<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0274[/INST]The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access.
Affected Products: n/a
References: [{'name': 'USN-2544-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2544-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59'}, {'name': 'RHSA-2015:0694', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0694.html'}, {'name': 'RHSA-2015:0290', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0290.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1195248'}, {'name': '1031853', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031853'}, {'name': 'USN-2543-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2543-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0275[/INST]The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service (BUG) via a crafted fallocate zero-range request.
Affected Products: n/a
References: [{'name': '1034454', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034454'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1193907'}, {'name': '[linux-ext4] 20150218 [PATCH] ext4: Allocate entire range in zero range', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.spinics.net/lists/linux-ext4/msg47193.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2af21aae11972fa924374ddcf52e88347cf5a8'}, {'name': 'RHSA-2015:1778', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1778.html'}, {'name': 'RHSA-2015:1787', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1787.html'}, {'name': '75139', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75139'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/0f2af21aae11972fa924374ddcf52e88347cf5a8'}, {'name': '[oss-security] 20150223 CVE-2015-0275 -- Linux kernel: fs: ext4: fallocate zero range page size > block size BUG()', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/23/14'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.f5.com/csp/article/K05211147'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0276[/INST]Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.
Affected Products: n/a
References: [{'name': "[oss-security] 20150410 CVE-2015-0276: Kallithea: Lack of CSRF attack protection enables gaining unauthorised access to users' accounts", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/04/10/8'}, {'name': '74052', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74052'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kallithea-scm.org/security/cve-2015-0276.html'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0277[/INST]The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which allows remote attackers to log in to other users' accounts via a crafted SAML assertion.  NOTE: this identifier has been SPLIT per ADT2 due to different vulnerability types. See CVE-2015-6254 for lack of validation for the Destination attribute in a Response element in a SAML assertion.
Affected Products: n/a
References: [{'name': 'RHSA-2015:0849', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0849.html'}, {'name': 'RHSA-2015:0848', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0848.html'}, {'name': 'RHSA-2015:0846', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0846.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1194832'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.jboss.org/browse/PLINK-678'}, {'name': 'RHSA-2015:0847', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0847.html'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0278[/INST]libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://groups.google.com/forum/#%21msg/libuv/0JZxwLMtsMI/jraczskYWWQJ'}, {'name': 'MDVSA-2015:228', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:228'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://advisories.mageia.org/MGASA-2015-0186.html'}, {'name': 'FEDORA-2015-2313', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/pipermail/package-announce/2015-February/150526.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/libuv/libuv/pull/215'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/libuv/libuv/commit/66ab38918c911bcff025562cf06237d7fedaba0c'}, {'name': 'GLSA-201611-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201611-10'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0279[/INST]JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1192140'}, {'name': 'RHSA-2015:0719', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0719.html'}, {'name': 'JVN#56297719', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN56297719/index.html'}, {'name': 'JVNDB-2015-001959', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html'}, {'name': '20190723 Tufin SecureChange uses Richfaces 4.3.5, vulnerable to CVE-2015-0279 (unauthenticated RCE)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2019/Jul/21'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html'}, {'name': '20200313 RichFaces exploitation toolkit', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2020/Mar/21'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0280[/INST]N\A
Affected Products: N\A
References: N\A
CVE State: REJECTED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0281[/INST]N\A
Affected Products: N\A
References: N\A
CVE State: REJECTED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0282[/INST]GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.gnutls.org/security.html'}, {'name': 'DSA-3191', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3191'}, {'name': '73119', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73119'}, {'name': 'RHSA-2015:1457', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1457.html'}, {'name': '1032148', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032148'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0283[/INST]The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.fedorahosted.org/cgit/slapi-nis.git/commit/?id=6573f91c95f7a353ad3bdf2fe95b0c15932aa097'}, {'name': 'FEDORA-2015-4747', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154314.html'}, {'name': 'FEDORA-2015-4788', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154103.html'}, {'name': '73377', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73377'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1195729'}, {'name': 'RHSA-2015:0728', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0728.html'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0284[/INST]Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7 allows remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the XMLRPC API, involving user details.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-7811.
Affected Products: n/a
References: [{'name': 'RHSA-2016:0590', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0590.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1181472'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/spacewalkproject/spacewalk/commit/dd418384171473c3e31386a1b4792f8c555dc744'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1315398'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1314906'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1181152'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/spacewalkproject/spacewalk/commit/f3792c79c1c251a49cc4e382be8591636326a794'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0285[/INST]The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and then conducting a brute-force attack.
Affected Products: n/a
References: [{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=e1b568dd2462f7cacf98f3d117936c34e2849a6b'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202410'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'url': 'http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': '73234', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73234'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0286[/INST]The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature.
Affected Products: n/a
References: [{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'RHSA-2015:0715', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0715.html'}, {'name': 'openSUSE-SU-2015:0554', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680'}, {'name': 'DSA-3197', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2015/dsa-3197'}, {'name': 'USN-2537-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2537-1'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'name': 'FEDORA-2015-4303', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'https://support.apple.com/HT205212'}, {'name': 'APPLE-SA-2015-09-30-3', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'FEDORA-2015-4300', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html'}, {'name': 'APPLE-SA-2015-06-30-2', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html'}, {'name': 'FEDORA-2015-6951', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'https://access.redhat.com/articles/1384453'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html'}, {'name': '1032917', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1032917'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': 'openSUSE-SU-2015:1277', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html'}, {'url': 'https://support.apple.com/HT205267'}, {'name': 'HPSBUX03334', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202366'}, {'name': 'MDVSA-2015:063', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:063'}, {'name': 'SUSE-SU-2015:0541', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html'}, {'url': 'http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'RHSA-2015:0716', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0716.html'}, {'name': 'HPSBGN03306', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=142841429220765&w=2'}, {'url': 'http://support.apple.com/kb/HT204942'}, {'name': 'SUSE-SU-2015:0578', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html'}, {'name': 'FreeBSD-SA-15:06', 'tags': ['vendor-advisory'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html'}, {'name': 'RHSA-2015:0752', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0752.html'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c3c7fb07dc975dc3c9de0eddb7d8fd79fc9c67c1'}, {'name': 'RHSA-2016:2957', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2957.html'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'SSRT102000', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'APPLE-SA-2015-09-16-1', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html'}, {'name': 'MDVSA-2015:062', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:062'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html'}, {'name': 'FEDORA-2015-4320', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html'}, {'url': 'https://support.citrix.com/article/CTX216642'}, {'name': 'FEDORA-2015-6855', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html'}, {'name': 'HPSBMU03413', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050254401665&w=2'}, {'name': '73225', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73225'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0287[/INST]The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse.
Affected Products: n/a
References: [{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'RHSA-2015:0715', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0715.html'}, {'name': 'openSUSE-SU-2015:0554', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680'}, {'name': 'DSA-3197', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2015/dsa-3197'}, {'name': 'USN-2537-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2537-1'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=b717b083073b6cacc0a5e2397b661678aff7ae7f'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'name': 'FEDORA-2015-4303', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'https://support.apple.com/HT205212'}, {'name': '73227', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73227'}, {'name': 'APPLE-SA-2015-09-30-3', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'FEDORA-2015-4300', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html'}, {'name': 'APPLE-SA-2015-06-30-2', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html'}, {'name': 'FEDORA-2015-6951', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'https://access.redhat.com/articles/1384453'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': 'openSUSE-SU-2015:1277', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html'}, {'url': 'https://support.apple.com/HT205267'}, {'name': 'HPSBUX03334', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'MDVSA-2015:063', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:063'}, {'name': 'SUSE-SU-2015:0541', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'RHSA-2015:0716', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0716.html'}, {'name': 'HPSBGN03306', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=142841429220765&w=2'}, {'url': 'http://support.apple.com/kb/HT204942'}, {'name': 'SUSE-SU-2015:0578', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html'}, {'name': 'FreeBSD-SA-15:06', 'tags': ['vendor-advisory'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html'}, {'name': 'RHSA-2015:0752', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0752.html'}, {'name': 'RHSA-2015:0800', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0800.html'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'SSRT102000', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'APPLE-SA-2015-09-16-1', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html'}, {'name': 'MDVSA-2015:062', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:062'}, {'name': 'FEDORA-2015-4320', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html'}, {'url': 'https://support.citrix.com/article/CTX216642'}, {'name': 'SUSE-SU-2016:0678', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html'}, {'name': 'FEDORA-2015-6855', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202380'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0288[/INST]The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.
Affected Products: n/a
References: [{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'RHSA-2015:0715', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0715.html'}, {'name': 'openSUSE-SU-2015:0554', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680'}, {'name': 'DSA-3197', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2015/dsa-3197'}, {'name': 'USN-2537-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2537-1'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'name': 'FEDORA-2015-4303', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'FEDORA-2015-4300', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html'}, {'url': 'https://rt.openssl.org/Ticket/Display.html?id=3708&user=guest&pass=guest'}, {'name': 'APPLE-SA-2015-06-30-2', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html'}, {'name': 'FEDORA-2015-6951', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'https://access.redhat.com/articles/1384453'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': '73237', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73237'}, {'name': 'openSUSE-SU-2015:1277', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html'}, {'name': 'HPSBUX03334', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'MDVSA-2015:063', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:063'}, {'name': 'SUSE-SU-2015:0541', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'RHSA-2015:0716', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0716.html'}, {'name': 'HPSBGN03306', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=142841429220765&w=2'}, {'url': 'http://support.apple.com/kb/HT204942'}, {'name': 'SUSE-SU-2015:0578', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html'}, {'name': 'FreeBSD-SA-15:06', 'tags': ['vendor-advisory'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202418'}, {'name': 'RHSA-2015:0752', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0752.html'}, {'name': 'RHSA-2015:0800', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0800.html'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'SSRT102000', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'MDVSA-2015:062', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:062'}, {'name': 'FEDORA-2015-4320', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html'}, {'url': 'https://support.citrix.com/article/CTX216642'}, {'name': 'FEDORA-2015-6855', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html'}, {'name': 'HPSBMU03413', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050254401665&w=2'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=28a00bcd8e318da18031b2ac8778c64147cd54f9'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0289[/INST]The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.
Affected Products: n/a
References: [{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'RHSA-2015:0715', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0715.html'}, {'name': 'openSUSE-SU-2015:0554', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680'}, {'name': 'DSA-3197', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2015/dsa-3197'}, {'name': 'USN-2537-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2537-1'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'name': 'FEDORA-2015-4303', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'name': '73231', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73231'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'FEDORA-2015-4300', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c0334c2c92dd1bc3ad8138ba6e74006c3631b0f9'}, {'name': 'APPLE-SA-2015-06-30-2', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html'}, {'name': 'FEDORA-2015-6951', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'https://access.redhat.com/articles/1384453'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': 'openSUSE-SU-2015:1277', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html'}, {'name': 'HPSBUX03334', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'MDVSA-2015:063', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:063'}, {'name': 'SUSE-SU-2015:0541', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html'}, {'url': 'http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'RHSA-2015:0716', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0716.html'}, {'name': 'HPSBGN03306', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=142841429220765&w=2'}, {'url': 'http://support.apple.com/kb/HT204942'}, {'name': 'SUSE-SU-2015:0578', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202384'}, {'name': 'FreeBSD-SA-15:06', 'tags': ['vendor-advisory'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html'}, {'name': 'RHSA-2015:0752', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0752.html'}, {'name': 'RHSA-2015:0800', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0800.html'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'SSRT102000', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'MDVSA-2015:062', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:062'}, {'name': 'FEDORA-2015-4320', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html'}, {'name': 'FEDORA-2015-6855', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0290[/INST]The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which allows remote attackers to cause a denial of service (pointer corruption and application crash) via unspecified vectors.
Affected Products: n/a
References: [{'name': '73226', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73226'}, {'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202345'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=77c77f0a1b9f15b869ca3342186dfbedd1119d0e'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0291[/INST]The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation.
Affected Products: n/a
References: [{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'name': '73235', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73235'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=76343947ada960b6269090638f5391068daee88d'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'url': 'http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202338'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0292[/INST]Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.
Affected Products: n/a
References: [{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'RHSA-2015:0715', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0715.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680'}, {'name': 'DSA-3197', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2015/dsa-3197'}, {'name': 'USN-2537-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2537-1'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'name': 'FEDORA-2015-4303', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'https://rt.openssl.org/Ticket/Display.html?id=2608&user=guest&pass=guest'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'FEDORA-2015-4300', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202395'}, {'url': 'https://access.redhat.com/articles/1384453'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': '73228', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73228'}, {'name': 'HPSBUX03334', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'url': 'http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'RHSA-2015:0716', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0716.html'}, {'name': 'SUSE-SU-2015:0578', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=d0666f289ac013094bbbf547bfbcd616199b7d2d'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html'}, {'name': 'RHSA-2015:0752', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0752.html'}, {'name': 'RHSA-2015:0800', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0800.html'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'SSRT102000', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'FEDORA-2015-4320', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html'}, {'url': 'https://support.citrix.com/article/CTX216642'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0293[/INST]The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.
Affected Products: n/a
References: [{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'RHSA-2015:0715', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0715.html'}, {'name': 'openSUSE-SU-2015:0554', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680'}, {'name': 'USN-2537-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2537-1'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'name': 'FEDORA-2015-4303', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202404'}, {'name': 'openSUSE-SU-2016:0638', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=86f8fb0e344d62454f8daf3e15236b2b59210756'}, {'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html'}, {'name': 'SUSE-SU-2016:0621', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'FEDORA-2015-4300', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html'}, {'name': 'APPLE-SA-2015-06-30-2', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html'}, {'name': 'FEDORA-2015-6951', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'https://access.redhat.com/articles/1384453'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': 'SUSE-SU-2016:1057', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html'}, {'name': 'HPSBUX03334', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'MDVSA-2015:063', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:063'}, {'name': 'SUSE-SU-2015:0541', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html'}, {'name': 'openSUSE-SU-2016:0720', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'SUSE-SU-2016:0624', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html'}, {'name': 'RHSA-2015:0716', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0716.html'}, {'url': 'http://support.apple.com/kb/HT204942'}, {'name': 'SUSE-SU-2015:0578', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html'}, {'name': 'FreeBSD-SA-15:06', 'tags': ['vendor-advisory'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc'}, {'name': 'SUSE-SU-2016:0631', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'name': 'SUSE-SU-2016:0617', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html'}, {'name': 'RHSA-2015:0752', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0752.html'}, {'name': 'RHSA-2015:0800', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0800.html'}, {'name': '73232', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73232'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'SSRT102000', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'MDVSA-2015:062', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:062'}, {'name': 'openSUSE-SU-2016:0628', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html'}, {'name': 'FEDORA-2015-4320', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html'}, {'url': 'https://support.citrix.com/article/CTX216642'}, {'name': 'FEDORA-2015-6855', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html'}, {'name': 'SUSE-SU-2016:0620', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html'}, {'name': 'openSUSE-SU-2016:0637', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html'}, {'name': 'SUSE-SU-2016:0641', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0294[/INST]GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.
Affected Products: GnuTLS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1196323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gnutls/gnutls/commit/6e76e9b9fa845b76b0b9a45f05f4b54a052578ff'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.debian.org/security/2015/dsa-3191'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0295[/INST]The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.
Affected Products: n/a
References: [{'name': '73029', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73029'}, {'name': '[Announce] 20150227 Qt Security Advisory: DoS vulnerability in the BMP image handler', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.qt-project.org/pipermail/announce/2015-February/000059.html'}, {'name': 'FEDORA-2015-2866', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151034.html'}, {'name': 'FEDORA-2015-2901', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151352.html'}, {'name': 'openSUSE-SU-2015:0573', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00068.html'}, {'name': 'FEDORA-2015-2886', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151138.html'}, {'name': 'FEDORA-2015-2895', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150800.html'}, {'name': 'USN-2626-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2626-1'}, {'name': 'FEDORA-2015-2897', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150940.html'}, {'name': 'FEDORA-2015-2869', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151121.html'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0296[/INST]The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.
Affected Products: n/a
References: [{'name': 'FEDORA-2015-4332', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154198.html'}, {'name': '72826', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72826'}, {'name': 'FEDORA-2015-4872', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154424.html'}, {'name': '[oss-security] 20150227 CVE-2015-0296 preinstall scriptlet in texlive-base rpm of fedora allows unprivileged user to delete arbitrary files(maybe others)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/27/6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1197082'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0297[/INST]Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the (1) ServerInvokerServlet or (2) SchedulerService or (3) cause a denial of service (disk consumption) via the ContentManager.
Affected Products: n/a
References: [{'name': 'RHSA-2015:0862', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0862.html'}, {'name': '1032181', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032181'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0298[/INST]Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2.Alpha1 allows remote attackers to inject arbitrary web script or HTML via a crafted MCMP message.
Affected Products: n/a
References: [{'name': 'RHSA-2015:1641', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1641.html'}, {'name': 'RHSA-2015:1642', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1642.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.jboss.org/browse/MODCLUSTER-453'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0299[/INST]Multiple cross-site scripting (XSS) vulnerabilities in Open Source Point of Sale 2.3.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/133737/Open-Source-Point-Of-Sale-2.3.1-Cross-Site-Scripting.html'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0300[/INST]N\A
Affected Products: N\A
References: N\A
CVE State: REJECTED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0301[/INST]Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 do not properly validate files, which has unspecified impact and attack vectors.
Affected Products: n/a
References: [{'name': '62371', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62371'}, {'name': 'GLSA-201502-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-02.xml'}, {'name': '62740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62740'}, {'name': '62177', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62177'}, {'name': 'adobe-cve20150301-unspecified(99981)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99981'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://helpx.adobe.com/security/products/flash-player/apsb15-01.html'}, {'name': '62252', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62252'}, {'name': '1031525', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031525'}, {'name': '62187', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62187'}, {'name': '72034', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72034'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0302[/INST]Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to obtain sensitive keystroke information via unspecified vectors.
Affected Products: n/a
References: [{'name': '62371', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62371'}, {'name': 'GLSA-201502-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-02.xml'}, {'name': '62740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62740'}, {'name': '62177', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62177'}, {'name': 'adobe-cve20150302-info-disc(99982)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99982'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://helpx.adobe.com/security/products/flash-player/apsb15-01.html'}, {'name': '62252', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62252'}, {'name': '1031525', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031525'}, {'name': '62187', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62187'}, {'name': '72035', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72035'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0303[/INST]Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0306.
Affected Products: n/a
References: [{'name': '62371', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62371'}, {'name': 'GLSA-201502-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-02.xml'}, {'name': 'adobe-cve20150303-code-exec(99983)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99983'}, {'name': '62740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62740'}, {'name': '62177', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62177'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://helpx.adobe.com/security/products/flash-player/apsb15-01.html'}, {'name': '62252', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62252'}, {'name': '1031525', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031525'}, {'name': '62187', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62187'}, {'name': '72031', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72031'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0304[/INST]Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0309.
Affected Products: n/a
References: [{'name': '62371', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62371'}, {'name': 'GLSA-201502-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-02.xml'}, {'name': '62740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62740'}, {'name': '62177', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62177'}, {'name': '20141016 Adobe Flash Player Sound Object "loadCompressedDataFromByteArray" Heap Overflow Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1089'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://helpx.adobe.com/security/products/flash-player/apsb15-01.html'}, {'name': '62252', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62252'}, {'name': '1031525', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031525'}, {'name': 'adobe-cve20150304-bo(99985)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99985'}, {'name': '62187', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62187'}, {'name': '72032', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72032'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0305[/INST]Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion."
Affected Products: n/a
References: [{'name': '62371', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62371'}, {'name': 'GLSA-201502-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-02.xml'}, {'name': '62740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62740'}, {'name': '72033', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72033'}, {'name': '62177', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62177'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://helpx.adobe.com/security/products/flash-player/apsb15-01.html'}, {'name': '62252', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62252'}, {'name': '1031525', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031525'}, {'name': 'adobe-cve20150305-code-exec(99987)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99987'}, {'name': '62187', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62187'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0306[/INST]Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0303.
Affected Products: n/a
References: [{'name': '62371', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62371'}, {'name': 'GLSA-201502-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-02.xml'}, {'name': '62740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62740'}, {'name': '62177', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62177'}, {'name': '72036', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72036'}, {'name': 'adobe-cve20150306-code-exec(99984)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99984'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://helpx.adobe.com/security/products/flash-player/apsb15-01.html'}, {'name': '62252', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62252'}, {'name': '1031525', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031525'}, {'name': '62187', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62187'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0307[/INST]Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.
Affected Products: n/a
References: [{'name': '62371', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62371'}, {'name': 'GLSA-201502-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-02.xml'}, {'name': '62740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62740'}, {'name': '62177', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62177'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://helpx.adobe.com/security/products/flash-player/apsb15-01.html'}, {'name': '62252', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62252'}, {'name': '1031525', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031525'}, {'name': '72037', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72037'}, {'name': '62187', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62187'}, {'name': 'adobe-cve20150307-info-disc(99988)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99988'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0308[/INST]Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors.
Affected Products: n/a
References: [{'name': '62371', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62371'}, {'name': 'GLSA-201502-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-02.xml'}, {'name': '62740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62740'}, {'name': '62177', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62177'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://helpx.adobe.com/security/products/flash-player/apsb15-01.html'}, {'name': '72039', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72039'}, {'name': '62252', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62252'}, {'name': '1031525', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031525'}, {'name': '62187', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62187'}, {'name': 'adobe-cve20150308-code-exec(99989)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99989'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0309[/INST]Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and Adobe AIR SDK & Compiler before 16.0.0.272 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0304.
Affected Products: n/a
References: [{'name': '62371', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62371'}, {'name': 'GLSA-201502-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-02.xml'}, {'name': 'adobe-cve20150309-bo(99986)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/99986'}, {'name': '62740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62740'}, {'name': '62177', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62177'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://helpx.adobe.com/security/products/flash-player/apsb15-01.html'}, {'name': '62252', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62252'}, {'name': '1031525', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031525'}, {'name': '62187', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62187'}, {'name': '72038', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72038'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0310[/INST]Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.
Affected Products: n/a
References: [{'name': 'GLSA-201502-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-02.xml'}, {'name': '72261', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72261'}, {'name': '62660', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62660'}, {'name': '62740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62740'}, {'name': '1031609', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031609'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://helpx.adobe.com/security/products/flash-player/apsb15-02.html'}, {'name': '62452', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62452'}, {'name': '62601', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62601'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0311[/INST]Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.
Affected Products: n/a
References: [{'name': 'GLSA-201502-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201502-02.xml'}, {'name': '62660', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62660'}, {'name': '62740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62740'}, {'name': '62432', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62432'}, {'name': '62650', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62650'}, {'name': 'SUSE-SU-2015:0163', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00031.html'}, {'name': '72283', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72283'}, {'name': '62543', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62543'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://technet.microsoft.com/library/security/2755801'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://helpx.adobe.com/security/products/flash-player/apsb15-03.html'}, {'name': 'SUSE-SU-2015:0151', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00027.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://helpx.adobe.com/security/products/flash-player/apsa15-01.html'}, {'name': '1031597', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031597'}, {'tags': ['x_refsource_MISC'], 'url': 'http://malware.dontneedcoffee.com/2015/01/unpatched-vulnerability-0day-in-flash.html'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2015-0312[/INST]Double free vulnerability in Adobe Flash Player before 13.0.0.264 and 14.x through 16.x before 16.0.0.296 on Windows and OS X and before 11.2.202.440 on Linux allows attackers to execute arbitrary code via unspecified vectors.
Affected Products: n/a
References: [{'name': '62660', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62660'}, {'name': '72343', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72343'}, {'name': '62432', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62432'}, {'name': '62543', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/62543'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://technet.microsoft.com/library/security/2755801'}, {'name': '1031634', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031634'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://helpx.adobe.com/security/products/flash-player/apsb15-03.html'}, {'name': 'adobe-flash-cve20150312-code-exec(100394)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100394'}]
CVE State: PUBLISHED</s>