<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1747[/INST]Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1742, CVE-2015-1750, and CVE-2015-1753.
Affected Products: n/a
References: [{'name': 'MS15-056', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-250'}, {'name': '74986', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74986'}, {'name': '1032521', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032521'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1748[/INST]Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-1743.
Affected Products: n/a
References: [{'name': 'MS15-056', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-251'}, {'name': '74997', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74997'}, {'name': '1032521', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032521'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1749[/INST]N\A
Affected Products: N\A
References: N\A
CVE State: REJECTED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1750[/INST]Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1742, CVE-2015-1747, and CVE-2015-1753.
Affected Products: n/a
References: [{'name': '74987', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74987'}, {'name': 'MS15-056', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056'}, {'name': '1032521', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032521'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1751[/INST]Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
Affected Products: n/a
References: [{'name': 'MS15-056', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056'}, {'name': '74988', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74988'}, {'name': '20150701 Microsoft Internet Explorer TableGridBlock Use-after-Free Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1098'}, {'name': '1032521', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032521'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1752[/INST]Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1741.
Affected Products: n/a
References: [{'name': '74989', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74989'}, {'name': 'MS15-056', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056'}, {'name': '1032521', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032521'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1753[/INST]Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1732, CVE-2015-1742, CVE-2015-1747, and CVE-2015-1750.
Affected Products: n/a
References: [{'name': 'MS15-056', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056'}, {'name': '1032521', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032521'}, {'name': '74990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74990'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1754[/INST]Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
Affected Products: n/a
References: [{'name': 'MS15-056', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056'}, {'name': '74991', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74991'}, {'name': '1032521', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032521'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1755[/INST]Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1731, CVE-2015-1736, and CVE-2015-1737.
Affected Products: n/a
References: [{'name': '20151001 Microsoft Internet Explorer COptionsElement Use-after-Free Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1204'}, {'name': 'MS15-056', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056'}, {'name': '1032521', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032521'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-254'}, {'name': '74992', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74992'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1756[/INST]Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted web site that is accessed with the F12 Developer Tools feature of Internet Explorer, aka "Microsoft Common Control Use After Free Vulnerability."
Affected Products: n/a
References: [{'name': 'MS15-060', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-060'}, {'name': '75017', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75017'}, {'name': '1032524', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032524'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1757[/INST]Cross-site scripting (XSS) vulnerability in adfs/ls in Active Directory Federation Services (AD FS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 allows remote attackers to inject arbitrary web script or HTML via the wct parameter, aka "ADFS XSS Elevation of Privilege Vulnerability."
Affected Products: n/a
References: [{'name': '75023', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75023'}, {'name': '1032526', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032526'}, {'name': 'MS15-062', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-062'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1758[/INST]Untrusted search path vulnerability in the LoadLibrary function in the kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a Trojan horse DLL in an unspecified directory, aka "Windows LoadLibrary EoP Vulnerability."
Affected Products: n/a
References: [{'name': '75004', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75004'}, {'name': 'JVNDB-2015-000086', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000086.html'}, {'name': 'MS15-063', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-063'}, {'name': 'JVN#18146081', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN18146081/index.html'}, {'name': '1032527', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032527'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1759[/INST]Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Affected Products: n/a
References: [{'name': '1032523', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032523'}, {'name': '75014', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75014'}, {'name': 'MS15-059', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-059'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1760[/INST]Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Affected Products: n/a
References: [{'name': '1032523', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032523'}, {'name': 'MS15-059', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-059'}, {'name': '75015', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75015'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1761[/INST]Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 uses an incorrect class during casts of unspecified pointers, which allows remote authenticated users to gain privileges by leveraging certain write access, aka "SQL Server Elevation of Privilege Vulnerability."
Affected Products: n/a
References: [{'name': '1032893', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032893'}, {'name': 'MS15-058', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-058'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05382740'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1762[/INST]Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014, when transactional replication is configured, does not prevent use of uninitialized memory in unspecified function calls, which allows remote authenticated users to execute arbitrary code by leveraging certain permissions and making a crafted query, as demonstrated by the VIEW SERVER STATE permission, aka "SQL Server Remote Code Execution Vulnerability."
Affected Products: n/a
References: [{'name': '1032893', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032893'}, {'name': 'MS15-058', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-058'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1763[/INST]Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 does not prevent use of uninitialized memory in certain attempts to execute virtual functions, which allows remote authenticated users to execute arbitrary code via a crafted query, aka "SQL Server Remote Code Execution Vulnerability."
Affected Products: n/a
References: [{'name': '1032893', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032893'}, {'name': 'MS15-058', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-058'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1764[/INST]The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy and send HTTP traffic to intranet servers via a crafted request, related to a Server-Side Request Forgery (SSRF) issue, aka "Exchange Server-Side Request Forgery Vulnerability."
Affected Products: n/a
References: [{'name': 'MS15-064', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-064'}, {'name': '75007', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75007'}, {'name': '1032528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032528'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1765[/INST]Microsoft Internet Explorer 9 through 11 allows remote attackers to read the browser history via a crafted web site.
Affected Products: n/a
References: [{'name': '74994', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74994'}, {'name': 'MS15-056', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056'}, {'name': '1032521', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032521'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1766[/INST]Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1735, CVE-2015-1740, CVE-2015-1744, and CVE-2015-1745.
Affected Products: n/a
References: [{'name': '74993', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74993'}, {'name': 'MS15-056', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-056'}, {'name': '1032521', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032521'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1767[/INST]Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2401 and CVE-2015-2408.
Affected Products: n/a
References: [{'name': '1032894', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032894'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-15-568'}, {'name': 'MS15-065', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1768[/INST]win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Win32k Memory Corruption Elevation of Privilege Vulnerability."
Affected Products: n/a
References: [{'name': '75024', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75024'}, {'name': '1032525', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032525'}, {'name': 'MS15-061', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1769[/INST]Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Mount Manager Elevation of Privilege Vulnerability."
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://blogs.technet.com/b/srd/archive/2015/08/11/defending-against-cve-2015-1769-a-logical-issue-exploited-via-a-malicious-usb-stick.aspx'}, {'name': 'MS15-085', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-085'}, {'name': '1033244', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1033244'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1770[/INST]Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability."
Affected Products: n/a
References: [{'name': '75016', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75016'}, {'name': '1032523', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032523'}, {'name': 'MS15-059', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-059'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1771[/INST]Cross-site request forgery (CSRF) vulnerability in the web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allows remote attackers to hijack the authentication of arbitrary users, aka "Exchange Cross-Site Request Forgery Vulnerability."
Affected Products: n/a
References: [{'name': '75011', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75011'}, {'name': 'MS15-064', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-064'}, {'name': '1032528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032528'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1772[/INST]The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, mishandles simple unauthenticated and anonymous bind configurations, which allows remote attackers to bypass authentication via a crafted LDAP request.
Affected Products: n/a
References: [{'name': '[www-announce] 20150521 CVE-2015-1772', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail-archives.apache.org/mod_mbox/www-announce/201505.mbox/%3CCAOpgucy52yzNN1FaRcxwhZmx8ZtNRjmK6V0Bxk4svAD-R1q70Q%40mail.gmail.com%3E'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21969546'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html'}, {'name': '1034365', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034365'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1773[/INST]Cross-site scripting (XSS) vulnerability in asdoc/templates/index.html in Apache Flex before 4.14.1 allows remote attackers to inject arbitrary web script or HTML by providing a crafted URI to JavaScript code generated by the asdoc component.
Affected Products: n/a
References: [{'name': '20150407 CVE-2015-1773 Apache Flex reflected XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2015/Apr/42'}, {'name': '73954', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73954'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://helpx.adobe.com/security/products/flex/apsb15-08.html'}, {'name': '1032107', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032107'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1774[/INST]The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.
Affected Products: n/a
References: [{'name': '1032205', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032205'}, {'name': 'DSA-3236', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3236'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openoffice.org/security/cves/CVE-2015-1774.html'}, {'name': 'FEDORA-2015-7022', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156582.html'}, {'name': '1032206', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032206'}, {'name': 'FEDORA-2015-7213', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157550.html'}, {'name': '74338', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74338'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.libreoffice.org/about-us/security/advisories/cve-2015-1774/'}, {'name': 'RHSA-2015:1458', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1458.html'}, {'name': 'openSUSE-SU-2015:0859', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-05/msg00015.html'}, {'name': '20150427 Multiple Vendor LibreOffice "HWPFILTER" Out Of Bounds Access Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1094'}, {'name': 'USN-2578-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2578-1'}, {'name': 'GLSA-201603-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201603-05'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1775[/INST]Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Ambari before 2.1.0 allows remote authenticated users to conduct port scans and access unsecured services via a crafted REST call.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities'}, {'name': '[oss-security] 20151013 [CVE-2015-1775] Apache Ambari Server Side Request Forgery vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/10/13/2'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1776[/INST]Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk when the Intermediate data encryption feature is enabled, which allows local users to obtain sensitive information by reading the file.
Affected Products: n/a
References: [{'name': '[hadoop-general] 20160215 CVE-2015-1776: Apache Hadoop MapReduce, disclosure of encrypted data', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail-archives.apache.org/mod_mbox/hadoop-general/201602.mbox/%3CCAGCyb56CPgQMcxZ7jP87SfM5OKGx+E49DtrzCTQ6+nQf2a4nSA%40mail.gmail.com%3E'}, {'name': '83259', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/83259'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1777[/INST]rhnreg_ks in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Gluster Storage 2.1 and Enterprise Linux (RHEL) 5, 6, and 7 does not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to prevent system registration via a man-in-the-middle attack.
Affected Products: n/a
References: [{'name': '72943', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72943'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1198740'}, {'name': '[oss-security] 20150304 Another Python app (rhn-setup: rhnreg_ks) not checking hostnames in certs properly CVE-2015-1777', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/03/04/7'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1778[/INST]The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination.
Affected Products: n/a
References: [{'name': '[oss-security] 20150320 OpenDaylight security advisory: CVE-2015-1778 authentication bypass, CVE-2015-1611 CVE-2015-1612 topology spoofing via LLDP', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/03/20/3'}, {'name': '73255', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73255'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wiki.opendaylight.org/view/Security_Advisories'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cloudrouter.org/security/'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1779[/INST]The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.
Affected Products: n/a
References: [{'name': 'SUSE-SU-2015:0870', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00033.html'}, {'name': '[Qemu-devel] 20150323 [PATCH 1/2] CVE-2015-1779: incrementally decode websocket frames', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04896.html'}, {'name': 'FEDORA-2015-5541', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155196.html'}, {'name': 'DSA-3259', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3259'}, {'name': '[oss-security] 20150409 Re: CVE-2015-1779 qemu: vnc: insufficient resource limiting in VNC websockets decoder', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/04/09/6'}, {'name': 'SUSE-SU-2015:0896', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00042.html'}, {'name': 'FEDORA-2015-5482', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.html'}, {'name': '[Qemu-devel] 20150323 [PATCH 0/2] CVE-2015-1779: fix denial of service in VNC websockets', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04894.html'}, {'name': 'RHSA-2015:1931', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1931.html'}, {'name': '[oss-security] 20150324 CVE-2015-1779 qemu: vnc: insufficient resource limiting in VNC websockets decoder', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/03/24/9'}, {'name': '1033975', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1033975'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html'}, {'name': 'RHSA-2015:1943', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1943.html'}, {'name': 'USN-2608-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2608-1'}, {'name': '[Qemu-devel] 20150323 [PATCH 2/2] CVE-2015-1779: limit size of HTTP headers from websockets clients', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04895.html'}, {'name': '73303', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73303'}, {'name': 'GLSA-201602-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201602-01'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1780[/INST]oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data-center
Affected Products: oVirt
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-1780'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/cve-2015-1780'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1781[/INST]Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.
Affected Products: n/a
References: [{'name': 'SUSE-SU-2015:1424', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html'}, {'name': '[libc-alpha] 20150814 The GNU C Library version 2.22 is now available', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://www.sourceware.org/ml/libc-alpha/2015-08/msg00609.html'}, {'name': 'SUSE-SU-2016:0470', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html'}, {'name': 'USN-2985-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2985-2'}, {'name': 'GLSA-201602-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201602-02'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=2959eda9272a03386'}, {'name': 'FEDORA-2016-0480defc94', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html'}, {'name': 'RHSA-2015:0863', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2015-0863.html'}, {'name': 'DSA-3480', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3480'}, {'name': 'USN-2985-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2985-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://sourceware.org/bugzilla/show_bug.cgi?id=18287'}, {'name': '1032178', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032178'}, {'name': '74255', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74255'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1782[/INST]The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified impact via crafted length values in an SSH_MSG_KEXINIT packet.
Affected Products: n/a
References: [{'name': 'FEDORA-2015-3757', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151943.html'}, {'name': 'MDVSA-2015:148', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:148'}, {'name': '73061', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73061'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html'}, {'name': 'DSA-3182', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3182'}, {'name': 'FEDORA-2015-3791', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153933.html'}, {'name': 'FEDORA-2015-3797', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152362.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.libssh2.org/adv_20150311.html'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1783[/INST]The prefix variable in the get_or_define_ns function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service (uninitialized memory access and application crash) via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://repos.entrouvert.org/lasso.git/commit/lasso/xml?id=6d854cef4211cdcdbc7446c978f23ab859847cdd'}, {'name': 'FEDORA-2015-4807', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154355.html'}, {'name': 'FEDORA-2015-4821', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155382.html'}, {'name': 'FEDORA-2015-4848', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154321.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1199925'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1784[/INST]In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the application validates user uploaded files and lack of security measures preventing unwanted HTTP requests.
Affected Products: nextgen-gallery
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/c894727a-b779-4583-a860-13c2c27275d4'}, {'tags': ['x_refsource_MISC'], 'url': 'https://blog.nettitude.com/uk/crsf-and-unsafe-arbitrary-file-upload-in-nextgen-gallery-plugin-for-wordpress'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1785[/INST]In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the application validates user uploaded files and lack of security measures preventing unwanted HTTP requests.
Affected Products: nextgen-gallery
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/c894727a-b779-4583-a860-13c2c27275d4'}, {'tags': ['x_refsource_MISC'], 'url': 'https://blog.nettitude.com/uk/crsf-and-unsafe-arbitrary-file-upload-in-nextgen-gallery-plugin-for-wordpress'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1786[/INST]Cross-site request forgery (CSRF) vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or malformed token identifiers.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://framework.zend.com/changelog/2.3.6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1207781'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1787[/INST]The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to cause a denial of service (daemon crash) via a ClientKeyExchange message with a length of zero.
Affected Products: n/a
References: [{'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=b19d8143212ae5fbc9cebfd51c01f802fabccd33'}, {'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202406'}, {'name': '73238', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73238'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1788[/INST]The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.
Affected Products: n/a
References: [{'name': 'SUSE-SU-2015:1184', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html'}, {'name': 'SSRT102180', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143880121627664&w=2'}, {'name': 'DSA-3287', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2015/dsa-3287'}, {'name': 'SUSE-SU-2015:1150', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html'}, {'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10122'}, {'url': 'http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'name': '75158', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/75158'}, {'url': 'https://openssl.org/news/secadv/20150611.txt'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'SUSE-SU-2015:1182', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888'}, {'name': 'SUSE-SU-2015:1143', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html'}, {'name': '1032564', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1032564'}, {'url': 'http://www-304.ibm.com/support/docview.wss?uid=swg21960041'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380'}, {'url': 'http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': '20150612 Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products', 'tags': ['vendor-advisory'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl'}, {'name': 'openSUSE-SU-2015:1277', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html'}, {'name': 'SUSE-SU-2015:1181', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html'}, {'url': 'https://github.com/openssl/openssl/commit/4924b37ee01f71ae19c94a8934b80eeb2f677932'}, {'url': 'http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery'}, {'name': 'APPLE-SA-2015-08-13-2', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html'}, {'name': 'USN-2639-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2639-1'}, {'url': 'http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015'}, {'name': 'GLSA-201506-02', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201506-02'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044'}, {'name': '91787', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/91787'}, {'name': 'HPSBUX03388', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143880121627664&w=2'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763'}, {'url': 'https://support.apple.com/kb/HT205031'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html'}, {'url': 'https://support.citrix.com/article/CTX216642'}, {'name': 'SUSE-SU-2015:1185', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694'}, {'name': 'openSUSE-SU-2015:1139', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa98'}, {'name': 'NetBSD-SA2015-008', 'tags': ['vendor-advisory'], 'url': 'http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc'}, {'url': 'https://www.openssl.org/news/secadv_20150611.txt'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1789[/INST]The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack against a server that supports client authentication with a custom verification callback.
Affected Products: n/a
References: [{'name': 'SUSE-SU-2015:1184', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html'}, {'name': 'SSRT102180', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143880121627664&w=2'}, {'name': 'DSA-3287', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2015/dsa-3287'}, {'name': 'SUSE-SU-2015:1150', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html'}, {'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10122'}, {'name': 'SUSE-SU-2015:1183', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html'}, {'url': 'https://github.com/openssl/openssl/commit/f48b83b4fb7d6689584cf25f61ca63a4891f5b11'}, {'url': 'http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05353965'}, {'url': 'https://openssl.org/news/secadv/20150611.txt'}, {'name': 'RHSA-2015:1115', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1115.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html'}, {'name': 'RHSA-2015:1197', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1197.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'SUSE-SU-2015:1182', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888'}, {'name': 'SUSE-SU-2015:1143', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html'}, {'name': '1032564', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1032564'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380'}, {'url': 'http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015'}, {'name': 'FEDORA-2015-10108', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': '20150612 Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products', 'tags': ['vendor-advisory'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl'}, {'name': 'openSUSE-SU-2015:1277', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html'}, {'name': 'SUSE-SU-2015:1181', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html'}, {'name': 'APPLE-SA-2015-08-13-2', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html'}, {'name': 'USN-2639-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2639-1'}, {'url': 'http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015'}, {'name': 'GLSA-201506-02', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201506-02'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html'}, {'name': '91787', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/91787'}, {'name': 'HPSBUX03388', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143880121627664&w=2'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763'}, {'name': 'FEDORA-2015-10047', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html'}, {'name': '75156', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/75156'}, {'url': 'https://support.apple.com/kb/HT205031'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html'}, {'url': 'https://support.citrix.com/article/CTX216642'}, {'name': 'SUSE-SU-2015:1185', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694'}, {'name': 'openSUSE-SU-2015:1139', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa98'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733'}, {'name': 'NetBSD-SA2015-008', 'tags': ['vendor-advisory'], 'url': 'http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc'}, {'url': 'https://www.openssl.org/news/secadv_20150611.txt'}, {'name': 'HPSBGN03371', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143654156615516&w=2'}, {'url': 'https://www.arista.com/en/support/advisories-notices/security-advisories/1144-security-advisory-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1790[/INST]The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data.
Affected Products: n/a
References: [{'name': 'SUSE-SU-2015:1184', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html'}, {'name': 'SSRT102180', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143880121627664&w=2'}, {'name': 'DSA-3287', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2015/dsa-3287'}, {'name': 'SUSE-SU-2015:1150', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html'}, {'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10122'}, {'name': 'SUSE-SU-2015:1183', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html'}, {'url': 'http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05353965'}, {'url': 'https://openssl.org/news/secadv/20150611.txt'}, {'name': 'RHSA-2015:1115', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1115.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html'}, {'name': 'RHSA-2015:1197', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1197.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'SUSE-SU-2015:1182', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888'}, {'name': 'SUSE-SU-2015:1143', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html'}, {'name': '1032564', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1032564'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380'}, {'url': 'http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015'}, {'name': 'FEDORA-2015-10108', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': '20150612 Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products', 'tags': ['vendor-advisory'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl'}, {'name': 'openSUSE-SU-2015:1277', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html'}, {'name': 'SUSE-SU-2015:1181', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html'}, {'name': 'APPLE-SA-2015-08-13-2', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html'}, {'name': 'USN-2639-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2639-1'}, {'url': 'http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015'}, {'name': 'GLSA-201506-02', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201506-02'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html'}, {'name': '91787', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/91787'}, {'url': 'https://github.com/openssl/openssl/commit/59302b600e8d5b77ef144e447bb046fd7ab72686'}, {'name': 'HPSBUX03388', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143880121627664&w=2'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763'}, {'name': 'FEDORA-2015-10047', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html'}, {'url': 'https://support.apple.com/kb/HT205031'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html'}, {'name': 'SUSE-SU-2015:1185', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694'}, {'name': 'openSUSE-SU-2015:1139', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa98'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733'}, {'name': 'NetBSD-SA2015-008', 'tags': ['vendor-advisory'], 'url': 'http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc'}, {'url': 'https://www.openssl.org/news/secadv_20150611.txt'}, {'name': '75157', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/75157'}, {'name': 'HPSBGN03371', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143654156615516&w=2'}, {'url': 'https://www.arista.com/en/support/advisories-notices/security-advisories/1144-security-advisory-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1791[/INST]Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier.
Affected Products: n/a
References: [{'name': 'SUSE-SU-2015:1184', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html'}, {'name': 'SSRT102180', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143880121627664&w=2'}, {'name': 'DSA-3287', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2015/dsa-3287'}, {'name': 'SUSE-SU-2015:1150', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html'}, {'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10122'}, {'url': 'http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05353965'}, {'url': 'https://openssl.org/news/secadv/20150611.txt'}, {'name': '75161', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/75161'}, {'name': 'RHSA-2015:1115', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1115.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': '1032479', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1032479'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'SUSE-SU-2015:1182', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888'}, {'name': 'SUSE-SU-2015:1143', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html'}, {'url': 'https://github.com/openssl/openssl/commit/98ece4eebfb6cd45cc8d550c6ac0022965071afc'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html'}, {'url': 'http://www-304.ibm.com/support/docview.wss?uid=swg21960041'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380'}, {'url': 'http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015'}, {'name': 'FEDORA-2015-10108', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': '20150612 Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products', 'tags': ['vendor-advisory'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl'}, {'name': 'APPLE-SA-2015-08-13-2', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html'}, {'name': 'USN-2639-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2639-1'}, {'url': 'http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015'}, {'name': 'GLSA-201506-02', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201506-02'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044'}, {'name': '91787', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/91787'}, {'name': 'HPSBUX03388', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143880121627664&w=2'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763'}, {'name': 'FEDORA-2015-10047', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html'}, {'url': 'https://support.apple.com/kb/HT205031'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html'}, {'url': 'https://support.citrix.com/article/CTX216642'}, {'name': 'SUSE-SU-2015:1185', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694'}, {'name': 'openSUSE-SU-2015:1139', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa98'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733'}, {'name': 'NetBSD-SA2015-008', 'tags': ['vendor-advisory'], 'url': 'http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc'}, {'url': 'https://www.openssl.org/news/secadv_20150611.txt'}, {'url': 'https://www.arista.com/en/support/advisories-notices/security-advisories/1144-security-advisory-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1792[/INST]The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.
Affected Products: n/a
References: [{'name': 'SUSE-SU-2015:1184', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html'}, {'name': 'SSRT102180', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143880121627664&w=2'}, {'name': 'DSA-3287', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2015/dsa-3287'}, {'name': 'SUSE-SU-2015:1150', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html'}, {'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10122'}, {'url': 'http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05353965'}, {'url': 'https://openssl.org/news/secadv/20150611.txt'}, {'name': 'RHSA-2015:1115', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1115.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'SUSE-SU-2015:1182', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888'}, {'name': 'SUSE-SU-2015:1143', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html'}, {'name': '1032564', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1032564'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380'}, {'url': 'http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015'}, {'name': 'FEDORA-2015-10108', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': '20150612 Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products', 'tags': ['vendor-advisory'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl'}, {'name': 'openSUSE-SU-2015:1277', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html'}, {'name': 'APPLE-SA-2015-08-13-2', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html'}, {'name': 'USN-2639-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2639-1'}, {'url': 'http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015'}, {'name': '75154', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/75154'}, {'name': 'GLSA-201506-02', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201506-02'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044'}, {'name': '91787', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/91787'}, {'url': 'https://github.com/openssl/openssl/commit/cd30f03ac5bf2962f44bd02ae8d88245dff2f12c'}, {'name': 'HPSBUX03388', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143880121627664&w=2'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763'}, {'name': 'FEDORA-2015-10047', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html'}, {'url': 'https://support.apple.com/kb/HT205031'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html'}, {'url': 'https://support.citrix.com/article/CTX216642'}, {'name': 'SUSE-SU-2015:1185', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694'}, {'name': 'openSUSE-SU-2015:1139', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa98'}, {'name': 'NetBSD-SA2015-008', 'tags': ['vendor-advisory'], 'url': 'http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc'}, {'url': 'https://www.openssl.org/news/secadv_20150611.txt'}, {'name': 'HPSBGN03371', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143654156615516&w=2'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-1793[/INST]The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.
Affected Products: n/a
References: [{'name': 'SSRT102180', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=143880121627664&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04822825'}, {'name': '1032817', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032817'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html'}, {'name': 'GLSA-201507-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201507-15'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454058.htm'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': '20150710 OpenSSL Alternative Chains Certificate Forgery Vulnerability (July 2015) Affecting Cisco Products', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150710-openssl'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=9a0db453ba017ebcaccbee933ee6511a9ae4d1c8'}, {'name': 'FreeBSD-SA-15:12', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-15:12.openssl.asc'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351'}, {'name': 'FEDORA-2015-11414', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161747.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://openssl.org/news/secadv_20150709.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes'}, {'name': 'HPSBGN03424', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=144370846326989&w=2'}, {'name': 'FEDORA-2015-11475', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161782.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10125'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html'}, {'name': '91787', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/91787'}, {'name': 'HPSBUX03388', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=143880121627664&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763'}, {'name': '75652', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75652'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694'}, {'name': '38640', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/38640/'}, {'name': 'SSA:2015-190-01', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.561427'}, {'name': 'NetBSD-SA2015-008', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc'}]
CVE State: PUBLISHED</s>