Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-3306 State: PUBLISHED Published: 2015-05-18T15:00:00 Last Updated: 2024-08-06T05:39:32.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec - https://www.exploit-db.com/exploits/36803/ - http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html - http://www.debian.org/security/2015/dsa-3263 - http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-C
http://www.debian.org/security/2015/dsa-3263 - http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html - http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html - http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html - http://www.securityfocus.com/bid/74238 - https://www.exploit-db.com/exploits/36742/ - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html - http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html - htt
l/package-announce/2015-May/157581.html - http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html - http://packetstormsecurity.com/files/162777/ProFTPd-1.3.5-Remote-Command-Execution.html
CVE ID: CVE-2015-3307 State: PUBLISHED Published: 2015-06-09T18:00:00 Last Updated: 2024-08-06T05:39:32.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) or possibly have unspecified other impact via a crafted tar archive. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1187.html - http://rhn.redhat.com/errata/RHSA-2015-1186.html - http://www.securityfocus.com/bid/74703 - https://bugzilla.redhat.com/show_bug.cgi?id=1223441 - htt
RHSA-2015-1186.html - http://www.securityfocus.com/bid/74703 - https://bugzilla.redhat.com/show_bug.cgi?id=1223441 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - https://bugs.php.net/bug.php?id=69443 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://rhn.redhat.com/errata/RHSA-2015-1135.html - https://support.apple.com/kb/HT205031 - http://rhn.redhat.com/errata/RHSA-2015-1066.html - http://rhn.redhat.com/errata/RHSA-2015-1218.html
CVE ID: CVE-2015-3308 State: PUBLISHED Published: 2015-09-02T14:00:00 Last Updated: 2024-08-06T05:39:32.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted CRL distribution point. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155101.html - http://www.openwall.com/lists/oss-security/2015/04/16/6 - http://www.ubuntu.com/usn/USN-2727-1 - http://www.gnutls.org/security.html#GNUTLS-SA-2015-4 - http://www.securityfocus.c
http://www.ubuntu.com/usn/USN-2727-1 - http://www.gnutls.org/security.html#GNUTLS-SA-2015-4 - http://www.securityfocus.com/bid/74188 - https://gitlab.com/gnutls/gnutls/commit/d6972be33264ecc49a86cd0958209cd7363af1e9 - http://www.openwall.com/lists/oss-security/2015/04/15/6 - https://security.gentoo.org/glsa/201506-03 - http://www.securitytracker.com/id/1033774 - https://gitlab.com/gnutls/gnutls/commit/053ae65403216acdb0a4e78b25ad66ee9f444f02
CVE ID: CVE-2015-3309 State: PUBLISHED Published: 2020-02-13T19:45:45 Last Updated: 2024-08-06T05:39:32.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.2 through 1.5.4 allows remote attackers to read arbitrary files with permissions of the user running the service via a .. (dot dot) in the path parameter of HTTP API requests. NOTE: This vulnerability is due to an incomplete fix to CVE-2015-3297. Additional Analyst Notes: - CVE Program Container: References: - http://cve.killedkenny.io/cve/CVE-2015-3309 - http://www.openwall.com/lists/oss-security/2015/04/16/8 - https://github.com/ether/etherpad-lite/com
cve/CVE-2015-3309 - http://www.openwall.com/lists/oss-security/2015/04/16/8 - https://github.com/ether/etherpad-lite/commit/0fa7650df8f940ed6b577d79836a78eb09726c4b
CVE ID: CVE-2015-3310 State: PUBLISHED Published: 2015-04-24T14:00:00 Last Updated: 2024-08-06T05:47:56.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the rc_mksid function in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 and earlier, when the PID for pppd is greater than 65535, allows remote attackers to cause a denial of service (crash) via a start accounting message to the RADIUS server. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=782450 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:222 - http://www.debian.org/security/2015/dsa-3228 - http://www.ubuntu.com/u
iva.com/security/advisories?name=MDVSA-2015:222 - http://www.debian.org/security/2015/dsa-3228 - http://www.ubuntu.com/usn/USN-2595-1 - http://www.securityfocus.com/bid/74163 - https://security.gentoo.org/glsa/201701-50 - http://advisories.mageia.org/MGASA-2015-0173.html - http://lists.opensuse.org/opensuse-updates/2015-11/msg00147.html
CVE ID: CVE-2015-3313 State: PUBLISHED Published: 2017-09-07T20:00:00 Last Updated: 2024-08-06T05:47:56.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in WordPress Community Events plugin before 1.4. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/community-events/#developers - https://www.exploit-db.com/exploits/36805/ - http://www.securityfocus.com/bid/74234 - http://packetstormsecurity.com/files/131530/WordPress-Community-Events-1.3.5-SQL-Injection.html - http://www.openwall.com/lists/oss-security/2015/05/08/3 - http://www.openwall.com/lists/oss-security/2015/04/16/10
CVE ID: CVE-2015-3314 State: PUBLISHED Published: 2017-09-07T20:00:00 Last Updated: 2024-08-06T05:47:56.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in WordPress Tune Library plugin before 1.5.5. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/tune-library/#developers - http://packetstormsecurity.com/files/131558/WordPress-Tune-Library-1.5.4-SQL-Injection.html - http://www.openwall.com/lists/oss-security/2015/05/08/3 - http://www.securityfocus.com/bid/74236 - http://www.openwall.com/lists/oss-security/2015/04/16/10 - https://www.exploit-db.com/exploits/36802/
CVE ID: CVE-2015-3315 State: PUBLISHED Published: 2017-06-26T15:00:00 Last Updated: 2024-08-06T05:47:56.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root directory related to librpm. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1211835 - https://github.com/abrt/abrt/commit/80408e9e24a1c10f85fd969e1853e0f192157f92 - http://w
at.com/show_bug.cgi?id=1211835 - https://github.com/abrt/abrt/commit/80408e9e24a1c10f85fd969e1853e0f192157f92 - http://www.openwall.com/lists/oss-security/2015/04/16/12 - http://www.openwall.com/lists/oss-security/2015/04/14/4 - http://rhn.redhat.com/errata/RHSA-2015-1083.html - https://github.com/abrt/abrt/commit/17cb66b13997b0159b4253b3f5722db79f476d68 - https://github.com/abrt/abrt/commit/d6e2f6f128cef4c21cb80941ae674c9842681aa7 - http://www.securityfocus.com/bid/75117 - https://www.exploit-db.com/exploits/44097/ - http://rhn.redhat.com/errata/RHSA-2015-1210.html - https://github.com/abrt/abrt/commit/4f2c1ddd3e3b81d2d5146b883115371f1cada9f9
CVE ID: CVE-2015-3316 State: PUBLISHED Published: 2015-06-17T10:00:00 Last Updated: 2024-08-06T05:47:56.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, allows local users to gain privileges via an unspecified environment variable. Additional Analyst Notes: - CVE Program Container: Refere
rs to gain privileges via an unspecified environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032513 - http://www.securityfocus.com/bid/75033 - http://www.securitytracker.com/id/1032512 - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-security-notice-for-ca-common-services.aspx
CVE ID: CVE-2015-3317 State: PUBLISHED Published: 2015-06-17T10:00:00 Last Updated: 2024-08-06T05:47:56.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly perform bounds checking, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes
y perform bounds checking, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032513 - http://www.securityfocus.com/bid/75033 - http://www.securitytracker.com/id/1032512 - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-security-notice-for-ca-common-services.aspx
CVE ID: CVE-2015-3318 State: PUBLISHED Published: 2015-06-17T10:00:00 Last Updated: 2024-08-06T05:47:56.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers (aka SystemEDGE) 12.6, 12.7, 12.8, and 12.9; and CA Workload Automation AE r11, r11.3, r11.3.5, and r11.3.6 on UNIX, does not properly validate an unspecified variable, which allows local users to gain privileges via unknown vectors. Additional Analyst
y validate an unspecified variable, which allows local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032513 - http://www.securityfocus.com/bid/75033 - http://www.securitytracker.com/id/1032512 - http://www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20150604-01-security-notice-for-ca-common-services.aspx
CVE ID: CVE-2015-3319 State: PUBLISHED Published: 2015-04-16T14:00:00 Last Updated: 2024-08-06T05:47:56.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hotspot Express hotEx Billing Manager 73 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/131297/HotExBilling-Manager-73-Cross-Site-Scripting.html - http://seclists.org/fulldisclosure/2015/Apr/18 - http://www.securityfocus.com/archive/1/535186/100/0/threaded - http://www.securityfocus.com/bid/74205
CVE ID: CVE-2015-3320 State: PUBLISHED Published: 2015-04-16T23:00:00 Last Updated: 2024-08-06T05:47:57.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lenovo USB Enhanced Performance Keyboard software before 2.0.2.2 includes active debugging code in SKHOOKS.DLL, which allows local users to obtain keypress information by accessing debug output. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/usbenhancedkeyboard - http://www.securityfocus.com/bid/74196
CVE ID: CVE-2015-3321 State: PUBLISHED Published: 2017-10-02T18:00:00 Last Updated: 2024-08-06T05:47:56.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Services and files in Lenovo Fingerprint Manager before 8.01.42 have incorrect ACLs, which allows local users to invalidate local checks and gain privileges via standard filesystem operations. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/lenovo_fpr
CVE ID: CVE-2015-3322 State: PUBLISHED Published: 2015-04-16T23:00:00 Last Updated: 2024-08-06T05:47:56.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store (1) user and (2) administrator BIOS passwords, which allows attackers to decrypt the passwords via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/ts_bios_pw - http://www.securityfocus.com/bid/74198
CVE ID: CVE-2015-3323 State: PUBLISHED Published: 2015-04-16T23:00:00 Last Updated: 2024-08-06T05:47:56.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350, RD450, RD550, RD650, and TD350 allows remote attackers to cause a denial of service (web interface crash) via a malformed HTTP request during authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74197 - http://support.lenovo.com/us/en/product_security/tsm_weak_pw
CVE ID: CVE-2015-3324 State: PUBLISHED Published: 2015-04-16T23:00:00 Last Updated: 2024-08-06T05:47:57.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350, RD450, RD550, RD650, and TD350 does not validate server certificates during an "encrypted remote KVM session," which allows man-in-the-middle attackers to spoof servers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74199 - http://support.lenovo.com/us/en/product_security/tsm_weak_pw
CVE ID: CVE-2015-3325 State: PUBLISHED Published: 2015-05-15T18:00:00 Last Updated: 2024-08-06T05:47:57.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum.php in the WP Symposium plugin before 15.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the show parameter in the QUERY_STRING to the default URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74237 - http://packetstormsecurity.com/files/131801/WordPress-WP-Symposium-15.1-SQL-Injection.html - https://www.exploit-db.com/exploits/37080/
CVE ID: CVE-2015-3326 State: PUBLISHED Published: 2015-05-14T00:00:00 Last Updated: 2024-08-06T05:47:56.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the web console using a random number generator with predictable values, which makes it easier for remote attackers to bypass authentication via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://esupport.trendmicro.com/solution/en-US/1109669.aspx - http://blog.malerisch.net/2016/05/trendmicro-smex-session-predictable-cve-2015-3326.html - http://
/en-US/1109669.aspx - http://blog.malerisch.net/2016/05/trendmicro-smex-session-predictable-cve-2015-3326.html - http://www.securityfocus.com/bid/74661 - http://www.securitytracker.com/id/1032323
CVE ID: CVE-2015-3329 State: PUBLISHED Published: 2015-06-09T18:00:00 Last Updated: 2024-08-06T05:47:57.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a (1) tar, (2) phar, or (3) ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1187.html - http://rhn.redhat.com/errata/RHSA-2015-1186.html - http://www.securityfocus.com/bid/74240 - http://lists.apple.com/archives/security-announce/
errata/RHSA-2015-1186.html - http://www.securityfocus.com/bid/74240 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - https://bugs.php.net/bug.php?id=69441 - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.securitytracker.com/id/1032145 - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html - https://support.apple.com/HT205267 - http://www.debian.org/security/2015/dsa-3280 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.ubuntu.com/usn/USN-2572-
sa-3280 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.ubuntu.com/usn/USN-2572-1 - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f59b67ae50064560d7bfcdb0d6a8ab284179053c - http://rhn.redhat.com/errata/RHSA-2015-1135.html - https://support.apple.com/kb/HT205031 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html - https://security.gentoo.org/glsa/201606-10 - http://rhn.redhat.com/errata/RHSA-2015-1066.html - http://rhn.redhat.com/errata/RHSA-2015-1218.html
CVE ID: CVE-2015-3330 State: PUBLISHED Published: 2015-06-09T18:00:00 Last Updated: 2024-08-06T05:47:57.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, when the Apache HTTP Server 2.4.x is used, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via pipelined HTTP requests that result in a "deconfigured interpreter." Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1187.html - http://rhn.redhat.com/errata/RHSA-2015-1186.html - http://www.
ces: - http://rhn.redhat.com/errata/RHSA-2015-1187.html - http://rhn.redhat.com/errata/RHSA-2015-1186.html - http://www.securityfocus.com/bid/74204 - http://www.securitytracker.com/id/1033703 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html - http://php.net/ChangeLog-5.php - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html - https://support.apple.com/HT205267 - https://bugs.php.net/bug.php?id=69218 - https://bugs.php.net/bug.php?id=68486 - http://lists.apple.com/archives/secur
- https://bugs.php.net/bug.php?id=69218 - https://bugs.php.net/bug.php?id=68486 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=809610f5ea38a83b284e1125d1fff129bdd615e7 - http://www.ubuntu.com/usn/USN-2572-1 - http://rhn.redhat.com/errata/RHSA-2015-1135.html - https://support.apple.com/kb/HT205031 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html - http://openwall.com/lists/oss-security/2015/04/17/7 - https://security.gentoo.org/glsa/201606-10 - http://rhn.redhat.com/errata/RHSA-2015-1066.html
CVE ID: CVE-2015-3331 State: PUBLISHED Published: 2015-05-27T10:00:00 Last Updated: 2024-08-06T05:47:57.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of service (buffer overflow and system crash) or possibly execute arbitrary code by triggering a crypto API call, as demonstrated by use of a libkcapi test program with an AF_ALG(aead) socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2
an AF_ALG(aead) socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2631-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html - http://www.ubuntu.com/usn/USN-2632-1 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html - https://github.com/torvalds/linux/commit/ccfe8c3f7e52ae83155cb038753f4c75b774ca8a - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3 - https://bugzilla.redhat.com/show_bug.cgi?id=1213322 - http://www.debi
ernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3 - https://bugzilla.redhat.com/show_bug.cgi?id=1213322 - http://www.debian.org/security/2015/dsa-3237 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ccfe8c3f7e52ae83155cb038753f4c75b774ca8a - http://rhn.redhat.com/errata/RHSA-2015-1199.html - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html - http://www.openwall.com/lists/oss-security/2015/04/14/16 - http://www.securitytracker.com/id/1032416 - http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html - http://rhn.redhat.com/errata/RHSA-2015-1081.html
CVE ID: CVE-2015-3332 State: PUBLISHED Published: 2015-05-27T10:00:00 Last Updated: 2024-08-06T05:47:57.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain backport in the TCP Fast Open implementation for the Linux kernel before 3.18 does not properly maintain a count value, which allow local users to cause a denial of service (system crash) via the Fast Open feature, as demonstrated by visiting the chrome://flags/#enable-tcp-fast-open URL when using certain 3.10.x through 3.16.x kernel builds, including longterm-maintenance releases and ckt (aka Canonical Kernel Team) builds. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists
ical Kernel Team) builds. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/04/14/14 - https://bugzilla.redhat.com/show_bug.cgi?id=1213951 - http://www.debian.org/security/2015/dsa-3237 - https://bugs.debian.org/782515 - http://article.gmane.org/gmane.linux.network/359588