PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2012 document archive

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

40 documents · Identifier year 2012 · 1 / 1

  1. CVE-2012-6712kernel: buffer overflow in drivers/net/wireless/iwlwifi/iwl-agn-sta.c
  2. CVE-2012-6711bash: heap-based buffer overflow during echo of unsupported characters
  3. CVE-2012-6708js-jquery: XSS via improper selector detection
  4. CVE-2012-6704kernel: Signed overflows in SO_{SND|RCV}BUF in sock_setsockopt()
  5. CVE-2012-6703kernel: Integer overflow in compress_core
  6. CVE-2012-6702expat: Using XML_Parse before rand() results into non-random output
  7. CVE-2012-6701kernel: AIO interface didn't use rw_verify_area() for checking mandatory locking on files and size of access
  8. CVE-2012-6686glibc: stack overflow in getaddrinfo()'s use of alloca()
  9. CVE-2012-6662jquery-ui: XSS vulnerability in default content in Tooltip widget
  10. CVE-2012-6657Kernel: net: guard tcp_set_keepalive against crash
  11. CVE-2012-6656glibc: crash in IBM930 decoding
  12. CVE-2012-6655accountsservice: local encrypted password disclosure when changing password
  13. CVE-2012-6647Kernel: futex: forbid uaddr == uaddr2 in futex_wait_requeue_pi()
  14. CVE-2012-6638Kernel: net: tcp: potential DoS via SYN+FIN messages
  15. CVE-2012-6607augeas: symlink attack on a .augsave file
  16. CVE-2012-6535djvulibre: DoS or arbitrary code execution via specially crafted DjVu file
  17. CVE-2012-6153CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix
  18. CVE-2012-6152pidgin: DoS when decoding non-UTF-8 strings in Yahoo protocol plugin
  19. CVE-2012-6151net-snmp: snmpd crashes/hangs when AgentX subagent times-out
  20. CVE-2012-6150samba: pam_winbind fails open when non-existent group specified to require_membership_of
  21. CVE-2012-6088rpm: Signature checking function returned success on (possibly malicious ) rpm packages
  22. CVE-2012-5667grep: Integer overflow leading to heap-based buffer-overflow when reading large lines
  23. CVE-2012-5662x3270: does not properly validate SSL certificates
  24. CVE-2012-5615mysql: Remote Preauth User Enumeration flaw
  25. CVE-2012-5582opendnssec: misuses libcurl API
  26. CVE-2012-4542kernel: block: default SCSI command filter does not accomodate commands overlap across device classes
  27. CVE-2012-4510cups-pk-helper: Insecure wrapping of cupsGetFile() and cupsPutFile() methods
  28. CVE-2012-4503chrony: Two security flaws fixed in chrony-1.29 release
  29. CVE-2012-4502chrony: Two security flaws fixed in chrony-1.29 release
  30. CVE-2012-4433gegl: Integer overflow, leading to heap-based buffer overflow by parsing PPM image headers
  31. CVE-2012-4424glibc: alloca() stack overflow in the strcoll() interface
  32. CVE-2012-4412glibc: strcoll() integer overflow leading to buffer overflow
  33. CVE-2012-4398kernel: request_module() OOM local DoS
  34. CVE-2012-2662System: multiple XSS flaws
  35. CVE-2012-2150xfsprogs: xfs_metadump information disclosure flaw
  36. CVE-2012-2142xpdf: Insufficient sanitization of escape sequences in the error messages
  37. CVE-2012-1610ImageMagick: integer overflow in the GetEXIFProperty function in magick/property.c could lead to DoS
  38. CVE-2012-1571file: out of bounds read in CDF parser
  39. CVE-2012-1569libtasn1: DER decoding buffer overflow (GNUTLS-SA-2012-3, MU-201202-02)
  40. CVE-2012-0059Spacewalk-backend: Spacewalk-backend: Information Disclosure via cleartext passwords in error messages
CVE 2012 document archive | PulseLinux