CVE 2014 document archive · 12
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,000 documents · Identifier year 2014 · 12 / 20
- CVE-2014-3637dbus: denial of service by creating unkillable D-Bus connections
- CVE-2014-3636dbus: denial of service by queuing or splitting file descriptors
- CVE-2014-3635dbus: heap-based buffer overflow flaw in file descriptor passing
- CVE-2014-3634rsyslog: remote syslog PRI vulnerability
- CVE-2014-3633libvirt: qemu: out-of-bounds read access in qemuDomainGetBlockIoTune() due to invalid index
- CVE-2014-3631kernel: keys: incorrect termination condition in assoc array garbage collection
- CVE-2014-3627hadoop: file disclosure flaw
- CVE-2014-3622php: post handler potential illegal efree() vulnerability
- CVE-2014-3620curl: cookies accepted for TLDs
- CVE-2014-3619glusterfs: fragment header infinite loop DoS
- CVE-2014-3618procmail: Heap-overflow in procmail's formail utility when processing specially-crafted email headers
- CVE-2014-3615Qemu: information leakage when guest sets high resolution
- CVE-2014-3613curl: incorrect handling of IP addresses in cookie domain
- CVE-2014-3611kernel: kvm: PIT timer race condition
- CVE-2014-3610kernel: kvm: noncanonical MSR writes
- CVE-2014-3609squid: assertion failure in Range header processing (SQUID-2014:2)
- CVE-2014-3601kernel: kvm: invalid parameter passing in kvm_iommu_map_pages()
- CVE-2014-3598python-pillow: Jpeg2KImagePlugin infinite loop DoS
- CVE-2014-3597php: multiple buffer over-reads in php_parserr
- CVE-2014-3591libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)
- CVE-2014-3589python-imaging: DoS in IcnsImagePlugin
- CVE-2014-3587file: incomplete fix for CVE-2012-1571 in cdf_read_property_info
- CVE-2014-3585redhat-upgrade-tool: does not check GPG signatures on package installation
- CVE-2014-3583httpd: mod_proxy_fcgi handle_headers() buffer over read
- CVE-2014-3581httpd: NULL pointer dereference in mod_cache if Content-Type has empty value
- CVE-2014-3580subversion: NULL pointer dereference flaw in mod_dav_svn when handling REPORT requests
- CVE-2014-3577CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix
- CVE-2014-3575openoffice: Arbitrary file disclosure via crafted OLE objects
- CVE-2014-3574apache-poi: entity expansion (billion laughs) flaw
- CVE-2014-3572openssl: ECDH downgrade bug fix
- CVE-2014-3571openssl: DTLS segmentation fault in dtls1_get_record
- CVE-2014-3570openssl: Bignum squaring may produce incorrect results
- CVE-2014-3569openssl: denial of service in ssl23_get_client_hello function
- CVE-2014-3568openssl: Build option no-ssl3 is incomplete
- CVE-2014-3567openssl: Invalid TLS/SSL session tickets could cause memory leak leading to server crash
- CVE-2014-3566SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack
- CVE-2014-3565net-snmp: snmptrapd crash when handling an SNMP trap containing a ifMtu with a NULL type
- CVE-2014-3564gpgme: heap-based buffer overflow in gpgsm status handler
- CVE-2014-3562389-ds: unauthenticated information disclosure
- CVE-2014-3560samba: remote code execution in nmbd
- CVE-2014-3558Validator: JSM bypass via ReflectionHelper
- CVE-2014-3554libndp: buffer overflow flaw in DNS Search List (DNSSL) handling
- CVE-2014-3538file: unrestricted regular expression matching
- CVE-2014-3537cups: insufficient checking leads to privilege escalation
- CVE-2014-3535Kernel: netdevice.h: NULL pointer dereference over VxLAN
- CVE-2014-3534kernel: s390: ptrace: insufficient sanitization when setting psw mask
- CVE-2014-3533dbus: denial of service when forwarding invalid file descriptors
- CVE-2014-3532dbus: denial of service in file descriptor passing feature
- CVE-2014-3529apache-poi: XML eXternal Entity (XXE) flaw
- CVE-2014-3528subversion: credentials leak via MD5 collision