deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-4343
Published: 2016-05-22
Description: The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0.3 mishandles zero-size ././@LongLink files, which allows remote attackers to cause a denial of service (uninitialized pointer dereference) or possibly have unspecified other impact via a crafted TAR archive.
CVSS Score: 8.8 (HIGH)
CWE: CWE-824
References: http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html; http://php.net/ChangeLog-5.php; http://php.net/ChangeLog-7.php
CVE: CVE-2016-4344
Published: 2016-05-22
Description: Integer overflow in the xml_utf8_encode function in ext/xml/xml.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long argument to the utf8_encode function, leading to a heap-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://php.net/ChangeLog-7.php; http://www.openwall.com/lists/oss-security/2016/04/28/2; https://bugs.php.net/bug.php?id=71637
CVE: CVE-2016-4345
Published: 2016-05-22
Description: Integer overflow in the php_filter_encode_url function in ext/filter/sanitizing_filters.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://php.net/ChangeLog-7.php; http://www.openwall.com/lists/oss-security/2016/04/28/2; https://bugs.php.net/bug.php?id=71637
CVE: CVE-2016-4346
Published: 2016-05-22
Description: Integer overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html; http://php.net/ChangeLog-7.php
CVE: CVE-2016-4537
Published: 2016-05-22
Description: The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a negative integer for the scale argument, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html
CVE: CVE-2016-4538
Published: 2016-05-22
Description: The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structures without considering whether they are copies of the _zero_, _one_, or _two_ global variable, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html
CVE: CVE-2016-4539
Published: 2016-05-22
Description: The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (buffer under-read and segmentation fault) or possibly have unspecified other impact via crafted XML data in the second argument, leading to a parser level of zero.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html
CVE: CVE-2016-4540
Published: 2016-05-22
Description: The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html
CVE: CVE-2016-4541
Published: 2016-05-22
Description: The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a negative offset.
CVSS Score: 9.8 (CRITICAL)
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html
CVE: CVE-2016-4542
Published: 2016-05-22
Description: The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html
CVE: CVE-2016-4543
Published: 2016-05-22
Description: The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html
CVE: CVE-2016-4544
Published: 2016-05-22
Description: The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted header data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183736.html; http://lists.opensuse.org/opensuse-updates/2016-05/msg00086.html; http://lists.opensuse.org/opensuse-updates/2016-06/msg00027.html
CVE: CVE-2016-4566
Published: 2016-05-22
Description: Cross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution (SOME) attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2016/05/07/2; http://www.plupload.com/punbb/viewtopic.php?pid=28690; http://www.securitytracker.com/id/1035818
CVE: CVE-2016-4567
Published: 2016-05-22
Description: Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via an obfuscated form of the jsinitfunction parameter, as demonstrated by "jsinitfunctio%gn."
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2016/05/07/2; http://www.securitytracker.com/id/1035818; https://codex.wordpress.org/Version_4.5.2
CVE: CVE-2016-2151
Published: 2016-05-22
Description: user/index.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 grants excessive authorization on the basis of the moodle/course:viewhiddenuserfields capability, which allows remote authenticated users to discover student e-mail addresses by leveraging the teacher role and reading a Participants list.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52433; http://www.openwall.com/lists/oss-security/2016/03/21/1; http://www.securitytracker.com/id/1035333
CVE: CVE-2016-2152
Published: 2016-05-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in auth/db/auth.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via an external DB profile field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50705; http://www.openwall.com/lists/oss-security/2016/03/21/1; http://www.securitytracker.com/id/1035333
CVE: CVE-2016-2153
Published: 2016-05-22
Description: Cross-site scripting (XSS) vulnerability in the advanced-search feature in mod_data in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted field in a URL, as demonstrated by a search form field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52727; http://www.openwall.com/lists/oss-security/2016/03/21/1; http://www.securitytracker.com/id/1035333
CVE: CVE-2016-2154
Published: 2016-05-22
Description: admin/tool/monitor/lib.php in Event Monitor in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated users to discover hidden course names by subscribing to a rule.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51167; http://www.openwall.com/lists/oss-security/2016/03/21/1; http://www.securitytracker.com/id/1035333
CVE: CVE-2016-2155
Published: 2016-05-22
Description: The grade-reporting feature in Singleview (aka Single View) in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/grade:manage capability, which allows remote authenticated users to modify "Exclude grade" settings by leveraging the Non-Editing Instructor role.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52378; http://www.openwall.com/lists/oss-security/2016/03/21/1; http://www.securitytracker.com/id/1035333
CVE: CVE-2016-2156
Published: 2016-05-22
Description: calendar/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 provides calendar-event data without considering whether an activity is hidden, which allows remote authenticated users to obtain sensitive information via a web-service request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52808; http://www.openwall.com/lists/oss-security/2016/03/21/1; http://www.securitytracker.com/id/1035333
CVE: CVE-2016-2157
Published: 2016-05-22
Description: Cross-site request forgery (CSRF) vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to hijack the authentication of administrators for requests that manage Assignment plugins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-53031; http://www.openwall.com/lists/oss-security/2016/03/21/1; http://www.securitytracker.com/id/1035333
CVE: CVE-2016-2158
Published: 2016-05-22
Description: lib/ajax/getnavbranch.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3, when the forcelogin feature is enabled, allows remote attackers to obtain sensitive category-detail information from the navigation branch by leveraging the guest role for an Ajax request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52774; http://www.openwall.com/lists/oss-security/2016/03/21/1; http://www.securitytracker.com/id/1035333
CVE: CVE-2016-2159
Published: 2016-05-22
Description: The save_submission function in mod/assign/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote authenticated users to bypass intended due-date restrictions by leveraging the student role for a web-service request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52901; http://www.openwall.com/lists/oss-security/2016/03/21/1; http://www.securitytracker.com/id/1035333
CVE: CVE-2016-2190
Published: 2016-05-22
Description: Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not properly restrict links, which allows remote attackers to obtain sensitive URL information by reading a Referer log.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-264
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52651; http://www.openwall.com/lists/oss-security/2016/03/21/1; http://www.securitytracker.com/id/1035333
CVE: CVE-2016-4482
Published: 2016-05-23
Description: The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=681fef8380eb818c0b845fca5d2ab1dcbab114ee; http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184414.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html
CVE: CVE-2016-4485
Published: 2016-05-23
Description: The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory by reading a message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b8670c09f37bdf2847cc44f36511a53afc6161fd; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
CVE: CVE-2016-4486
Published: 2016-05-23
Description: The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5f8e44741f9f216e33736ea4ec65ca9ac03036e6; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
CVE: CVE-2016-4557
Published: 2016-05-23
Description: The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local users to gain privileges or cause a denial of service (use-after-free) via crafted BPF instructions that reference an incorrect file descriptor.
CVSS Score: 7.8 (HIGH)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8358b02bf67d3a5d8a825070e1aa73f25fb2e4c7; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5
CVE: CVE-2016-4558
Published: 2016-05-23
Description: The BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted application on (1) a system with more than 32 Gb of memory, related to the program reference count or (2) a 1 Tb system, related to the map reference count.
CVSS Score: 7.0 (HIGH)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=92117d8443bc5afacc8d5ba82e541946310f106e; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.5; http://www.openwall.com/lists/oss-security/2016/05/06/4
CVE: CVE-2016-4565
Published: 2016-05-23
Description: The InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a uAPI interface.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e6bd18f57aad1a2d1ef40e646d03ed0f2515c9e3; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
CVE: CVE-2016-4568
Published: 2016-05-23
Description: drivers/media/v4l2-core/videobuf2-v4l2.c in the Linux kernel before 4.5.3 allows local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a crafted number of planes in a VIDIOC_DQBUF ioctl call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2c1f6951a8a82e6de0d82b1158b5e493fc6c54ab; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.5.3; http://www.openwall.com/lists/oss-security/2016/05/07/4
CVE: CVE-2016-4569
Published: 2016-05-23
Description: The snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cec8f96e49d9be372fdb0c3836dcf31ec71e457e; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
CVE: CVE-2016-4578
Published: 2016-05-23
Description: sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9a47e9cff994f37f7f0dbd9ae23740d0f64f9fe6; http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e4ec8cc8039a7063e24204299b462bd1383184a5; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html
CVE: CVE-2016-4580
Published: 2016-05-23
Description: The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5.5 does not properly initialize a certain data structure, which allows attackers to obtain sensitive information from kernel stack memory via an X.25 Call Request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=79e48650320e6fba48369fccf13fd045315b19b8; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
CVE: CVE-2016-4581
Published: 2016-05-23
Description: fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.
CVSS Score: 5.5 (MEDIUM)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5ec0811d30378ae104f250bfc9b3640242d81e3f; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html; http://rhn.redhat.com/errata/RHSA-2016-2574.html
CVE: CVE-2016-4794
Published: 2016-05-23
Description: Use-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to cause a denial of service (BUG) or possibly have unspecified other impact via crafted use of the mmap and bpf system calls.
CVSS Score: 7.8 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2016-2574.html; http://rhn.redhat.com/errata/RHSA-2016-2584.html; http://www.openwall.com/lists/oss-security/2016/05/12/6
CVE: CVE-2016-4805
Published: 2016-05-23
Description: Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to the ppp_register_net_channel and ppp_unregister_channel functions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1f461dcdd296eecedaffffc6bae2bfa90bd7eb89; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html
CVE: CVE-2016-4913
Published: 2016-05-23
Description: The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=99d825822eade8d827a1817357cbf3f889a552d6; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html; http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html
CVE: CVE-2016-4951
Published: 2016-05-23
Description: The tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel through 4.6 does not verify socket existence, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a dumpit operation.
CVSS Score: 7.8 (HIGH)
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=45e093ae2830cd1264677d47ff9a95a71f5d9f9c; http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html; http://lists.openwall.net/netdev/2016/05/14/28
CVE: CVE-2015-8558
Published: 2016-05-23
Description: The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=156a2e4dbffa85997636a7a39ef12da6f1b40254; http://www.debian.org/security/2016/dsa-3469; http://www.debian.org/security/2016/dsa-3470
CVE: CVE-2016-2855
Published: 2016-05-23
Description: The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data directory, which allows local users to gain SYSTEM privileges by modifying VERSION.dll.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/137025/Huawei-Mobile-Broadband-HL-Service-22.001.25.00.03-Local-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2016/May/34; https://bogner.sh/2016/05/cve-2016-2855-huawei-mobile-broadband-hl-service-local-privilege-escalation/