Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ues/1834 - https://bugzilla.redhat.com/attachment.cgi?id=1146538 - https://bugzilla.redhat.com/show_bug.cgi?id=1326242 - https://access.redhat.com/errata/RHBA-2016:1501 - http://www.openwall.com/lists/oss-security/2016/05/20/1
CVE ID: CVE-2016-3113 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-05T23:47:57.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1326598
CVE ID: CVE-2016-3114 State: PUBLISHED Published: 2017-04-24T18:00:00 Last Updated: 2024-08-05T23:47:57.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or delete comments by leveraging read access. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/05/02/3
CVE ID: CVE-2016-3115 State: PUBLISHED Published: 2016-03-22T10:00:00 Last Updated: 2024-08-05T23:47:57.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.openssh.com/txt/x11fwd.adv - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-3115 - http://p
cs/security/ovmbulletinjul2016-3090546.html - https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-3115 - http://packetstormsecurity.com/files/136234/OpenSSH-7.2p1-xauth-Command-Injection-Bypass.html - https://www.freebsd.org/security/advisories/FreeBSD-SA-16:14.openssh.asc - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - https://www.exploit-db.com/exploits/39569/ - http://rhn.redhat.com/errata/RHSA-2016-0466.html - http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/session.c - http://www.securitytracker.com/id/1035249 - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183101.html - http://www.oracle.com/technetwork/topic
tp://lists.fedoraproject.org/pipermail/package-announce/2016-April/183101.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/session.c.diff?r1=1.281&r2=1.282&f=h - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180491.html - https://bto.bluecoat.com/security-advisory/sa121 - https://security.gentoo.org/glsa/201612-18 - http://www.securityfocus.com/bid/84314 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179924.html - https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184
n.org/debian-lts-announce/2018/09/msg00010.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184264.html - http://seclists.org/fulldisclosure/2016/Mar/47 - http://rhn.redhat.com/errata/RHSA-2016-0465.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183122.html - http://seclists.org/fulldisclosure/2016/Mar/46 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178838.html
CVE ID: CVE-2016-3116 State: PUBLISHED Published: 2016-03-22T10:00:00 Last Updated: 2024-08-05T23:47:57.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-3115 - https://matt.ucc.asn.au/dropbear/CHANGES - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179269.html - http://packetstormsecurity.com/files/136251/Dropbear-SSHD-xauth-Command-Injection-Bypass.html - http:/
rch/179269.html - http://packetstormsecurity.com/files/136251/Dropbear-SSHD-xauth-Command-Injection-Bypass.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179261.html - http://seclists.org/fulldisclosure/2016/Mar/47 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179870.html - http://lists.opensuse.org/opensuse-updates/2016-03/msg00113.html - https://security.gentoo.org/glsa/201607-08 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00105.html
CVE ID: CVE-2016-3118 State: PUBLISHED Published: 2016-04-06T01:00:00 Last Updated: 2024-08-05T23:47:57.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in CA API Gateway (formerly Layer7 API Gateway) 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160405-01-security-notice-for-ca-api-gateway.aspx
CVE ID: CVE-2016-3119 State: PUBLISHED Published: 2016-03-26T01:00:00 Last Updated: 2024-08-05T23:47:57.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.14.1 mishandles the DB argument, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted request to modify a principal. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-04/msg00055.html - https://lists.debian.org/debian
tainer: References: - http://lists.opensuse.org/opensuse-updates/2016-04/msg00055.html - https://lists.debian.org/debian-lts-announce/2018/01/msg00040.html - http://www.securitytracker.com/id/1035399 - http://lists.opensuse.org/opensuse-updates/2016-04/msg00007.html - http://rhn.redhat.com/errata/RHSA-2016-2591.html - http://www.securityfocus.com/bid/85392 - https://github.com/krb5/krb5/commit/08c642c09c38a9c6454ab43a9b53b2a89b9eef99
CVE ID: CVE-2016-3120 State: PUBLISHED Published: 2016-08-01T01:00:00 Last Updated: 2024-08-05T23:47:57.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x before 1.14.3, when restrict_anonymous_to_tgt is enabled, uses an incorrect client data structure, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via an S4U2Self request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/krb5/krb5/commit/93b4a6306a0026cf1cc31ac4bd8a49ba5d034ba7 - http://www.sec
m Container: References: - https://github.com/krb5/krb5/commit/93b4a6306a0026cf1cc31ac4bd8a49ba5d034ba7 - http://www.securityfocus.com/bid/92132 - https://lists.debian.org/debian-lts-announce/2018/01/msg00040.html - http://lists.opensuse.org/opensuse-updates/2016-09/msg00035.html - http://krbdev.mit.edu/rt/Ticket/Display.html?id=8458 - http://www.securitytracker.com/id/1036442 - http://web.mit.edu/kerberos/krb5-1.13/ - http://rhn.redhat.com/errata/RHSA-2016-2591.html - http://web.mit.edu/kerberos/krb5-1.14/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AWL3KYFRJIX37EAM4DKCQQIQP2WBKL35/
CVE ID: CVE-2016-3124 State: PUBLISHED Published: 2017-02-07T17:00:00 Last Updated: 2024-08-05T23:47:57.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96134 - https://simplesamlphp.org/security/201603-01
CVE ID: CVE-2016-3125 State: PUBLISHED Published: 2016-04-05T20:00:00 Last Updated: 2024-08-05T23:47:57.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman (DH) key to be used and consequently allow attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-06/msg00045.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179905.html - http://www.openwall.com/lists/oss-s
- http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179905.html - http://www.openwall.com/lists/oss-security/2016/03/11/14 - http://proftpd.org/docs/NEWS-1.3.6rc2 - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179109.html - http://proftpd.org/docs/NEWS-1.3.5b - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179143.html - http://lists.opensuse.org/opensuse-updates/2016-05/msg00080.html - http://bugs.proftpd.org/show_bug.cgi?id=4230 - http://www.openwall.com/lists/oss-security/2016/03/11/3
CVE ID: CVE-2016-3126 State: PUBLISHED Published: 2016-04-22T18:00:00 Last Updated: 2024-08-05T23:47:57.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035568 - http://www.blackberry.com/btsc/KB38119
CVE ID: CVE-2016-3127 State: PUBLISHED Published: 2017-03-03T18:00:00 Last Updated: 2024-08-05T23:47:57.391Z Vendors: n/a Products: BlackBerry Good Control Server versions earlier than 2.3.53.62 Problem Types: information disclosure Description: An information disclosure vulnerability in the logging implementation of BlackBerry Good Control Server versions earlier than 2.3.53.62 allows remote attackers to gain and use logged encryption keys to access certain resources within a customer's Good deployment by gaining access to certain diagnostic log files through either a valid logon or an unrelated compromise of the server. Additional Analyst Notes: - CVE Program Container: References: - http:
d logon or an unrelated compromise of the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96629 - http://support.blackberry.com/kb/articleDetail?articleNumber=000038301
CVE ID: CVE-2016-3128 State: PUBLISHED Published: 2017-01-13T09:00:00 Last Updated: 2024-08-05T23:47:57.214Z Vendors: n/a Products: BES12 versions through 12.5.2 Problem Types: spoofing Description: A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimate device to the BES, gain access to device parameters for the BES, or send false information to the BES by gaining access to specific information about a device that was legitimately enrolled on the BES. Additional Analyst Notes: - CVE Program Container: References: - http://support.blackberry.com/kb/articleDetail?articleNumber=000038913 - http://www.securit
ram Container: References: - http://support.blackberry.com/kb/articleDetail?articleNumber=000038913 - http://www.securityfocus.com/bid/95624 - http://www.securitytracker.com/id/1037585
CVE ID: CVE-2016-3129 State: PUBLISHED Published: 2016-12-16T09:02:00 Last Updated: 2024-08-05T23:47:57.227Z Vendors: n/a Products: BlackBerry GEMS versions 2.1.5.3 to 2.2.22.25 Problem Types: remote shell execution Description: A remote shell execution vulnerability in the BlackBerry Good Enterprise Mobility Server (GEMS) implementation of the Apache Karaf command shell in GEMS versions 2.1.5.3 to 2.2.22.25 allows remote attackers to obtain local administrator rights on the GEMS server via commands executed on the Karaf command shell. Additional Analyst Notes: - CVE Program Container: References: - http://support.blackberry.com/kb/articleDetail?articleNumber=000038814&language=None - http:/
m Container: References: - http://support.blackberry.com/kb/articleDetail?articleNumber=000038814&language=None - http://www.securityfocus.com/bid/94959
CVE ID: CVE-2016-3130 State: PUBLISHED Published: 2017-01-13T09:00:00 Last Updated: 2024-08-05T23:47:57.205Z Vendors: n/a Products: BES12 versions through 12.5.2 Problem Types: information disclosure Description: An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt. Additional Analyst Notes: - CVE Program Container: References: - http://support.blackberry.com/kb/articleDetail?articleNumber=000038914 - http://www.securityfocus.com/bid/95924 - http://www
://support.blackberry.com/kb/articleDetail?articleNumber=000038914 - http://www.securityfocus.com/bid/95924 - http://www.securitytracker.com/id/1037584
CVE ID: CVE-2016-3131 State: PUBLISHED Published: 2019-11-26T13:57:45 Last Updated: 2024-08-05T23:47:57.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls. Additional Analyst Notes: - CVE Program Container: References: - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#tsb_120
CVE ID: CVE-2016-3132 State: PUBLISHED Published: 2016-08-07T10:00:00 Last Updated: 2024-08-05T23:47:57.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c in PHP 7.x before 7.0.6 allows remote attackers to execute arbitrary code via a crafted index. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2016-3132 - https://bugs.php.net/bug.php?id=71735 - http://www.securityfocus.com/bid/92356 - http://github.com/php/php-src/commit/28a6ed9f9a36b9c517e4a8a429baf4dd382fc5d5?w=1 - https://php.net/ChangeLog-7.php
CVE ID: CVE-2016-3134 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-05T23:47:57.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - https://github.com/torvalds/linux/commit/54d83fc74aa9ec72794373cb47432c5f7fb1a309 - https://code.google.com/p/google-security-research/issues/detail?i
nux/commit/54d83fc74aa9ec72794373cb47432c5f7fb1a309 - https://code.google.com/p/google-security-research/issues/detail?id=758 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html - http://www.ubuntu.com/usn/USN-2930-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - https://bugzilla.redhat.com/show_bug.cgi?id=1317383 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html -
y-announce/2016-08/msg00003.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html - http://www.ubuntu.com/usn/USN-2930-2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54d83fc74aa9ec72794373cb47432c5f7fb1a309 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html - http://rhn.redhat.com/errata/RHSA-2016-1847.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html - http://www.ubuntu.com/usn/USN-3049-1 - http://rhn.redhat.com/errata/RHSA-2016-1875.html - http://lists.opensuse.org/opensuse-security-announc
/usn/USN-3049-1 - http://rhn.redhat.com/errata/RHSA-2016-1875.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://www.ubuntu.com/usn/USN-2930-3 - http://www.debian.org/security/2016/dsa-3607 - http://www.securitytracker.com/id/1036763 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html - http://www.ubuntu.com/usn/USN-2929-1 - http://www.ubuntu.com/usn/USN-2932-1 - http://www.ubuntu.com/usn/USN-3050-1 -
l - http://www.ubuntu.com/usn/USN-2929-1 - http://www.ubuntu.com/usn/USN-2932-1 - http://www.ubuntu.com/usn/USN-3050-1 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html - http://rhn.redhat.com/errata/RHSA-2016-1883.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-0
nsuse.org/opensuse-security-announce/2016-08/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html - http://www.ubuntu.com/usn/USN-2931-1 - http://www.ubuntu.com/usn/USN-2929-2 - http://www.securityfocus.com/bid/84305
CVE ID: CVE-2016-3135 State: PUBLISHED Published: 2016-04-27T17:00:00 Last Updated: 2024-08-05T23:47:57.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/google-security-research/issues/detail?id=758 - http://www.ubuntu.com/usn/USN-2930-1 - http://www.ubuntu.com/usn/USN-3054-1 - http://www.ubuntu.com/usn/USN-2930-2 - https:
p://www.ubuntu.com/usn/USN-2930-1 - http://www.ubuntu.com/usn/USN-3054-1 - http://www.ubuntu.com/usn/USN-2930-2 - https://github.com/torvalds/linux/commit/d157bd761585605b7882935ffb86286919f62ea1 - http://www.ubuntu.com/usn/USN-3055-1 - http://www.ubuntu.com/usn/USN-3056-1 - http://www.ubuntu.com/usn/USN-2930-3 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d157bd761585605b7882935ffb86286919f62ea1 - https://bugzilla.redhat.com/show_bug.cgi?id=1317386 - http://www.ubuntu.com/usn/USN-3057-1 - http://www.securityfocus.com/bid/84305
CVE ID: CVE-2016-3136 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-05T23:47:57.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device without two interrupt-in endpoint descriptors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2971-2 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg000
g/opensuse-security-announce/2016-06/msg00054.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - http://www.ubuntu.com/usn/USN-2970-1 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4e9a0b05257f29cf4b75f3209243ed71614d062e - https://bugzilla.redhat.com/show_bug.cgi?id=1283370 - http://www.ubuntu.com/usn/USN-2968-1 - http://www.openwall.com/lists/oss-security/2016/03/14/2 - https://github.com/torvalds/linux/commit/4e9a0b05257f29cf4b75f3209243ed71614d062e - http://www.ubuntu.com/usn/USN-2971-3 - http://www.ubuntu.com/usn/USN-2997-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://www.ubuntu.com/us
m/usn/USN-2997-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://www.ubuntu.com/usn/USN-3000-1 - http://www.debian.org/security/2016/dsa-3607 - https://www.exploit-db.com/exploits/39541/ - http://www.ubuntu.com/usn/USN-2971-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1317007 - http://www.ubuntu.com/usn/USN-2996-1 - http://www.ubuntu.com/usn/USN-2968-2 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html - http://www.securityfocus.com/bid/84299 - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1
CVE ID: CVE-2016-3137 State: PUBLISHED Published: 2016-05-02T10:00:00 Last Updated: 2024-08-05T23:47:57.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both an interrupt-in and an interrupt-out endpoint descriptor, related to the cypress_generic_port_probe and cypress_open functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2971-2 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://www.openwa
untu.com/usn/USN-2971-2 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html - http://www.openwall.com/lists/oss-security/2016/03/14/3 - https://bugzilla.redhat.com/show_bug.cgi?id=1316996 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html - http://www.ubuntu.com/usn/USN-2970-1 - https://github.com/torvalds/linux/commit/c55aee1bf0e6b6feec8b2927b43f7a09a6d5f754 - http://www.securityfocus.com/bid/84300 - http://www.ubuntu.com/usn/USN-2968-1 - http://www.ubuntu.com/usn/USN-2971-3 - http://www.ubuntu.com/usn/USN-2997-1 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://www.ubuntu.com/usn/USN-3000-1 - http://www.
lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html - http://www.ubuntu.com/usn/USN-3000-1 - http://www.debian.org/security/2016/dsa-3607 - http://www.ubuntu.com/usn/USN-2971-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00059.html - http://www.ubuntu.com/usn/USN-2996-1 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html - http://www.ubuntu.com/usn/USN-2968-2 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c55aee1bf0e6b6feec8b2927b43f7a09a6d5f754 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - ht
ecurity-announce/2016-05/msg00060.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html - http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1