Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-1802 State: PUBLISHED Published: 2015-03-20T14:00:00 Last Updated: 2024-08-06T04:54:16.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a (1) negative or (2) large property count in a BDF font file. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - https://security.gentoo.org/glsa/201507-21 - http://lists.opensuse.org/opensuse-security-
rity/cpujul2015-2367936.html - https://security.gentoo.org/glsa/201507-21 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html - http://www.securityfocus.com/bid/73277 - http://www.ubuntu.com/usn/USN-2536-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152838.html - http://rhn.redhat.com/errata/RHSA-2015-1708.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html - http://www.securitytracker.com/id/1031935 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152497.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.debian.org/security/2015/dsa-3194 - h
w.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.debian.org/security/2015/dsa-3194 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:145 - http://www.x.org/wiki/Development/Security/Advisory-2015-03-17/ - http://advisories.mageia.org/MGASA-2015-0113.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html
CVE ID: CVE-2015-1803 State: PUBLISHED Published: 2015-03-20T14:00:00 Last Updated: 2024-08-06T04:54:16.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a crafted BDF font file. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - https://security.gentoo.org/glsa/201507-21 - http://list
racle.com/technetwork/topics/security/cpujul2015-2367936.html - https://security.gentoo.org/glsa/201507-21 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html - http://www.ubuntu.com/usn/USN-2536-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152838.html - http://rhn.redhat.com/errata/RHSA-2015-1708.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html - http://www.securitytracker.com/id/1031935 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152497.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.debian.org/security/2015/dsa-3194 - http://ww
.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.debian.org/security/2015/dsa-3194 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:145 - http://www.x.org/wiki/Development/Security/Advisory-2015-03-17/ - http://advisories.mageia.org/MGASA-2015-0113.html - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html - http://www.securityfocus.com/bid/73280
CVE ID: CVE-2015-1804 State: PUBLISHED Published: 2015-03-20T14:00:00 Last Updated: 2024-08-06T04:54:16.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - https://security.gentoo.org/glsa/201507-21 - http://lists.op
e.com/technetwork/topics/security/cpujul2015-2367936.html - https://security.gentoo.org/glsa/201507-21 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html - http://lists.opensuse.org/opensuse-updates/2015-12/msg00074.html - http://www.ubuntu.com/usn/USN-2536-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152838.html - http://rhn.redhat.com/errata/RHSA-2015-1708.html - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html - http://www.securitytracker.com/id/1031935 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152497.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.
ail/package-announce/2015-March/152497.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.debian.org/security/2015/dsa-3194 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:145 - http://www.x.org/wiki/Development/Security/Advisory-2015-03-17/ - http://advisories.mageia.org/MGASA-2015-0113.html - http://www.securityfocus.com/bid/73279 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html
CVE ID: CVE-2015-1805 State: PUBLISHED Published: 2015-08-08T10:00:00 Last Updated: 2024-08-06T04:54:16.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1211.html - http://www.debian.org/security/2015/dsa-3290 -
ntainer: References: - http://rhn.redhat.com/errata/RHSA-2015-1211.html - http://www.debian.org/security/2015/dsa-3290 - http://www.securitytracker.com/id/1032454 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html - http://www.securityfocus.com/bid/74951 - http://rhn.redhat.com/errata/RHSA-2015-1120.html - http://www.ubuntu.com/usn/USN-2967-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html - http://source.android.com/security/bulletin/2016-05-01.html - https://bugzilla.redhat.com/show_bug.cgi?id=1202855 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html - http://www.ubuntu.com/usn/USN-2680-1 - http://rhn.redhat.
pensuse.org/opensuse-security-announce/2015-09/msg00008.html - http://www.ubuntu.com/usn/USN-2680-1 - http://rhn.redhat.com/errata/RHSA-2015-1082.html - http://www.ubuntu.com/usn/USN-2679-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html - http://www.ubuntu.com/usn/USN-2967-2 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html - http://rhn.redhat.com/errata/RHSA-2015-1138.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://rhn.redhat.com/errata/RHSA-2015-1190.html - http://www.openwall.com/lists/oss-security/2015/06/06/2 - http://rhn.redhat.com/errata/RHSA-2015-1199.html - http://www.ubuntu.
www.openwall.com/lists/oss-security/2015/06/06/2 - http://rhn.redhat.com/errata/RHSA-2015-1199.html - http://www.ubuntu.com/usn/USN-2681-1 - http://rhn.redhat.com/errata/RHSA-2015-1042.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f0d1bec9d58d4c038d0ac958c9af82be6eb18045 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00010.html - http://source.android.com/security/bulletin/2016-04-02.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html - http://rhn.redhat.com/errata/RHSA-2015-1137.html - http://lists.opensuse.org/opensuse-security-ann
15-07/msg00023.html - http://rhn.redhat.com/errata/RHSA-2015-1137.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=637b58c2887e5e57850865839cc75f59184b23d1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html - https://github.com/torvalds/linux/commit/f0d1bec9d58d4c038d0ac958c9af82be6eb18045 - https://github.com/torvalds/linux/commit/637b58c2887e5e57850865839cc75f59184b23d1 - http://rhn.redhat.com/errata/RHSA-2015-1081.html
CVE ID: CVE-2015-1806 State: PUBLISHED Published: 2015-10-16T20:00:00 Last Updated: 2024-08-06T04:54:16.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration permission to gain privileges and execute arbitrary code on the master via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1205620 - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-02-27 - http://rhn.redhat.com/errata/RHSA-2015-184
//wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-02-27 - http://rhn.redhat.com/errata/RHSA-2015-1844.html
CVE ID: CVE-2015-1807 State: PUBLISHED Published: 2015-10-16T20:00:00 Last Updated: 2024-08-06T04:54:16.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with certain permissions to read arbitrary files via a symlink, related to building artifacts. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1205622 - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-02-27 - http://rhn.redhat.com/errata/RHSA-2015-1844.html
CVE ID: CVE-2015-1808 State: PUBLISHED Published: 2015-10-16T20:00:00 Last Updated: 2024-08-06T04:54:16.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users to cause a denial of service (improper plug-in and tool installation) via crafted update center data. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1205623 - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-02-27 - http://rhn.redhat.com/errata/RHSA-2015-1844.html
CVE ID: CVE-2015-1809 State: PUBLISHED Published: 2020-01-15T18:05:30 Last Updated: 2024-08-06T04:54:16.372Z Vendors: CloudBees Products: Jenkins, Jenkins LTS Problem Types: Other Description: XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1205625 - https://jenkins.io/security/advisory/2015-02-27/
CVE ID: CVE-2015-1810 State: PUBLISHED Published: 2015-10-16T20:00:00 Last Updated: 2024-08-06T04:54:16.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the "Jenkins' own user database" setting, which allows remote attackers to gain privileges by creating a reserved name. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-02-27 - http://rhn.redhat.com/errata/RHSA-2015-1844.html - https://bugzilla.redhat.
URITY/Jenkins+Security+Advisory+2015-02-27 - http://rhn.redhat.com/errata/RHSA-2015-1844.html - https://bugzilla.redhat.com/show_bug.cgi?id=1205627
CVE ID: CVE-2015-1811 State: PUBLISHED Published: 2020-01-15T18:05:34 Last Updated: 2024-08-06T04:54:16.333Z Vendors: CloudBees Products: Jenkins, Jenkins LTS Problem Types: Other Description: XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1205632 - https://jenkins.io/security/advisory/2015-02-27/
CVE ID: CVE-2015-1812 State: PUBLISHED Published: 2015-10-16T20:00:00 Last Updated: 2024-08-06T04:54:16.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1813. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1205615 - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-03-23 - http://rhn.redhat.com/errata/RHSA-2015-1844.html
CVE ID: CVE-2015-1813 State: PUBLISHED Published: 2015-10-16T20:00:00 Last Updated: 2024-08-06T04:54:16.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-1812. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1205615 - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-03-23 - http://rhn.redhat.com/errata/RHSA-2015-1844.html
CVE ID: CVE-2015-1814 State: PUBLISHED Published: 2015-10-16T20:00:00 Last Updated: 2024-08-06T04:54:16.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: The API token-issuing service in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to gain privileges via a "forced API token change" involving anonymous users. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1205616 - https://access.redhat.com/errata/RHSA-2016:0070 - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-03-23 - http://rhn.redhat.com/errata/RHSA-2015-1844.html
CVE ID: CVE-2015-1815 State: PUBLISHED Published: 2015-03-30T14:00:00 Last Updated: 2024-08-06T04:54:16.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154427.html - http://www.securityfocus.com/bid/73374 - https://www.exploit-db.com/exploits/36564/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154444.html - http://www.openwall.com/lists
6564/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154444.html - http://www.openwall.com/lists/oss-security/2015/03/26/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1206050 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154147.html - http://rhn.redhat.com/errata/RHSA-2015-0729.html - http://www.osvdb.org/119966 - https://github.com/stealth/troubleshooter - https://bugzilla.redhat.com/show_bug.cgi?id=1203352
CVE ID: CVE-2015-1816 State: PUBLISHED Published: 2015-08-14T18:00:00 Last Updated: 2024-08-06T04:54:16.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in-the-middle attackers to spoof LDAP servers via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2015:1592 - https://github.com/theforeman/foreman/pull/2265 - http://projects.theforeman.org/issues/9858 - https://access.redhat.com/errata/RHSA-2015:1591 - https://groups.google.com/forum/#%21topic/foreman-announce/9ZnuPcplNLI
CVE ID: CVE-2015-1817 State: PUBLISHED Published: 2017-08-18T16:00:00 Last Updated: 2024-08-06T04:54:16.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the inet_pton function in network/inet_pton.c in musl libc 0.9.15 through 1.0.4, and 1.1.0 through 1.1.7 allows attackers to have unspecified impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/03/30/3 - http://www.securityfocus.com/bid/73408
CVE ID: CVE-2015-1818 State: PUBLISHED Published: 2015-08-11T14:00:00 Last Updated: 2024-08-06T04:54:16.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML external entity (XXE) vulnerability in the dashbuilder import facility (DocumentBuilders in org.jboss.dashboard.export.ImportManagerImpl) in Red Hat JBoss BPM Suite before 6.1.2 allows remote attackers to read arbitrary files, conduct server-side request forgery (SSRF) attacks, and have other unspecified impact via a crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1539.html - http://rhn.redhat.com/errata/RHSA-2015-1704.html
CVE ID: CVE-2015-1819 State: PUBLISHED Published: 2015-08-14T18:00:00 Last Updated: 2024-08-06T04:54:16.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-2550.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - http://www.debian.org/security/
sg00031.html - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - http://www.debian.org/security/2015/dsa-3430 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172943.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://xmlsoft.org/news.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://security.gentoo.org/glsa/201507-08 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - http://www.securityfocus.com/bid/75570 - http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172710.html - http://www.securitytracker.com/id/10342
//lists.fedoraproject.org/pipermail/package-announce/2015-November/172710.html - http://www.securitytracker.com/id/1034243 - http://www.ubuntu.com/usn/USN-2812-1 - http://rhn.redhat.com/errata/RHSA-2015-1419.html - https://security.gentoo.org/glsa/201701-37 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html - https://git.gnome.org/browse/libxml2/commit/?id=213f1fe0d76d30eaed6e5853057defc43e6df2c9 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html - https://support.apple.com/HT206169 - https://support.apple.com/HT206166 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2015-1820 State: PUBLISHED Published: 2017-08-09T18:00:00 Last Updated: 2024-08-06T04:54:16.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtain sensitive cookie information by leveraging passage of cookies set in a response to a redirect. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rest-client/rest-client/issues/369 - http://www.securityfocus.com/bid/73295 - https://bugzilla.redhat.com/show_bug.cgi?id=1205291 - http://www.openwall.com/lists/oss-security/2015/03/24/3
CVE ID: CVE-2015-1821 State: PUBLISHED Published: 2015-04-16T14:00:00 Last Updated: 2024-08-06T04:54:16.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in chrony before 1.31.1 allows remote authenticated users to cause a denial of service (chronyd crash) or possibly execute arbitrary code by configuring the (1) NTP or (2) cmdmon access with a subnet size that is indivisible by four and an address with a nonzero bit in the subnet remainder. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3222 - http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.html - http://w
ty/2015/dsa-3222 - http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.html - http://www.securityfocus.com/bid/73955 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://security.gentoo.org/glsa/201507-01
CVE ID: CVE-2015-1822 State: PUBLISHED Published: 2015-04-16T14:00:00 Last Updated: 2024-08-06T04:54:16.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and daemon crash) or possibly execute arbitrary code via a large number of command requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3222 - http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.html - http://ww
y/2015/dsa-3222 - http://listengine.tuxfamily.org/chrony.tuxfamily.org/chrony-announce/2015/04/msg00002.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://security.gentoo.org/glsa/201507-01 - http://www.securityfocus.com/bid/73956
CVE ID: CVE-2015-1823 State: REJECTED Published: 2020-11-05T22:17:33 Last Updated: 2020-11-05T22:17:33 Description: No description available.
CVE ID: CVE-2015-1824 State: REJECTED Published: 2020-11-05T22:18:16 Last Updated: 2020-11-05T22:18:16 Description: No description available.
CVE ID: CVE-2015-1825 State: REJECTED Published: 2020-11-05T22:18:50 Last Updated: 2020-11-05T22:18:50 Description: No description available.
CVE ID: CVE-2015-1826 State: REJECTED Published: 2020-11-05T22:19:23 Last Updated: 2020-11-05T22:19:23 Description: No description available.
CVE ID: CVE-2015-1827 State: PUBLISHED Published: 2015-03-30T14:00:00 Last Updated: 2024-08-06T04:54:16.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_user_grouplist function in the extdom plug-in in FreeIPA before 4.1.4 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (crash) via a group list request for a user that belongs to a large number of groups. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1205200 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154314.html - https://fedorahosted.org/freeipa/ticket/
p://lists.fedoraproject.org/pipermail/package-announce/2015-April/154314.html - https://fedorahosted.org/freeipa/ticket/4908 - http://www.securityfocus.com/bid/73376 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154103.html - http://rhn.redhat.com/errata/RHSA-2015-0728.html