2017-10-16 12:31:07 -04:00
{
2019-03-18 01:51:23 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "secalert@redhat.com" ,
"ID" : "CVE-2014-9761" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
2017-10-16 12:31:07 -04:00
]
2019-03-18 01:51:23 +00:00
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "SUSE-SU-2016:0471" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html"
} ,
{
"name" : "FEDORA-2016-68abc0be35" ,
"refsource" : "FEDORA" ,
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html"
} ,
{
"name" : "RHSA-2017:1916" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/errata/RHSA-2017:1916"
} ,
{
"name" : "openSUSE-SU-2016:0510" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html"
} ,
{
"name" : "SUSE-SU-2016:0470" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html"
} ,
{
"name" : "RHSA-2017:0680" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2017-0680.html"
} ,
{
"name" : "USN-2985-2" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-2985-2"
} ,
{
"name" : "[oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23" ,
"refsource" : "MLIST" ,
"url" : "http://www.openwall.com/lists/oss-security/2016/01/20/1"
} ,
{
"name" : "GLSA-201702-11" ,
"refsource" : "GENTOO" ,
"url" : "https://security.gentoo.org/glsa/201702-11"
} ,
{
"name" : "SUSE-SU-2016:0472" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html"
} ,
{
"name" : "SUSE-SU-2016:0473" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html"
} ,
{
"name" : "[libc-alpha] 20160219 The GNU C Library version 2.23 is now available" ,
"refsource" : "MLIST" ,
"url" : "https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html"
} ,
{
"name" : "[oss-security] 20160119 CVE assignment request for security bugs fixed in glibc 2.23" ,
"refsource" : "MLIST" ,
"url" : "http://www.openwall.com/lists/oss-security/2016/01/19/11"
} ,
{
"name" : "83306" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/83306"
} ,
{
"name" : "USN-2985-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-2985-1"
} ,
{
"name" : "https://sourceware.org/bugzilla/show_bug.cgi?id=16962" ,
"refsource" : "CONFIRM" ,
"url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=16962"
2019-06-13 08:00:48 +00:00
} ,
{
"refsource" : "FULLDISC" ,
"name" : "20190612 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series" ,
"url" : "http://seclists.org/fulldisclosure/2019/Jun/18"
2019-06-13 14:00:48 +00:00
} ,
{
"refsource" : "BUGTRAQ" ,
"name" : "20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series" ,
"url" : "https://seclists.org/bugtraq/2019/Jun/14"
2019-06-13 21:00:48 +00:00
} ,
{
"refsource" : "MISC" ,
"name" : "http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html" ,
"url" : "http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html"
2019-09-04 23:00:58 +00:00
} ,
{
"refsource" : "FULLDISC" ,
"name" : "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X" ,
"url" : "http://seclists.org/fulldisclosure/2019/Sep/7"
2019-09-05 00:00:48 +00:00
} ,
{
"refsource" : "BUGTRAQ" ,
"name" : "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X" ,
"url" : "https://seclists.org/bugtraq/2019/Sep/7"
2019-09-05 02:01:03 +00:00
} ,
{
"refsource" : "MISC" ,
"name" : "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html" ,
"url" : "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html"
2019-03-18 01:51:23 +00:00
}
]
}
}
