huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2017-18258: libxml2: Unrestricted memory usage in xz_head() function in xzlib.c
Component: libxml2
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 3.5 (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L)
Public date: 2017-09-07T00:00:00+00:00

The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required for a legitimate file.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.6
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: e2a9122b8dde53d320750451e9907a7dcb2ca8bb
CVE-2017-18270: kernel: improper keyrings creation
Component: kernel
Severity: Moderate
CWE: CWE-287 (Improper Authentication)
CVSS v3: 4.4 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)
Public date: 2017-09-18T00:00:00+00:00

A flaw was found in the Linux kernel in the way a local user could create keyrings for other users via keyctl commands. This may allow an attacker to set unwanted defaults, a denial of service, or possibly leak keyring information between users.

Statement: The impact is Moderate, because the impact is only for userspace programs if using keyctl incorrectly. For root-level processes (usually during boot) keyctl being used securely without possibility of leaking keys between users.

Affected upstream versions: n/a
Fixed upstream versions: v4.14
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 237bbd29f7a049d310d907f4b2716a7feef9abf3
CVE-2017-18344: kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c
Component: kernel
Severity: Important
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 7.1 (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)
Public date: 2017-12-15T00:00:00+00:00

The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function.


Affected upstream versions: n/a
Fixed upstream versions: v4.15
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: cef31d9af908243421258f1df35a4a644604efbe
CVE-2017-18360: kernel: Division by zero in change_port_settings in drivers/usb/serial/io_ti.c resulting in a denial of service
Component: kernel
Severity: Low
CWE: CWE-369 (Divide By Zero)
CVSS v3: 4.7 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-05-11T00:00:00+00:00

A division-by-zero in set_termios(), when debugging is enabled, was found in the Linux kernel. When the [io_ti] driver is loaded, a local unprivileged attacker can request incorrect high transfer speed in the change_port_settings() in the drivers/usb/serial/io_ti.c so that the divisor value becomes zero and causes a system crash resulting in a denial of service.


Affected upstream versions: n/a
Fixed upstream versions: v4.12
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 6aeb75e6adfaed16e58780309613a578fe1ee90b
CVE-2017-18367: libseccomp-golang: mishandling of multiple argument rules leading to a bypass of intended access restrictions
Component: libseccomp-golang
Severity: Moderate
CWE: CWE-305 (Authentication Bypass by Primary Weakness)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Public date: 2019-04-24T00:00:00+00:00

libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified multiple syscall arguments could bypass intended access restrictions by specifying a single matching argument.

Statement: This issue may affect OpenShift Container Platform 3.x and 4.x if you are providing a custom Seccomp profile using Security Context Constraints [1]. The custom Seccomp profile would need to specify multiple arguments, such as below, from [2].

{
  "names": [
    "socketcall"
  ],
  "action": "SCMP_ACT_ALLOW",
  "args": [
    {
      "index": 0,
      "value": 1,
      "valueTwo": 0,
      "op": "SCMP_CMP_EQ"
    },
    {
      "index": 1,
      "value": 1,
      "valueTwo": 0,
      "op": "SCMP_CMP_EQ"
    }
  ],
  "comment": "",
  "includes": {},
  "excludes": {}
},

If such a profile was used the arguments could be combined as an OR rule, not AND, as the user might expect from Seccomp.

[1] https://docs.openshift.com/container-platform/4.1/authentication/managing-security-context-constraints.html

[2] https://github.com/moby/moby/issues/32714#issuecomment-295532163

Affected upstream versions: n/a
Fixed upstream versions: v0.9.1
Upstream repository: https://github.com/seccomp/libseccomp-golang
Upstream fix commit: 06e7a29f36a34b8cf419aeb87b979ee508e58f9e
CVE-2017-18551: kernel: out of bounds write in function i2c_smbus_xfer_emulated in drivers/i2c/i2c-core-smbus.c
Component: kernel
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 6.7 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Public date: 2019-08-18T00:00:00+00:00

An out of bounds (OOB) memory access flaw was found in i2c_smbus_xfer_emulated in drivers/i2c/i2c-core-smbus.c in I2C subsystem. A read request for length (data->block[0]) greater than 'I2C_SMBUS_BLOCK_MAX + 1' may cause underlying I2C driver write out of array's boundary. This could allow a local attacker with special user privilege (or root) to crash the system or leak kernel internal information.


Affected upstream versions: n/a
Fixed upstream versions: v4.15
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 89c6efa61f5709327ecfa24bff18e57a4e80c7fa
CVE-2017-18595: kernel: double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c
Component: kernel
Severity: Important
CWE: CWE-416 (Use After Free)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2019-09-04T00:00:00+00:00

A flaw was found in the allocate_trace_buffer in kernel/trace/trace.c in the debug subsystem, when failure to allocate a dynamic percpu area, a resource cleanup is called. The pointer (buf->buffer) still holds the address and is not set to NULL, which can cause a use-after-free problem, leading to a dangling pointer issue.


Affected upstream versions: n/a
Fixed upstream versions: v4.15
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 4397f04575c44e1440ec2e49b6302785c95fd2f8
CVE-2017-18635: novnc: XSS vulnerability via the messages propagated to the status field
Component: novnc
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
CVSS v3: 6.1 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Public date: 2019-01-12T00:00:00+00:00

An XSS vulnerability was discovered in noVNC in which arbitrary HTML could be injected into the noVNC web page. An attacker having access to a VNC server could use target host values in a crafted URL to gain access to secure information (such as VM tokens).


Affected upstream versions: n/a
Fixed upstream versions: v1.0.0
Upstream repository: https://github.com/novnc/noVNC
Upstream fix commit: 6048299a138e078aed210f163111698c8c526a13
CVE-2017-18922: libvncserver: websocket decoding buffer overflow
Component: libvncserver
Severity: Important
CWE: CWE-122 (Heap-based Buffer Overflow)
CVSS v3: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2017-02-15T00:00:00+00:00

A flaw was found in libvncserver. A heap-based buffer overflow within the websocket decoding functionality is possible, which can lead to exploitation by a malicious attacker to overwrite a function pointer. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.


Affected upstream versions: n/a
Fixed upstream versions: LibVNCServer-0.9.12
Upstream repository: https://github.com/LibVNC/libvncserver
Upstream fix commit: aac95a9dcf4bbba87b76c72706c3221a842ca433
CVE-2017-20230: perl-Storable: Storable for Perl: Denial of service via stack overflow in retrieve_hook function
Component: perl-Storable
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2026-04-21T15:26:18.216000+00:00

A flaw was found in Storable for Perl. A remote attacker can exploit a vulnerability in the `retrieve_hook` function by crafting malicious data. This flaw occurs because the function incorrectly handles the length of class names, storing it as a signed integer but processing it as unsigned during read operations. Successful exploitation leads to a stack overflow, which can cause a denial of service.

Statement: This is an Moderate denial of service flaw in perl-Storable. The vulnerability arises from incorrect handling of class name lengths during deserialization, which can lead to a stack overflow when processing specially crafted data. To exploit this vulnerability the attacker needs to trick the user to use a maliciously crafted data.

Affected upstream versions: <= v5.27.8
Fixed upstream versions: 3.05
Upstream repository: https://github.com/Perl/perl5
Upstream fix commit: a258c17c6937f79529c8319a829310e09cdbd216
CVE-2017-2582: keycloak: SAML request parser replaces special strings with system properties
Component: keycloak
Severity: Moderate
CWE: CWE-201 (Insertion of Sensitive Information Into Sent Data)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Public date: 2017-09-26T00:00:00+00:00

It was found that while parsing the SAML messages the StaxParserUtil class of Picketlink replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request ID field to be the chosen system property which could be obtained in the "InResponseTo" field in the response.


Affected upstream versions: 2.5.1
Fixed upstream versions: 2.5.1.Final
Upstream repository: https://github.com/keycloak/keycloak
Upstream fix commit: 0cb5ba0f6e83162d221681f47b470c3042eef237
CVE-2017-2583: Kernel: Kvm: vmx/svm potential privilege escalation inside guest
Component: Kernel
Severity: Moderate
CWE: CWE-250 (Execution with Unnecessary Privileges)
CVSS v3: 6.4 (CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Public date: 2017-01-12T00:00:00+00:00

Linux kernel built with the Kernel-based Virtual Machine (CONFIG_KVM) support was vulnerable to an incorrect segment selector(SS) value error. The error could occur while loading values into the SS register in long mode. A user or process inside a guest could use this flaw to crash the guest, resulting in DoS or potentially escalate their privileges inside the guest.

Statement: This issue does not affect the versions of the kernel package as shipped with
Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.

This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 7. Future kernel updates for Red Hat Enterprise Linux 7
may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v4.10
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 33ab91103b3415e12457e3104f0e4517ce12d0f3
CVE-2017-2584: Kernel: kvm: use after free in complete_emulated_mmio
Component: Kernel
Severity: Low
CWE: CWE-416 (Use After Free)
CVSS v3: 7.1 (CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H)
Public date: 2017-01-11T00:00:00+00:00

arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free) via a crafted application that leverages instruction emulation for fxrstor, fxsave, sgdt, and sidt.

Statement: This issue does not affect the versions of the kernel package as shipped with
Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.

This issue affects the version of Linux kernel as shipped with
Red Hat Enterprise Linux 7.

This has been rated as having Low security impact and is not currently
planned to be addressed in future updates. For additional information, refer
to the Red Hat Enterprise Linux Life Cycle:
https://access.redhat.com/support/policy/updates/errata/

Affected upstream versions: n/a
Fixed upstream versions: v4.10
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 129a72a0d3c8e139a04512325384fe5ac119e74d
CVE-2017-2616: util-linux: Sending SIGKILL to other processes with root privileges via su
Component: util-linux
Severity: Moderate
CWE: CWE-267 (Privilege Defined With Unsafe Actions)
CVSS v3: 5.5 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-02-22T00:00:00+00:00

A race condition was found in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.


Affected upstream versions: 2.32.1
Fixed upstream versions: v2.30
Upstream repository: https://github.com/karelzak/util-linux
Upstream fix commit: dffab154d29a288aa171ff50263ecc8f2e14a891
CVE-2017-2618: kernel: Off-by-one error in selinux_setprocattr (/proc/self/attr/fscreate)
Component: kernel
Severity: Moderate
CWE: CWE-193 (Off-by-one Error)
CVSS v3: 5.5 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-02-16T00:00:00+00:00

A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files. An empty (null) write to this file can crash the system by causing the system to attempt to access unmapped kernel memory.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6 due to a missing commit ( bb646cdb12e75d82258c2f2e7746d5952d3e321a ) which enabled changed system behavior.

This issue does affect Red Hat Enteprise Linux 7 and MRG-2 kernels. A future Linux kernel updates for the respective releases may address this issue.

Affected upstream versions: 4.9.10
Fixed upstream versions: v4.10
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 0c461cb727d146c9ef2d3e86214f498b78b7d125
CVE-2017-2625: libXdmcp: weak entropy usage for session keys
Component: libXdmcp
Severity: Moderate
CWE: CWE-331 (Insufficient Entropy)
CVSS v3: 6.5 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Public date: 2017-02-28T00:00:00+00:00

It was discovered that libXdmcp used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the key, allowing them to hijack other users' sessions.

Statement: Red Hat Product Security has rated this issue as having Moderate security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: 1.1.2
Fixed upstream versions: libXdmcp-1.1.3
Upstream repository: https://cgit.freedesktop.org/xorg/lib/libXdmcp
Upstream fix commit: 0554324ec6bbc2071f5d1f8ad211a1643e29eb1f
CVE-2017-2626: libICE: weak entropy usage in session keys
Component: libICE
Severity: Low
CWE: CWE-331 (Insufficient Entropy)
CVSS v3: 5.2 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L)
Public date: 2017-02-28T00:00:00+00:00

It was discovered that libICE used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.

Statement: Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: 1.0.9-8
Fixed upstream versions: libICE-1.0.10
Upstream repository: https://cgit.freedesktop.org/xorg/lib/libICE
Upstream fix commit: ff5e59f32255913bb1cdf51441b98c9107ae165b
CVE-2017-2630: Qemu: nbd: oob stack write in client routine drop_sync
Component: Qemu
Severity: Important
CWE: CWE-121 (Stack-based Buffer Overflow)
CVSS v3: 5.5 (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L)
Public date: 2017-02-03T00:00:00+00:00

A stack buffer overflow flaw was found in the Quick Emulator (QEMU) built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBD_OPT_LIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or potentially execute arbitrary code on client host with privileges of the QEMU process.


Affected upstream versions: 2.9
Fixed upstream versions: v2.9.0
Upstream repository: https://github.com/qemu/qemu
Upstream fix commit: 2563c9c6b8670400c48e562034b321a7cf3d9a85
CVE-2017-2633: Qemu: VNC: memory corruption due to unchecked resolution limit
Component: Qemu
Severity: Moderate
CWE: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))
CVSS v3: 5.4 (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L)
Public date: 2016-12-01T00:00:00+00:00

An out-of-bounds memory access issue was found in Quick Emulator (QEMU) in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.


Affected upstream versions: 1.7.2
Fixed upstream versions: v2.1.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: bea60dd7679364493a0d7f5b54316c767cf894ef
CVE-2017-2634: kernel: dccp: crash while sending ipv6 reset packet
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-02-24T00:00:00+00:00

It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation used the IPv4-only inet_sk_rebuild_header() function for both IPv4 and IPv6 DCCP connections, which could result in memory corruptions. A remote attacker could use this flaw to crash the system.

Statement: This issue affects Red Hat Enterprise Linux 5 kernel.  This issue was fixed in a versions 6 and 7 prior to this issue being raised.

Future Linux kernel updates for Red Hat Enterprise Linux 5 may address this issue.

Affected upstream versions: 2.6.22.17
Fixed upstream versions: v2.6.25
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: f53dc67c5e7babafe239b93a11678b0e05bead51
CVE-2017-2647: kernel: Null pointer dereference in search_keyring
Component: kernel
Severity: Important
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2017-03-21T00:00:00+00:00

A flaw was found that can be triggered in keyring_search_iterator in keyring.c if type->match is NULL. A local user could use this flaw to crash the system or, potentially, escalate their privileges.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 as the code which can trigger the flaw is not present in the products listed.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7 and MRG-2. Future Linux kernel updates for the respective releases might address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.18
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: c06cfb08b88dfbe13be44a69ae2fdc3a7c902d81
CVE-2017-2671: kernel: ping socket / AF_LLC connect() sin_family race
Component: kernel
Severity: Moderate
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
CVSS v3: 7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2017-03-24T00:00:00+00:00

A race condition leading to a NULL pointer dereference was found in the Linux kernel's Link Layer Control implementation. A local attacker with access to ping sockets could use this flaw to crash the system.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 as the code with the flaw is not present in the products listed.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7 and MRG-2.  Future Linux kernel updates for the respective releases may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v4.11
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 43a6684519ab0a6c52024b5e25322476cabad893
CVE-2017-3731: openssl: Truncated packet could crash via OOB read
Component: openssl
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 5.9 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2017-01-26T00:00:00+00:00

An integer underflow leading to an out of bounds read flaw was found in OpenSSL. A remote attacker could possibly use this flaw to crash a 32-bit TLS/SSL server or client using OpenSSL if it used the RC4-MD5 cipher suite.


Affected upstream versions: openssl-1.1.0, openssl-1.1.0a, openssl-1.1.0b, openssl-1.1.0c, openssl-1.0.2, openssl-1.0.2a, openssl-1.0.2b, openssl-1.0.2c, openssl-1.0.2d, openssl-1.0.2e, openssl-1.0.2f, openssl-1.0.2g, openssl-1.0.2h, openssl-1.0.2i, openssl-1.0.2j
Fixed upstream versions: OpenSSL_1_1_0d
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: 00d965474b22b54e4275232bc71ee0c699c5cd21
CVE-2017-3732: openssl: BN_mod_exp may produce incorrect results on x86_64
Component: openssl
Severity: Moderate
CVSS v3: 5.9 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Public date: 2017-01-26T00:00:00+00:00

There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.


Affected upstream versions: openssl-1.1.0, openssl-1.1.0a, openssl-1.1.0b, openssl-1.1.0c, openssl-1.0.2, openssl-1.0.2a, openssl-1.0.2b, openssl-1.0.2c, openssl-1.0.2d, openssl-1.0.2e, openssl-1.0.2f, openssl-1.0.2g, openssl-1.0.2h, openssl-1.0.2i, openssl-1.0.2j
Fixed upstream versions: OpenSSL_1_1_0d
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: a59b90bf491410f1f2bc4540cc21f1980fd14c5b