CVE 2014 document archive · 13

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,000 documents · Identifier year 2014 · 13 / 20

601. CVE-2014-3524libreoffice/openoffice.org: CSV command injection and DDE formulas→
602. CVE-2014-3523httpd: WinNT MPM denial of service→
603. CVE-2014-3522subversion: incorrect SSL certificate validation in Serf RA (repository access) layer→
604. CVE-2014-3515php: unserialize() SPL ArrayObject / SPLObjectStorage type confusion flaw→
605. CVE-2014-3513openssl: SRTP memory leak causes crash when using specially-crafted handshake message→
606. CVE-2014-3512openssl: SRP buffer overrun→
607. CVE-2014-3511openssl: TLS protocol downgrade attack→
608. CVE-2014-3510openssl: DTLS anonymous (EC)DH denial of service→
609. CVE-2014-3509openssl: race condition in ssl_parse_serverhello_tlsext→
610. CVE-2014-3508openssl: information leak in pretty printing functions→
611. CVE-2014-3507openssl: DTLS memory leak from zero-length fragments→
612. CVE-2014-3506openssl: DTLS memory exhaustion→
613. CVE-2014-3505openssl: DTLS packet processing double free→
614. CVE-2014-3494kdelibs: POP3 kioslave silently accepted invalid SSL certificates→
615. CVE-2014-3493samba: smbd unicode path names denial of service→
616. CVE-2014-3490RESTEasy: XXE via parameter entities→
617. CVE-2014-3487file: cdf_read_property_info insufficient boundary check→
618. CVE-2014-3480file: cdf_count_chain insufficient boundary check→
619. CVE-2014-3479file: cdf_check_stream_offset insufficient boundary check→
620. CVE-2014-3478file: mconvert incorrect handling of truncated pascal string size→
621. CVE-2014-3477dbus: denial of service flaw in dbus-daemon→
622. CVE-2014-3471Qemu: hw: pci: use after free triggered via guest→
623. CVE-2014-3470openssl: client-side denial of service when using anonymous ECDH→
624. CVE-2014-3469libtasn1: asn1_read_value_type() NULL pointer dereference→
625. CVE-2014-3468libtasn1: asn1_get_bit_der() can return negative bit length→
626. CVE-2014-3467libtasn1: multiple boundary check issues→
627. CVE-2014-3466gnutls: insufficient session id length check in _gnutls_read_server_hello (GNUTLS-SA-2014-3)→
628. CVE-2014-3465gnutls: gnutls_x509_dn_oid_name NULL pointer dereference→
629. CVE-2014-3461Qemu: usb: fix up post load checks→
630. CVE-2014-3430dovecot: denial of service through maxxing out SSL connections→
631. CVE-2014-3424emacs: multiple temporary file issues→
632. CVE-2014-3423emacs: multiple temporary file issues→
633. CVE-2014-3422emacs: multiple temporary file issues→
634. CVE-2014-3421emacs: multiple temporary file issues→
635. CVE-2014-3243SOAPpy: XML entity expansion (billion laughs) flaw→
636. CVE-2014-3242SOAPpy: XML External Entity (XXE) flaw→
637. CVE-2014-3230perl-libwww-perl: incorrect handling of SSL certificate verification→
638. CVE-2014-3215policycoreutils: local privilege escalation via seunshare→
639. CVE-2014-3214bind: assertion failure when using prefetch→
640. CVE-2014-3209ldns: ldns-keygen generates keys with world readable permissions→
641. CVE-2014-3200chromium: multiple unspecified issues fixed in Chrome 38.0.2125.101→
642. CVE-2014-3197chromium: information leak in XSS Auditor fixed in Chrome 38.0.2125.101→
643. CVE-2014-3194chromium: use-after-free issue in Web Workers fixed in Chrome 38.0.2125.101→
644. CVE-2014-3192chromium: use-after-free in DOM, fixed in Chrome 38.0.2125.101→
645. CVE-2014-3186Kernel: HID: memory corruption via OOB write→
646. CVE-2014-3185Kernel: USB serial: memory corruption flaw→
647. CVE-2014-3184Kernel: HID: off by one error in various _report_fixup routines→
648. CVE-2014-3183Kernel: HID: heap overflow due to lack of bounds checking→
649. CVE-2014-3182Kernel: HID: logitech-dj OOB array access→
650. CVE-2014-3181Kernel: HID: OOB write in magicmouse driver→