rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-2809 
The Multicast DNS (mDNS) responder in Synology DiskStation Manager (DSM) before 3.1 inadvertently responds to unicast queries with source addresses that are not link-local, which allows remote attackers to cause a denial of service (traffic amplification) or obtain potentially sensitive information via port-5353 UDP packets to the Avahi component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-01T01:00:00.000Z
CVE-2015-2810 
Integer overflow in the HwpApp::CHncSDS_Manager function in Hancom Office HanWord processor, as used in Hwp 2014 VP before 9.1.0.2342, HanWord Viewer 2007 and Viewer 2010 8.5.6.1158, and HwpViewer 2014 VP 9.1.0.2186, allows remote attackers to cause a denial of service (crash) and possibly "influence the program's execution flow" via a document with a large paragraph size, which triggers heap corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-15T22:00:00.000Z
CVE-2015-2811 
XML external entity (XXE) vulnerability in ReportXmlViewer in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2111939.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-01T14:00:00.000Z
CVE-2015-2812 
XML external entity (XXE) vulnerability in XMLValidationComponent in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2093966.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-01T14:00:00.000Z
CVE-2015-2813 
XML external entity (XXE) vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125358.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-01T14:00:00.000Z
CVE-2015-2814 
SAP EMR Unwired (com.sap.mobile.healthcare.emr.v2) and Clinical Task Tracker (com.sap.mobile.healthcare.ctt) does not properly restrict access, which allows remote attackers to change the backendurl, clientid, ssourl, and infopageurl settings via unspecified vectors, aka SAP Security Note 2117079.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-01T14:00:00.000Z
CVE-2015-2815 
Buffer overflow in the C_SAPGPARAM function in the NetWeaver Dispatcher in SAP KERNEL 7.00 (7000.52.12.34966) and 7.40 (7400.12.21.30308) allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, aka SAP Security Note 2063369.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-01T14:00:00.000Z
CVE-2015-2816 
The XcListener in SAP Afaria 7.0.6001.5 does not properly restrict access, which allows remote attackers to have unspecified impact via a crafted request, aka SAP Security Note 2134905.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-01T14:00:00.000Z
CVE-2015-2817 
The SAP Management Console in SAP NetWeaver 7.40 allows remote attackers to obtain sensitive information via the ReadProfile parameters, aka SAP Security Note 2091768.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-01T14:00:00.000Z
CVE-2015-2818 
XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note 2125513.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-01T14:00:00.000Z
CVE-2015-2819 
SAP Sybase SQL Anywhere 11 and 16 allows remote attackers to cause a denial of service (crash) via a crafted request, aka SAP Security Note 2108161.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-01T14:00:00.000Z
CVE-2015-2820 
Buffer overflow in XcListener in SAP Afaria 7.0.6001.5 allows remote attackers to cause a denial of service (process termination) via a crafted request, aka SAP Security Note 2132584.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-01T14:00:00.000Z
CVE-2015-2821 
TYPO3 Neos 1.1.x before 1.1.3 and 1.2.x before 1.2.3 allows remote editors to access, create, and modify content nodes in the workspace of other editors via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-01T14:00:00.000Z
CVE-2015-2822 
Siemens SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2 and SIMATIC WinCC Runtime Advanced before WinCC (TIA Portal) 13 SP1 Upd2 allow man-in-the-middle attackers to cause a denial of service via crafted packets on TCP port 102.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-08T16:00:00.000Z
CVE-2015-2823 
Siemens SIMATIC HMI Basic Panels 2nd Generation before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Advanced before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC WinCC Runtime Professional before WinCC (TIA Portal) 13 SP1 Upd2, SIMATIC HMI Basic Panels 1st Generation (WinCC TIA Portal), SIMATIC HMI Mobile Panel 277 (WinCC TIA Portal), SIMATIC HMI Multi Panels (WinCC TIA Portal), and SIMATIC WinCC 7.x before 7.3 Upd4 allow remote attackers to complete authentication by leveraging knowledge of a password hash without knowledge of the associated password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-08T16:00:00.000Z
CVE-2015-2824 
Multiple SQL injection vulnerabilities in the Simple Ads Manager plugin before 2.7.97 for WordPress allow remote attackers to execute arbitrary SQL commands via a (1) hits[][] parameter in a sam_hits action to sam-ajax.php; the (2) cstr parameter in a load_posts action to sam-ajax-admin.php; the (3) searchTerm parameter in a load_combo_data action to sam-ajax-admin.php; or the (4) subscriber, (5) contributor, (6) author, (7) editor, (8) admin, or (9) sadmin parameter in a load_users action to sam-ajax-admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-06T15:00:00.000Z
CVE-2015-2825 
Unrestricted file upload vulnerability in sam-ajax-admin.php in the Simple Ads Manager plugin before 2.5.96 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the directory specified by the path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-21T15:00:00.000Z
CVE-2015-2826 
WordPress Simple Ads Manager plugin 2.5.94 and 2.5.96 allows remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-20T18:00:00.000Z
CVE-2015-2827 
Cross-site scripting (XSS) vulnerability in CA Spectrum 9.2.x and 9.3.x before 9.3 H02 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-08T01:00:00.000Z
CVE-2015-2828 
CA Spectrum 9.2.x and 9.3.x before 9.3 H02 does not properly validate serialized Java objects, which allows remote authenticated users to obtain administrative privileges via crafted object data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-08T01:00:00.000Z
CVE-2015-2829 
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.5 Build 53.9 through 55.8 and 10.5.e Build 53-9010.e allow remote attackers to cause a denial of service (reboot) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-12T19:00:00.000Z
CVE-2015-2830 
arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-27T10:00:00.000Z
CVE-2015-2831 
Buffer overflow in das_watchdog 0.9.0 allows local users to execute arbitrary code with root privileges via a large string in the XAUTHORITY environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-14T18:00:00.000Z
CVE-2015-2838 
Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands as nsroot via shell metacharacters in the file_name JSON member in params/xen_hotfix/0 to nitro/v1/config/xen_hotfix.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T14:00:00.000Z
CVE-2015-2839 
The Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when returning an error message, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the file_name JSON member in params/xen_hotfix/0 to nitro/v1/config/xen_hotfix.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T14:00:00.000Z
CVE-2015-2840 
Cross-site scripting (XSS) vulnerability in help/rt/large_search.html in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to inject arbitrary web script or HTML via the searchQuery parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T14:00:00.000Z
CVE-2015-2841 
Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted Content-Type header, as demonstrated by the application/octet-stream and text/xml Content-Types.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-03T14:00:00.000Z
CVE-2015-2842 
Unrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files) upload functionality in GoAutoDial GoAdmin CE 3.x before 3.3-1421902800 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in sounds/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-12T19:00:00.000Z
CVE-2015-2843 
Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1) user_name or (2) user_pass parameter in go_login.php or the PATH_INFO to (3) go_login/validate_credentials/admin/ or (4) index.php/go_site/go_get_user_info/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-12T19:00:00.000Z
CVE-2015-2844 
The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arbitrary commands via the $action portion of the PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-12T19:00:00.000Z
CVE-2015-2845 
The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion of the PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-12T19:00:00.000Z
CVE-2015-2846 
BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-04-13T14:00:00.000Z
CVE-2015-2847 
Honeywell Tuxedo Touch before 5.2.19.0_VA relies on client-side authentication involving JavaScript, which allows remote attackers to bypass intended access restrictions by removing USERACCT requests from the client-server data stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-26T18:00:00.000Z
CVE-2015-2848 
Cross-site request forgery (CSRF) vulnerability in Honeywell Tuxedo Touch before 5.2.19.0_VA allows remote attackers to hijack the authentication of arbitrary users for requests associated with home-automation commands, as demonstrated by a door-unlock command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-26T18:00:00.000Z
CVE-2015-2849 
SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, when https is used, allows remote attackers to execute arbitrary SQL commands via the ppli parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-07T14:00:00.000Z
CVE-2015-2850 
Cross-site scripting (XSS) vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-07T14:00:00.000Z
CVE-2015-2851 
client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain root access, by specifying a filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-30T19:00:00.000Z
CVE-2015-2852 
Cross-site request forgery (CSRF) vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers to hijack the authentication of administrators.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-30T19:00:00.000Z
CVE-2015-2853 
Session fixation vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers to hijack web sessions by providing a session ID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-30T19:00:00.000Z
CVE-2015-2854 
The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct clickjacking attacks via vectors involving an IFRAME element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-30T19:00:00.000Z
CVE-2015-2855 
The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not set the secure flag for the administrator's cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, a different vulnerability than CVE-2015-4138.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-05-30T19:00:00.000Z
CVE-2015-2856 
Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a .. (dot dot) in the statecode cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-10T13:00:00.000Z
CVE-2015-2857 
Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-22T15:00:00.000Z
CVE-2015-2858 
Datalex airline booking software before 2015-09-03 allows remote attackers to read or write to arbitrary user data via a modified profileId parameter to (1) ValidateFormAction.do or (2) ProfileConfirmEditAddressAction.do.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-02T01:00:00.000Z
CVE-2015-2859 
Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority names in X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-23T21:00:00.000Z
CVE-2015-2860 
Directory traversal vulnerability in Avigilon Control Center (ACC) 4 before 4.12.0.54 and 5 before 5.4.2.22 allows remote attackers to read arbitrary files via a crafted help/ URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-23T16:00:00.000Z
CVE-2015-2861 
Cross-site request forgery (CSRF) vulnerability in Vesta Control Panel before 0.9.8-14 allows remote attackers to hijack the authentication of arbitrary users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-06-18T10:00:00.000Z
CVE-2015-2862 
Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote authenticated users to read arbitrary files via a crafted HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-20T23:00:00.000Z
CVE-2015-2863 
Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-20T23:00:00.000Z
CVE-2015-2864 
Retrospect and Retrospect Client before 10.0.2.119 on Windows, before 12.0.2.116 on OS X, and before 10.0.2.104 on Linux improperly generate password hashes, which makes it easier for remote attackers to bypass authentication and obtain access to backup files by leveraging a collision.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-21T10:00:00.000Z
CVE-2015-2866 
SQL injection vulnerability on the Grandstream GXV3611_HD camera with firmware before 1.0.3.9 beta allows remote attackers to execute arbitrary SQL commands by attempting to establish a TELNET session with a crafted username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-08T14:00:00.000Z
CVE-2015-2867 
A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system.
Problem types: description: hardcoded passwords
Affected products: vendor: Trane
product: ComfortLink II SCC firmware
Published: 2017-01-06T21:00:00.000Z
CVE-2015-2868 
An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS service. An attacker who can connect to the DSS service on the Trane ComfortLink II device can send an overly long REG request that can overflow a fixed size stack buffer, resulting in arbitrary code execution.
Problem types: description: buffer overflow
Affected products: vendor: Trane
product: ComfortLink II SCC firmware
Published: 2017-01-06T21:00:00.000Z
CVE-2015-2869 
The FileInfo plugin before 2.22 for Ghisler Total Commander allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via (1) a large Size value in the Archive Member Header of a COFF Archive Library file, (2) a large Number Of Symbols value in the 1st Linker Member of a COFF Archive Library file, (3) a large Resource Table Count value in the LE Header of a Linear Executable file, or (4) a large value in a certain Object field in a Resource Table Entry in a Linear Executable file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-21T15:00:00.000Z
CVE-2015-2870 
Cross-site scripting (XSS) vulnerability on Chiyu BF-630, BF-630W, and BF-660C fingerprint access-control devices allows remote attackers to inject arbitrary web script or HTML via a SCRIPT element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-01T01:00:00.000Z
CVE-2015-2871 
Chiyu BF-660C fingerprint access-control devices allow remote attackers to bypass authentication and (1) read or (2) modify communication configuration settings via a request to net.htm, a different vulnerability than CVE-2015-5618.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-01T01:00:00.000Z
CVE-2015-2872 
Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allow remote attackers to inject arbitrary web script or HTML via (1) crafted input to index.php that is processed by certain Internet Explorer 7 configurations or (2) crafted input to the widget feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-23T15:00:00.000Z
CVE-2015-2873 
Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allows remote attackers to obtain sensitive information or change the configuration via a direct request to the (1) system log URL, (2) whitelist URL, or (3) blacklist URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-23T15:00:00.000Z
CVE-2015-2874 
Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 have a default password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-31T02:00:00.000Z
CVE-2015-2875 
Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to read arbitrary files via a full pathname in a download request during a Wi-Fi session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-31T02:00:00.000Z
CVE-2015-2876 
Unrestricted file upload vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to execute arbitrary code by uploading a file to /media/sda2 during a Wi-Fi session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-31T02:00:00.000Z
CVE-2015-2877 
Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection (CAIN) attack.  NOTE: the vendor states "Basically if you care about this attack vector, disable deduplication." Share-until-written approaches for memory conservation among mutually untrusting tenants are inherently detectable for information disclosure, and can be classified as potentially misunderstood behaviors rather than vulnerabilities
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-03-03T11:00:00.000Z