Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sh/advisories/2010/2038 - http://securitytracker.com/id?1024296 - http://www.ubuntu.com/usn/USN-1003-1 - http://marc.info/?l=bugtraq&m=130331363227777&w=2 - http://secunia.com/advisories/42309 - http://www.vupen.com/english/advisories/2010/3077 - http://security.FreeBSD.org/advisories/FreeBSD-SA-10:10.openssl.asc - http://secunia.com/advisories/43312 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html - http://www.vmware.com/security/advisories/VMSA-2011-0003.html - http://www.mail-archive.com/openssl-dev%40openssl.org/msg28043.html - http://www.mail-archive.com/openssl-dev%40openssl.org/msg28045.html - http://www.securityfocus.com/archive/1/516397/100/0/threaded - h
l-archive.com/openssl-dev%40openssl.org/msg28045.html - http://www.securityfocus.com/archive/1/516397/100/0/threaded - http://secunia.com/advisories/41105
CVE ID: CVE-2010-2940 State: PUBLISHED Published: 2010-08-30T19:00:00 Last Updated: 2024-08-07T02:55:45.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pam_authenticate via an empty password. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/61399 - http://secunia.com/advisories/41159 - https://bugzilla.redhat.com/show_bug.cgi?id=625189
CVE ID: CVE-2010-2941 State: PUBLISHED Published: 2010-11-05T16:28:00 Last Updated: 2024-08-07T02:55:45.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2010:234 - http://support.apple.com/kb/HT4435 - http://www.vupen.com/english/advisories/2010/3042 - http://rhn.redhat.com/er
:234 - http://support.apple.com/kb/HT4435 - http://www.vupen.com/english/advisories/2010/3042 - http://rhn.redhat.com/errata/RHSA-2010-0811.html - http://www.redhat.com/support/errata/RHSA-2010-0866.html - http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - http://www.mandriva.com/security/advisories?name=MDVSA-2010:232 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051301.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - http://www.vupen.com/english/advisories/2010/2856 - http://www.debian.org/security/2011/dsa-2176 - http://securitytracker.com/id?1024662 - http://lists.apple.com/archives/security-ann
debian.org/security/2011/dsa-2176 - http://securitytracker.com/id?1024662 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - http://secunia.com/advisories/42867 - http://security.gentoo.org/glsa/glsa-201207-10.xml - http://www.vupen.com/english/advisories/2011/0061 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050977.html - http://www.vupen.com/english/advisories/2011/0535 - http://www.ubuntu.com/usn/USN-1012-1 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051277.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:233 - http://secunia.com/advisories/42287 - https://bugzilla.redhat.com/show_bug.c
m/security/advisories?name=MDVSA-2010:233 - http://secunia.com/advisories/42287 - https://bugzilla.redhat.com/show_bug.cgi?id=624438 - https://exchange.xforce.ibmcloud.com/vulnerabilities/62882 - http://secunia.com/advisories/43521 - http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.468323 - http://www.osvdb.org/68951 - http://www.securityfocus.com/bid/44530 - http://www.vupen.com/english/advisories/2010/3088
CVE ID: CVE-2010-2942 State: PUBLISHED Published: 2010-09-21T17:00:00 Last Updated: 2024-08-07T02:55:45.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcf_gact_dump function in net/sched/act_gact.c, (2) the tcf_mirred_dump function in net/sched/act_mirred.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, an
ed.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in net/sched/act_skbedit.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=624903 - http://www.redhat.com/support/errata/RHSA-2010-0723.html - http://www.ubuntu.com/usn/USN-1000-1 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html - http://www.redhat.com/support/errata/RHSA-2010-0771.html - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://secunia.com/advisories/46397 - http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba
2/100/0/threaded - http://secunia.com/advisories/46397 - http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=1c40be12f7d8ca1d387510d39787b12e512a7ce8 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc2 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html - http://www.vupen.com/english/advisories/2010/2430 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2011/0298 - http://patchwork.ozlabs.org/patch/61857/ - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://s
98 - http://patchwork.ozlabs.org/patch/61857/ - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://support.avaya.com/css/P8/documents/100113326 - http://www.openwall.com/lists/oss-security/2010/08/18/1 - http://www.securityfocus.com/bid/42529 - http://www.openwall.com/lists/oss-security/2010/08/19/4 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html - http://secunia.com/advisories/41512 - http://www.redhat.com/support/errata/RHSA-2010-0779.html
CVE ID: CVE-2010-2943 State: PUBLISHED Published: 2010-09-30T14:00:00 Last Updated: 2024-08-07T02:55:45.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked file, by accessing a stale NFS filehandle. Additional Analyst Notes: - CVE Program Container: References: - http://article.gmane.org/gmane.comp.file-systems.xfs.general/33771 - http://git.kernel.org/?p=linux/kernel/gi
erences: - http://article.gmane.org/gmane.comp.file-systems.xfs.general/33771 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7124fe0a5b619d65b739477b3b55a20bf805b06d - http://www.securityfocus.com/bid/42527 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7b6259e7a83647948fa33a736cc832310c8d85aa - http://www.redhat.com/support/errata/RHSA-2010-0723.html - https://bugzilla.redhat.com/show_bug.cgi?id=624923 - http://www.securityfocus.com/archive/1/520102/100/0/threaded - http://article.gmane.org/gmane.comp.file-systems.xfs.general/33768 - http://secunia.com/advisories/46397 - http://article.gmane.org/gmane.comp.file-systems.xf
le-systems.xfs.general/33768 - http://secunia.com/advisories/46397 - http://article.gmane.org/gmane.comp.file-systems.xfs.general/33769 - http://www.openwall.com/lists/oss-security/2010/08/18/2 - http://article.gmane.org/gmane.comp.file-systems.xfs.general/33767 - http://oss.sgi.com/archives/xfs/2010-06/msg00191.html - http://www.ubuntu.com/usn/USN-1041-1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 - http://oss.sgi.com/archives/xfs/2010-06/msg00198.html - http://www.vupen.com/english/advisories/2011/0280 - http://www.vmware.com/security/advisories/VMSA-2011-0012.html - http://secunia.com/advisories/42758 - http://support.avaya.com/css/P8/documents/100113326 - http://www.ub
11-0012.html - http://secunia.com/advisories/42758 - http://support.avaya.com/css/P8/documents/100113326 - http://www.ubuntu.com/usn/USN-1057-1 - http://www.openwall.com/lists/oss-security/2010/08/19/5 - http://www.vupen.com/english/advisories/2011/0070 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1920779e67cbf5ea8afef317777c5bf2b8096188 - http://secunia.com/advisories/43161
CVE ID: CVE-2010-2944 State: PUBLISHED Published: 2010-08-20T19:00:00Z Last Updated: 2024-09-16T23:26:28.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: The authenticate function in LDAPUserFolder/LDAPUserFolder.py in zope-ldapuserfolder 2.9-1 does not verify the password for the emergency account, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/41022 - http://www.openwall.com/lists/oss-security/2010/08/19/7 - http://www.openwall.com/lists/oss-security/2010/08/18/3 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593466
CVE ID: CVE-2010-2945 State: PUBLISHED Published: 2010-08-30T19:00:00Z Last Updated: 2024-08-07T02:55:45.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the default_path option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/08/20/10 - http://svn.berlios.de/viewvc/slim?view=revision&revision=171 - http://www.openwall.com/lists/oss-security/2010/08/19/8 - http://secunia.com/advisorie
slim?view=revision&revision=171 - http://www.openwall.com/lists/oss-security/2010/08/19/8 - http://secunia.com/advisories/41005
CVE ID: CVE-2010-2946 State: PUBLISHED Published: 2010-09-29T16:00:00 Last Updated: 2024-08-07T02:55:45.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/jfs/xattr.c in the Linux kernel before 2.6.35.2 does not properly handle a certain legacy format for storage of extended attributes, which might allow local users by bypass intended xattr namespace restrictions via an "os2." substring at the beginning of a name. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1000-1 - http://www.openwall.com/lists/oss-security/2010/08/20/11 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html - http://git.kernel.org/?p=l
/2010/08/20/11 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00004.html - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=aca0fa34bdaba39bfddddba8ca70dba4782e8fe6 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html - http://www.vupen.com/english/advisories/2011/0298 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.51 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35.2 - http://www.securityfocus.com/bid/42589 - http://www.vupen.com/english/advisories
/linux/kernel/v2.6/ChangeLog-2.6.35.2 - http://www.securityfocus.com/bid/42589 - http://www.vupen.com/english/advisories/2011/0375 - http://www.openwall.com/lists/oss-security/2010/08/20/1 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html - http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.37.10 - http://secunia.com/advisories/43291 - http://secunia.com/advisories/41321 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html
CVE ID: CVE-2010-2947 State: PUBLISHED Published: 2010-08-24T19:00:00 Last Updated: 2024-08-07T02:55:45.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a string that is inconsistent with the expected number of fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/42592 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:165 - http://www.vupen.com/english/advisories/2010/2232 - http://www.openwall.com/lists/oss-security/2010/08/20/5
A-2010:165 - http://www.vupen.com/english/advisories/2010/2232 - http://www.openwall.com/lists/oss-security/2010/08/20/5 - http://libhx.git.sourceforge.net/git/gitweb.cgi?p=libhx/libhx%3Ba=commit%3Bh=904a46f90dd3f046bfac0b64a5e813d7cd4fca59 - http://www.openwall.com/lists/oss-security/2010/08/20/12 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - https://bugzilla.redhat.com/show_bug.cgi?id=625866
CVE ID: CVE-2010-2948 State: PUBLISHED Published: 2010-09-10T18:00:00 Last Updated: 2024-08-07T02:55:45.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the bgp_route_refresh_receive function in bgp_packet.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a malformed Outbound Route Filtering (ORF) record in a BGP ROUTE-REFRESH (RR) message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2304 - http://www.securityfocus.com/bid/42635 - http://secunia.com/advisories/42498 - https://bugzi
lish/advisories/2010/2304 - http://www.securityfocus.com/bid/42635 - http://secunia.com/advisories/42498 - https://bugzilla.redhat.com/show_bug.cgi?id=626783 - http://www.openwall.com/lists/oss-security/2010/08/24/3 - http://secunia.com/advisories/41238 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html - http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=d64379e8f3c0636df53ed08d5b2f1946cfedd0e3 - http://secunia.com/advisories/41038 - http://security.gentoo.org/glsa/glsa-201202-02.xml - http://secunia.com/advisories/42397 - http://www.debian.org/security/2010/dsa-2104 - http://www.ubuntu.com/usn/USN-1027-1 - http://secunia.com/advisories/42446 - http://lists.opensu
ecurity/2010/dsa-2104 - http://www.ubuntu.com/usn/USN-1027-1 - http://secunia.com/advisories/42446 - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:174 - http://secunia.com/advisories/48106 - http://www.vupen.com/english/advisories/2010/3097 - http://www.openwall.com/lists/oss-security/2010/08/25/4 - http://www.redhat.com/support/errata/RHSA-2010-0785.html - http://www.redhat.com/support/errata/RHSA-2010-0945.html - http://www.quagga.net/news2.php?y=2010&m=8&d=19 - http://www.vupen.com/english/advisories/2010/3124
CVE ID: CVE-2010-2949 State: PUBLISHED Published: 2010-09-10T18:00:00 Last Updated: 2024-08-07T02:55:45.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: bgpd in Quagga before 0.99.17 does not properly parse AS paths, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unknown AS type in an AS path attribute in a BGP UPDATE message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2010/2304 - http://secunia.com/advisories/42498 - http://www.openwall.com/lists/oss-security/2010/08/24/3 - http://secunia.com/advisories/41238 - http://lists.opensuse.org/opensuse-securit
l.com/lists/oss-security/2010/08/24/3 - http://secunia.com/advisories/41238 - http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html - http://www.securityfocus.com/bid/42642 - http://secunia.com/advisories/41038 - http://security.gentoo.org/glsa/glsa-201202-02.xml - http://secunia.com/advisories/42397 - http://www.debian.org/security/2010/dsa-2104 - http://www.ubuntu.com/usn/USN-1027-1 - http://secunia.com/advisories/42446 - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00009.html - http://code.quagga.net/?p=quagga.git%3Ba=commit%3Bh=cddb8112b80fa9867156c637d63e6e79eeac67bb - http://www.mandriva.com/security/advisories?name=MDVSA-2010:174 - http://secuni
db8112b80fa9867156c637d63e6e79eeac67bb - http://www.mandriva.com/security/advisories?name=MDVSA-2010:174 - http://secunia.com/advisories/48106 - http://www.vupen.com/english/advisories/2010/3097 - http://www.openwall.com/lists/oss-security/2010/08/25/4 - http://www.redhat.com/support/errata/RHSA-2010-0945.html - http://www.quagga.net/news2.php?y=2010&m=8&d=19 - http://www.vupen.com/english/advisories/2010/3124 - https://bugzilla.redhat.com/show_bug.cgi?id=626795
CVE ID: CVE-2010-2950 State: PUBLISHED Published: 2010-09-28T17:00:00 Last Updated: 2024-08-07T02:55:45.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in stream.c in the phar extension in PHP 5.3.x through 5.3.3 allows context-dependent attackers to obtain sensitive information (memory contents) and possibly execute arbitrary code via a crafted phar:// URI that is not properly handled by the phar_stream_flush function, leading to errors in the php_stream_wrapper_log_error function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-2094. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bug
complete fix for CVE-2010-2094. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=130331363227777&w=2 - http://php-security.org/2010/05/14/mops-2010-024-php-phar_stream_flush-format-string-vulnerability/index.html - http://www.php.net/releases/5_3_4.php - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://www.php.net/ChangeLog-5.php - http://security-tracker.debian.org/tracker/CVE-2010-2950 - http://www.mandriva.com/security/advisories?name=MDVSA-2010:254 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html - http://www.php.net/archive/2010.php#id2010-12-10-1 - http://marc.info/?l=bugtraq&m=13
y-announce/2010-09/msg00006.html - http://www.php.net/archive/2010.php#id2010-12-10-1 - http://marc.info/?l=bugtraq&m=130331363227777&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=598537 - http://svn.php.net/viewvc?view=revision&revision=302565 - http://support.apple.com/kb/HT4581
CVE ID: CVE-2010-2951 State: PUBLISHED Published: 2010-10-12T20:00:00Z Last Updated: 2024-08-07T02:55:45.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: dns_internal.cc in Squid 3.1.6, when IPv6 DNS resolution is not enabled, accesses an invalid socket during an IPv4 TCP DNS query, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via vectors that trigger an IPv4 DNS response with the TC bit set. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2010/08/25/6 - http://www.openwall.com/lists/oss-security/2010/08/24/7 - http://bugs.squid-cache.org/show_bug.cgi?id=3009 - http://
6 - http://www.openwall.com/lists/oss-security/2010/08/24/7 - http://bugs.squid-cache.org/show_bug.cgi?id=3009 - http://marc.info/?l=squid-users&m=128263555724981&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=626927 - http://bugs.squid-cache.org/show_bug.cgi?id=3021 - http://bazaar.launchpad.net/~squid/squid/3.1/revision/10072 - http://bugs.gentoo.org/show_bug.cgi?id=334263 - http://www.openwall.com/lists/oss-security/2010/08/24/6 - http://www.openwall.com/lists/oss-security/2010/08/25/2 - http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10072.patch
CVE ID: CVE-2010-2952 State: PUBLISHED Published: 2010-09-13T20:00:00 Last Updated: 2024-08-07T02:55:45.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Traffic Server before 2.0.1, and 2.1.x before 2.1.2-unstable, does not properly choose DNS source ports and transaction IDs, and does not properly use DNS query fields to validate responses, which makes it easier for man-in-the-middle attackers to poison the internal DNS cache via a crafted response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/43111 - https://issues.apache.org/jira/browse/TS-425 - http://secunia.com/advisories/41356 - http://www.nth-dimension.org.uk/
- https://issues.apache.org/jira/browse/TS-425 - http://secunia.com/advisories/41356 - http://www.nth-dimension.org.uk/pub/NDSA20100830.txt.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/61721 - http://securitytracker.com/id?1024417 - http://trafficserver.apache.org/ - http://www.securityfocus.com/archive/1/513598/100/0/threaded
CVE ID: CVE-2010-2953 State: PUBLISHED Published: 2010-09-14T18:00:00Z Last Updated: 2024-08-07T02:55:45.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in a certain Debian GNU/Linux patch for the couchdb script in CouchDB 0.8.0 allows local users to gain privileges via a crafted shared library in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.nth-dimension.org.uk/blog.php?id=87 - http://www.vupen.com/english/advisories/2010/2341 - http://secunia.com/advisories/41383 - http://www.securityfocus.com/bid/42758 - http://www.openwall.com/lists/oss-security/2010/08/29/4 - http://www.open
383 - http://www.securityfocus.com/bid/42758 - http://www.openwall.com/lists/oss-security/2010/08/29/4 - http://www.openwall.com/lists/oss-security/2010/08/26/5 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=594412 - http://www.openwall.com/lists/oss-security/2010/08/26/1 - http://www.openwall.com/lists/oss-security/2010/08/25/7 - http://www.debian.org/security/2010/dsa-2107
CVE ID: CVE-2010-2954 State: PUBLISHED Published: 2010-09-03T19:00:00 Last Updated: 2024-08-07T02:55:45.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: The irda_bind function in net/irda/af_irda.c in the Linux kernel before 2.6.36-rc3-next-20100901 does not properly handle failure of the irda_open_tsap function, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact via multiple unsuccessful calls to bind on an AF_IRDA (aka PF_IRDA) socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1000-1 - http://lists.opensuse.org/opensuse-security-announce/201
Container: References: - http://www.ubuntu.com/usn/USN-1000-1 - http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00005.html - http://secunia.com/advisories/41234 - http://twitter.com/taviso/statuses/22635752128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/61522 - http://www.vupen.com/english/advisories/2010/2430 - http://marc.info/?l=oss-security&m=128331787923285&w=2 - http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html - http://www.spinics.net/lists/netdev/msg139404.html - https://bugzilla.redhat.com/show_bug.cgi?id=628770 - http://www.vupen.com/english/advisories/2011/0298 - http://lists.opensuse.org/opensuse-security-announce/2010-10/msg000