deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-8373
Published: 2015-12-22
Description: The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging settings are used, allow remote attackers to cause a denial of service (daemon crash) via a malformed packet.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175218.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175337.html; https://kb.isc.org/article/AA-01318
CVE: CVE-2015-6431
Published: 2015-12-23
Description: Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2015-1221-iosxe; http://www.securityfocus.com/bid/79654; http://www.securitytracker.com/id/1034514
CVE: CVE-2015-6471
Published: 2015-12-23
Description: Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize padding fields in Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet data.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-295-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-295-01
CVE: CVE-2015-6851
Published: 2015-12-23
Description: EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mechanism by leveraging an unattended workstation and running DOM Inspector.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: http://packetstormsecurity.com/files/135013/RSA-SecurID-Web-Agent-Authentication-Bypass.html; http://seclists.org/bugtraq/2015/Dec/115; http://www.securityfocus.com/bid/79646
CVE: CVE-2015-7911
Published: 2015-12-23
Description: Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices before 1.24.50 and PCD3.T665 and PCD3.T666 devices before 1.24.41 have hardcoded credentials, which allows remote attackers to obtain administrative access via an FTP session.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-255
References: https://ics-cert.us-cert.gov/advisories/ICSA-15-335-01; https://ics-cert.us-cert.gov/advisories/ICSA-15-335-01
CVE: CVE-2015-7917
Published: 2015-12-23
Description: Untrusted search path vulnerability in Open Automation OPC Systems.NET 8.00.0023 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/bid/78909; https://ics-cert.us-cert.gov/advisories/ICSA-15-344-02; http://www.securityfocus.com/bid/78909
CVE: CVE-2015-7935
Published: 2015-12-23
Description: Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/79624; https://ics-cert.us-cert.gov/advisories/ICSA-15-351-02; http://www.securityfocus.com/bid/79624
CVE: CVE-2015-7936
Published: 2015-12-23
Description: Cross-site request forgery (CSRF) vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the authentication of administrators for requests that modify a password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/79624; https://ics-cert.us-cert.gov/advisories/ICSA-15-351-02; http://www.securityfocus.com/bid/79624
CVE: CVE-2015-7924
Published: 2015-12-23
Description: eWON devices with firmware before 10.1s0 do not trigger the discarding of browser session data in response to a log-off action, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
CVSS Score: 8.8 (HIGH)
References: http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01; http://seclists.org/fulldisclosure/2015/Dec/118; http://www.securityfocus.com/bid/79625
CVE: CVE-2015-7925
Published: 2015-12-23
Description: Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to hijack the authentication of administrators for requests that trigger firmware upload, removal of configuration data, or a reboot.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01; http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html; http://seclists.org/fulldisclosure/2015/Dec/118
CVE: CVE-2015-7926
Published: 2015-12-23
Description: eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote attackers to obtain sensitive information via an unspecified URL.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-200
References: http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01; http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html; http://seclists.org/fulldisclosure/2015/Dec/118
CVE: CVE-2015-7927
Published: 2015-12-23
Description: Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01; http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html; http://seclists.org/fulldisclosure/2015/Dec/118
CVE: CVE-2015-7928
Published: 2015-12-23
Description: eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
CVSS Score: 8.5 (HIGH)
CWE: CWE-200
References: http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01; http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html; http://seclists.org/fulldisclosure/2015/Dec/118
CVE: CVE-2015-7929
Published: 2015-12-23
Description: eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01; http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html; http://seclists.org/fulldisclosure/2015/Dec/118
CVE: CVE-2015-8267
Published: 2015-12-24
Description: The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-264
References: http://www.dovestones.com/security-vulnerability-in-ad-self-password-reset-v3-0-3-0/; http://www.securityfocus.com/bid/79642; https://www.kb.cert.org/vuls/id/757840
CVE: CVE-2015-7930
Published: 2015-12-24
Description: Adcon Telemetry A840 Telemetry Gateway Base Station has hardcoded credentials, which allows remote attackers to obtain administrative access via unspecified vectors.
CVSS Score: 10.0 (CRITICAL)
References: http://www.securityfocus.com/bid/79345; https://ics-cert.us-cert.gov/advisories/ICSA-15-349-01; http://www.securityfocus.com/bid/79345
CVE: CVE-2015-7931
Published: 2015-12-24
Description: The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information by reading cleartext packet data, related to the lack of SSL support.
CVSS Score: 8.7 (HIGH)
CWE: CWE-20, CWE-200
References: http://www.securityfocus.com/bid/79345; https://ics-cert.us-cert.gov/advisories/ICSA-15-349-01; http://www.securityfocus.com/bid/79345
CVE: CVE-2015-7932
Published: 2015-12-24
Description: Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 8.6 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/79345; https://ics-cert.us-cert.gov/advisories/ICSA-15-349-01; http://www.securityfocus.com/bid/79345
CVE: CVE-2015-7934
Published: 2015-12-24
Description: The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to discover log-file pathnames via unspecified vectors.
CVSS Score: 8.6 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/79345; https://ics-cert.us-cert.gov/advisories/ICSA-15-349-01; http://www.securityfocus.com/bid/79345
CVE: CVE-2015-8661
Published: 2015-12-24
Description: The h264_slice_header_init function in libavcodec/h264_slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number of threads and the number of slices, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted H.264 data.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=4ea4d2f438c9a7eba37980c9a87be4b34943e4d5; http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00004.html; http://www.securitytracker.com/id/1034539
CVE: CVE-2015-8662
Published: 2015-12-24
Description: The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=75422280fbcdfbe9dc56bde5525b4d8b280f1bc5; http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00004.html; http://www.securitytracker.com/id/1034539
CVE: CVE-2015-8663
Published: 2015-12-24
Description: The ff_get_buffer function in libavcodec/utils.c in FFmpeg before 2.8.4 preserves width and height values after a failure, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .mov file.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=abee0a1c60612e8638640a8a3738fffb65e16dbf; http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00004.html; http://www.securitytracker.com/id/1034539
CVE: CVE-2015-6792
Published: 2015-12-24
Description: The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_manager.cc, midi_manager_alsa.cc, and midi_manager_mac.cc, a different vulnerability than CVE-2015-8664.
CVSS Score: 9.8 (CRITICAL)
References: http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_15.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00029.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00030.html
CVE: CVE-2015-8664
Published: 2015-12-24
Description: Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different vulnerability than CVE-2015-6792.
CVSS Score: 8.8 (HIGH)
CWE: CWE-189
References: http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_15.html; http://www.securityfocus.com/bid/79686; http://www.securitytracker.com/id/1034491
CVE: CVE-2015-6409
Published: 2015-12-26
Description: Cisco Jabber 10.6.x, 11.0.x, and 11.1.x on Windows allows man-in-the-middle attackers to conduct STARTTLS downgrade attacks and trigger cleartext XMPP sessions via unspecified vectors, aka Bug ID CSCuw87419.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151224-jab; http://www.securityfocus.com/bid/79678; http://www.securitytracker.com/id/1034540
CVE: CVE-2015-8669
Published: 2015-12-26
Description: libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-updates/2016-01/msg00014.html; http://www.securitytracker.com/id/1034806; https://github.com/phpmyadmin/phpmyadmin/commit/c4d649325b25139d7c097e56e2e46cc7187fae45
CVE: CVE-2015-6004
Published: 2015-12-27
Description: Multiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to execute arbitrary SQL commands via (1) the UniqueID (aka sUniqueID) parameter to WrFreeFormText.asp in the Reports component or (2) the Find Device parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://twitter.com/ipswitch/statuses/[PII_REDACTED]29317121; http://www.securityfocus.com/bid/79506; http://www.securitytracker.com/id/1034833
CVE: CVE-2015-6005
Published: 2015-12-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inject arbitrary web script or HTML via (1) an SNMP OID object, (2) an SNMP trap message, (3) the View Names field, (4) the Group Names field, (5) the Flow Monitor Credentials field, (6) the Flow Monitor Threshold Name field, (7) the Task Library Name field, (8) the Task Library Description field, (9) the Policy Library Name field, (10) the Policy Library Description field, (11) the Template Library Name field, (12) the Template Library Description field, (13) the System Script Library Name field, (14) the System Script Library Description field, or (15) the CLI Settings Library Description field.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-79
References: http://twitter.com/ipswitch/statuses/[PII_REDACTED]29317121; http://www.securityfocus.com/bid/79506; http://www.securitytracker.com/id/1034833
CVE: CVE-2015-8252
Published: 2015-12-27
Description: The Frontel protocol before 3 on RSI Video Technologies Videofied devices sends a cleartext serial number, which allows remote attackers to determine a hardcoded key by sniffing the network and performing a "jumbled up" calculation with this number.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/; https://www.kb.cert.org/vuls/id/792004; http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/
CVE: CVE-2015-8253
Published: 2015-12-27
Description: The Frontel protocol before 3 on RSI Video Technologies Videofied devices sets up AES encryption but sends all traffic in cleartext, which allows remote attackers to obtain sensitive (1) message or (2) MJPEG video data by sniffing the network.
CVSS Score: 3.7 (LOW)
CWE: CWE-200
References: http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/; https://www.kb.cert.org/vuls/id/792004; http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/
CVE: CVE-2015-8254
Published: 2015-12-27
Description: The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection, which makes it easier for man-in-the-middle attackers to (1) initiate a false alarm or (2) deactivate an alarm by modifying the client-server data stream.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-345
References: http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/; https://www.kb.cert.org/vuls/id/792004; http://cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/
CVE: CVE-2015-8262
Published: 2015-12-27
Description: Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/bid/78877; https://www.kb.cert.org/vuls/id/646008; http://www.securityfocus.com/bid/78877
CVE: CVE-2015-8263
Published: 2015-12-27
Description: NETGEAR WNR1000v3 devices with firmware 1.0.2.68 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port.
CVSS Score: 8.6 (HIGH)
References: http://www.securityfocus.com/bid/78873; https://www.kb.cert.org/vuls/id/403568; http://www.securityfocus.com/bid/78873
CVE: CVE-2015-6537
Published: 2015-12-27
Description: SQL injection vulnerability in the login page in Epiphany Cardio Server 3.3 allows remote attackers to execute arbitrary SQL commands via a crafted URL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.epiphanyhealthdata.com/blog/certresponse; https://www.kb.cert.org/vuls/id/630239; http://www.epiphanyhealthdata.com/blog/certresponse
CVE: CVE-2015-6538
Published: 2015-12-27
Description: The login page in Epiphany Cardio Server 3.3, 4.0, and 4.1 mishandles authentication requests, which allows remote attackers to conduct LDAP injection attacks, and consequently bypass intended access restrictions, via a crafted URL.
CVSS Score: 9.8 (CRITICAL)
References: http://www.epiphanyhealthdata.com/blog/certresponse; https://www.kb.cert.org/vuls/id/630239; http://www.epiphanyhealthdata.com/blog/certresponse
CVE: CVE-2015-7665
Published: 2015-12-27
Description: Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to discover the Tor client IP address by reading a (1) PORT or (2) EPRT command.  NOTE: within wget itself, the automatic fallback is not considered a vulnerability by CVE.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://git.savannah.gnu.org/cgit/wget.git/commit/?id=075d7556964f5a871a73c22ac4b69f[PII_REDACTED]; http://www.openwall.com/lists/oss-security/2015/10/01/10; http://www.securityfocus.com/bid/76678
CVE: CVE-2015-7783
Published: 2015-12-27
Description: Cross-site scripting (XSS) vulnerability in Let's PHP! p++BBS before 4.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN72891124/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2015-000189; http://php.s3.to/bbs/bbs2.php
CVE: CVE-2013-7446
Published: 2015-12-28
Description: Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls.
CVSS Score: 5.3 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7d267278a9ece963d77eefec61630223fce08c6c; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00033.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00034.html
CVE: CVE-2015-7509
Published: 2015-12-28
Description: fs/ext4/namei.c in the Linux kernel before 3.7 allows physically proximate attackers to cause a denial of service (system crash) via a crafted no-journal filesystem, a related issue to CVE-2013-2015.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c9b92530a723ac5ef8e352885a1862b18f31b2f5; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html
CVE: CVE-2015-7884
Published: 2015-12-28
Description: The vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application.
CVSS Score: 2.3 (LOW)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=eda98796aff0d9bf41094b06811f5def3b4c333c; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html; http://www.openwall.com/lists/oss-security/2015/10/21/8
CVE: CVE-2015-7885
Published: 2015-12-28
Description: The dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application.
CVSS Score: 2.3 (LOW)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4b6184336ebb5c8dc1eae7f7ab46ee608a748b05; http://www.openwall.com/lists/oss-security/2015/10/21/8; http://www.securityfocus.com/bid/77317
CVE: CVE-2015-7990
Published: 2015-12-28
Description: Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6937.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8c7188b23474cca017b3ef354c4a58456f68303a; http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html
CVE: CVE-2015-8374
Published: 2015-12-28
Description: fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0305cd5f7fca85dae392b9ba85b116896eb7c1c7; http://rhn.redhat.com/errata/RHSA-2016-2574.html; http://rhn.redhat.com/errata/RHSA-2016-2584.html
CVE: CVE-2015-8543
Published: 2015-12-28
Description: The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application.
CVSS Score: 7.0 (HIGH)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79462ad02e861803b3840cc782248c7359451cd9; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html; http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html
CVE: CVE-2015-8569
Published: 2015-12-28
Description: The (1) pptp_bind and (2) pptp_connect functions in drivers/net/ppp/pptp.c in the Linux kernel through 4.3.3 do not verify an address length, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted application.
CVSS Score: 2.3 (LOW)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=09ccfd238e5a0e670d8178cf50180ea81ae09ae1; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176484.html; http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html