{
    "CVE_data_type": "CVE",
    "CVE_data_format": "MITRE",
    "CVE_data_version": "4.0",
    "CVE_data_numberOfCVEs": "4758",
    "CVE_data_timestamp": "2020-07-29T09:05Z",
    "CVE_Items": [
        {
            "cve": {
                "data_type": "CVE",
                "data_format": "MITRE",
                "data_version": "4.0",
                "CVE_data_meta": {
                    "ID": "CVE-2005-4895",
                    "ASSIGNER": "cve@mitre.org"
                },
                "problemtype": {
                    "problemtype_data": [
                        {
                            "description": [
                                {
                                    "lang": "en",
                                    "value": "CWE-189"
                                }
                            ]
                        }
                    ]
                },
                "references": {
                    "reference_data": [
                        {
                            "url": "http://code.google.com/p/gperftools/source/browse/tags/perftools-0.4/ChangeLog",
                            "name": "http://code.google.com/p/gperftools/source/browse/tags/perftools-0.4/ChangeLog",
                            "refsource": "CONFIRM",
                            "tags": []
                        },
                        {
                            "url": "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/",
                            "name": "http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/",
                            "refsource": "MISC",
                            "tags": []
                        }
                    ]
                },
                "description": {
                    "description_data": [
                        {
                            "lang": "en",
                            "value": "Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected."
                        }
                    ]
                }
            },
            "configurations": {
                "CVE_data_version": "4.0",
                "nodes": [
                    {
                        "operator": "OR",
                        "cpe_match": [
                            {
                                "vulnerable": true,
                                "cpe23Uri": "cpe:2.3:a:csilvers:gperftools:0.1:*:*:*:*:*:*:*"
                            },
                            {
                                "vulnerable": true,
                                "cpe23Uri": "cpe:2.3:a:csilvers:gperftools:0.2:*:*:*:*:*:*:*"
                            },
                            {
                                "vulnerable": true,
                                "cpe23Uri": "cpe:2.3:a:csilvers:gperftools:*:*:*:*:*:*:*:*",
                                "versionEndIncluding": "0.3"
                            }
                        ]
                    }
                ]
            },
            "impact": {
                "baseMetricV2": {
                    "cvssV2": {
                        "version": "2.0",
                        "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                        "accessVector": "NETWORK",
                        "accessComplexity": "LOW",
                        "authentication": "NONE",
                        "confidentialityImpact": "NONE",
                        "integrityImpact": "NONE",
                        "availabilityImpact": "PARTIAL",
                        "baseScore": 5.0
                    },
                    "severity": "MEDIUM",
                    "exploitabilityScore": 10.0,
                    "impactScore": 2.9,
                    "obtainAllPrivilege": false,
                    "obtainUserPrivilege": false,
                    "obtainOtherPrivilege": false,
                    "userInteractionRequired": false
                }
            },
            "publishedDate": "2012-07-25T19:55Z",
            "lastModifiedDate": "2012-08-09T04:00Z"
        },
        {
            "cve": {
                "data_type": "CVE",
                "data_format": "MITRE",
                "data_version": "4.0",
                "CVE_data_meta": {
                    "ID": "CVE-2005-4900",
                    "ASSIGNER": "cve@mitre.org"
                },
                "problemtype": {
                    "problemtype_data": [
                        {
                            "description": [
                                {
                                    "lang": "en",
                                    "value": "CWE-326"
                                }
                            ]
                        }
                    ]
                },
                "references": {
                    "reference_data": [
                        {
                            "url": "http://ia.cr/2007/474",
                            "name": "2007",
                            "refsource": "MISC",
                            "tags": [
                                "Third Party Advisory"
                            ]
                        },
                        {
                            "url": "http://shattered.io/",
                            "name": "http://shattered.io/",
                            "refsource": "MISC",
                            "tags": []
                        },
                        {
                            "url": "http://www.cwi.nl/news/2017/cwi-and-google-announce-first-collision-industry-security-standard-sha-1",
                            "name": "http://www.cwi.nl/news/2017/cwi-and-google-announce-first-collision-industry-security-standard-sha-1",
                            "refsource": "MISC",
                            "tags": []
                        },
                        {
                            "url": "http://www.securityfocus.com/bid/12577",
                            "name": "exceedsDBexceedsDBexceedsDBexceedsDBexceedsDBexceedsDB",
                            "refsource": "BID",
                            "tags": []
                        },
                        {
                            "url": "https://arstechnica.com/security/2017/02/at-deaths-door-for-years-widely-used-sha1-function-is-now-dead/",
                            "name": "https://arstechnica.com/security/2017/02/at-deaths-door-for-years-widely-used-sha1-function-is-now-dead/",
                            "refsource": "MISC",
                            "tags": []
                        },
                        {
                            "url": "https://security.googleblog.com/2015/12/an-update-on-sha-1-certificates-in.html",
                            "name": "https://security.googleblog.com/2015/12/an-update-on-sha-1-certificates-in.html",
                            "refsource": "MISC",
                            "tags": [
                                "Third Party Advisory"
                            ]
                        },
                        {
                            "url": "https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html",
                            "name": "https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html",
                            "refsource": "MISC",
                            "tags": []
                        },
                        {
                            "url": "https://sites.google.com/site/itstheshappening",
                            "name": "https://sites.google.com/site/itstheshappening",
                            "refsource": "MISC",
                            "tags": [
                                "Third Party Advisory"
                            ]
                        },
                        {
                            "url": "https://www.schneier.com/blog/archives/2005/02/sha1_broken.html",
                            "name": "https://www.schneier.com/blog/archives/2005/02/sha1_broken.html",
                            "refsource": "MISC",
                            "tags": [
                                "Third Party Advisory"
                            ]
                        },
                        {
                            "url": "https://www.schneier.com/blog/archives/2005/08/new_cryptanalyt.html",
                            "name": "https://www.schneier.com/blog/archives/2005/08/new_cryptanalyt.html",
                            "refsource": "MISC",
                            "tags": [
                                "Third Party Advisory"
                            ]
                        }
                    ]
                },
                "description": {
                    "description_data": [
                        {
                            "lang": "en",
                            "value": "SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of SHA-1 in TLS 1.2.  NOTE: this CVE exists to provide a common identifier for referencing this SHA-1 issue; the existence of an identifier is not, by itself, a technology recommendation."
                        },
                        {
                            "lang": "en",
                            "value": "SHA-1 is likely present in a large number of products across the entire IT sector. The applicability statement for this CVE will be updated when specific products are identified, as time and resources permit."
                        }
                    ]
                }
            },
            "configurations": {
                "CVE_data_version": "4.0",
                "nodes": [
                    {
                        "operator": "OR",
                        "cpe_match": [
                            {
                                "vulnerable": true,
                                "cpe23Uri": "cpe:2.3:h:google:chrome:*:*:*:*:*:*:*:*",
                                "versionEndIncluding": "47.0.2526.111"
                            }
                        ]
                    }
                ]
            },
            "impact": {
                "baseMetricV3": {
                    "cvssV3": {
                        "version": "3.0",
                        "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
                        "attackVector": "NETWORK",
                        "attackComplexity": "HIGH",
                        "privilegesRequired": "NONE",
                        "userInteraction": "NONE",
                        "scope": "UNCHANGED",
                        "confidentialityImpact": "HIGH",
                        "integrityImpact": "NONE",
                        "availabilityImpact": "NONE",
                        "baseScore": 5.9,
                        "baseSeverity": "MEDIUM"
                    },
                    "exploitabilityScore": 2.2,
                    "impactScore": 3.6
                },
                "baseMetricV2": {
                    "cvssV2": {
                        "version": "2.0",
                        "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
                        "accessVector": "NETWORK",
                        "accessComplexity": "MEDIUM",
                        "authentication": "NONE",
                        "confidentialityImpact": "PARTIAL",
                        "integrityImpact": "NONE",
                        "availabilityImpact": "NONE",
                        "baseScore": 4.3
                    },
                    "severity": "MEDIUM",
                    "exploitabilityScore": 8.6,
                    "impactScore": 2.9,
                    "obtainAllPrivilege": false,
                    "obtainUserPrivilege": false,
                    "obtainOtherPrivilege": false,
                    "userInteractionRequired": false
                }
            },
            "publishedDate": "2016-10-14T16:59Z",
            "lastModifiedDate": "2018-05-30T01:29Z"
        },
        {
            "cve" : {
              "data_type" : "CVE",
              "data_format" : "MITRE",
              "data_version" : "4.0",
              "CVE_data_meta" : {
                "ID" : "CVE-2003-0001",
                "ASSIGNER" : "cve@mitre.org"
              },
              "problemtype" : {
                "problemtype_data" : [ {
                  "description" : [ {
                    "lang" : "en",
                    "value" : "CWE-200"
                  } ]
                } ]
              },
              "references" : {
                "reference_data" : [ {
                  "url" : "http://www.atstake.com/research/advisories/2003/a010603-1.txt",
                  "name" : "A010603-1",
                  "refsource" : "ATSTAKE",
                  "tags" : [ "Vendor Advisory" ]
                }, {
                  "url" : "http://www.kb.cert.org/vuls/id/412115",
                  "name" : "VU#412115",
                  "refsource" : "CERT-VN",
                  "tags" : [ "Third Party Advisory", "US Government Resource" ]
                }, {
                  "url" : "http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0016.html",
                  "name" : "20030110 More information regarding Etherleak",
                  "refsource" : "VULNWATCH",
                  "tags" : [ ]
                }, {
                  "url" : "http://www.atstake.com/research/advisories/2003/atstake_etherleak_report.pdf",
                  "name" : "http://www.atstake.com/research/advisories/2003/atstake_etherleak_report.pdf",
                  "refsource" : "MISC",
                  "tags" : [ ]
                }, {
                  "url" : "http://www.redhat.com/support/errata/RHSA-2003-025.html",
                  "name" : "RHSA-2003:025",
                  "refsource" : "REDHAT",
                  "tags" : [ ]
                }, {
                  "url" : "http://www.redhat.com/support/errata/RHSA-2003-088.html",
                  "name" : "RHSA-2003:088",
                  "refsource" : "REDHAT",
                  "tags" : [ ]
                }, {
                  "url" : "http://www.osvdb.org/9962",
                  "name" : "9962",
                  "refsource" : "OSVDB",
                  "tags" : [ ]
                }, {
                  "url" : "http://secunia.com/advisories/7996",
                  "name" : "7996",
                  "refsource" : "SECUNIA",
                  "tags" : [ ]
                }, {
                  "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
                  "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
                  "refsource" : "CONFIRM",
                  "tags" : [ ]
                }, {
                  "url" : "http://marc.info/?l=bugtraq&m=104222046632243&w=2",
                  "name" : "20030110 More information regarding Etherleak",
                  "refsource" : "BUGTRAQ",
                  "tags" : [ ]
                }, {
                  "url" : "http://www.securitytracker.com/id/1031583",
                  "name" : "1031583",
                  "refsource" : "SECTRACK",
                  "tags" : [ ]
                }, {
                  "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2665",
                  "name" : "oval:org.mitre.oval:def:2665",
                  "refsource" : "OVAL",
                  "tags" : [ ]
                }, {
                  "url" : "http://www.securitytracker.com/id/1040185",
                  "name" : "1040185",
                  "refsource" : "SECTRACK",
                  "tags" : [ ]
                }, {
                  "url" : "http://www.securityfocus.com/archive/1/307564/30/26270/threaded",
                  "name" : "20030117 Re: More information regarding Etherleak",
                  "refsource" : "BUGTRAQ",
                  "tags" : [ ]
                }, {
                  "url" : "http://www.securityfocus.com/archive/1/305335/30/26420/threaded",
                  "name" : "20030106 Etherleak: Ethernet frame padding information leakage (A010603-1)",
                  "refsource" : "BUGTRAQ",
                  "tags" : [ ]
                } ]
              },
              "description" : {
                "description_data" : [ {
                  "lang" : "en",
                  "value" : "Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak."
                } ]
              }
            },
            "configurations" : {
              "CVE_data_version" : "4.0",
              "nodes" : [ {
                "operator" : "OR",
                "children" : [ ],
                "cpe_match" : [ {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                }, {
                  "vulnerable" : true,
                  "cpe23Uri" : "cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*",
                  "cpe_name" : [ ]
                } ]
              } ]
            },
            "impact" : {
              "baseMetricV2" : {
                "cvssV2" : {
                  "version" : "2.0",
                  "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
                  "accessVector" : "NETWORK",
                  "accessComplexity" : "LOW",
                  "authentication" : "NONE",
                  "confidentialityImpact" : "PARTIAL",
                  "integrityImpact" : "NONE",
                  "availabilityImpact" : "NONE",
                  "baseScore" : 5.0
                },
                "severity" : "MEDIUM",
                "exploitabilityScore" : 10.0,
                "impactScore" : 2.9,
                "obtainAllPrivilege" : false,
                "obtainUserPrivilege" : false,
                "obtainOtherPrivilege" : false,
                "userInteractionRequired" : false
              }
            },
            "publishedDate" : "2003-01-17T05:00Z",
            "lastModifiedDate" : "2019-04-30T14:27Z"
          }
    ]
}