deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-2735
Published: 2011-08-23
Description: Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.1 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code by sending a crafted message over TCP.
CVSS Score: 7.9 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/45703; http://securityreason.com/securityalert/8352; http://securitytracker.com/id?1025958
CVE: CVE-2011-3266
Published: 2011-08-24
Description: The proto_tree_add_item function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8, when the IKEv1 protocol dissector is used, allows user-assisted remote attackers to cause a denial of service (infinite loop) via vectors involving a malformed IKE packet and many items in a tree.
CVSS Score: 2.6 (LOW)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00022.html; http://securityreason.com/securityalert/8351
CVE: CVE-2010-4825
Published: 2011-08-24
Description: Cross-site scripting (XSS) vulnerability in magpie_debug.php in the Twitter Feed plugin (wp-twitter-feed) 0.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/42542; http://www.johnleitch.net/Vulnerabilities/WordPress.Twitter.Feed.0.3.1.Reflected.Cross-site.Scripting/68; http://www.osvdb.org/69760
CVE: CVE-2010-4826
Published: 2011-08-24
Description: SQL injection vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to execute arbitrary SQL commands via the M_NAME parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://forum.snitz.com/forum/topic.asp?TOPIC_ID=69770; http://osvdb.org/69794; http://secunia.com/advisories/42308
CVE: CVE-2010-4827
Published: 2011-08-24
Description: Cross-site scripting (XSS) vulnerability in members.asp in Snitz Forums 2000 3.4.07 allows remote attackers to inject arbitrary web script or HTML via the M_NAME parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forum.snitz.com/forum/topic.asp?TOPIC_ID=69770; http://osvdb.org/69793; http://secunia.com/advisories/42308
CVE: CVE-2010-4828
Published: 2011-08-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to MapView.aspx; NetObject parameter to (2) NodeDetails.aspx and (3) InterfaceDetails.aspx; and the (4) ChartName parameter to CustomChart.aspx.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/42486; http://securityreason.com/securityalert/8349; http://www.securityfocus.com/archive/1/515083/100/0/threaded
CVE: CVE-2010-4829
Published: 2011-08-24
Description: SQL injection vulnerability in processview.asp in Techno Dreams (T-Dreams) Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/42488; http://www.exploit-db.com/exploits/15677; http://www.osvdb.org/69635
CVE: CVE-2010-4830
Published: 2011-08-24
Description: SQL injection vulnerability in Resumes/TD_RESUME_Indlist.asp in Techno Dreams (T-Dreams) Job Career Package 3.0 allows remote attackers to execute arbitrary SQL commands via the z_Residency parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/files/view/96375/tdreamsjsp-sql.txt; http://secunia.com/advisories/34996; http://securityreason.com/securityalert/8353
CVE: CVE-2011-1657
Published: 2011-08-25
Description: The (1) ZipArchive::addGlob and (2) ZipArchive::addPattern functions in ext/zip/php_zip.c in PHP 5.3.6 allow context-dependent attackers to cause a denial of service (application crash) via certain flags arguments, as demonstrated by (a) GLOB_ALTDIRFUNC and (b) GLOB_APPEND.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://securityreason.com/achievement_securityalert/100; http://securityreason.com/securityalert/8342
CVE: CVE-2011-2483
Published: 2011-08-25
Description: crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://freshmeat.net/projects/crypt_blowfish; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705; http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
CVE: CVE-2011-2736
Published: 2011-08-25
Description: RSA enVision 4.x before 4 SP4 P3 places cleartext administrative credentials in Task Escalation e-mail messages, which allows remote attackers to obtain sensitive information by sniffing the network or leveraging access to a recipient mailbox.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://securityreason.com/securityalert/8350; http://www.securityfocus.com/archive/1/519395/100/0/threaded; http://www.securitytracker.com/id?1025979
CVE: CVE-2011-2737
Published: 2011-08-25
Description: RSA enVision 3.x and 4.x before 4 SP4 P3 allows remote attackers to read arbitrary files via unspecified vectors, related to an "arbitrary file retrieval vulnerability."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://securityreason.com/securityalert/8350; http://www.securityfocus.com/archive/1/519395/100/0/threaded; http://www.securitytracker.com/id?1025979
CVE: CVE-2011-2940
Published: 2011-08-25
Description: stunnel 4.40 and 4.41 might allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/45705; http://securitytracker.com/id?1025959; http://stunnel.org/?page=sdf_ChangeLog
CVE: CVE-2011-3182
Published: 2011-08-25
Description: PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger a buffer overflow by leveraging the ability to provide an arbitrary value for a function argument, related to (1) ext/curl/interface.c, (2) ext/date/lib/parse_date.c, (3) ext/date/lib/parse_iso_intervals.c, (4) ext/date/lib/parse_tz.c, (5) ext/date/lib/timelib.c, (6) ext/pdo_odbc/pdo_odbc.c, (7) ext/reflection/php_reflection.c, (8) ext/soap/php_sdl.c, (9) ext/xmlrpc/libxmlrpc/base64.c, (10) TSRM/tsrm_win32.c, and (11) the strtotime function.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1672&w=2; http://securityreason.com/achievement_securityalert/101
CVE: CVE-2011-3189
Published: 2011-08-25
Description: The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt argument instead of the hashed string, which might allow remote attackers to bypass authentication via an arbitrary password, a different vulnerability than CVE-2011-2483.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://osvdb.org/74726; http://secunia.com/advisories/45678
CVE: CVE-2011-3267
Published: 2011-08-25
Description: PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://osvdb.org/74739; http://support.apple.com/kb/HT5130
CVE: CVE-2011-3268
Published: 2011-08-25
Description: Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to have an unspecified impact via a long salt argument, a different vulnerability than CVE-2011-2483.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html; http://osvdb.org/74738; http://support.apple.com/kb/HT5130
CVE: CVE-2011-1643
Published: 2011-08-29
Description: Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session, aka Bug IDs CSCti81574, CSCto63060, CSCto72183, and CSCto73833.
CVSS Score: 10.0 (HIGH)
CWE: CWE-200
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f532.shtml; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f532.shtml
CVE: CVE-2011-2560
Published: 2011-08-29
Description: The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x does not properly handle idle TCP connections, which allows remote attackers to cause a denial of service (memory consumption and restart) by making many connections, aka Bug ID CSCtf97162.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml
CVE: CVE-2011-2561
Published: 2011-08-29
Description: The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(5b)su4 and 8.x before 8.0(1) does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point (MTP), which allows remote attackers to cause a denial of service (service outage) via a crafted call, aka Bug ID CSCtc61990.
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml
CVE: CVE-2011-2562
Published: 2011-08-29
Description: Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x before 8.0(3a)su1, and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (service outage) via a SIP INVITE message, aka Bug ID CSCth43256.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml
CVE: CVE-2011-2563
Published: 2011-08-29
Description: Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth26669.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f533.shtml; http://www.securitytracker.com/id?1025969
CVE: CVE-2011-2564
Published: 2011-08-29
Description: Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets, aka Bug ID CSCth19417.
CVSS Score: 7.8 (HIGH)
References: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f531.shtml; http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8f533.shtml; http://www.securitytracker.com/id?1025969
CVE: CVE-2011-2712
Published: 2011-08-29
Description: Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.18, when setAutomaticMultiWindowSupport is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/45727; http://securityreason.com/securityalert/8357; http://wicket.apache.org/2011/08/23/cve-2011-2712.html
CVE: CVE-2011-2746
Published: 2011-08-29
Description: Unspecified vulnerability in Kernel/Modules/AdminPackageManager.pm in OTRS-Core in Open Ticket Request System (OTRS) 2.x before 2.4.11 and 3.x before 3.0.10 allows remote authenticated administrators to read arbitrary files via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-updates/2011-09/msg00011.html; http://otrs.org/advisory/OSA-2011-03-en/; http://secunia.com/advisories/45701
CVE: CVE-2011-2806
Published: 2011-08-29
Description: Google Chrome before 13.0.782.215 on Windows does not properly handle vertex data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://code.google.com/p/chromium/issues/detail?id=89836; http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14608
CVE: CVE-2011-2821
Published: 2011-08-29
Description: Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression.
CVSS Score: 7.5 (HIGH)
CWE: CWE-415
References: http://code.google.com/p/chromium/issues/detail?id=89402; http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
CVE: CVE-2011-2822
Published: 2011-08-29
Description: Google Chrome before 13.0.782.215 on Windows does not properly parse URLs located on the command line, which has unspecified impact and attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=72492; http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14611
CVE: CVE-2011-2823
Published: 2011-08-29
Description: Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a line box.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=82552; http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html
CVE: CVE-2011-2824
Published: 2011-08-29
Description: Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving counter nodes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=88216; http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14585
CVE: CVE-2011-2825
Published: 2011-08-29
Description: Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving custom fonts.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=88670; http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html; http://lists.apple.com/archives/security-announce/2012/Mar/msg00000.html
CVE: CVE-2011-2826
Published: 2011-08-29
Description: Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins.
CVSS Score: 7.5 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=89453; http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14383
CVE: CVE-2011-2827
Published: 2011-08-29
Description: Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to text searching.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://code.google.com/p/chromium/issues/detail?id=90668; http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html
CVE: CVE-2011-2828
Published: 2011-08-29
Description: Google V8, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://code.google.com/p/chromium/issues/detail?id=91517; http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14265
CVE: CVE-2011-2829
Published: 2011-08-29
Description: Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving uniform arrays.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://code.google.com/p/chromium/issues/detail?id=91598; http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14516
CVE: CVE-2011-2839
Published: 2011-08-29
Description: The PDF implementation in Google Chrome before 13.0.782.215 on Linux does not properly use the memset library function, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=91665; http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_22.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14371
CVE: CVE-2011-3192
Published: 2011-08-29
Description: The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
CVSS Score: 7.8 (HIGH)
CWE: CWE-400
References: http://archives.neohapsis.com/archives/fulldisclosure/2011-08/0285.html; http://blogs.oracle.com/security/entry/security_alert_for_cve_2011; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
CVE: CVE-2011-2928
Published: 2011-08-29
Description: The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=338d0f0a6fbc[PII_REDACTED]6f5b64b75aeb3c70f2; http://securityreason.com/securityalert/8360; http://www.kernel.org/pub/linux/kernel/v3.0/testing/ChangeLog-3.1-rc3
CVE: CVE-2011-2943
Published: 2011-08-29
Description: The irc_msg_who function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted nickname that is not properly handled in a WHO response.
CVSS Score: 4.3 (MEDIUM)
References: http://developer.pidgin.im/viewmtn/revision/diff/5749f[PII_REDACTED]d27bef75c2388f6f9cc2f7f37/with/5c2dba4a7e2e76b76e7f472b88953a4316706d43/libpurple/protocols/irc/msgs.c; http://developer.pidgin.im/viewmtn/revision/info/5c2dba4a7e2e76b76e7f472b88953a4316706d43; http://pidgin.im/news/security/?id=53
CVE: CVE-2011-3181
Published: 2011-08-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x before 3.3.10.4 and 3.4.x before 3.4.4 allow remote attackers to inject arbitrary web script or HTML via a (1) table name, (2) column name, or (3) index name.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065824.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065829.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065854.html
CVE: CVE-2011-3184
Published: 2011-08-29
Description: The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service (incorrect memory access and application crash) via vectors involving a crafted server message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://developer.pidgin.im/viewmtn/revision/diff/5c2dba4a7e2e76b76e7f472b88953a4316706d43/with/16af0661899a978b4fedc1c165965b85009013d1/libpurple/protocols/msn/httpconn.c; http://developer.pidgin.im/viewmtn/revision/info/16af0661899a978b4fedc1c165965b85009013d1; http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064943.html
CVE: CVE-2011-3185
Published: 2011-08-29
Description: gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://developer.pidgin.im/viewmtn/revision/diff/29484df15413fe3bbd21bbfcef26a55362055a81/with/5749f[PII_REDACTED]d27bef75c2388f6f9cc2f7f37/pidgin/gtkutils.c; http://developer.pidgin.im/viewmtn/revision/info/5749f[PII_REDACTED]d27bef75c2388f6f9cc2f7f37; http://pidgin.im/news/security/?id=55
CVE: CVE-2011-2213
Published: 2011-08-29
Description: The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-835
References: http://article.gmane.org/gmane.linux.network/197206; http://article.gmane.org/gmane.linux.network/197208; http://article.gmane.org/gmane.linux.network/197386
CVE: CVE-2011-2497
Published: 2011-08-29
Description: Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a small command-size value within the command header of a Logical Link Control and Adaptation Protocol (L2CAP) configuration request, leading to a buffer overflow.
CVSS Score: 8.3 (HIGH)
CWE: CWE-191
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7ac[PII_REDACTED]7fd40e[PII_REDACTED]606f9e17f71; http://marc.info/?l=linux-kernel&m=[PII_REDACTED]9436&w=2; http://securityreason.com/securityalert/8359