deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-3088
Published: 2012-05-16
Description: Google Chrome before 19.0.1084.46 does not properly draw hairlines, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://code.google.com/p/chromium/issues/detail?id=120648; http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html
CVE: CVE-2011-3089
Published: 2012-05-16
Description: Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving tables.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://code.google.com/p/chromium/issues/detail?id=120711; http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3090
Published: 2012-05-16
Description: Race condition in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to worker processes.
CVSS Score: 7.6 (HIGH)
CWE: CWE-362
References: http://code.google.com/p/chromium/issues/detail?id=121223; http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2011-3091
Published: 2012-05-16
Description: Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://code.google.com/p/chromium/issues/detail?id=121734; http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html
CVE: CVE-2011-3092
Published: 2012-05-16
Description: The regex implementation in Google V8, as used in Google Chrome before 19.0.1084.46, allows remote attackers to cause a denial of service (invalid write operation) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=122337; http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html
CVE: CVE-2011-3093
Published: 2012-05-16
Description: Google Chrome before 19.0.1084.46 does not properly handle glyphs, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=122585; http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html
CVE: CVE-2011-3094
Published: 2012-05-16
Description: Google Chrome before 19.0.1084.46 does not properly handle Tibetan text, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=122586; http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html
CVE: CVE-2011-3095
Published: 2012-05-16
Description: The OGG container in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=123481; http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html
CVE: CVE-2011-3096
Published: 2012-05-16
Description: Use-after-free vulnerability in Google Chrome before 19.0.1084.46 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an error in the GTK implementation of the omnibox.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://code.google.com/p/chromium/issues/detail?id=123530; http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html
CVE: CVE-2011-3097
Published: 2012-05-16
Description: The PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an out-of-bounds write error in the implementation of sampled functions.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/chromium/issues/detail?id=123733; http://code.google.com/p/chromium/issues/detail?id=124182; http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html
CVE: CVE-2011-3098
Published: 2012-05-16
Description: Google Chrome before 19.0.1084.46 on Windows uses an incorrect search path for the Windows Media Player plug-in, which might allow local users to gain privileges via a Trojan horse plug-in in an unspecified directory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://code.google.com/p/chromium/issues/detail?id=124216; http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html
CVE: CVE-2011-3099
Published: 2012-05-16
Description: Use-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a malformed name for the font encoding.
CVSS Score: 10.0 (HIGH)
CWE: CWE-399
References: http://code.google.com/p/chromium/issues/detail?id=124479; http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html; http://www.securityfocus.com/bid/53540
CVE: CVE-2011-3100
Published: 2012-05-16
Description: Google Chrome before 19.0.1084.46 does not properly draw dash paths, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://code.google.com/p/chromium/issues/detail?id=124652; http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html
CVE: CVE-2011-3101
Published: 2012-05-16
Description: Google Chrome before 19.0.1084.46 on Linux does not properly mitigate an unspecified flaw in an NVIDIA driver, which has unknown impact and attack vectors.  NOTE: see CVE-2012-3105 for the related MFSA 2012-34 issue in Mozilla products.
CVSS Score: 10.0 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=118970; http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00017.html
CVE: CVE-2011-3102
Published: 2012-05-16
Description: Off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://code.google.com/p/chromium/issues/detail?id=125462; http://googlechromereleases.blogspot.com/2012/05/stable-channel-update.html; http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
CVE: CVE-2012-0265
Published: 2012-05-16
Description: Stack-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted pathname for a file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/May/msg00005.html; http://support.apple.com/kb/HT5261; http://www.securityfocus.com/bid/53578
CVE: CVE-2012-0663
Published: 2012-05-16
Description: Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TeXML file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/May/msg00005.html; http://support.apple.com/kb/HT5261; http://www.securityfocus.com/bid/53571
CVE: CVE-2012-0664
Published: 2012-05-16
Description: Heap-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted text track in a movie file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/May/msg00005.html; http://support.apple.com/kb/HT5261; http://www.securityfocus.com/bid/53574
CVE: CVE-2012-0665
Published: 2012-05-16
Description: Heap-based buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/May/msg00005.html; http://support.apple.com/kb/HT5261; http://www.securityfocus.com/bid/53576
CVE: CVE-2012-0666
Published: 2012-05-16
Description: Stack-based buffer overflow in the plugin in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTMovie object.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/May/msg00005.html; http://support.apple.com/kb/HT5261; http://www.securityfocus.com/bid/53577
CVE: CVE-2012-0667
Published: 2012-05-16
Description: Integer signedness error in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTVR movie file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2012/May/msg00005.html; http://support.apple.com/kb/HT5261; http://www.securityfocus.com/bid/53583
CVE: CVE-2012-0668
Published: 2012-05-16
Description: Buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/May/msg00005.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html; http://support.apple.com/kb/HT5261
CVE: CVE-2012-0669
Published: 2012-05-16
Description: Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/May/msg00005.html; http://support.apple.com/kb/HT5261; http://www.securityfocus.com/bid/53580
CVE: CVE-2012-0670
Published: 2012-05-16
Description: Integer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted sean atom in a movie file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2012/May/msg00005.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html; http://support.apple.com/kb/HT5261
CVE: CVE-2012-0671
Published: 2012-05-16
Description: Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .pict file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.apple.com/archives/security-announce/2012/May/msg00005.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html; http://support.apple.com/kb/HT5261
CVE: CVE-2011-3637
Published: 2012-05-17
Description: The m_stop function in fs/proc/task_mmu.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (OOPS) via vectors that trigger an m_start error.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=76597cd31470fa130784c78fadb4dab2e624a723; http://www.openwall.com/lists/oss-security/2012/02/06/1
CVE: CVE-2011-4097
Published: 2012-05-17
Description: Integer overflow in the oom_badness function in mm/oom_kill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a denial of service (memory consumption or process termination) by using a certain large amount of memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.8; http://www.openwall.com/lists/oss-security/2011/11/01/2; https://bugzilla.redhat.com/show_bug.cgi?id=750399
CVE: CVE-2011-4112
Published: 2012-05-17
Description: The net subsystem in the Linux kernel before 3.1 does not properly restrict use of the IFF_TX_SKB_SHARING flag, which allows local users to cause a denial of service (panic) by leveraging the CAP_NET_ADMIN capability to access /proc/net/pktgen/pgctrl, and then using the pktgen package in conjunction with a bridge device for a VLAN interface.
CVSS Score: 5.5 (MEDIUM)
References: http://downloads.avaya.com/css/P8/documents/100156038; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=550fd08c2cebad61c548def135f67aba284c6162; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1
CVE: CVE-2011-4131
Published: 2012-05-17
Description: The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-189
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bf118a342f10dafe44b14451a1392c3254629a1f; http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081280.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html
CVE: CVE-2011-4326
Published: 2012-05-17
Description: The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial of service (system crash) by sending fragmented IPv6 UDP packets to a bridge device.
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://downloads.avaya.com/css/P8/documents/100156038; http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a9cf73ea7ff78f52662c8658d93c226effbbedde
CVE: CVE-2011-4594
Published: 2012-05-17
Description: The __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of service (system crash) via crafted use of the sendmmsg system call, leading to an incorrect pointer dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bc909d9ddbf7778371e36a651d6e4194b1cc7d4c; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1; http://www.openwall.com/lists/oss-security/2011/12/08/4
CVE: CVE-2011-4611
Published: 2012-05-17
Description: Integer overflow in the perf_event_interrupt function in arch/powerpc/kernel/perf_event.c in the Linux kernel before 2.6.39 on powerpc platforms allows local users to cause a denial of service (unhandled performance monitor exception) via vectors that trigger certain outcomes of performance events.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-189
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0837e3242c73566fc1c0196b4ec61779c25ffc93; http://www.openwall.com/lists/oss-security/2011/12/15/2
CVE: CVE-2011-4621
Published: 2012-05-17
Description: The Linux kernel before 2.6.37 does not properly implement a certain clock-update optimization, which allows local users to cause a denial of service (system hang) via an application that executes code in a loop.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f26f9aff6aaf67e9a430d16c266f91b13a5bff64; http://www.openwall.com/lists/oss-security/2011/12/21/6
CVE: CVE-2012-0038
Published: 2012-05-17
Description: Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before 3.1.9 allows local users to cause a denial of service (panic) via a filesystem with a malformed ACL, leading to a heap-based buffer overflow.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=093019cf1b18dd31b2c3b77acce4e000e2cbc9ce; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa8b18edd752a8b4e9d1ee2cd615b82c93cf8bba; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.9
CVE: CVE-2012-0044
Published: 2012-05-17
Description: Integer overflow in the drm_mode_dirtyfb_ioctl function in drivers/gpu/drm/drm_crtc.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.1.5 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted ioctl call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a5cd335165e31db9dbab636fd29895d41da55dd2; http://rhn.redhat.com/errata/RHSA-2012-0743.html; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.5
CVE: CVE-2012-0058
Published: 2012-05-17
Description: The kiocb_batch_free function in fs/aio.c in the Linux kernel before 3.2.2 allows local users to cause a denial of service (OOPS) via vectors that trigger incorrect iocb management.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6211&w=2; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2; http://www.openwall.com/lists/oss-security/2012/01/18/7
CVE: CVE-2012-0207
Published: 2012-05-17
Description: The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-369
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654876; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a8c1f65c79cbbb2f7da782d4c9d15639a9b94b27; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.1
CVE: CVE-2012-0879
Published: 2012-05-17
Description: The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service (I/O instability) by starting multiple processes that share an I/O context.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=61cc74fbb87af6aa551a06a370590c9bc07e29d9; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b69f2292063d2caf37ca9aec7d63ded203701bf3
CVE: CVE-2012-1090
Published: 2012-05-17
Description: The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html; http://rhn.redhat.com/errata/RHSA-2012-0481.html
CVE: CVE-2012-1097
Published: 2012-05-17
Description: The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a (1) PTRACE_GETREGSET or (2) PTRACE_SETREGSET ptrace call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c8e252586f8d5de906385d8cf6385fee289a825e; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html
CVE: CVE-2012-1146
Published: 2012-05-17
Description: The mem_cgroup_usage_unregister_event function in mm/memcontrol.c in the Linux kernel before 3.2.10 does not properly handle multiple events that are attached to the same eventfd, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by registering memory threshold events.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=371528caec553785c37f73fa3926ea0de84f986f; http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075781.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html
CVE: CVE-2012-1179
Published: 2012-05-17
Description: The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service (host OS crash) by leveraging administrative access to the guest OS, related to the pmd_none_or_clear_bad function and page faults for huge pages.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075781.html; http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6211&w=2
CVE: CVE-2012-1601
Published: 2012-05-17
Description: The KVM implementation in the Linux kernel before 3.3.6 allows host OS users to cause a denial of service (NULL pointer dereference and host OS crash) by making a KVM_CREATE_IRQCHIP ioctl call after a virtual CPU already exists.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html; http://rhn.redhat.com/errata/RHSA-2012-0571.html; http://rhn.redhat.com/errata/RHSA-2012-0676.html
CVE: CVE-2012-2121
Published: 2012-05-17
Description: The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2012-0676.html; http://rhn.redhat.com/errata/RHSA-2012-0743.html; http://secunia.com/advisories/50732
CVE: CVE-2012-2123
Published: 2012-05-17
Description: The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allows local users to bypass intended personality restrictions via a crafted application, as demonstrated by an attack that uses a parent process to disable ASLR.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d52fc5dde171f030170a6cb78034d166b13c9445; http://rhn.redhat.com/errata/RHSA-2012-0670.html; http://rhn.redhat.com/errata/RHSA-2012-0743.html