Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-0346 State: PUBLISHED Published: 2017-05-09T21:00:00 Last Updated: 2024-08-05T13:03:56.603Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service, Escalation of Privileges Description: All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4462 - http://www.securityfocus.com/bid/98503
CVE ID: CVE-2017-0347 State: PUBLISHED Published: 2017-05-09T21:00:00 Last Updated: 2024-08-05T13:03:56.620Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service, Escalation of Privileges Description: All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array, which may lead to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4462
CVE ID: CVE-2017-0348 State: PUBLISHED Published: 2017-05-09T21:00:00 Last Updated: 2024-08-05T13:03:56.672Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service, Escalation of Privileges Description: All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4462
CVE ID: CVE-2017-0349 State: PUBLISHED Published: 2017-05-09T21:00:00 Last Updated: 2024-08-05T13:03:56.797Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service, Escalation of Privileges Description: All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from a user to the driver is not correctly validated before it is dereferenced for a write operation, may lead to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98513 - http://nvidia.cust
tional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98513 - http://nvidia.custhelp.com/app/answers/detail/a_id/4462
CVE ID: CVE-2017-0350 State: PUBLISHED Published: 2017-05-09T21:00:00 Last Updated: 2024-08-05T13:03:56.538Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service Description: All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used in an offset calculation may lead to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4462 - http://www.securityfocus.com/bid/98490
CVE ID: CVE-2017-0351 State: PUBLISHED Published: 2017-05-09T21:00:00 Last Updated: 2024-08-05T13:03:56.537Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service, Escalation of Privileges Description: All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4462 - http://www.securityfocus.com/bid/98497
CVE ID: CVE-2017-0352 State: PUBLISHED Published: 2017-05-09T21:00:00 Last Updated: 2024-08-05T13:03:56.684Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Escalation of Privileges Description: All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where incorrect access control may allow CPU access sensitive GPU control registers, leading to an escalation of privileges Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4462 - http://www.securityfocus.com/bid/98517
CVE ID: CVE-2017-0353 State: PUBLISHED Published: 2017-05-09T21:00:00 Last Updated: 2024-08-05T13:03:56.820Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service Description: All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where due to improper locking on certain conditions may lead to a denial of service Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4462
CVE ID: CVE-2017-0354 State: PUBLISHED Published: 2017-05-09T21:00:00 Last Updated: 2024-08-05T13:03:56.540Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service Description: All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where a call to certain function requiring lower IRQL can be made under raised IRQL which may lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://nvidia.custhelp.com/app/answers/detail/a_id/4462
CVE ID: CVE-2017-0355 State: PUBLISHED Published: 2017-05-09T21:00:00 Last Updated: 2024-08-05T13:03:56.567Z Vendors: Nvidia Corporation Products: GPU Display Driver Problem Types: Denial of Service Description: All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where it may access paged memory while holding a spinlock, leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98516 - http://nvidia.custhelp.com/app/answers/detail/a_id/4462
CVE ID: CVE-2017-0356 State: PUBLISHED Published: 2018-04-13T15:00:00Z Last Updated: 2024-09-17T02:51:42.751Z Vendors: ikiwiki Products: ikiwiki Problem Types: authentication bypass Description: A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2017/dsa-3760 - https://ikiwiki.info/security/#cve-2017-0356 - https://marc.info/?l=oss-security&m=148418234314276&w=2 - http://www.securityfocus.com/bid/95420
CVE ID: CVE-2017-0357 State: PUBLISHED Published: 2018-04-13T15:00:00Z Last Updated: 2024-09-17T00:51:08.814Z Vendors: iucode-tool Products: iucode-tool Problem Types: heap-buffer overflow Description: A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading to SIGSEGV, or heap corruption. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2017-0357 - https://gitlab.com/iucode-tool/iucode-tool/issues/3 - http://www.securityfocus.com/bid/95432
CVE ID: CVE-2017-0358 State: PUBLISHED Published: 2018-04-13T15:00:00Z Last Updated: 2024-09-17T04:15:15.844Z Vendors: ntfs-3g Products: ntfs-3g Problem Types: privilege escalation Description: Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201702-10 - https://www.debian.org/security/2017/dsa-3780 - https://www.exploit-db.com/exploits/41240/ - https://www.exploit-db.com/exploits/41356/ -
.org/security/2017/dsa-3780 - https://www.exploit-db.com/exploits/41240/ - https://www.exploit-db.com/exploits/41356/ - http://www.securityfocus.com/bid/95987 - https://marc.info/?l=oss-security&m=148594671929354&w=2 - http://www.openwall.com/lists/oss-security/2017/02/04/1
CVE ID: CVE-2017-0359 State: PUBLISHED Published: 2018-04-13T16:00:00Z Last Updated: 2024-09-16T17:38:23.607Z Vendors: Debian Products: diffoscope Problem Types: writes to arbitrary locations Description: diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/854723 - https://security-tracker.debian.org/tracker/CVE-2017-0359
CVE ID: CVE-2017-0360 State: PUBLISHED Published: 2017-04-04T17:00:00 Last Updated: 2024-08-05T13:03:57.006Z Vendors: n/a Products: tryton-server before 3.4.0-3+deb8u3 Problem Types: information disclosure Description: file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2017/dsa-3826 - http://hg.tryton.org/trytond?cmd=changeset%3Bnode=472510fdc6f8 - https://lists.debian.org/debian-security-annou
a-3826 - http://hg.tryton.org/trytond?cmd=changeset%3Bnode=472510fdc6f8 - https://lists.debian.org/debian-security-announce/2017/msg00084.html - http://www.securityfocus.com/bid/97489
CVE ID: CVE-2017-0361 State: PUBLISHED Published: 2018-04-13T16:00:00Z Last Updated: 2024-09-16T21:07:38.929Z Vendors: mediawiki Products: mediawiki Problem Types: information disclosure Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an information disclosure flaw, where the api.log might contain passwords in plaintext. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html - https://security-tracker.debian.org/tracker/CVE-2017-0361 - https://phabricator.wikimedia.org/T125177 - http://www.securitytracker.com/id/1039812
CVE ID: CVE-2017-0362 State: PUBLISHED Published: 2018-04-13T16:00:00Z Last Updated: 2024-09-16T20:22:32.537Z Vendors: mediawiki Products: mediawiki Problem Types: missing requirement on token Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where the "Mark all pages visited" on the watchlist does not require a CSRF token. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T150044 - https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html - https://security-tracker.debian.org/tracker/CVE-2017-0362
CVE ID: CVE-2017-0363 State: PUBLISHED Published: 2018-04-13T16:00:00Z Last Updated: 2024-09-16T19:21:14.211Z Vendors: mediawiki Products: mediawiki Problem Types: redirection to other external sites Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 has a flaw where Special:UserLogin?returnto=interwiki:foo will redirect to external sites. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html - https://phabricator.wikimedia.org/T109140 - https://security-tracker.debian.org/tracker/CVE-2017-0363
CVE ID: CVE-2017-0364 State: PUBLISHED Published: 2018-04-13T16:00:00Z Last Updated: 2024-09-16T18:29:54.846Z Vendors: mediawiki Products: mediawiki Problem Types: rediretion to any interwiki link Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where Special:Search allows redirects to any interwiki link. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html - https://security-tracker.debian.org/tracker/CVE-2017-0364 - https://phabricator.wikimedia.org/T122209
CVE ID: CVE-2017-0365 State: PUBLISHED Published: 2018-04-13T16:00:00Z Last Updated: 2024-09-16T18:03:35.711Z Vendors: mediawiki Products: mediawiki Problem Types: cross-site scripting Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a XSS vulnerability in SearchHighlighter::highlightText() with non-default configurations. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html - https://phabricator.wikimedia.org/T144845 - https://security-tracker.debian.org/tracker/CVE-2017-0365
CVE ID: CVE-2017-0366 State: PUBLISHED Published: 2018-04-13T16:00:00Z Last Updated: 2024-09-16T16:13:20.587Z Vendors: mediawiki Products: mediawiki Problem Types: bypass filter Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG filter using default attribute values in DTD declaration. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html - https://phabricator.wikimedia.org/T151735 - https://security-tracker.debian.org/tracker/CVE-2017-0366
CVE ID: CVE-2017-0367 State: PUBLISHED Published: 2018-04-13T16:00:00Z Last Updated: 2024-09-17T00:01:46.702Z Vendors: mediawiki Products: mediawiki Problem Types: usafe use of system tmp directory. Description: Mediawiki before 1.28.1 / 1.27.2 contains an unsafe use of temporary directory, where having LocalisationCache directory default to system tmp directory is insecure. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html - https://phabricator.wikimedia.org/T161453 - https://security-tracker.debian.org/tracker/CVE-2017-0367
CVE ID: CVE-2017-0368 State: PUBLISHED Published: 2018-04-13T16:00:00Z Last Updated: 2024-09-16T23:30:26.165Z Vendors: mediawiki Products: mediawiki Problem Types: missing sanitization Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw making rawHTML mode apply to system messages. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html - https://phabricator.wikimedia.org/T156184 - https://security-tracker.debian.org/tracker/CVE-2017-0368
CVE ID: CVE-2017-0369 State: PUBLISHED Published: 2018-04-13T16:00:00Z Last Updated: 2024-09-16T20:58:15.383Z Vendors: mediawiki Products: mediawiki Problem Types: restriction bypass Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw, allowing a sysops to undelete pages, although the page is protected against it. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html - https://security-tracker.debian.org/tracker/CVE-2017-0369 - https://phabricator.wikimedia.org/T108138
CVE ID: CVE-2017-0370 State: PUBLISHED Published: 2018-04-13T16:00:00Z Last Updated: 2024-09-16T17:02:56.884Z Vendors: mediawiki Products: mediawiki Problem Types: blacklist ineffective on certain URLs Description: Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html - https://security-tracker.debian.org/tracker/CVE-2017-0370 - https://phabricator.wikimedia.org/T48143
CVE ID: CVE-2017-0371 State: PUBLISHED Published: 2022-02-18T22:29:30 Last Updated: 2024-08-05T13:03:57.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors via a style="background-image: attr(title url);" attack within a DIV element that has an attacker-controlled URL in the title attribute. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T140591 - https://phabricator.wikimedia.org/T68404
CVE ID: CVE-2017-0372 State: PUBLISHED Published: 2018-04-13T16:00:00Z Last Updated: 2024-09-16T16:27:46.256Z Vendors: mediawiki Products: mediawiki (SyntaxHighlight extension) Problem Types: parameter injection Description: Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html - https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000209.html - https://bugs.debian.org/861585 - https://phabricator.wikimedia.org/T158689 - https://security-tracker.d
il/000209.html - https://bugs.debian.org/861585 - https://phabricator.wikimedia.org/T158689 - https://security-tracker.debian.org/tracker/CVE-2017-0372
CVE ID: CVE-2017-0373 State: PUBLISHED Published: 2017-05-23T18:00:00 Last Updated: 2024-08-05T13:03:56.990Z Vendors: n/a Products: libconfig-model-perl Problem Types: library mishandling Description: The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file. Additional Analyst Notes: - CVE Program Container: References: - https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/commit/?h=stretch&id=e7e5dd1a650939a0e021d1d5b311dbb3c4884773 - http://cpansearch.perl.org/src/DDUMONT
ig-model-perl.git/commit/?h=stretch&id=e7e5dd1a650939a0e021d1d5b311dbb3c4884773 - http://cpansearch.perl.org/src/DDUMONT/Config-Model-2.102/Changes - https://security-tracker.debian.org/tracker/CVE-2017-0373
CVE ID: CVE-2017-0374 State: PUBLISHED Published: 2017-05-23T18:00:00 Last Updated: 2024-08-05T13:03:57.122Z Vendors: n/a Products: libconfig-model-perl Problem Types: untrusted include directory Description: lib/Config/Model.pm in Config-Model (aka libconfig-model-perl) before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the INC array. Additional Analyst Notes: - CVE Program Container: References: - http://cpansearch.perl.org/src/DDUMONT/Config-Model-2.102/Changes - https://security-tracker.debian.org/tracker/CVE-2017-0374 - https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/commit/?h=stret
n.org/tracker/CVE-2017-0374 - https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/commit/?h=stretch&id=0de8471e5a8958ad37446dfcd0362a269e3ec573
CVE ID: CVE-2017-0375 State: PUBLISHED Published: 2017-06-09T17:00:00 Last Updated: 2024-08-05T13:03:57.084Z Vendors: n/a Products: Tor before 0.3.0.8 Problem Types: reachable assertion Description: The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_ function via a malformed BEGIN cell. Additional Analyst Notes: - CVE Program Container: References: - https://trac.torproject.org/projects/tor/ticket/22493 - http://www.securityfocus.com/bid/99017 - https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.html - https://github.com/torproject/tor/commit/79b59a2dfcb68897ee89d98587d09e55f07
ermail/tor-announce/2017-June/000131.html - https://github.com/torproject/tor/commit/79b59a2dfcb68897ee89d98587d09e55f07e68d7
CVE ID: CVE-2017-0376 State: PUBLISHED Published: 2017-06-09T17:00:00 Last Updated: 2024-08-05T13:03:57.029Z Vendors: n/a Products: Tor before 0.3.0.8 Problem Types: reachable assertion Description: The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell function via a BEGIN_DIR cell on a rendezvous circuit. Additional Analyst Notes: - CVE Program Container: References: - https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.html - http://www.debian.org/security/2017/dsa-3877 - https://trac.torproject.org/projects/tor/ticket/22494 - https://github.com/torproject/tor/commit/56a7c5b
2017/dsa-3877 - https://trac.torproject.org/projects/tor/ticket/22494 - https://github.com/torproject/tor/commit/56a7c5bc15e0447203a491c1ee37de9939ad1dcd
CVE ID: CVE-2017-0377 State: PUBLISHED Published: 2017-07-02T15:00:00 Last Updated: 2024-08-05T13:03:56.989Z Vendors: n/a Products: Tor Problem Types: privacy bypass Description: Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's family), which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families. Additional Analyst Notes: - CVE Program Container: References: - https://trac.torproject.org/projects/tor/ticket/22753 - https://security-tracker.debian.org/CVE-2017-0377 - https://blog.torproject.org/blog/tor-0309-released-security-update-clients - https://blog.torproject.or
/CVE-2017-0377 - https://blog.torproject.org/blog/tor-0309-released-security-update-clients - https://blog.torproject.org/blog/tor-0314-alpha-released-security-update-clients - https://github.com/torproject/tor/commit/665baf5ed5c6186d973c46cdea165c0548027350
CVE ID: CVE-2017-0378 State: PUBLISHED Published: 2017-07-20T17:00:00 Last Updated: 2024-08-05T13:03:56.981Z Vendors: n/a Products: phamm before 0.6.7 Problem Types: XSS Description: XSS exists in the login_form function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATH_INFO to main.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99927 - http://www.openwall.com/lists/oss-security/2017/07/20/3 - https://github.com/lota/phamm/issues/21 - https://bugs.debian.org/868988 - http://www.phamm.org/docs/CHANGELOG
CVE ID: CVE-2017-0379 State: PUBLISHED Published: 2017-08-29T22:00:00 Last Updated: 2024-08-05T13:03:56.982Z Vendors: n/a Products: libgcrypt Problem Types: local side-channel attack Description: Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100503 - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - http://www.securitytracker.com/id/1041294 - https://www.d
le.com/technetwork/security-advisory/cpujan2019-5072801.html - http://www.securitytracker.com/id/1041294 - https://www.debian.org/security/2017/dsa-3959 - https://lists.debian.org/debian-security-announce/2017/msg00221.html - https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=da780c8183cccc8f533c8ace8211ac2cb2bdee7b - https://eprint.iacr.org/2017/806 - https://security-tracker.debian.org/tracker/CVE-2017-0379 - https://security.netapp.com/advisory/ntap-20180726-0002/ - https://bugs.debian.org/873383
CVE ID: CVE-2017-0380 State: PUBLISHED Published: 2017-09-18T16:00:00 Last Updated: 2024-08-05T13:03:57.111Z Vendors: n/a Products: Tor before 0.3.1.7 Problem Types: use of uninitialized stack data Description: The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit. Additional Analyst Notes: - CVE Progr