deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-9154
Published: 2016-12-23
Description: Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D (All firmware versions < V6.00.046) and Desigo PX Web modules PXA30-W0, PXA30-W1, PXA30-W2 for Desigo PX automation controllers PXC00-U, PXC64-U, PXC128-U (All firmware versions < V6.00.046) use a pseudo random number generator with insufficient entropy to generate certificates for HTTPS, potentially allowing remote attackers to reconstruct the corresponding private key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-332, CWE-332
References: http://www.securityfocus.com/bid/94962; http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-856492.pdf; https://ics-cert.us-cert.gov/advisories/ICSA-16-355-01
CVE: CVE-2016-9561
Published: 2016-12-23
Description: The che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote attackers to cause a denial of service (allocation of huge memory, and being killed by the OS) via a crafted MOV file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-399
References: http://www.openwall.com/lists/oss-security/2016/12/08/1; http://www.securityfocus.com/bid/94756; http://www.openwall.com/lists/oss-security/2016/12/08/1
CVE: CVE-2016-9889
Published: 2016-12-23
Description: Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 LTS, and 16.x before 16.1 don't have the input sanitized, related to tiki-setup.php and article_image.php. The impact is XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95083; http://www.securitytracker.com/id/1037531; https://tiki.org/article443-Security-update-Tiki-16-1-Tiki-15-3-and-Tiki-12-10-released
CVE: CVE-2016-6910
Published: 2016-12-23
Description: The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for the Samsung Galaxy S6 Edge devices, but the vulnerability can persist on the device even after the device has been upgraded to an Android 5.1.1 or 6.0.1 build. The vulnerable system app gives a non-existent app the ability to read the notifications from the device, which a third-party app can utilize if it uses a package name of com.samsung.android.app.portalservicewidget. This vulnerability allows an unprivileged third-party app to obtain the text of the user's notifications, which tend to contain personal data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.kryptowire.com/disclosures/CVE-2016-6910/Factory_Resets_and_Obtaining_Notifications_on_Samsung_Android_Devices.pdf; http://www.securityfocus.com/bid/95092; http://www.kryptowire.com/disclosures/CVE-2016-6910/Factory_Resets_and_Obtaining_Notifications_on_Samsung_Android_Devices.pdf
CVE: CVE-2016-2312
Published: 2016-12-23
Description: Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-254
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177454.html; http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177557.html; https://bugs.kde.org/show_bug.cgi?id=358125
CVE: CVE-2016-7787
Published: 2016-12-23
Description: A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-updates/2016-10/msg00031.html; http://lists.opensuse.org/opensuse-updates/2016-10/msg00034.html; http://www.openwall.com/lists/oss-security/2016/09/29/7
CVE: CVE-2016-7966
Published: 2016-12-23
Description: Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign (=) or a space into the injected HTML, which greatly reduces the available HTML functionality. Although it is possible to include an HTML comment indicator to hide content.
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-updates/2016-10/msg00065.html; http://www.debian.org/security/2016/dsa-3697; http://www.openwall.com/lists/oss-security/2016/10/05/1
CVE: CVE-2016-7967
Published: 2016-12-23
Description: KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled.
CVSS Score: 8.1 (HIGH)
CWE: CWE-94, CWE-284
References: http://www.openwall.com/lists/oss-security/2016/10/05/1; http://www.securityfocus.com/bid/93360; https://www.kde.org/info/security/advisory-20161006-2.txt
CVE: CVE-2016-7968
Published: 2016-12-23
Description: KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. HTML Mail contents were not sanitized for JavaScript and included code was executed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://www.openwall.com/lists/oss-security/2016/10/05/1; http://www.securityfocus.com/bid/93360; https://www.kde.org/info/security/advisory-20161006-3.txt
CVE: CVE-2016-8707
Published: 2016-12-23
Description: An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability can be triggered through any user controlled TIFF that is handled by this functionality.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.debian.org/security/2017/dsa-3799; http://www.securityfocus.com/bid/94727; http://www.talosintelligence.com/reports/TALOS-2016-0216/
CVE: CVE-2016-9036
Published: 2016-12-23
Description: An exploitable incorrect return value vulnerability exists in the mp_check function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the mp_check function to incorrectly return success when trying to check if decoding a map16 packet will read outside the bounds of a buffer, resulting in a denial of service vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: http://www.securityfocus.com/bid/95064; http://www.talosintelligence.com/reports/TALOS-2016-0254/; http://www.securityfocus.com/bid/95064
CVE: CVE-2016-9037
Published: 2016-12-23
Description: An exploitable out-of-bounds array access vulnerability exists in the xrow_header_decode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's value. This can lead to an out of bounds read within the context of the server. An attacker who exploits this vulnerability can cause a denial of service vulnerability on the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: http://www.securityfocus.com/bid/95063; http://www.talosintelligence.com/reports/TALOS-2016-0255/; http://www.securityfocus.com/bid/95063
CVE: CVE-2016-9907
Published: 2016-12-23
Description: Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredir_handle_destroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.openwall.com/lists/oss-security/2016/12/08/3; http://www.securityfocus.com/bid/94759; https://access.redhat.com/errata/RHSA-2017:2392
CVE: CVE-2016-9908
Published: 2016-12-23
Description: Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET' command. A guest user/process could use this flaw to leak contents of the host memory bytes.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2016/12/08/4; http://www.securityfocus.com/bid/94761; https://security.gentoo.org/glsa/201701-49
CVE: CVE-2016-9911
Published: 2016-12-23
Description: Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehci_init_transfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.openwall.com/lists/oss-security/2016/12/08/5; http://www.securityfocus.com/bid/94762; https://access.redhat.com/errata/RHSA-2017:2392
CVE: CVE-2016-9912
Published: 2016-12-23
Description: Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It could occur while destroying gpu resource object in 'virtio_gpu_resource_destroy'. A guest user/process could use this flaw to leak host memory bytes, resulting in DoS for a host.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.openwall.com/lists/oss-security/2016/12/08/6; http://www.securityfocus.com/bid/94760; https://security.gentoo.org/glsa/201701-49
CVE: CVE-2016-9921
Published: 2016-12-23
Description: Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: http://www.openwall.com/lists/oss-security/2016/12/09/1; http://www.securityfocus.com/bid/94803; https://access.redhat.com/errata/RHSA-2017:2392
CVE: CVE-2016-9923
Published: 2016-12-23
Description: Quick Emulator (Qemu) built with the 'chardev' backend support is vulnerable to a use after free issue. It could occur while hotplug and unplugging the device in the guest. A guest user/process could use this flaw to crash a Qemu process on the host resulting in DoS.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2016/12/09/2; http://www.securityfocus.com/bid/94827; https://security.gentoo.org/glsa/201701-49
CVE: CVE-2016-10037
Published: 2016-12-24
Description: Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id (aka dir) parameter, related to browser/directory/getlist.
CVSS Score: 7.3 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/95127; https://github.com/modxcms/revolution/pull/13177; https://raw.githubusercontent.com/modxcms/revolution/v2.5.2-pl/core/docs/changelog.txt
CVE: CVE-2016-10038
Published: 2016-12-24
Description: Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/remove.
CVSS Score: 7.3 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/95097; https://github.com/modxcms/revolution/pull/13177; https://raw.githubusercontent.com/modxcms/revolution/v2.5.2-pl/core/docs/changelog.txt
CVE: CVE-2016-10039
Published: 2016-12-24
Description: Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/getfiles.
CVSS Score: 7.3 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/95096; https://github.com/modxcms/revolution/pull/13177; https://raw.githubusercontent.com/modxcms/revolution/v2.5.2-pl/core/docs/changelog.txt
CVE: CVE-2016-10006
Published: 2016-12-24
Description: In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impact is XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95101; http://www.securitytracker.com/id/1037532; https://github.com/nahsra/antisamy/issues/2
CVE: CVE-2016-10041
Published: 2016-12-25
Description: An issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0. Under certain preconditions, it is possible to execute telegram simulation as a non-admin user. As prerequisites, a user must have created an online-connection, validly authenticated and authorized as administrator, and executed telegram simulation. After that, the online-connection must have been closed. Incorrect caching of client data then may lead to privilege escalation, where a subsequently acting non-admin user is permitted to do telegram simulation. In order to exploit this vulnerability, a potential attacker would need to have both a valid engineering-account in the SPRECON RBAC system as well as access to a service/maintenance computer with SPRECON-E Service Program running. Additionally, a valid admin-user must have closed the service connection beforehand without closing the program, having executed telegram simulation; the attacker then has access to the running software instance. Hence, there is no risk from external attackers.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95296; https://www.sprecher-automation.com/en/it-security/; http://www.securityfocus.com/bid/95296
CVE: CVE-2016-9681
Published: 2016-12-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in Serendipity before 2.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a category or directory name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95095; https://github.com/s9y/Serendipity/commit/e2a665e13b7de82a71c9bbb77575d15131b722be; https://smarterbitbybit.com/cve-2016-9681-serendipity-cms-xss-vulnerability-in-version-2-0-4/
CVE: CVE-2016-9217
Published: 2016-12-26
Description: A vulnerability in Cisco Intercloud Fabric for Business and Cisco Intercloud Fabric for Providers could allow an unauthenticated, remote attacker to connect to the database used by these products. More Information: CSCus99394. Known Affected Releases: 7.3(0)ZN(0.99).
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: http://www.securityfocus.com/bid/95023; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161221-icf; http://www.securityfocus.com/bid/95023
CVE: CVE-2016-9223
Published: 2016-12-26
Description: A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator (CCO; formerly CliQr) could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. Affected Products: This vulnerability affect all releases of Cisco CloudCenter Orchestrator (CCO) deployments where the Docker Engine TCP port 2375 is open on the system and bound to local address 0.0.0.0 (any interface).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/95024; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161221-cco; http://www.securityfocus.com/bid/95024
CVE: CVE-2016-9224
Published: 2016-12-26
Description: A vulnerability in the Cisco Jabber Guest Server could allow an unauthenticated, remote attacker to initiate connections to arbitrary hosts. More Information: CSCvc31635. Known Affected Releases: 10.6(9). Known Fixed Releases: 11.0(0).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/95016; http://www.securitytracker.com/id/1037516; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161221-jabber
CVE: CVE-2016-10031
Published: 2016-12-27
Description: WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local attacker must insert an executable file called mysqld.exe or httpd.exe and replace the original files. The next time the service starts, the malicious file will get executed as SYSTEM. NOTE: the vendor disputes the relevance of this report, taking the position that a configuration in which "'someone' (an attacker) is able to replace files on a PC" is not "the fault of WampServer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://forum.wampserver.com/read.php?2%2C144473; https://packetstormsecurity.com/files/140279/Wampserver-3.0.6-Privilege-Escalation.html; https://sourceforge.net/p/wampserver/bugs/52/
CVE: CVE-2016-10072
Published: 2016-12-27
Description: WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local attacker must insert an executable file called wampmanager.exe or unins000.exe and replace the original files. The next time one of these programs is launched by a more privileged user, malicious code chosen by the local attacker will run. NOTE: the vendor disputes the relevance of this report, taking the position that a configuration in which "'someone' (an attacker) is able to replace files on a PC" is not "the fault of WampServer.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-264, CWE-94
References: http://forum.wampserver.com/read.php?2%2C144473; https://packetstormsecurity.com/files/138948/wampserver306-insecure.txt; http://forum.wampserver.com/read.php?2%2C144473
CVE: CVE-2012-6704
Published: 2016-12-28
Description: The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2) SO_RCVBUF option.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=[PII_REDACTED]5abfd39d7c8378a9cfdf5e1be2002b; http://www.openwall.com/lists/oss-security/2016/12/03/1; http://www.securityfocus.com/bid/95135
CVE: CVE-2016-6213
Published: 2016-12-28
Description: fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which allows local users to cause a denial of service (memory consumption and deadlock) via MS_BIND mount system calls, as demonstrated by a loop that triggers exponential growth in the number of mounts.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-400
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d29216842a85c7970c536108e093963f02714498; http://www.openwall.com/lists/oss-security/2016/07/13/8; http://www.securityfocus.com/bid/91754
CVE: CVE-2016-6786
Published: 2016-12-28
Description: kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 30955111.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f63a8daa5812afef4f06c962351687e1ff9ccb2b; http://source.android.com/security/bulletin/2016-12-01.html; http://www.debian.org/security/2017/dsa-3791
CVE: CVE-2016-6787
Published: 2016-12-28
Description: kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 31095224.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f63a8daa5812afef4f06c962351687e1ff9ccb2b; http://source.android.com/security/bulletin/2016-12-01.html; http://www.debian.org/security/2017/dsa-3791
CVE: CVE-2016-9576
Published: 2016-12-28
Description: The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the type of iterator, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ac402cfcdc904f9772e1762b3fda112dcc56a0; http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00040.html; http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00041.html
CVE: CVE-2016-9588
Published: 2016-12-28
Description: arch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanages the #BP and #OF exceptions, which allows guest OS users to cause a denial of service (guest OS crash) by declining to handle an exception thrown by an L2 guest.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-388
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ef85b67385436ddc1998f45f1d6a210f935b3388; http://www.debian.org/security/2017/dsa-3804; http://www.openwall.com/lists/oss-security/2016/12/15/3
CVE: CVE-2016-9685
Published: 2016-12-28
Description: Multiple memory leaks in error paths in fs/xfs/xfs_attr_list.c in the Linux kernel before 4.5.1 allow local users to cause a denial of service (memory consumption) via crafted XFS filesystem operations.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2e83b79b2d6c78bf1b4aa227938a214dcbddc83f; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.1; http://www.openwall.com/lists/oss-security/2016/11/30/1
CVE: CVE-2016-9755
Published: 2016-12-28
Description: The netfilter subsystem in the Linux kernel before 4.9 mishandles IPv6 reassembly, which allows local users to cause a denial of service (integer overflow, out-of-bounds write, and GPF) or possibly have unspecified other impact via a crafted application that makes socket, connect, and writev system calls, related to net/ipv6/netfilter/nf_conntrack_reasm.c and net/ipv6/netfilter/nf_defrag_ipv6_hooks.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b57da0630c9fd36ed7a20fc0f98dc82cc0777fa; http://www.openwall.com/lists/oss-security/2016/12/01/10; http://www.securityfocus.com/bid/94626
CVE: CVE-2016-9756
Published: 2016-12-28
Description: arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code Segment (CS) in certain error cases, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2117d5398c81554fbf803f5fd1dc55eb78216c0c; http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00000.html; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.12
CVE: CVE-2016-9777
Published: 2016-12-28
Description: KVM in the Linux kernel before 4.8.12, when I/O APIC is enabled, does not properly restrict the VCPU index, which allows guest OS users to gain host OS privileges or cause a denial of service (out-of-bounds array access and host OS crash) via a crafted interrupt request, related to arch/x86/kvm/ioapic.c and arch/x86/kvm/ioapic.h.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=81cdb259fb6d8c1c4ecfeea389ff5a73c07f5755; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.12; http://www.openwall.com/lists/oss-security/2016/12/02/2