PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2014 document archive · 10

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,003 documents · Identifier year 2014 · 10 / 21

  1. CVE-2014-4943kernel: net: pppol2tp: level handling in pppol2tp_[s,g]etsockopt()
  2. CVE-2014-4877wget: FTP symlink arbitrary filesystem access
  3. CVE-2014-4721php: type confusion issue in phpinfo() leading to information leak
  4. CVE-2014-4715lz4: LZ4_decompress_generic() integer overflow (32-bit arches)
  5. CVE-2014-4699kernel: x86_64: ptrace: sysret to non-canonical address
  6. CVE-2014-4698php: ArrayIterator use-after-free due to object change during sorting
  7. CVE-2014-4670php: SPL Iterators use-after-free
  8. CVE-2014-4667kernel: sctp: sk_ack_backlog wrap-around problem
  9. CVE-2014-4656Kernel: ALSA: control: integer overflow in id.index & id.numid
  10. CVE-2014-4655Kernel: ALSA: control: use-after-free in replacing user controls
  11. CVE-2014-4654Kernel: ALSA: control: use-after-free in replacing user controls
  12. CVE-2014-4653Kernel: ALSA: control: do not access controls outside of protected regions
  13. CVE-2014-4652Kernel: ALSA: control: protect user controls against races & memory disclosure
  14. CVE-2014-4650python: CGIHTTPServer module does not properly handle URL-encoded path separators in URLs
  15. CVE-2014-4617gnupg: infinite loop when decompressing data packets
  16. CVE-2014-4616python: missing boundary check in JSON module
  17. CVE-2014-4611lz4: LZ4_decompress_generic() integer overflow
  18. CVE-2014-4610ffmpeg: av_lzo1x_decode() integer overflow
  19. CVE-2014-4608kernel: lzo1x_decompress_safe() integer overflow
  20. CVE-2014-4607lzo: lzo1x_decompress_safe() integer overflow
  21. CVE-2014-4508Kernel: x86_32: BUG in syscall auditing
  22. CVE-2014-4345krb5: buffer overrun in kadmind with LDAP backend (MITKRB5-SA-2014-001)
  23. CVE-2014-4344krb5: NULL pointer dereference flaw in SPNEGO acceptor for continuation tokens
  24. CVE-2014-4343krb5: double-free flaw in SPNEGO initiators
  25. CVE-2014-4342krb5: denial of service flaws when handling RFC 1964 tokens
  26. CVE-2014-4341krb5: denial of service flaws when handling padding length longer than the plaintext
  27. CVE-2014-4338cups-filters: unsupported BrowseAllow value lets cups-browsed accept from all hosts
  28. CVE-2014-4337cups-filters: cups-browsed DoS via process_browse_data() OOB read
  29. CVE-2014-4336cups-filters: incomplete fix for CVE-2014-2707
  30. CVE-2014-4330perl-Data-Dumper: deep recursion stack overflow
  31. CVE-2014-4287mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014)
  32. CVE-2014-4274mysql: unspecified MyISAM temporary file issue fixed in 5.5.39 and 5.6.20
  33. CVE-2014-4268OpenJDK: Missing file choser access restrictions (Swing, 8035699)
  34. CVE-2014-4266OpenJDK: InfoBuilder incorrect return values (Serviceability, 8033301)
  35. CVE-2014-4264OpenJDK: Incorrect TLS/EC management (Security, 8031340)
  36. CVE-2014-4263OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162)
  37. CVE-2014-4262OpenJDK: AtomicReferenceFieldUpdater missing primitive type check (Libraries, 8039520)
  38. CVE-2014-4260mysql: unspecified vulnerability related to SRCHAR (CPU July 2014)
  39. CVE-2014-4258mysql: unspecified vulnerability related to SRINFOSC (CPU July 2014)
  40. CVE-2014-4252OpenJDK: Prevent instantiation of service with non-public constructor (Security, 8035004)
  41. CVE-2014-4247JDK: unspecified vulnerability fixed in 8u11 (JavaFX)
  42. CVE-2014-4244OpenJDK: RSA blinding issues (Security, 8031346)
  43. CVE-2014-4243mysql: unspecified vulnerability related to ENFED (CPU July 2014)
  44. CVE-2014-4223OpenJDK: Incorrect handling of invocations with exhausted ranks (Libraries, 8035793)
  45. CVE-2014-4221OpenJDK: MethodHandles.Lookup insufficient modifiers checks (Libraries, 8035788)
  46. CVE-2014-4219OpenJDK: Bytecode verification does not prevent ctor calls to this() and super() (Hotspot, 8035119)
  47. CVE-2014-4218OpenJDK: Clone interfaces passed to proxy methods (Libraries, 8035009)
  48. CVE-2014-4216OpenJDK: Incorrect generic signature attribute parsing (Hotspot, 8037076)
  49. CVE-2014-4209OpenJDK: SubjectDelegator protection insufficient (JMX, 8029755)
  50. CVE-2014-4207mysql: unspecified vulnerability related to SROPTZR (CPU July 2014)