deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-2494
Published: 2012-06-20
Description: The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 and 3.x before 3.0 MR8 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote attackers to force a version downgrade by using (1) ActiveX or (2) Java components to offer signed code that corresponds to an older software release, aka Bug ID CSCtw48681.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac
CVE: CVE-2012-2495
Published: 2012-06-20
Description: The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote attackers to force a version downgrade by using (1) ActiveX or (2) Java components to offer signed code that corresponds to an older software release, aka Bug ID CSCtx74235.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac
CVE: CVE-2012-2496
Published: 2012-06-20
Description: A certain Java applet in the VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR7 on 64-bit Linux platforms does not properly restrict use of Java components, which allows remote attackers to execute arbitrary code via a crafted web site, aka Bug ID CSCty45925.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac
CVE: CVE-2012-3058
Published: 2012-06-20
Description: Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(4.1), 8.5 before 8.5(1.11), and 8.6 before 8.6(1.3) allow remote attackers to cause a denial of service (device reload) via IPv6 transit traffic that triggers syslog message 110003, aka Bug ID CSCua27134.
CVSS Score: 7.8 (HIGH)
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-asaipv6; http://www.securitytracker.com/id?1027187; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-asaipv6
CVE: CVE-2012-3063
Published: 2012-06-20
Description: Cisco Application Control Engine (ACE) before A4(2.3) and A5 before A5(1.1), when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances, and read or modify configuration settings, via a login attempt to a context, aka Bug ID CSCts30631, a different vulnerability than CVE-2012-3058.
CVSS Score: 7.1 (HIGH)
CWE: CWE-362
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ace; http://www.securitytracker.com/id?1027188; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ace
CVE: CVE-2011-0011
Published: 2012-06-21
Description: qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypass authentication and establish VNC sessions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: http://rhn.redhat.com/errata/RHSA-2011-0345.html; http://secunia.com/advisories/42830; http://secunia.com/advisories/43272
CVE: CVE-2011-1750
Published: 2012-06-21
Description: Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.
CVSS Score: 7.4 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commitdiff%3Bh=52c050236eaa4f0b5e1d160cd66dc18106445c4d; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html; http://lists.gnu.org/archive/html/qemu-devel/2011-03/msg03015.html
CVE: CVE-2011-1751
Published: 2012-06-21
Description: The pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unplugging the PCI-ISA bridge, which allows privileged guest users to cause a denial of service (guest crash) and possibly execute arbitrary code by sending a crafted value to the 0xae08 (PCI_EJ_BASE) I/O port, which leads to a use-after-free related to "active qemu timers."
CVSS Score: 7.4 (HIGH)
CWE: CWE-20
References: http://blog.nelhage.com/2011/08/breaking-out-of-kvm/; http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commit%3Bh=505597e4476a6bc219d0ec1362b760d71cb4fdca; http://lists.nongnu.org/archive/html/qemu-devel/2011-05/msg01810.html
CVE: CVE-2011-2212
Published: 2012-06-21
Description: Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial of service (guest crash) or gain privileges via a crafted indirect descriptor related to "virtqueue in and out requests."
CVSS Score: 7.4 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00007.html; http://rhn.redhat.com/errata/RHSA-2011-0919.html; http://secunia.com/advisories/45158
CVE: CVE-2011-2512
Published: 2012-06-21
Description: The virtio_queue_notify in qemu-kvm 0.14.0 and earlier does not properly validate the virtqueue number, which allows guest users to cause a denial of service (guest crash) and possibly execute arbitrary code via a negative number in the Queue Notify field of the Virtio Header, which bypasses a signed comparison.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=virt/kvm/qemu-kvm.git%3Ba=commitdiff%3Bh=7157e2e23e89adcd436caeab31fdd6b47eded377; http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00007.html; http://rhn.redhat.com/errata/RHSA-2011-0919.html
CVE: CVE-2011-2527
Published: 2012-06-21
Description: The change_process_uid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081972.html; http://lists.opensuse.org/opensuse-updates/2012-02/msg00009.html; http://rhn.redhat.com/errata/RHSA-2011-1531.html
CVE: CVE-2011-2709
Published: 2012-06-21
Description: libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code via the GSSAPI_MECH_CONF environment variable, as demonstrated using mount.nfs.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082072.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082297.html; http://lwn.net/Alerts/449415/
CVE: CVE-2011-4599
Published: 2012-06-21
Description: Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows remote attackers to execute arbitrary code via a crafted locale ID that is not properly handled during variant canonicalization.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://bugs.icu-project.org/trac/ticket/8984; http://code.google.com/p/chromium/issues/detail?id=106441; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-0219
Published: 2012-06-21
Description: Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4 allows local users to execute arbitrary code via the READLINE address.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081619.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081882.html; http://secunia.com/advisories/49105
CVE: CVE-2012-1149
Published: 2012-06-21
Description: Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a .DOC file, which triggers a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://archives.neohapsis.com/archives/bugtraq/2012-05/0089.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082168.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081319.html
CVE: CVE-2012-1616
Published: 2012-06-21
Description: Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079762.html; http://secunia.com/advisories/48921; http://secunia.com/advisories/49602
CVE: CVE-2012-2149
Published: 2012-06-21
Description: The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used.  NOTE: some sources report this issue as an integer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://archives.neohapsis.com/archives/bugtraq/2012-05/0090.html; http://packetstormsecurity.org/files/112862/libwpd-WPXContentListener-_closeTableRow-Memory-Overwrite.html; http://rhn.redhat.com/errata/RHSA-2012-1043.html
CVE: CVE-2012-2389
Published: 2012-06-21
Description: hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd/hostapd.conf, which might allow local users to obtain sensitive information such as credentials.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081983.html; http://www.mandriva.com/security/advisories?name=MDVSA-2012:168; http://www.openwall.com/lists/oss-security/2012/05/23/13
CVE: CVE-2012-2654
Published: 2012-06-21
Description: The (1) EC2 and (2) OS APIs in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) do not properly check the protocol when security groups are created and the network protocol is not specified entirely in lowercase, which allows remote attackers to bypass intended access restrictions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/46808; http://secunia.com/advisories/49439; http://www.ubuntu.com/usn/USN-1466-1
CVE: CVE-2012-2716
Published: 2012-06-21
Description: Cross-site request forgery (CSRF) vulnerability in the Comment Moderation module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests that publish comments.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://drupal.org/node/1538768; http://drupal.org/node/1608822; http://drupalcode.org/project/comment_moderation.git/commitdiff/f18c3de
CVE: CVE-2012-2718
Published: 2012-06-21
Description: SQL injection vulnerability in the Counter module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "recording visits."
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://drupal.org/node/1608854; http://osvdb.org/82527; http://www.securityfocus.com/bid/53736
CVE: CVE-2012-3791
Published: 2012-06-21
Description: Multiple SQL injection vulnerabilities in Simple Web Content Management System 1.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) item_delete.php, (2) item_status.php, (3) item_detail.php, (4) item_modify.php, or (5) item_position.php in admin/; or (6) status parameter to admin/item_status.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/82412; http://osvdb.org/82413; http://osvdb.org/82414
CVE: CVE-2010-4250
Published: 2012-06-21
Description: Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service (memory consumption) via vectors involving failed attempts to create files.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a2ae4cc9a16e211c8a128ba10d22a85431f093ab; http://www.openwall.com/lists/oss-security/2010/11/24/11
CVE: CVE-2010-4648
Published: 2012-06-21
Description: The orinoco_ioctl_set_auth function in drivers/net/wireless/orinoco/wext.c in the Linux kernel before 2.6.37 does not properly implement a TKIP protection mechanism, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading Wi-Fi frames.
CVSS Score: 3.3 (LOW)
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0a54917c3fc295cb61f3fb52373c173fd3b69f48; http://www.openwall.com/lists/oss-security/2011/01/06/18
CVE: CVE-2010-4650
Published: 2012-06-21
Description: Buffer overflow in the fuse_do_ioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging the ability to operate a CUSE server.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-119
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7572777eef78ebdee1ecb7c258c0ef94d35bad16; http://www.openwall.com/lists/oss-security/2011/01/06/18
CVE: CVE-2011-0006
Published: 2012-06-21
Description: The ima_lsm_rule_init function in security/integrity/ima/ima_policy.c in the Linux kernel before 2.6.37, when the Linux Security Modules (LSM) framework is disabled, allows local users to bypass Integrity Measurement Architecture (IMA) rules in opportunistic circumstances by leveraging an administrator's addition of an IMA rule for LSM.
CVSS Score: 1.9 (LOW)
CWE: CWE-264
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=867c20265459d30a01b021a9c1e81fb4c5832aa9; http://www.openwall.com/lists/oss-security/2011/01/06/18
CVE: CVE-2011-0716
Published: 2012-06-21
Description: The br_multicast_add_group function in net/bridge/br_multicast.c in the Linux kernel before 2.6.38, when a certain Ethernet bridge configuration is used, allows local users to cause a denial of service (memory corruption and system crash) by sending IGMP packets to a local interface.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-399
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6b0d6a9b4296fa16a28d10d416db7a770fc03287; http://www.openwall.com/lists/oss-security/2011/02/17/2
CVE: CVE-2011-1021
Published: 2012-06-21
Description: drivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary kernel memory locations by leveraging root privileges to write to the /sys/kernel/debug/acpi/custom_method file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4347.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=526b4af47f44148c9d665e57723ed9f86634c6e3; http://www.openwall.com/lists/oss-security/2011/02/25/5
CVE: CVE-2011-1023
Published: 2012-06-21
Description: The Reliable Datagram Sockets (RDS) subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map updates, which allows local users to cause a denial of service (BUG_ON and system crash) via vectors involving (1) a loopback (aka loop) transmit operation or (2) an InfiniBand (aka ib) transmit operation.
CVSS Score: 4.9 (MEDIUM)
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6094628bfd94323fc1cea05ec2c6affd98c18f7f; http://www.openwall.com/lists/oss-security/2011/03/03/2
CVE: CVE-2011-1078
Published: 2012-06-21
Description: The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via the SCO_CONNINFO option.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://downloads.avaya.com/css/P8/documents/100145416; http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c4c896e1471aec3b004a693c689f60be3b17ac86
CVE: CVE-2011-1079
Published: 2012-06-21
Description: The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: http://downloads.avaya.com/css/P8/documents/100145416; http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=43629f8f5ea32a998d06d1bb41eefa0e821ff573
CVE: CVE-2011-1080
Published: 2012-06-21
Description: The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a certain name field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_ADMIN capability to replace a table, and then reading a modprobe command line.
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://downloads.avaya.com/css/P8/documents/100145416; http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d846f71195d57b0bbb143382647c2c6638b04c5a
CVE: CVE-2011-1160
Published: 2012-06-21
Description: The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, which allows local users to obtain potentially sensitive information from kernel memory via unspecified vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1309d7afbed112f0e8e90be9af975550caa0076b; http://www.openwall.com/lists/oss-security/2011/03/15/13
CVE: CVE-2011-1476
Published: 2012-06-21
Description: Integer underflow in the Open Sound System (OSS) subsystem in the Linux kernel before 2.6.39 on unspecified non-x86 platforms allows local users to cause a denial of service (memory corruption) by leveraging write access to /dev/sequencer.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-189
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b769f[PII_REDACTED]5d57286e64cf535ed4daf59e9; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE: CVE-2011-1477
Published: 2012-06-21
Description: Multiple array index errors in sound/oss/opl3.c in the Linux kernel before 2.6.39 allow local users to cause a denial of service (heap memory corruption) or possibly gain privileges by leveraging write access to /dev/sequencer.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119, CWE-264
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=4d00135a680727f6c3be78f8befaac009030e4df; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE: CVE-2011-1479
Published: 2012-06-21
Description: Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a denial of service (system crash) via vectors involving failed attempts to create files.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-4250.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-399
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d0de4dc584ec6aa3b26fffea320a[PII_REDACTED]fc; http://www.openwall.com/lists/oss-security/2011/04/11/1
CVE: CVE-2011-1493
Published: 2012-06-21
Description: Array index error in the rose_parse_national function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by composing FAC_NATIONAL_DIGIS data that specifies a large number of digipeaters, and then sending this data to a ROSE socket.
CVSS Score: 7.5 (HIGH)
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=be20250c13f88375345ad[PII_REDACTED]5eda51eb8; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE: CVE-2011-4324
Published: 2012-06-21
Description: The encode_share_access function in fs/nfs/nfs4xdr.c in the Linux kernel before 2.6.29 allows local users to cause a denial of service (BUG and system crash) by using the mknod system call with a pathname on an NFSv4 filesystem.
CVSS Score: 4.9 (MEDIUM)
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dc0b027dfadfcb8a5504f7d8052754bf8d501ab9; http://www.openwall.com/lists/oss-security/2012/02/06/3
CVE: CVE-2011-4913
Published: 2012-06-21
Description: The rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not validate the FAC_CCITT_DEST_NSAP and FAC_CCITT_SRC_NSAP fields, which allows remote attackers to (1) cause a denial of service (integer underflow, heap memory corruption, and panic) via a small length value in data sent to a ROSE socket, or (2) conduct stack-based buffer overflow attacks via a large length value in data sent to a ROSE socket.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=be20250c13f88375345ad[PII_REDACTED]5eda51eb8; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
CVE: CVE-2011-4914
Published: 2012-06-21
Description: The ROSE protocol implementation in the Linux kernel before 2.6.39 does not verify that certain data-length values are consistent with the amount of data sent, which might allow remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) via crafted data to a ROSE socket.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e0bccd315db0c2f919e7fcf9cb60db21d9986f52; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html