Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-9583 State: PUBLISHED Published: 2018-08-01T17:00:00 Last Updated: 2024-08-06T02:59:02.240Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: The Jasper Project Products: jasper Problem Types: CWE-190, CWE-125 Description: An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html - https://github.com/mdadams/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.
s/jasper/commit/aa0b0f79ade5eef8b0e7a214c03f5af54b36ba7d - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.securityfocus.com/bid/94925 - https://github.com/mdadams/jasper/commit/f25486c3d4aa472fec79150f2c41ed4333395d3d - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9583
CVE ID: CVE-2016-9584 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T02:59:02.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/12/15/5 - http://www.securityfocus.com/bid/94948
CVE ID: CVE-2016-9585 State: PUBLISHED Published: 2018-03-09T15:00:00Z Last Updated: 2024-08-06T02:59:02.542Z Vendors: Red Hat, Inc. Products: EAP-5 Problem Types: CWE-502 Description: Red Hat JBoss EAP version 5 is vulnerable to a deserialization of untrusted data in the JMX endpoint when deserializes the credentials passed to it. An attacker could exploit this vulnerability resulting in a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1404528 - http://www.securityfocus.com/bid/94932
CVE ID: CVE-2016-9586 State: PUBLISHED Published: 2018-04-23T18:00:00 Last Updated: 2024-08-06T02:59:02.246Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: redhat Products: curl Problem Types: CWE-122 Description: curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3558 - https://lists.debian.org/debian-lts-a
Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3558 - https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html - https://curl.haxx.se/docs/adv_20161221A.html - https://github.com/curl/curl/commit/curl-7_51_0-162-g3ab3c16 - http://www.securitytracker.com/id/1037515 - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html - http://www.securityfocus.com/bid/95019 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9586 - https://security.gentoo.org/glsa/201701-47 - https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html
b415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE ID: CVE-2016-9587 State: PUBLISHED Published: 2018-04-24T16:00:00 Last Updated: 2024-08-06T02:59:02.537Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: unspecified Products: Ansible Problem Types: CWE-20 Description: Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible server could use this flaw to execute arbitrary code on the Ansible server using the Ansible server privileges. Additional Analyst Notes: - CVE Program Container: References: - https:/
ble server using the Ansible server privileges. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:0515 - https://www.exploit-db.com/exploits/41013/ - https://security.gentoo.org/glsa/201701-77 - https://access.redhat.com/errata/RHSA-2017:1685 - http://www.securityfocus.com/bid/95352 - https://access.redhat.com/errata/RHSA-2017:0448 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9587 - http://rhn.redhat.com/errata/RHSA-2017-0195.html - http://rhn.redhat.com/errata/RHSA-2017-0260.html
CVE ID: CVE-2016-9588 State: PUBLISHED Published: 2016-12-28T07:42:00 Last Updated: 2024-08-06T02:59:02.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanages the #BP and #OF exceptions, which allows guest OS users to cause a denial of service (guest OS crash) by declining to handle an exception thrown by an L2 guest. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/ef85b67385436ddc1998f45f1d6a210f935b3388 - http://www.openwall.com/lists/oss-security/2016/12/15/3 - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842 - ht
ty/2016/12/15/3 - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842 - https://usn.ubuntu.com/3822-2/ - http://www.debian.org/security/2017/dsa-3804 - http://www.securityfocus.com/bid/94933 - https://bugzilla.redhat.com/show_bug.cgi?id=1404924 - https://usn.ubuntu.com/3822-1/ - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ef85b67385436ddc1998f45f1d6a210f935b3388
CVE ID: CVE-2016-9589 State: PUBLISHED Published: 2018-03-12T15:00:00Z Last Updated: 2024-08-06T02:59:02.944Z Vendors: Red Hat, Inc. Products: wildfly Problem Types: CWE-400 Description: Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in persistent connections. It was found that this cache can easily exploited to fill memory with garbage, up to "max-headers" (default 200) * "max-header-size" (default 1MB) per active TCP connection. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0831.html - http://rhn.redhat.com/e
Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0831.html - http://rhn.redhat.com/errata/RHSA-2017-0876.html - http://rhn.redhat.com/errata/RHSA-2017-0834.html - https://bugzilla.redhat.com/show_bug.cgi?id=1404782 - https://access.redhat.com/errata/RHSA-2017:3458 - http://rhn.redhat.com/errata/RHSA-2017-0832.html - http://www.securityfocus.com/bid/97060 - https://access.redhat.com/errata/RHSA-2017:3455 - https://access.redhat.com/errata/RHSA-2017:3456 - https://access.redhat.com/errata/RHSA-2017:0873 - https://access.redhat.com/errata/RHSA-2017:3454 - http://rhn.redhat.com/errata/RHSA-2017-0830.html - https://access.redhat.com/errata/RHSA-2017:0872
CVE ID: CVE-2016-9590 State: PUBLISHED Published: 2018-04-26T17:00:00 Last Updated: 2024-08-06T02:59:02.247Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: unspecified Products: puppet-swift Problem Types: CWE-200 Description: puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform director's installation of Object Storage (swift). During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf file with world-readable permissions. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-20
dable permissions. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0359.html - http://www.securityfocus.com/bid/95448 - http://rhn.redhat.com/errata/RHSA-2017-0361.html - http://rhn.redhat.com/errata/RHSA-2017-0200.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9590
CVE ID: CVE-2016-9591 State: PUBLISHED Published: 2018-03-09T20:00:00Z Last Updated: 2024-09-17T02:27:40.119Z Vendors: JasPer Project Products: jasper Problem Types: CWE-416 Description: JasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG 2000 image files resulting in a crash on the application using JasPer. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1406405 - https://www.debian.org/security/2017/dsa-3827 - https://security.gentoo.org/glsa/201707-07 - https://access.redhat.com/errata/RHSA-2017:1208 - http://www.securityfocus.com/bid/94952
CVE ID: CVE-2016-9592 State: PUBLISHED Published: 2018-04-16T14:00:00 Last Updated: 2024-08-06T02:59:02.472Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: openshift Problem Types: CWE-460 Description: openshift before versions 3.3.1.11, 3.2.1.23, 3.4 is vulnerable to a flaw when a volume fails to detach, which causes the delete operation to fail with 'VolumeInUse' error. Since the delete operation is retried every 30 seconds for each volume, this could lead to a denial of service attack as the number of API requests being sent to the cloud-provider exceeds the API's rate-limit. Additional Analyst Notes: - CVE Program Container: Refere
being sent to the cloud-provider exceeds the API's rate-limit. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9592 - http://www.securityfocus.com/bid/94991
CVE ID: CVE-2016-9593 State: PUBLISHED Published: 2018-04-16T14:00:00 Last Updated: 2024-08-06T02:59:03.223Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: unspecified Products: foreman-debug Problem Types: CWE-522 Description: foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An attacker with access to the foreman log file would be able to view passwords, allowing them to access those systems. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94985 - https://access.redhat.com/errata/RHSA-2018:0336 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9593
CVE ID: CVE-2016-9594 State: PUBLISHED Published: 2018-04-23T19:00:00 Last Updated: 2024-08-06T02:59:02.701Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: unspecified Products: curl Problem Types: CWE-665 Description: curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value. Having a weak or virtually non-existent random value makes the operations that use it vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95094 - https://curl.haxx.se/docs/adv_20161223.html - https://www.tenable.com/security/tns-2017-04 - http://www
.com/bid/95094 - https://curl.haxx.se/docs/adv_20161223.html - https://www.tenable.com/security/tns-2017-04 - http://www.securitytracker.com/id/1037528 - https://security.gentoo.org/glsa/201701-47 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9594
CVE ID: CVE-2016-9595 State: PUBLISHED Published: 2018-07-27T18:00:00 Last Updated: 2024-08-06T02:59:02.231Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Foreman Products: katello-debug Problem Types: CWE-377 Description: A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:0336 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9595
CVE ID: CVE-2016-9596 State: PUBLISHED Published: 2018-08-16T20:00:00 Last Updated: 2024-08-06T02:59:03.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML document. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-3627. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1408302
CVE ID: CVE-2016-9597 State: PUBLISHED Published: 2018-07-30T14:00:00 Last Updated: 2024-08-06T02:59:03.206Z Vendors: Red Hat Products: libxml2 Problem Types: CWE-674 Description: It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found in libxml2, making it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for the same issue as CVE-2016-3705. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98567 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9597
CVE ID: CVE-2016-9598 State: PUBLISHED Published: 2018-08-16T20:00:00 Last Updated: 2024-08-06T02:59:03.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted XML document. NOTE: this vulnerability exists because of a missing fix for CVE-2016-4483. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1408306 - https://access.redhat.com/errata/RHSA-2018:2486
CVE ID: CVE-2016-9599 State: PUBLISHED Published: 2018-04-23T21:00:00 Last Updated: 2024-08-06T02:59:03.011Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: unspecified Products: puppet-tripleo Problem Types: CWE-284 Description: puppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the IPtables rules management, which allowed the creation of TCP/UDP rules with empty port values. If SSL is enabled, a malicious user could use these open ports to gain access to unauthorized resources. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9599 - http://rhn.redhat.com/
CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9599 - http://rhn.redhat.com/errata/RHSA-2017-0025.html
CVE ID: CVE-2016-9600 State: PUBLISHED Published: 2018-03-12T15:00:00Z Last Updated: 2024-09-16T20:31:19.038Z Vendors: JasPer Products: jasper Problem Types: CWE-476 Description: JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1208 - https://bugzilla.redhat.com/show_bug.cgi?id=1410026 - https://usn.ubuntu.com/3693-1/
CVE ID: CVE-2016-9601 State: PUBLISHED Published: 2018-04-23T21:00:00 Last Updated: 2024-08-06T02:59:02.237Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: unspecified Products: ghostscript Problem Types: CWE-190 Description: ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2_decode_gray_scale_image function which is used to decode halftone segments in a JBIG2 image. A document (PostScript or PDF) with an embedded, specially crafted, jbig2 image could trigger a segmentation fault in ghostscript. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show
fault in ghostscript. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9601 - http://www.securityfocus.com/bid/97095 - http://git.ghostscript.com/?p=jbig2dec.git%3Ba=commit%3Bh=e698d5c11d27212aa1098bc5b1673a3378563092 - https://security.gentoo.org/glsa/201706-24 - https://www.debian.org/security/2017/dsa-3817 - https://bugs.ghostscript.com/show_bug.cgi?id=697457
CVE ID: CVE-2016-9602 State: PUBLISHED Published: 2018-04-26T19:00:00 Last Updated: 2024-08-06T02:59:03.165Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: unspecified Products: Qemu Problem Types: CWE-59 Description: Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04347.html - http://www.securitytracker.com/id/1037604 - https://lists.de
sts.gnu.org/archive/html/qemu-devel/2017-02/msg04347.html - http://www.securitytracker.com/id/1037604 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9602 - http://www.openwall.com/lists/oss-security/2017/01/17/12 - https://lists.gnu.org/archive/html/qemu-devel/2017-01/msg06225.html - https://security.gentoo.org/glsa/201704-01 - http://www.securityfocus.com/bid/95461
CVE ID: CVE-2016-9603 State: PUBLISHED Published: 2018-07-27T21:00:00 Last Updated: 2024-08-06T02:59:02.448Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: QEMU Products: Qemu: Problem Types: CWE-122 Description: A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process. Additional Analyst Notes: - CVE Progra
entially, execute arbitrary code on the host with privileges of the QEMU process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96893 - https://access.redhat.com/errata/RHSA-2017:0983 - https://access.redhat.com/errata/RHSA-2017:0982 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://security.gentoo.org/glsa/201706-03 - https://access.redhat.com/errata/RHSA-2017:1206 - http://www.securitytracker.com/id/1038023 - https://support.citrix.com/article/CTX221578 - https://access.redhat.com/errata/RHSA-2017:0985 - https://access.redhat.com/errata/RHSA-2017:0987 - https://access.redhat.com/errata/RHSA-2017:0984 - https:/
-2017:0985 - https://access.redhat.com/errata/RHSA-2017:0987 - https://access.redhat.com/errata/RHSA-2017:0984 - https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html - https://access.redhat.com/errata/RHSA-2017:0988 - https://access.redhat.com/errata/RHSA-2017:1441 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9603 - https://access.redhat.com/errata/RHSA-2017:0981 - https://access.redhat.com/errata/RHSA-2017:0980 - https://access.redhat.com/errata/RHSA-2017:1205
CVE ID: CVE-2016-9604 State: PUBLISHED Published: 2018-07-11T13:00:00 Last Updated: 2024-08-06T02:59:03.056Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: kernel Products: security Problem Types: CWE-732 Description: It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_trusted_keys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyring. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kerne
the keyring. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ee8f844e3c5a73b999edf733df1c529d6503ec2f - https://access.redhat.com/errata/RHSA-2017:2669 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9604 - https://bugzilla.novell.com/show_bug.cgi?id=1035576 - http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-9604.html - http://www.securityfocus.com/bid/102135 - https://access.redhat.com/errata/RHSA-2017:2077 - https://access.redhat.com/errata/RHSA-2017:1842
CVE ID: CVE-2016-9605 State: PUBLISHED Published: 2018-08-22T21:00:00 Last Updated: 2024-08-06T02:59:02.710Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: The cobbler Project Products: cobbler Problem Types: CWE-79 Description: A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9605
CVE ID: CVE-2016-9606 State: PUBLISHED Published: 2018-03-09T20:00:00Z Last Updated: 2024-09-16T22:30:39.289Z Vendors: Red Hat, Inc. Products: RESTEasy Problem Types: CWE-20 Description: JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy application permissions. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1411 - http://rhn.redhat.com/errata/RHSA-2017-1409.html - http://www.securityfocus.com/bid/94940 - https://bugzilla.redhat.com/show_bug.cgi?id=1400644 - https:
A-2017-1409.html - http://www.securityfocus.com/bid/94940 - https://bugzilla.redhat.com/show_bug.cgi?id=1400644 - https://access.redhat.com/errata/RHSA-2017:1675 - http://www.securitytracker.com/id/1038524 - https://access.redhat.com/errata/RHSA-2017:1254 - https://access.redhat.com/errata/RHSA-2017:1410 - http://rhn.redhat.com/errata/RHSA-2017-1255.html - https://access.redhat.com/errata/RHSA-2017:1412 - https://access.redhat.com/errata/RHSA-2018:2909 - https://access.redhat.com/errata/RHSA-2017:1256 - https://access.redhat.com/errata/RHSA-2017:1253 - https://access.redhat.com/errata/RHSA-2017:1260 - https://access.redhat.com/errata/RHSA-2017:1676 - https://access.redhat.com/errata/RHSA-201
.com/errata/RHSA-2017:1260 - https://access.redhat.com/errata/RHSA-2017:1676 - https://access.redhat.com/errata/RHSA-2018:2913
CVE ID: CVE-2016-9607 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9608 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9609 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9610 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9611 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9612 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9613 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-9614 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.