deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-6741
Published: 2016-11-25
Description: An elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-30559423. References: Qualcomm QC-CR#1060554.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94142; https://source.android.com/security/bulletin/2016-11-01.html; http://www.securityfocus.com/bid/94142
CVE: CVE-2016-6742
Published: 2016-11-25
Description: An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-30799828.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94131; https://source.android.com/security/bulletin/2016-11-01.html; http://www.securityfocus.com/bid/94131
CVE: CVE-2016-6743
Published: 2016-11-25
Description: An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-30937462.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94131; https://source.android.com/security/bulletin/2016-11-01.html; http://www.securityfocus.com/bid/94131
CVE: CVE-2016-6744
Published: 2016-11-25
Description: An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-30970485.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94131; https://source.android.com/security/bulletin/2016-11-01.html; http://www.securityfocus.com/bid/94131
CVE: CVE-2016-6745
Published: 2016-11-25
Description: An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-31252388.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94131; https://source.android.com/security/bulletin/2016-11-01.html; http://www.securityfocus.com/bid/94131
CVE: CVE-2016-6746
Published: 2016-11-25
Description: An information disclosure vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Android ID: A-30955105. References: NVIDIA N-CVE-2016-6746.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94209; https://source.android.com/security/bulletin/2016-11-01.html; http://www.securityfocus.com/bid/94209
CVE: CVE-2016-6747
Published: 2016-11-25
Description: A denial of service vulnerability in Mediaserver in Android before 2016-11-05 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID: A-31244612. References: NVIDIA N-CVE-2016-6747.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94212; https://source.android.com/security/bulletin/2016-11-01.html; http://www.securityfocus.com/bid/94212
CVE: CVE-2016-6748
Published: 2016-11-25
Description: An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Android ID: A-30076504. References: Qualcomm QC-CR#987018.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94139; https://source.android.com/security/bulletin/2016-11-01.html; http://www.securityfocus.com/bid/94139
CVE: CVE-2016-6749
Published: 2016-11-25
Description: An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Android ID: A-30228438. References: Qualcomm QC-CR#1052818.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94139; https://source.android.com/security/bulletin/2016-11-01.html; http://www.securityfocus.com/bid/94139
CVE: CVE-2016-6750
Published: 2016-11-25
Description: An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Android ID: A-30312054. References: Qualcomm QC-CR#1052825.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94139; https://source.android.com/security/bulletin/2016-11-01.html; http://www.securityfocus.com/bid/94139
CVE: CVE-2016-6751
Published: 2016-11-25
Description: An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Android ID: A-30902162. References: Qualcomm QC-CR#1062271.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94139; https://source.android.com/security/bulletin/2016-11-01.html; http://www.securityfocus.com/bid/94139
CVE: CVE-2016-6752
Published: 2016-11-25
Description: An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Android ID: A-31498159. References: Qualcomm QC-CR#987051.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94139; https://source.android.com/security/bulletin/2016-11-01.html; http://www.securityfocus.com/bid/94139
CVE: CVE-2016-6753
Published: 2016-11-25
Description: An information disclosure vulnerability in kernel components, including the process-grouping subsystem and the networking subsystem, in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Android ID: A-30149174.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94147; https://source.android.com/security/bulletin/2016-11-01.html; http://www.securityfocus.com/bid/94147
CVE: CVE-2016-6754
Published: 2016-11-25
Description: A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable a remote attacker to execute arbitrary code when the user is navigating to a website. This issue is rated as High due to the possibility of remote code execution in an unprivileged process. Android ID: A-31217937.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: http://www.securityfocus.com/bid/94204; https://source.android.com/security/bulletin/2016-11-01.html; https://www.exploit-db.com/exploits/40846/
CVE: CVE-2016-3919
Published: 2016-11-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-5195.  Reason: This candidate is a reservation duplicate of CVE-2016-5195.  Notes: All CVE users should reference CVE-2016-5195 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2016-9449
Published: 2016-11-25
Description: The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.debian.org/security/2016/dsa-3718; http://www.securityfocus.com/bid/94367; https://www.drupal.org/SA-CORE-2016-005
CVE: CVE-2016-9450
Published: 2016-11-25
Description: The user password reset form in Drupal 8.x before 8.2.3 allows remote attackers to conduct cache poisoning attacks by leveraging failure to specify a correct cache context.
CVSS Score: 7.5 (HIGH)
CWE: CWE-345
References: http://www.securityfocus.com/bid/94367; https://www.drupal.org/SA-CORE-2016-005; http://www.securityfocus.com/bid/94367
CVE: CVE-2016-9451
Published: 2016-11-25
Description: Confirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduct open redirect attacks via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-601
References: http://www.debian.org/security/2016/dsa-3718; http://www.securityfocus.com/bid/94367; https://www.drupal.org/SA-CORE-2016-005
CVE: CVE-2016-9452
Published: 2016-11-25
Description: The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/94367; https://www.drupal.org/SA-CORE-2016-005; http://www.securityfocus.com/bid/94367
CVE: CVE-2016-9621
Published: 2016-11-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-9429.  Reason: This candidate is a reservation duplicate of CVE-2016-9429.  Notes: All CVE users should reference CVE-2016-9429 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2016-0316
Published: 2016-11-25
Description: Cross-site scripting (XSS) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 and 6.0.2 before iFix003 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21983137; http://www.securityfocus.com/bid/92472; http://www-01.ibm.com/support/docview.wss?uid=swg21983137
CVE: CVE-2016-0317
Published: 2016-11-25
Description: Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg21983137; http://www.securityfocus.com/bid/92463; http://www-01.ibm.com/support/docview.wss?uid=swg21983137
CVE: CVE-2016-0318
Published: 2016-11-25
Description: Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 does not destroy a Session ID upon a logout action, which allows remote attackers to obtain access by leveraging an unattended workstation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg21983137; http://www.securityfocus.com/bid/92466; http://www-01.ibm.com/support/docview.wss?uid=swg21983137
CVE: CVE-2016-0319
Published: 2016-11-25
Description: The XML parser in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote authenticated administrators to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg21983137; http://www.securityfocus.com/bid/92475; http://www-01.ibm.com/support/docview.wss?uid=swg21983137
CVE: CVE-2016-2926
Published: 2016-11-25
Description: Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Team Concert 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21993444; http://www.securityfocus.com/bid/94146; http://www.securitytracker.com/id/1037276
CVE: CVE-2016-2927
Published: 2016-11-25
Description: IBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IV89792; http://www-01.ibm.com/support/docview.wss?uid=swg21991875; http://www.securityfocus.com/bid/94561
CVE: CVE-2016-2928
Published: 2016-11-25
Description: IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive information by reading error logs.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-532
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IV89748; http://www-01.ibm.com/support/docview.wss?uid=swg21991951; http://www.securityfocus.com/bid/94556
CVE: CVE-2016-2929
Published: 2016-11-25
Description: IBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes it easier for remote attackers to obtain access via a brute-force approach.
CVSS Score: 8.1 (HIGH)
CWE: CWE-254, CWE-284
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IV89789; http://www-01.ibm.com/support/docview.wss?uid=swg21991880; http://www.securityfocus.com/bid/94560
CVE: CVE-2015-1328
Published: 2016-11-28
Description: The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration in which overlayfs is permitted in an arbitrary mount namespace.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://seclists.org/oss-sec/2015/q2/717; http://www.exploit-db.com/exploits/40688/; http://www.securityfocus.com/bid/75206
CVE: CVE-2015-8970
Published: 2016-11-28
Description: crypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on an AF_ALG socket before an accept system call is processed, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted application that does not supply a key, related to the lrw_crypt function in crypto/lrw.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=dd504589577d8e8e70f51f997ad487a4cb6c026f; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.2; http://www.openwall.com/lists/oss-security/2016/11/04/3
CVE: CVE-2016-8630
Published: 2016-11-28
Description: The x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service (host OS crash) via a certain use of a ModR/M byte in an undefined instruction.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284, CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d9092f52d7e61dd1557f2db2400ddb430e85937e; http://rhn.redhat.com/errata/RHSA-2017-0386.html; http://rhn.redhat.com/errata/RHSA-2017-0387.html
CVE: CVE-2016-8632
Published: 2016-11-28
Description: The tipc_msg_build function in net/tipc/msg.c in the Linux kernel through 4.8.11 does not validate the relationship between the minimum fragment length and the maximum packet size, which allows local users to gain privileges or cause a denial of service (heap-based buffer overflow) by leveraging the CAP_NET_ADMIN capability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-264
References: http://www.openwall.com/lists/oss-security/2016/11/08/5; http://www.securityfocus.com/bid/94211; https://bugzilla.redhat.com/show_bug.cgi?id=1390832
CVE: CVE-2016-8633
Published: 2016-11-28
Description: drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119, CWE-284
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=667121ace9dbafb368618dbabcf07901c962ddac; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.7; http://www.openwall.com/lists/oss-security/2016/11/06/1
CVE: CVE-2016-8645
Published: 2016-11-28
Description: The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of service (system crash) via a crafted application that makes sendto system calls, related to net/ipv4/tcp_ipv4.c and net/ipv6/tcp_ipv6.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ac6e780070e30e4c35bd395acfe9191e6268bdd3; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.10; http://www.openwall.com/lists/oss-security/2016/11/11/3
CVE: CVE-2016-8646
Published: 2016-11-28
Description: The hash_accept function in crypto/algif_hash.c in the Linux kernel before 4.3.6 allows local users to cause a denial of service (OOPS) by attempting to trigger use of in-kernel hash algorithms for a socket that has received zero bytes of data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4afa5f[PII_REDACTED]ac04b24b584f6c718dfb4f45; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.6; http://www.openwall.com/lists/oss-security/2016/11/15/2
CVE: CVE-2016-8650
Published: 2016-11-28
Description: The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key system call for an RSA key with a zero exponent.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-399
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f5527fffff3f002b0a6b376163613b82f69de073; http://seclists.org/fulldisclosure/2016/Nov/76; http://www.openwall.com/lists/oss-security/2016/11/24/8
CVE: CVE-2016-9083
Published: 2016-11-28
Description: drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corruption) or have unspecified other impact, by leveraging access to a vfio PCI device file for a VFIO_DEVICE_SET_IRQS ioctl call, aka a "state machine confusion bug."
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-190
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=05692d7005a364add85c6e25a6c4447ce08f913a; http://rhn.redhat.com/errata/RHSA-2017-0386.html; http://rhn.redhat.com/errata/RHSA-2017-0387.html
CVE: CVE-2016-9084
Published: 2016-11-28
Description: drivers/vfio/pci/vfio_pci_intrs.c in the Linux kernel through 4.8.11 misuses the kzalloc function, which allows local users to cause a denial of service (integer overflow) or have unspecified other impact by leveraging access to a vfio PCI device file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=05692d7005a364add85c6e25a6c4447ce08f913a; http://rhn.redhat.com/errata/RHSA-2017-0386.html; http://rhn.redhat.com/errata/RHSA-2017-0387.html
CVE: CVE-2016-9178
Published: 2016-11-28
Description: The __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel before 4.7.5 does not initialize a certain integer variable, which allows local users to obtain sensitive information from kernel stack memory by triggering failure of a get_user_ex call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1c109fabbd51863475cd12ac206bdd249aee35af; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.7.5; http://www.openwall.com/lists/oss-security/2016/11/04/4
CVE: CVE-2016-9191
Published: 2016-11-28
Description: The cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain operations, which allows local users to cause a denial of service (system hang) by leveraging access to a container environment for executing a crafted application, as demonstrated by trinity.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-399
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=93362fa47fe98b62e4a34ab408c4a418432e7939; http://www.debian.org/security/2017/dsa-3791; http://www.openwall.com/lists/oss-security/2016/11/05/4
CVE: CVE-2016-9313
Published: 2016-11-28
Description: security/keys/big_key.c in the Linux kernel before 4.8.7 mishandles unsuccessful crypto registration in conjunction with successful key-type registration, which allows local users to cause a denial of service (NULL pointer dereference and panic) or possibly have unspecified other impact via a crafted application that uses the big_key data type.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7df3e59c3d1df4f87fe874c7956ef7a3d2f4d5fb; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.7; http://www.openwall.com/lists/oss-security/2016/07/22/1
CVE: CVE-2016-9555
Published: 2016-11-28
Description: The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bf911e985d6bbaa328c20c3e05f4eb03de11fdd6; http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00054.html