UI to browse a branch whose name begins with a --config= or --debugger= substring. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/288704 - https://secure.phabricator.com/T13012
CVE ID: CVE-2017-17537 State: PUBLISHED Published: 2017-12-13T16:00:00 Last Updated: 2024-08-05T20:51:32.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: MikroTik RouterBOARD v6.39.2 and v6.40.5 allows an unauthenticated remote attacker to cause a denial of service by connecting to TCP port 53 and sending data that begins with many '\0' characters, possibly related to DNS. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43200/
CVE ID: CVE-2017-17538 State: PUBLISHED Published: 2017-12-13T09:00:00 Last Updated: 2024-08-05T20:51:32.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: MikroTik v6.40.5 devices allow remote attackers to cause a denial of service via a flood of ICMP packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43317/
CVE ID: CVE-2017-17539 State: PUBLISHED Published: 2018-05-07T14:00:00Z Last Updated: 2024-10-25T14:32:21.154Z Vendors: Fortinet, Inc. Products: FortiWLC Problem Types: Execute unauthorized code or commands Description: The presence of a hardcoded account in Fortinet FortiWLC 7.0.11 and earlier allows attackers to gain unauthorized read/write access via a remote shell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-17-274 - http://www.securityfocus.com/bid/104119
CVE ID: CVE-2017-17540 State: PUBLISHED Published: 2018-05-07T14:00:00Z Last Updated: 2024-10-25T14:32:09.071Z Vendors: Fortinet, Inc. Products: FortiWLC Problem Types: Execute unauthorized code or commands Description: The presence of a hardcoded account in Fortinet FortiWLC 8.3.3 allows attackers to gain unauthorized read/write access via a remote shell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-17-274 - http://www.securityfocus.com/bid/104119
CVE ID: CVE-2017-17541 State: PUBLISHED Published: 2018-07-16T20:00:00 Last Updated: 2024-10-25T14:08:48.618Z Vendors: Fortinet Products: Fortinet FortiManager, FortiAnalyzer Problem Types: Execute unauthorized code or commands Description: A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-17-305 - http://www.securitytracker.com/id/1
CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-17-305 - http://www.securitytracker.com/id/1041246 - http://www.securitytracker.com/id/1041247
CVE ID: CVE-2017-17542 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:28.040Z Description: No description available.
CVE ID: CVE-2017-17543 State: PUBLISHED Published: 2018-04-26T20:00:00Z Last Updated: 2024-10-25T14:32:33.452Z Vendors: Fortinet, Inc. Products: FortiClient for Windows, FortiClient for Mac OSX, FortiClient SSLVPN Client for Linux Problem Types: Information Disclosure Description: Users' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2335 and below versions, due to the use of a static encryption key and weak encryption algorithms. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forti
tion algorithms. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-17-214
CVE ID: CVE-2017-17544 State: PUBLISHED Published: 2019-04-09T15:40:48 Last Updated: 2024-10-25T14:30:50.620Z Vendors: Fortinet Products: FortiOS Problem Types: Escalation of privilege Description: A privilege escalation vulnerability in Fortinet FortiOS 6.0.0 to 6.0.6, 5.6.0 to 5.6.10, 5.4 and below allows admin users to elevate their profile to super_admin via restoring modified configurations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-17-053 - http://www.securityfocus.com/bid/107839
CVE ID: CVE-2017-17545 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:25.755Z Description: No description available.
CVE ID: CVE-2017-17546 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:25.216Z Description: No description available.
CVE ID: CVE-2017-17547 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:24.745Z Description: No description available.
CVE ID: CVE-2017-17548 State: REJECTED Published: N/A Last Updated: 2025-03-17T22:38:24.295Z Description: No description available.
CVE ID: CVE-2017-17549 State: PUBLISHED Published: 2017-12-13T16:00:00 Last Updated: 2024-08-05T20:51:32.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 allow remote attackers to obtain sensitive information from the backend client TLS handshake by leveraging use of TLS with Client Certificates and a Diffie-Hellman Ephemeral (DHE) key exchange. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040011 - http://www.securityfocus.com/bid/102177 - https:
am Container: References: - http://www.securitytracker.com/id/1040011 - http://www.securityfocus.com/bid/102177 - https://support.citrix.com/article/ctx230612
CVE ID: CVE-2017-17550 State: PUBLISHED Published: 2018-11-10T22:00:00 Last Updated: 2024-08-05T20:51:32.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZyXEL ZyWALL USG 2.12 AQQ.2 and 3.30 AQQ.7 devices are affected by a CSRF vulnerability via a cgi-bin/zysh-cgi cmd action to add a user account. This account's access could, for example, subsequently be used for stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.shellcode.it/article/cve-2017-17550/
CVE ID: CVE-2017-17551 State: PUBLISHED Published: 2017-12-11T18:00:00Z Last Updated: 2024-09-16T22:36:51.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Backup and Restore feature in Mobotap Dolphin Browser for Android 12.0.2 suffers from an arbitrary file write vulnerability when attempting to restore browser settings from a malicious Dolphin Browser backup file. This arbitrary file write vulnerability allows an attacker to overwrite a specific executable in the Dolphin Browser's data directory with a crafted malicious executable. Every time the Dolphin Browser is launched, it will attempt to run the malicious executable from disk, thus executing the attacker's code. Ad
n Browser is launched, it will attempt to run the malicious executable from disk, thus executing the attacker's code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VerSprite/research/blob/master/advisories/VS-2017-001.md
CVE ID: CVE-2017-17552 State: PUBLISHED Published: 2018-02-07T17:00:00 Last Updated: 2024-08-05T20:51:32.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: /LoadFrame in Zoho ManageEngine AD Manager Plus build 6590 - 6613 allows attackers to conduct URL Redirection attacks via the src parameter, resulting in a bypass of CSRF protection, or potentially masquerading a malicious URL as trusted. Additional Analyst Notes: - CVE Program Container: References: - https://umbrielsecurity.wordpress.com/2018/01/31/dangerous-url-redirection-and-csrf-in-zoho-manageengine-ad-manager-plus-cve-2017-17552/
CVE ID: CVE-2017-17553 State: PUBLISHED Published: 2017-12-12T00:00:00Z Last Updated: 2024-09-16T23:20:23.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Dolphin Browser for Android 12.0.2 suffers from an insecure parsing implementation of the Intent URI scheme. This vulnerability could allow attackers to abuse this implementation through a malicious Intent URI, in order to invoke private Activities within the Dolphin Browser. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VerSprite/research/blob/master/advisories/VS-2017-002.md
CVE ID: CVE-2017-17554 State: PUBLISHED Published: 2017-12-12T01:00:00Z Last Updated: 2024-09-16T21:02:42.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which may lead to DoS when playing a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/IvanCql/vulnerability/blob/master/An%20NULL%20pointer%20dereference%28DoS%29%20Vulnerability%20was%20found%20in%20function%20%20aubio_source_avcodec_readframe%20of%20aubio.md
CVE ID: CVE-2017-17555 State: PUBLISHED Published: 2017-12-12T01:00:00 Last Updated: 2024-08-05T20:51:32.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/IvanCql/vulnerability/blob/master/An%20NULL%20pointer%20dereference%28DoS%29%20Vulnerability%20was%20found%20in%20function%20swri_audio_convert%20of%20ffmpeg%20libswresam
ter%20dereference%28DoS%29%20Vulnerability%20was%20found%20in%20function%20swri_audio_convert%20of%20ffmpeg%20libswresample.md - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html
CVE ID: CVE-2017-17556 State: PUBLISHED Published: 2017-12-15T19:00:00 Last Updated: 2024-08-05T20:51:32.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: A debug tool in Synaptics TouchPad drivers allows local users with administrative access to obtain sensitive information about keyboard scan codes by modifying registry keys. Additional Analyst Notes: - CVE Program Container: References: - https://www.synaptics.com/company/blog/touchpad-security-brief - https://zwclose.github.io/HP-keylogger/ - https://support.hp.com/us-en/document/c05827409
CVE ID: CVE-2017-17557 State: PUBLISHED Published: 2018-04-24T20:00:00 Last Updated: 2024-08-05T20:51:32.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP files. The issue results from the lack of proper validation of the biSize member, which can result in a heap based buffer overflow. An attacker can leverage this to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securitytracker.com/id/1040733 - https://blo
- https://www.foxitsoftware.com/support/security-bulletins.php - http://www.securitytracker.com/id/1040733 - https://blog.0patch.com/2018/05/0patching-foxit-reader-buffer-oops.html - http://www.securityfocus.com/bid/103999
CVE ID: CVE-2017-17558 State: PUBLISHED Published: 2017-12-12T15:00:00 Last Updated: 2024-08-05T20:51:32.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3619-2/ - https://www.debian.org/security/2018/dsa-40
tes: - CVE Program Container: References: - https://usn.ubuntu.com/3619-2/ - https://www.debian.org/security/2018/dsa-4082 - https://lists.debian.org/debian-lts-announce/2018/01/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html - https://usn.ubuntu.com/3754-1/ - https://access.redhat.com/errata/RHSA-2018:1062 - http://openwall.com/lists/oss-security/2017/12/12/7 - https://access.redhat.com/errata/RHSA-2018:0676 - https://www.debian.org/security/2017/dsa-4073 - https://www.spinics.net/lists/linux-usb/msg163644.html - https://usn.ubuntu.com/3619-1/ - https://access.redhat.com/errata/RHSA-2019:1170 - https://access.redhat.com/errata/RHSA-2019:1190 - http
u.com/3619-1/ - https://access.redhat.com/errata/RHSA-2019:1170 - https://access.redhat.com/errata/RHSA-2019:1190 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
CVE ID: CVE-2017-17560 State: PUBLISHED Published: 2017-12-12T18:00:00 Last Updated: 2024-08-05T20:51:32.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquery/uploader/multi_uploadify.php, provides multipart upload functionality that is accessible without authentication and can be used to place a file anywhere on the device's file system. This allows an attacker the ability to upload a PHP shell onto the device and obtain arbitrary code execution as root. Additional Analyst Notes: - CVE Program Container: References: - https://download.exploitee.rs/file/generic/
on as root. Additional Analyst Notes: - CVE Program Container: References: - https://download.exploitee.rs/file/generic/Exploiteers-DEFCON25.pdf - https://www.exploit-db.com/exploits/43356/ - https://github.com/rapid7/metasploit-framework/pull/9248
CVE ID: CVE-2017-17561 State: PUBLISHED Published: 2017-12-12T18:00:00Z Last Updated: 2024-09-16T18:09:04.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/admin_ping.php, which interacts with data/admin/ping.php. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/WangYihang/9507e2efdceb67a5bc2761200f19f213 - http://www.jianshu.com/p/35af80b97ee6
CVE ID: CVE-2017-17562 State: PUBLISHED Published: 2017-12-12T19:00:00.000Z Last Updated: 2025-10-21T23:45:57.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc dynamic linker, this behaviour can be abused for remote code execution using special parameter names such as LD_PRELOAD. An attacker can POST their shared object payload in the body of the request, and reference it using /proc/sel
D_PRELOAD. An attacker can POST their shared object payload in the body of the request, and reference it using /proc/self/fd/0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/elttam/advisories/tree/master/CVE-2017-17562 - http://www.securitytracker.com/id/1040702 - https://www.elttam.com.au/blog/goahead/ - https://www.exploit-db.com/exploits/43360/ - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://github.com/embedthis/goahead/commit/6f786c123196eb622625a920d54048629a7caa74 - https://github.com/embedthis/goahead/issues/249 - https://www.exploit-db.com/exploits/43877/
CVE ID: CVE-2017-17563 State: PUBLISHED Published: 2017-12-12T22:00:00 Last Updated: 2024-08-05T20:51:32.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging an incorrect mask for reference-count overflow checking in shadow mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102169 - http://www.securitytracker.com/id/1040769 - https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html - https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html - http://www.open
ts-announce/2018/01/msg00003.html - https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html - http://www.openwall.com/lists/oss-security/2017/12/12/2 - https://security.gentoo.org/glsa/201801-14 - https://xenbits.xen.org/xsa/advisory-249.html - https://www.debian.org/security/2018/dsa-4112 - https://support.citrix.com/article/CTX232096
CVE ID: CVE-2017-17564 State: PUBLISHED Published: 2017-12-12T22:00:00 Last Updated: 2024-08-05T20:51:32.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging incorrect error handling for reference counting in shadow mode. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xen.org/xsa/advisory-250.html - https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html - https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html - http://www.securityfocus.com/bid/102172 - https://security.ge
sts.debian.org/debian-lts-announce/2018/10/msg00009.html - http://www.securityfocus.com/bid/102172 - https://security.gentoo.org/glsa/201801-14 - http://www.securitytracker.com/id/1040770 - http://www.openwall.com/lists/oss-security/2017/12/12/3 - https://www.debian.org/security/2018/dsa-4112 - https://support.citrix.com/article/CTX232096
CVE ID: CVE-2017-17565 State: PUBLISHED Published: 2017-12-12T22:00:00 Last Updated: 2024-08-05T20:51:32.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) if shadow mode and log-dirty mode are in place, because of an incorrect assertion related to M2P. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040771 - https://xenbits.xen.org/xsa/advisory-251.html - https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html - http://www.openwall.com/lists/oss-security/2017/12/12/5 - https://lists.debian.org/debian-
ounce/2018/01/msg00003.html - http://www.openwall.com/lists/oss-security/2017/12/12/5 - https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html - https://security.gentoo.org/glsa/201801-14 - http://www.securityfocus.com/bid/102175 - https://www.debian.org/security/2018/dsa-4112 - https://support.citrix.com/article/CTX232096
CVE ID: CVE-2017-17566 State: PUBLISHED Published: 2017-12-12T22:00:00 Last Updated: 2024-08-05T20:51:32.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) or gain host OS privileges in shadow mode by mapping a certain auxiliary page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040768 - https://xenbits.xen.org/xsa/advisory-248.html - https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html - http://www.securityfocus.com/bid/102167 - https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
003.html - http://www.securityfocus.com/bid/102167 - https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html - http://www.openwall.com/lists/oss-security/2017/12/12/4 - https://security.gentoo.org/glsa/201801-14 - https://www.debian.org/security/2018/dsa-4112 - https://support.citrix.com/article/CTX232096