PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2014 document archive · 11

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,000 documents · Identifier year 2014 · 11 / 20

  1. CVE-2014-4200open-vm-tools: vm-support's diagnostics archive created with world-readable permissions
  2. CVE-2014-4199open-vm-tools: insecure temporary file creation
  3. CVE-2014-4174libpcap: file parser crash (wnpa-sec-2014-05)
  4. CVE-2014-4171Kernel: mm/shmem: denial of service
  5. CVE-2014-4049php: heap-based buffer overflow in DNS TXT record parsing
  6. CVE-2014-4043glibc: posix_spawn_file_actions_addopen fails to copy the path argument
  7. CVE-2014-4040powerpc-utils: snap creates archives with fstab and yaboot.conf which may expose certain passwords
  8. CVE-2014-4039ppc64-diag: multiple temporary file races
  9. CVE-2014-4038ppc64-diag: multiple temporary file races
  10. CVE-2014-4027Kernel: target/rd: imformation leakage
  11. CVE-2014-4020wireshark: Frame metadissector crash (wnpa-sec-2014-07)
  12. CVE-2014-4014Kernel: possible privilege escalation in user namespace
  13. CVE-2014-3981php: insecure temporary file use in the configure script
  14. CVE-2014-3970pulseaudio: denial of service in module-rtp-recv
  15. CVE-2014-3956sendmail: Properly set the close-on-exec flag for file descriptors
  16. CVE-2014-3940Kernel: missing check during hugepage migration
  17. CVE-2014-3917kernel: DoS with syscall auditing
  18. CVE-2014-3916ruby: DoS via long string in str_buf_cat()
  19. CVE-2014-3859bind: assertion failure during EDNS option processing
  20. CVE-2014-3775libgadu: server response memory corruption issue
  21. CVE-2014-3710file: out-of-bounds read in elf note headers
  22. CVE-2014-3707curl: incorrect handle duplication after COPYPOSTFIELDS
  23. CVE-2014-3706ovirt-engine: connection does not validate certificate attributes.
  24. CVE-2014-3698pidgin: remote information leak via crafted XMPP message
  25. CVE-2014-3696pidgin: denial of service parsing Groupwise server message
  26. CVE-2014-3695pidgin: crash in Mxit protocol plug-in
  27. CVE-2014-3694pidgin: SSL/TLS plug-ins failed to check Basic Constraints
  28. CVE-2014-3693libreoffice: Use-After-Free in socket manager of Impress Remote
  29. CVE-2014-3690kernel: kvm: vmx: invalid host cr4 handling across vm entries
  30. CVE-2014-3689qemu: vmware_vga: insufficient parameter validation in rectangle functions
  31. CVE-2014-3688kernel: net: sctp: remote memory pressure from excessive queueing
  32. CVE-2014-3687kernel: net: sctp: fix panic on duplicate ASCONF chunks
  33. CVE-2014-3686hostapd: wpa_cli and hostapd_cli remote command execution issue
  34. CVE-2014-3683rsyslog: integer overflow in PRI parsing
  35. CVE-2014-3677shim: memory corruption flaw when processing Machine Owner Keys (MOKs)
  36. CVE-2014-3676shim: heap-based buffer overflow flaw in IPv6 address parsing
  37. CVE-2014-3675shim: out-of-bounds memory read flaw in DHCPv6 packet processing
  38. CVE-2014-3673kernel: sctp: skb_over_panic when receiving malformed ASCONF chunks
  39. CVE-2014-3672xen: Unrestricted qemu logging
  40. CVE-2014-3670php: heap corruption issue in exif_thumbnail()
  41. CVE-2014-3669php: integer overflow in unserialize()
  42. CVE-2014-3668php: xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime()
  43. CVE-2014-3660libxml2: denial of service via recursive entity expansion
  44. CVE-2014-3657libvirt: domain_conf: domain deadlock DoS
  45. CVE-2014-3647kernel: kvm: noncanonical rip after emulation
  46. CVE-2014-3646kernel: kvm: vmx: invvpid vm exit not handled
  47. CVE-2014-3645kernel: kvm: vmx: invept vm exit not handled
  48. CVE-2014-3640qemu: slirp: NULL pointer deref in sosendto()
  49. CVE-2014-3639dbus: denial of service flaw in incomplete connection handling
  50. CVE-2014-3638dbus: denial of service in method call handling
CVE 2014 document archive — Page 11 | PulseLinux