deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-6298
Published: 2017-02-24
Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "1 of 9. Null Pointer Deref / calloc return value not checked."
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://www.debian.org/security/2017/dsa-3846; http://www.openwall.com/lists/oss-security/2017/02/15/4; http://www.securityfocus.com/bid/96423
CVE: CVE-2017-6299
Published: 2017-02-24
Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "2 of 9. Infinite Loop / DoS in the TNEFFillMapi function in lib/ytnef.c."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://www.debian.org/security/2017/dsa-3846; http://www.openwall.com/lists/oss-security/2017/02/15/4; http://www.securityfocus.com/bid/96423
CVE: CVE-2017-6300
Published: 2017-02-24
Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "3 of 9. Buffer Overflow in version field in lib/tnef-types.h."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3846; http://www.openwall.com/lists/oss-security/2017/02/15/4; http://www.securityfocus.com/bid/96423
CVE: CVE-2017-6301
Published: 2017-02-24
Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "4 of 9. Out of Bounds Reads."
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3846; http://www.openwall.com/lists/oss-security/2017/02/15/4; http://www.securityfocus.com/bid/96423
CVE: CVE-2017-6302
Published: 2017-02-24
Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "5 of 9. Integer Overflow."
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.debian.org/security/2017/dsa-3846; http://www.openwall.com/lists/oss-security/2017/02/15/4; http://www.securityfocus.com/bid/96423
CVE: CVE-2017-6303
Published: 2017-02-24
Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "6 of 9. Invalid Write and Integer Overflow."
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.debian.org/security/2017/dsa-3846; http://www.openwall.com/lists/oss-security/2017/02/15/4; http://www.securityfocus.com/bid/96423
CVE: CVE-2017-6304
Published: 2017-02-24
Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "7 of 9. Out of Bounds read."
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3846; http://www.openwall.com/lists/oss-security/2017/02/15/4; http://www.securityfocus.com/bid/96423
CVE: CVE-2017-6305
Published: 2017-02-24
Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "8 of 9. Out of Bounds read and write."
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-787
References: http://www.debian.org/security/2017/dsa-3846; http://www.openwall.com/lists/oss-security/2017/02/15/4; http://www.securityfocus.com/bid/96423
CVE: CVE-2017-6306
Published: 2017-02-24
Description: An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal using the filename; SanitizeFilename function in settings.c."
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://www.debian.org/security/2017/dsa-3846; http://www.openwall.com/lists/oss-security/2017/02/15/4; http://www.securityfocus.com/bid/96423
CVE: CVE-2017-6307
Published: 2017-02-24
Description: An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read(). These might lead to invalid read and write operations, controlled by an attacker.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.debian.org/security/2017/dsa-3798; http://www.securityfocus.com/bid/96427; https://github.com/verdammelt/tnef/blob/master/ChangeLog
CVE: CVE-2017-6308
Published: 2017-02-24
Description: An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been identified in the functions that wrap memory allocation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://www.debian.org/security/2017/dsa-3798; http://www.securityfocus.com/bid/96427; https://github.com/verdammelt/tnef/blob/master/ChangeLog
CVE: CVE-2017-6309
Published: 2017-02-24
Description: An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. These might lead to invalid read and write operations, controlled by an attacker.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-787
References: http://www.debian.org/security/2017/dsa-3798; http://www.securityfocus.com/bid/96427; https://github.com/verdammelt/tnef/blob/master/ChangeLog
CVE: CVE-2017-6310
Published: 2017-02-24
Description: An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the file_add_mapi_attrs() function. These might lead to invalid read and write operations, controlled by an attacker.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-787
References: http://www.debian.org/security/2017/dsa-3798; http://www.securityfocus.com/bid/96427; https://github.com/verdammelt/tnef/blob/master/ChangeLog
CVE: CVE-2017-5669
Published: 2017-02-24
Description: The do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget and shmat system calls in a privileged context.
CVSS Score: 7.8 (HIGH)
References: http://www.debian.org/security/2017/dsa-3804; http://www.securityfocus.com/bid/96754; http://www.securitytracker.com/id/1037918
CVE: CVE-2016-8998
Published: 2017-02-24
Description: IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and execute arbitrary code on the server. IBM Reference #: 1998747.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www.ibm.com/support/docview.wss?uid=swg21998747; http://www.securityfocus.com/bid/96443; http://www.ibm.com/support/docview.wss?uid=swg21998747
CVE: CVE-2016-9009
Published: 2017-02-24
Description: IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of service to MQ clustering. IBM Reference #: 1998647.
CVSS Score: 3.1 (LOW)
CWE: CWE-20, CWE-264
References: http://www.ibm.com/support/docview.wss?uid=swg21998647; http://www.securityfocus.com/bid/96441; http://www.ibm.com/support/docview.wss?uid=swg21998647
CVE: CVE-2016-9975
Published: 2017-02-24
Description: IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 1998714.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.ibm.com/support/docview.wss?uid=swg21998714; http://www.securityfocus.com/bid/96444; http://www.ibm.com/support/docview.wss?uid=swg21998714
CVE: CVE-2016-2226
Published: 2017-02-24
Description: Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-190
References: http://www.openwall.com/lists/oss-security/2016/05/05/5; http://www.securityfocus.com/bid/90103; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=69687
CVE: CVE-2016-4041
Published: 2017-02-24
Description: Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav access via unspecified vectors.
CVSS Score: 7.3 (HIGH)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2016/04/20/1; https://plone.org/security/hotfix/20160419/privilege-escalation-in-webdav; http://www.openwall.com/lists/oss-security/2016/04/20/1
CVE: CVE-2016-4042
Published: 2017-02-24
Description: Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2016/04/20/2; https://plone.org/security/hotfix/20160419/unauthorized-disclosure-of-site-content; http://www.openwall.com/lists/oss-security/2016/04/20/2
CVE: CVE-2016-4043
Published: 2017-02-24
Description: Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://www.openwall.com/lists/oss-security/2016/04/20/3; https://plone.org/security/hotfix/20160419/bypass-restricted-python; http://www.openwall.com/lists/oss-security/2016/04/20/3
CVE: CVE-2016-4487
Published: 2017-02-24
Description: Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "btypevec."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2016/05/05/5; http://www.securityfocus.com/bid/90025; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70481
CVE: CVE-2016-4488
Published: 2017-02-24
Description: Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "ktypevec."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2016/05/05/5; http://www.securityfocus.com/bid/90025; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70481
CVE: CVE-2016-4489
Published: 2017-02-24
Description: Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to the "demangling of virtual tables."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://www.openwall.com/lists/oss-security/2016/05/05/5; http://www.securityfocus.com/bid/90017; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70492
CVE: CVE-2016-4490
Published: 2017-02-24
Description: Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to inconsistent use of the long and int types for lengths.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://www.openwall.com/lists/oss-security/2016/05/05/5; http://www.securityfocus.com/bid/90019; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70498
CVE: CVE-2016-4491
Published: 2017-02-24
Description: The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, which triggers infinite recursion and a buffer overflow, related to a node having "itself as ancestor more than once."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/05/05/5; http://www.securityfocus.com/bid/90016; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70909
CVE: CVE-2016-4492
Published: 2017-02-24
Description: Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/05/05/5; http://www.securityfocus.com/bid/90014; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70926
CVE: CVE-2016-4493
Published: 2017-02-24
Description: The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted binary.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/05/05/5; http://www.securityfocus.com/bid/90014; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70926
CVE: CVE-2016-5027
Published: 2017-02-24
Description: dwarf_form.c in libdwarf 20160115 allows remote attackers to cause a denial of service (crash) via a crafted elf file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2016/05/24/1; http://www.openwall.com/lists/oss-security/2016/05/25/1; https://bugzilla.redhat.com/show_bug.cgi?id=1330237
CVE: CVE-2017-2789
Published: 2017-02-24
Description: When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how much data to copy from the document. If both of these values are larger than the size of the buffer, the application will choose the smaller of the two and trust it to copy data from the file. This value is larger than the buffer size, which leads to a heap-based buffer overflow. This overflow corrupts an offset in the heap used in pointer arithmetic for writing data and can lead to code execution under the context of the application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96438; http://www.talosintelligence.com/reports/TALOS-2016-0196/; http://www.securityfocus.com/bid/96438
CVE: CVE-2017-2790
Published: 2017-02-24
Description: When processing a record type of 0x3c from a Workbook stream from an Excel file (.xls), JustSystems Ichitaro Office trusts that the size is greater than zero, subtracts one from the length, and uses this result as the size for a memcpy. This results in a heap-based buffer overflow and can lead to code execution under the context of the application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96442; http://www.talosintelligence.com/reports/TALOS-2016-0197/; http://www.securityfocus.com/bid/96442
CVE: CVE-2017-2791
Published: 2017-02-24
Description: JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data into. Due to this, the application will read data from the file into an invalid address thus corrupting memory. Under the right conditions, this can lead to code execution under the context of the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96440; http://www.talosintelligence.com/reports/TALOS-2016-0199/; http://www.securityfocus.com/bid/96440
CVE: CVE-2017-0037
Published: 2017-02-26
Description: Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element.
CVSS Score: 8.1 (HIGH)
CWE: CWE-843, CWE-843
References: http://www.securityfocus.com/bid/96088; http://www.securitytracker.com/id/1037905; http://www.securitytracker.com/id/1037906
CVE: CVE-2017-5925
Published: 2017-02-27
Description: Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf; http://www.securityfocus.com/bid/96452; https://www.vusec.net/projects/anc
CVE: CVE-2017-5926
Published: 2017-02-27
Description: Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf; http://www.securityfocus.com/bid/96457; https://www.vusec.net/projects/anc
CVE: CVE-2017-5927
Published: 2017-02-27
Description: Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf; http://www.securityfocus.com/bid/96459; https://www.vusec.net/projects/anc
CVE: CVE-2017-5928
Published: 2017-02-27
Description: The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times can be measured by a performance.now "Time to Tick" approach even with the https://bugzilla.mozilla.org/show_bug.cgi?id=1167489#c9 protection mechanism in place, which makes it easier for remote attackers to conduct AnC attacks via crafted JavaScript code.
CVSS Score: 3.7 (LOW)
References: http://www.cs.vu.nl/~herbertb/download/papers/anc_ndss17.pdf; http://www.securityfocus.com/bid/97036; https://www.vusec.net/projects/anc
CVE: CVE-2017-5946
Published: 2017-02-27
Description: The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname substrings to write arbitrary files to the filesystem.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://www.debian.org/security/2017/dsa-3801; http://www.securityfocus.com/bid/96445; https://github.com/rubyzip/rubyzip/issues/315
CVE: CVE-2017-6297
Published: 2017-02-27
Description: The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and obtaining the L2TP secret.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-311
References: http://www.securityfocus.com/bid/96447; https://blog.milne.it/2017/02/24/mikrotik-routeros-security-vulnerability-l2tp-tunnel-unencrypted-cve-2017-6297/; http://www.securityfocus.com/bid/96447
CVE: CVE-2017-6341
Published: 2017-02-27
Description: Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 send cleartext passwords in response to requests from the Web Page, Mobile Application, and Desktop Application interfaces, which allows remote attackers to obtain sensitive information by sniffing the network, a different vulnerability than CVE-2013-6117.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319
References: http://www.securityfocus.com/bid/96456; https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html; https://twitter.com/null_ku7/status/[PII_REDACTED]68838657
CVE: CVE-2017-6342
Published: 2017-02-27
Description: An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19. When SmartPSS Software is launched, while on the login screen, the software in the background automatically logs in as admin. This allows sniffing sensitive information identified in CVE-2017-6341 without prior knowledge of the password. This is a different vulnerability than CVE-2013-6117.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: http://www.securityfocus.com/bid/96454; https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html; http://www.securityfocus.com/bid/96454
CVE: CVE-2017-6343
Published: 2017-02-27
Description: The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 allows remote attackers to obtain login access by leveraging knowledge of the MD5 Admin Hash without knowledge of the corresponding password, a different vulnerability than CVE-2013-6117.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/96449; https://nullku7.github.io/stuff/exposure/dahua/2017/02/24/dahua-nvr.html; http://www.securityfocus.com/bid/96449
CVE: CVE-2017-6344
Published: 2017-02-27
Description: XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a crafted XML document.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-611
References: http://www.securityfocus.com/bid/96446; https://www.ambionics.io/blog/grails-pdf-plugin-xxe; http://www.securityfocus.com/bid/96446
CVE: CVE-2017-6349
Published: 2017-02-27
Description: An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://www.securityfocus.com/bid/96451; http://www.securitytracker.com/id/1037949; https://github.com/vim/vim/commit/3eb1637b1bba19519885dd6d377bd5596e91d22c
CVE: CVE-2017-6350
Published: 2017-02-27
Description: An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://www.securityfocus.com/bid/96448; http://www.securitytracker.com/id/1037949; https://github.com/vim/vim/commit/0c8485f0e4931463c0f7986e1ea84a7d79f10c75
CVE: CVE-2017-2682
Published: 2017-02-27
Description: The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery (CSRF) attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to trigger a malicious request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://www.securityfocus.com/bid/96458; http://www.securitytracker.com/id/1037958; http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-363881.pdf
CVE: CVE-2017-2683
Published: 2017-02-27
Description: A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting (XSS) attack, potentially resulting in obtaining administrative permissions.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/96455; http://www.securitytracker.com/id/1037958; http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-363881.pdf
CVE: CVE-2016-8105
Published: 2017-02-27
Description: Drivers for the Intel Ethernet Controller X710 and Intel Ethernet Controller XL710 families before version 22.0 are vulnerable to a denial of service in certain layer 2 network configurations.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/96474; https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00069&languageid=en-fr; http://www.securityfocus.com/bid/96474
CVE: CVE-2016-8509
Published: 2017-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016.  Notes: none
CVE: CVE-2016-8510
Published: 2017-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016.  Notes: none