deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-1199
Published: 2016-04-30
Description: The login page in the management screen in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to bypass intended IP address restrictions via unspecified vectors, a different vulnerability than CVE-2016-1200.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN47473944/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000051; http://www.ec-cube.net/info/weakness/weakness.php?id=65
CVE: CVE-2016-1200
Published: 2016-04-30
Description: The management screen in LOCKON EC-CUBE 3.0.7 through 3.0.9 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2016-1199.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284
References: http://jvn.jp/en/jp/JVN11458774/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000052; http://www.ec-cube.net/info/weakness/weakness.php?id=66
CVE: CVE-2016-1201
Published: 2016-04-30
Description: Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to hijack the authentication of administrators.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN73776243/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2016-000053; http://www.ec-cube.net/info/weakness/weakness.php?id=67
CVE: CVE-2016-1343
Published: 2016-04-30
Description: The XML parser in Cisco Information Server (CIS) 6.2 allows remote attackers to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCuy39059.
CVSS Score: 10.0 (CRITICAL)
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-cis; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-cis
CVE: CVE-2016-2804
Published: 2016-04-30
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html; http://www.mozilla.org/security/announce/2016/mfsa2016-39.html
CVE: CVE-2016-2805
Published: 2016-04-30
Description: Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html
CVE: CVE-2016-2806
Published: 2016-04-30
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html
CVE: CVE-2016-2807
Published: 2016-04-30
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html
CVE: CVE-2016-2808
Published: 2016-04-30
Description: The watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code or cause a denial of service (generation-count overflow, out-of-bounds HashMap write access, and application crash) via a crafted web site.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html
CVE: CVE-2016-2809
Published: 2016-04-30
Description: The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user-assisted remote attackers to delete arbitrary files by leveraging certain local file execution.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html; http://www.mozilla.org/security/announce/2016/mfsa2016-40.html; http://www.securitytracker.com/id/1035692
CVE: CVE-2016-2810
Published: 2016-04-30
Description: Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html; http://www.mozilla.org/security/announce/2016/mfsa2016-41.html; http://www.securitytracker.com/id/1035692
CVE: CVE-2016-2811
Published: 2016-04-30
Description: Use-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code via vectors related to the BeginReading method.
CVSS Score: 8.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html; http://www.mozilla.org/security/announce/2016/mfsa2016-42.html
CVE: CVE-2016-2812
Published: 2016-04-30
Description: Race condition in the get implementation in the ServiceWorkerManager class in the Service Worker subsystem in Mozilla Firefox before 46.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted web site.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html; http://www.mozilla.org/security/announce/2016/mfsa2016-42.html
CVE: CVE-2016-2813
Published: 2016-04-30
Description: Mozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment, and possibly discover PIN values, via a crafted web site, a similar issue to CVE-2016-1780.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://dl.acm.org/citation.cfm?id=2714650; http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html; http://www.mozilla.org/security/announce/2016/mfsa2016-43.html
CVE: CVE-2016-2814
Published: 2016-04-30
Description: Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstagefright in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code via crafted CENC offsets that lead to mismanagement of the sizes table.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html; http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html
CVE: CVE-2016-2816
Published: 2016-04-30
Description: Mozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via the multipart/x-mixed-replace content type.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html; http://www.mozilla.org/security/announce/2016/mfsa2016-45.html
CVE: CVE-2016-2817
Published: 2016-04-30
Description: The WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox before 46.0 does not properly restrict principal inheritance during chrome.tabs.create and chrome.tabs.update API calls, which allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted extension that accesses a (1) javascript: or (2) data: URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html; http://www.mozilla.org/security/announce/2016/mfsa2016-46.html
CVE: CVE-2016-2820
Published: 2016-04-30
Description: The Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html; http://www.mozilla.org/security/announce/2016/mfsa2016-48.html
CVE: CVE-2015-8325
Published: 2016-05-01
Description: The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2016-2588.html; http://rhn.redhat.com/errata/RHSA-2017-0641.html; http://www.debian.org/security/2016/dsa-3550
CVE: CVE-2016-4415
Published: 2016-05-01
Description: wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 2.x before 2.0.2 incorrectly increases a certain octet count, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted file.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119
References: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11795; https://code.google.com/p/google-security-research/issues/detail?id=647; https://www.wireshark.org/security/wnpa-sec-2016-12.html
CVE: CVE-2016-4416
Published: 2016-05-01
Description: epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.2 mishandles the Grouping subfield, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119
References: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11818; https://www.wireshark.org/security/wnpa-sec-2016-13.html; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11818
CVE: CVE-2016-4417
Published: 2016-05-01
Description: Off-by-one error in epan/dissectors/packet-gsm_abis_oml.c in the GSM A-bis OML dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet that triggers a 0xff tag value.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html; http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html; http://www.oracle.com/technetwork/topics/security/bulletinjul2[PII_REDACTED].html
CVE: CVE-2016-4418
Published: 2016-05-01
Description: epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet that triggers an empty set.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html; http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html; http://www.oracle.com/technetwork/topics/security/bulletinjul2[PII_REDACTED].html
CVE: CVE-2016-4419
Published: 2016-05-01
Description: epan/dissectors/packet-spice.c in the SPICE dissector in Wireshark 2.x before 2.0.2 mishandles capability data, which allows remote attackers to cause a denial of service (large loop) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-399
References: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12151; https://www.wireshark.org/security/wnpa-sec-2016-16.html; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12151
CVE: CVE-2016-4420
Published: 2016-05-01
Description: The NFS dissector in Wireshark 2.x before 2.0.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: https://www.wireshark.org/security/wnpa-sec-2016-17.html; https://www.wireshark.org/security/wnpa-sec-2016-17.html
CVE: CVE-2016-4421
Published: 2016-05-01
Description: epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service (deep recursion, stack consumption, and application crash) via a packet that specifies deeply nested data.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-updates/2016-03/msg00015.html; http://lists.opensuse.org/opensuse-updates/2016-03/msg00016.html; http://www.oracle.com/technetwork/topics/security/bulletinjul2[PII_REDACTED].html
CVE: CVE-2003-1604
Published: 2016-05-02
Description: The redirect_target function in net/ipv4/netfilter/ipt_REDIRECT.c in the Linux kernel before 2.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by sending packets to an interface that has a 0.0.0.0 IP address, a related issue to CVE-2015-8787.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00015.html; http://marc.info/?l=netfilter-devel&m=[PII_REDACTED]3047&w=2; http://www.openwall.com/lists/oss-security/2016/01/27/9
CVE: CVE-2008-7316
Published: 2016-05-02
Description: mm/filemap.c in the Linux kernel before 2.6.25 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers an iovec of zero length, followed by a page fault for an iovec of nonzero length.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=124d3b7041f9a0ca7c43a6293e1cae4576c32fd5; http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.25; http://www.openwall.com/lists/oss-security/2016/01/24/6
CVE: CVE-2011-5321
Published: 2016-05-02
Description: The tty_open function in drivers/tty/tty_io.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via crafted access to a device file under the /dev/pts directory.
CVSS Score: 5.5 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c290f8358acaeffd8e0c551ddcc24d[PII_REDACTED]; http://rhn.redhat.com/errata/RHSA-2015-1221.html; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1.1
CVE: CVE-2012-6689
Published: 2016-05-02
Description: The netlink_sendmsg function in net/netlink/af_netlink.c in the Linux kernel before 3.5.5 does not validate the dst_pid field, which allows local users to have an unspecified impact by spoofing Netlink messages.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=20e1db19db5d6b9e4e83021595eab0dc8f107bef; http://marc.info/?l=linux-netdev&m=[PII_REDACTED]5983&w=2; http://marc.info/?l=linux-netdev&m=[PII_REDACTED]5986&w=2
CVE: CVE-2012-6701
Published: 2016-05-02
Description: Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a70b52ec1aaeaf60f4739edb1b422827cb6f3893; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.1; http://www.openwall.com/lists/oss-security/2016/03/02/9
CVE: CVE-2014-9717
Published: 2016-05-02
Description: fs/namespace.c in the Linux kernel before 4.0.2 processes MNT_DETACH umount2 system calls without verifying that the MNT_LOCKED flag is unset, which allows local users to bypass intended access restrictions and navigate to filesystem locations beneath a mount by calling umount2 within a user namespace.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-284
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce07d891a0891d3c0d0c2d73d577490486b809e1; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00054.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html
CVE: CVE-2015-1350
Published: 2016-05-02
Description: The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-552
References: http://marc.info/?l=linux-kernel&m=[PII_REDACTED]0533&w=2; http://www.openwall.com/lists/oss-security/2015/01/24/5; http://www.securityfocus.com/bid/76075
CVE: CVE-2015-1573
Published: 2016-05-02
Description: The nft_flush_table function in net/netfilter/nf_tables_api.c in the Linux kernel before 3.18.5 mishandles the interaction between cross-chain jumps and ruleset flushes, which allows local users to cause a denial of service (panic) by leveraging the CAP_NET_ADMIN capability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-19
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a2f18db0c68fec96631c10cad9384c196e9008ac; http://rhn.redhat.com/errata/RHSA-2015-1137.html; http://rhn.redhat.com/errata/RHSA-2015-1138.html
CVE: CVE-2015-2672
Published: 2016-05-02
Description: The xsave/xrstor implementation in arch/x86/include/asm/xsave.h in the Linux kernel before 3.19.2 creates certain .altinstr_replacement pointers and consequently does not provide any protection against instruction faulting, which allows local users to cause a denial of service (panic) by triggering a fault, as demonstrated by an unaligned memory operand or a non-canonical address memory operand.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=06c8173eb92bbfc03a0fe8bb64315857d0badd06; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.2; http://www.openwall.com/lists/oss-security/2015/03/22/1
CVE: CVE-2015-2686
Published: 2016-05-02
Description: net/socket.c in the Linux kernel 3.19 before 3.19.3 does not validate certain range data for (1) sendto and (2) recvfrom system calls, which allows local users to gain privileges by leveraging a subsystem that uses the copy_from_iter function in the iov_iter interface, as demonstrated by the Bluetooth subsystem.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4de930efc23b92ddf88ce91c405ee645fe6e27ea; http://grsecurity.net/~spender/viro.txt; http://twitter.com/grsecurity/statuses/[PII_REDACTED]05102592
CVE: CVE-2015-4170
Published: 2016-05-02
Description: Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service (ldsem_down_read and ldsem_down_write deadlock) by establishing a new tty thread during shutdown of a previous tty thread.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf872776fc84128bb779ce2b83a37c884c3203ae; http://www.openwall.com/lists/oss-security/2015/05/26/1; http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2[PII_REDACTED].html
CVE: CVE-2015-4176
Published: 2016-05-02
Description: fs/namespace.c in the Linux kernel before 4.0.2 does not properly support mount connectivity, which allows local users to read arbitrary files by leveraging user-namespace root access for deletion of a file or directory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e0c9c0afd2fc958ffa34b697972721d81df8a56f; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.0.2; http://www.openwall.com/lists/oss-security/2015/06/04/5
CVE: CVE-2015-4177
Published: 2016-05-02
Description: The collect_mounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may execute after a path has been unmounted, which allows local users to cause a denial of service (system crash) by leveraging user-namespace root access for an MNT_DETACH umount2 system call.
CVSS Score: 5.5 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cd4a40174b71acd[PII_REDACTED]84d8bb1dc8ea4ae; http://openwall.com/lists/oss-security/2015/05/29/10; http://openwall.com/lists/oss-security/2015/05/29/5
CVE: CVE-2015-4178
Published: 2016-05-02
Description: The fs_pin implementation in the Linux kernel before 4.0.5 does not ensure the internal consistency of a certain list data structure, which allows local users to cause a denial of service (system crash) by leveraging user-namespace root access for an MNT_DETACH umount2 system call, related to fs/fs_pin.c and include/linux/fs_pin.h.
CVSS Score: 5.5 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=820f9f147dcce2602eefd9b575bbbd9ea14f0953; http://openwall.com/lists/oss-security/2015/05/29/10; http://openwall.com/lists/oss-security/2015/05/29/5
CVE: CVE-2015-8019
Published: 2016-05-02
Description: The skb_copy_and_csum_datagram_iovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a write system call followed by a recvmsg system call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html
CVE: CVE-2015-8324
Published: 2016-05-02
Description: The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data structures, which allows physically proximate attackers to cause a denial of service (NULL pointer dereference and panic) via a crafted USB device, related to the ext4_fill_super function.
CVSS Score: 4.6 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=744692dc059845b2a[PII_REDACTED]846e74d4f6e11; http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.34; http://rhn.redhat.com/errata/RHSA-2016-0855.html