CVE 2009 document archive

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

11 documents · Identifier year 2009 · 1 / 1

1. CVE-2009-5155glibc: parse_reg_exp in posix/regcomp.c misparses alternatives leading to denial of service or trigger incorrect result→
2. CVE-2009-5147ruby: dlopen could open a library with tainted library name→
3. CVE-2009-5146openssl: memory leak in hostname TLS extension→
4. CVE-2009-5138gnutls: incorrect handling of V1 intermediate certificates→
5. CVE-2009-4410kernel: fuse_ioctl_copy_user() dos→
6. CVE-2009-4139spacewalk-java: spacewalk: Red Hat Network Satellite: Spacewalk Java: Privilege escalation via cross-site request forgery→
7. CVE-2009-3720expat: buffer over-read and crash on XML with malformed UTF-8 sequences→
8. CVE-2009-3560expat: buffer over-read and crash in big2_toUtf8() on XML with malformed UTF-8 sequences→
9. CVE-2009-2940PyGreSQL: Missing a function to call PQescapeStringConn()→
10. CVE-2009-1143open-vm-tools: access bypass due to realpath race condition in mount.vmhgfs (aka hgfsmounter)→
11. CVE-2009-1142open-vm-tools: privilege escalation if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled→