deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-3812
Published: 2017-02-03
Description: A vulnerability in the implementation of Common Industrial Protocol (CIP) functionality in Cisco Industrial Ethernet 2000 Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to a system memory leak. More Information: CSCvc54788. Known Affected Releases: 15.2(5.4.32i)E2. Known Fixed Releases: 15.2(5.4.62i)E2.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-772
References: http://www.securityfocus.com/bid/95946; http://www.securitytracker.com/id/1037771; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-psc1
CVE: CVE-2017-3814
Published: 2017-02-03
Description: A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance's ability to block certain web content, aka a URL Bypass. More Information: CSCvb93980. Known Affected Releases: 5.3.0 5.4.0 6.0.0 6.0.1 6.1.0.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/95942; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw1; http://www.securityfocus.com/bid/95942
CVE: CVE-2017-3818
Published: 2017-02-03
Description: A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass configured user filters on the device, aka a Malformed MIME Header Filtering Bypass. This vulnerability affects all releases prior to the first fixed release of Cisco AsyncOS Software for Cisco Email Security Appliances, both virtual and hardware appliances, if the software is configured to apply a message filter or content filter to incoming email attachments. More Information: CSCvb65245. Known Affected Releases: 9.7.1-066. Known Fixed Releases: 9.8.0-092.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/95939; http://www.securitytracker.com/id/1037773; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-esa1
CVE: CVE-2017-3820
Published: 2017-02-03
Description: A vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S, 3.16.2S, or 3.17.1S could allow an authenticated, remote attacker to cause high CPU usage on an affected device, resulting in a denial of service (DoS) condition. More Information: CSCux68796. Known Affected Releases: 15.5(3)S2.1 15.6(1)S1.1. Known Fixed Releases: 15.4(3)S6.1 15.4(3)S6.2 15.5(3)S2.2 15.5(3)S3 15.6(0.22)S0.23 15.6(1)S2 16.2(0.295) 16.3(0.94) 15.5.3S3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-665
References: http://www.securityfocus.com/bid/95934; http://www.securitytracker.com/id/1037770; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-asrsnmp
CVE: CVE-2017-3822
Published: 2017-02-03
Description: A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) could allow an unauthenticated, remote attacker to add arbitrary entries to the audit log. This vulnerability affects Cisco Firepower Threat Defense Software versions 6.1.x on the following vulnerable products that have enabled FDM: ASA5506-X ASA5506W-X ASA5506H-X ASA5508-X ASA5516-X ASA5512-X ASA5515-X ASA5525-X ASA5545-X ASA5555-X. More Information: CSCvb86860. Known Affected Releases: FRANGELICO. Known Fixed Releases: 6.2.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/95944; http://www.securitytracker.com/id/1037775; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-fpw2
CVE: CVE-2017-3824
Published: 2017-02-03
Description: A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition. Cisco cBR-8 Converged Broadband Routers running vulnerable versions of Cisco IOS XE are affected. More Information: CSCux40637. Known Affected Releases: 15.5(3)S 15.6(1)S. Known Fixed Releases: 15.5(3)S2 15.6(1)S1 15.6(2)S 15.6(2)SP 16.4(1).
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95937; http://www.securitytracker.com/id/1037774; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-cbr
CVE: CVE-2016-2317
Published: 2017-02-03
Description: Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in magick/render.c, (2) GetToken function in magick/utility.c, and (3) GetTransformTokens function in coders/svg.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00037.html
CVE: CVE-2016-2318
Published: 2017-02-03
Description: GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in magick/render.c, (2) SVGStartElement function in coders/svg.c, and (3) TraceArcPath function in magick/render.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00037.html
CVE: CVE-2016-4352
Published: 2017-02-03
Description: Integer overflow in the demuxer function in libmpdemux/demux_gif.c in Mplayer allows remote attackers to cause a denial of service (crash) via large dimensions in a gif file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://www.openwall.com/lists/oss-security/2016/04/29/7; https://trac.mplayerhq.hu/ticket/2295; http://www.openwall.com/lists/oss-security/2016/04/29/7
CVE: CVE-2016-4570
Published: 2017-02-03
Description: The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://www.openwall.com/lists/oss-security/2016/05/09/16; http://www.openwall.com/lists/oss-security/2016/05/11/14; http://www.securityfocus.com/bid/90315
CVE: CVE-2016-4571
Published: 2017-02-03
Description: The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://www.openwall.com/lists/oss-security/2016/05/09/16; http://www.openwall.com/lists/oss-security/2016/05/11/14; http://www.securityfocus.com/bid/90315
CVE: CVE-2016-5115
Published: 2017-02-03
Description: The avcodec_decode_audio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/05/29/4; https://trac.mplayerhq.hu/ticket/2298; http://www.openwall.com/lists/oss-security/2016/05/29/4
CVE: CVE-2016-5241
Published: 2017-02-03
Description: magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service (arithmetic exception and application crash) via a crafted svg file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-189
References: http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00037.html; http://www.graphicsmagick.org/NEWS.html#may-30-2016
CVE: CVE-2016-6163
Published: 2017-02-03
Description: The rsvg_pattern_fix_fallback function in rsvg-paint_server.c in librsvg2 2.40.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted svg file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/07/04/3; http://www.openwall.com/lists/oss-security/2016/07/05/9; https://bugzilla.redhat.com/show_bug.cgi?id=1353520
CVE: CVE-2016-8568
Published: 2017-02-03
Description: The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00075.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00103.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00110.html
CVE: CVE-2016-8569
Published: 2017-02-03
Description: The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a crafted object file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00075.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00103.html; http://lists.opensuse.org/opensuse-updates/2017-01/msg00110.html
CVE: CVE-2016-9082
Published: 2017-02-03
Description: Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference) via a large svg file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://www.openwall.com/lists/oss-security/2016/10/27/2; http://www.securityfocus.com/bid/93931; https://bugs.freedesktop.org/attachment.cgi?id=127421
CVE: CVE-2016-9085
Published: 2017-02-03
Description: Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.
CVSS Score: 3.3 (LOW)
CWE: CWE-190
References: http://www.openwall.com/lists/oss-security/2016/10/27/3; http://www.securityfocus.com/bid/93928; https://bugzilla.redhat.com/show_bug.cgi?id=1389338
CVE: CVE-2016-9108
Published: 2017-02-03
Description: Integer overflow in the js_regcomp function in regexp.c in Artifex Software, Inc. MuJS before commit b6de34ac6d8bb7dd5461c57940acfbd3ee7fd93e allows attackers to cause a denial of service (application crash) via a crafted regular expression.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://www.openwall.com/lists/oss-security/2016/10/30/12; http://www.securityfocus.com/bid/96006; https://bugzilla.redhat.com/show_bug.cgi?id=1390266
CVE: CVE-2016-9642
Published: 2017-02-03
Description: JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/11/26/4; http://www.securityfocus.com/bid/94554; http://www.securitytracker.com/id/1038137
CVE: CVE-2016-3183
Published: 2017-02-03
Description: The sycc422_t_rgb function in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg2000 file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/03/16/17; https://bugzilla.redhat.com/show_bug.cgi?id=1317821; https://github.com/uclouvain/openjpeg/commit/15f081c89650dccee4aa4ae66f614c3fdb268767
CVE: CVE-2016-4796
Published: 2017-02-03
Description: Heap-based buffer overflow in the color_cmyk_to_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (crash) via a crafted .j2k file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/05/13/2; https://bugzilla.redhat.com/show_bug.cgi?id=1335482; https://github.com/uclouvain/openjpeg/commit/162f6199c0cd3ec1c6c6dc65e41b2faab92b2d91
CVE: CVE-2016-4797
Published: 2017-02-03
Description: Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (application crash) via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: http://www.openwall.com/lists/oss-security/2016/05/13/2; https://bugzilla.redhat.com/show_bug.cgi?id=1335483; https://github.com/uclouvain/openjpeg/commit/8f9cc62b3f9a1da9712329ddcedb9750d585505c
CVE: CVE-2016-6188
Published: 2017-02-03
Description: Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service (memory consumption) via a large number of attempts to upload a large attachment, related to temporary files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://www.openwall.com/lists/oss-security/2016/07/09/3; http://www.securityfocus.com/bid/96007; https://github.com/inverse-inc/sogo/commit/32bb1456e23a32c7f45079c3985bf732dd0d276d
CVE: CVE-2015-4049
Published: 2017-02-03
Description: Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service (data corruption or system crash) via vectors related to using program operators during EPSILON (level 5) based codefiles at peak memory usage, which triggers CPM stack corruption.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=40; http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=40
CVE: CVE-2016-10165
Published: 2017-02-03
Description: The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-updates/2017-01/msg00174.html; http://rhn.redhat.com/errata/RHSA-2016-2079.html; http://rhn.redhat.com/errata/RHSA-2016-2658.html
CVE: CVE-2016-6500
Published: 2017-02-03
Description: Unspecified methods in the RACF Connector component before 1.1.1.0 in ForgeRock OpenIDM and OpenICF improperly call the SearchControls constructor with returnObjFlag set to true, which allows remote attackers to execute arbitrary code via a crafted serialized Java object, aka LDAP entry poisoning.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://backstage.forgerock.com/knowledge/kb/article/a96963547; https://backstage.forgerock.com/knowledge/kb/article/a96963547
CVE: CVE-2016-7147
Published: 2017-02-04
Description: Cross-site scripting (XSS) vulnerability in the manage_findResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x before 5.0.7 allows remote attackers to inject arbitrary web script or HTML via vectors involving double quotes, as demonstrated by the obj_ids:tokens parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7140.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96117; https://plone.org/security/hotfix/20170117; https://plone.org/security/hotfix/20170117/non-persistent-xss-in-zope2
CVE: CVE-2017-5880
Published: 2017-02-04
Description: Splunk Web in Splunk Enterprise versions 6.5.x before 6.5.2, 6.4.x before 6.4.5, 6.3.x before 6.3.9, 6.2.x before 6.2.13, 6.1.x before 6.1.12, 6.0.x before 6.0.13, 5.0.x before 5.0.17 and Splunk Light versions before 6.5.2 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted GET request, aka SPL-130279.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.splunk.com/view/SP-CAAAPW8; http://www.splunk.com/view/SP-CAAAPW8
CVE: CVE-2015-0229
Published: 2017-02-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2015.  Notes: none
CVE: CVE-2016-0730
Published: 2017-02-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2016-8753
Published: 2017-02-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016.  Notes: none
CVE: CVE-2017-5882
Published: 2017-02-04
Description: Cross-site scripting (XSS) vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96038; https://cxsecurity.com/issue/WLB[PII_REDACTED]; http://www.securityfocus.com/bid/96038
CVE: CVE-2016-10098
Published: 2017-02-05
Description: An issue was discovered on SendQuick Entera and Avera devices before 2HF16. Multiple Command Injection vulnerabilities allow attackers to execute arbitrary system commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.securityfocus.com/bid/96129; https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances/; http://www.securityfocus.com/bid/96129
CVE: CVE-2017-5136
Published: 2017-02-05
Description: An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application failed to check the access control of the request which could result in an attacker being able to shutdown the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: http://www.securityfocus.com/bid/96031; https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances/; http://www.securityfocus.com/bid/96031
CVE: CVE-2017-5137
Published: 2017-02-05
Description: An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the SMS logs from an unauthenticated perspective.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-532
References: http://www.securityfocus.com/bid/96031; https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances/; http://www.securityfocus.com/bid/96031
CVE: CVE-2010-5328
Published: 2017-02-06
Description: include/linux/init_task.h in the Linux kernel before 2.6.35 does not prevent signals with a process group ID of zero from reaching the swapper process, which allows local users to cause a denial of service (system crash) by leveraging access to this process group.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://ftp.naist.jp/pub/linux/kernel/v2.6/ChangeLog-2.6.35; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f106eee10038c2ee5b6056aaf3f6d5229be6dcdd; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f20011457f41c11edb5ea5038ad0c8ea9f392023
CVE: CVE-2016-10150
Published: 2017-02-06
Description: Use-after-free vulnerability in the kvm_ioctl_create_device function in virt/kvm/kvm_main.c in the Linux kernel before 4.8.13 allows host OS users to cause a denial of service (host OS crash) or possibly gain privileges via crafted ioctl calls on the /dev/kvm device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264, CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0f1d21c1ccb1da66629627a74059dd7f5ac9c61; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.13; http://www.openwall.com/lists/oss-security/2017/01/18/10
CVE: CVE-2016-10153
Published: 2017-02-06
Description: The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging reliance on earlier net/ceph/crypto.c code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a45f795c65b479b4ba107b6ccde29b896d51ee98; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6; http://www.openwall.com/lists/oss-security/2017/01/21/3
CVE: CVE-2016-10154
Published: 2017-02-06
Description: The smbhash function in fs/cifs/smbencrypt.c in the Linux kernel 4.9.x before 4.9.1 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a scatterlist.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=06deeec77a5a689cc94b21a8a91a76e42176685d; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.1; http://www.openwall.com/lists/oss-security/2017/01/21/3
CVE: CVE-2016-10208
Published: 2017-02-06
Description: The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3a4b77cd47bb837b8557595ec7425f281f2ca1fe; http://seclists.org/fulldisclosure/2016/Nov/75; http://www.openwall.com/lists/oss-security/2017/02/05/3
CVE: CVE-2017-2583
Published: 2017-02-06
Description: The load_segment_descriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4.9.5 improperly emulates a "MOV SS, NULL selector" instruction, which allows guest OS users to cause a denial of service (guest OS crash) or gain guest OS privileges via a crafted application.
CVSS Score: 8.4 (HIGH)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=33ab91103b3415e12457e3104f0e4517ce12d0f3; http://www.debian.org/security/2017/dsa-3791; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5
CVE: CVE-2017-2596
Published: 2017-02-06
Description: The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction, which allows KVM L1 guest OS users to cause a denial of service (host OS memory consumption) by leveraging the mishandling of page references.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.debian.org/security/2017/dsa-3791; http://www.openwall.com/lists/oss-security/2017/01/31/4; http://www.securityfocus.com/bid/95878
CVE: CVE-2017-5546
Published: 2017-02-06
Description: The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to cause a denial of service (duplicate freelist entries and system crash) or possibly have unspecified other impact in opportunistic circumstances by leveraging the selection of a large value for a random number.
CVSS Score: 7.8 (HIGH)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4e490cf148e85ead0d1b1c2caaba833f1d5b29f; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5; http://www.openwall.com/lists/oss-security/2017/01/21/3
CVE: CVE-2017-5547
Published: 2017-02-06
Description: drivers/hid/hid-corsair.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6d104af38b570d37aa32a5803b04c354f8ed513d; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6; http://www.openwall.com/lists/oss-security/2017/01/21/3