PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2014 document archive · 14

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,000 documents · Identifier year 2014 · 14 / 20

  1. CVE-2014-3180kernel: out-of-bounds read in kernel/compact.c
  2. CVE-2014-3158ppp: integer overflow in option parsing
  3. CVE-2014-3153kernel: futex: pi futexes requeue issue
  4. CVE-2014-3146python-lxml: clean_html input sanitization flaw
  5. CVE-2014-3145Kernel: filter: prevent nla extensions to peek beyond the end of the message
  6. CVE-2014-3144Kernel: filter: prevent nla extensions to peek beyond the end of the message
  7. CVE-2014-3122Kernel: mm: try_to_unmap_cluster() should lock_page() before mlocking
  8. CVE-2014-3086JDK: Privilege escalation issue
  9. CVE-2014-3007python-imaging: command injection issue
  10. CVE-2014-3004castor: XML External Entity (XXE) attacks via a crafted XML document
  11. CVE-2014-2907wireshark: RTP dissector crash (wnpa-sec-2014-06)
  12. CVE-2014-2894QEMU: out of bounds buffer accesses, guest triggerable via IDE SMART
  13. CVE-2014-2893llvm: insecure temporary file handling in clang's scan-build utility
  14. CVE-2014-2891strongswan: denial of service via crafted ID_DER_ASN1_DN_ID payload
  15. CVE-2014-2856cups: cross-site scripting flaw fixed in the 1.7.2 release
  16. CVE-2014-2855rsync: CPU consumption denial of service when authenticating with a non-existent username
  17. CVE-2014-2851kernel: net: ping: refcount issue in ping_init_sock() function
  18. CVE-2014-2830cifs-utils: stack-based buffer overflow flaw in pam_cifscreds
  19. CVE-2014-2739Kernel: IB/core: crash while resolving passive side RoCE L2 address in cma req handler
  20. CVE-2014-2734ruby: SSL signature spoofing flaw
  21. CVE-2014-2707cups-filters: remote command injection in cups-browsed
  22. CVE-2014-2706Kernel: net: mac80211: crash dues to AP powersave TX vs. wakeup race
  23. CVE-2014-2678kernel: net: rds: dereference of a NULL device in rds_iw_laddr_check()
  24. CVE-2014-2673kernel: powerpc: tm: crash when forking inside a transaction
  25. CVE-2014-2672kernel: ath9k: tid->sched race in ath_tx_aggr_sleep()
  26. CVE-2014-2667python: os.makedirs(exist_ok=True) is not thread-safe in Python 3.x
  27. CVE-2014-2653openssh: failure to check DNS SSHFP records in certain scenarios
  28. CVE-2014-2583pam: path traversal issue in pam_timestamp's format_timestamp_name()
  29. CVE-2014-2568kernel: net: potential information leak when ubuf backed skbs are skb_zerocopy()ied
  30. CVE-2014-2532openssh: AcceptEnv environment restriction bypass flaw
  31. CVE-2014-2525libyaml: heap-based buffer overflow when parsing URLs
  32. CVE-2014-2524readline: insecure temporary file use in _rl_tropen()
  33. CVE-2014-2523kernel: netfilter: nf_conntrack_dccp: incorrect skb_header_pointer API usages
  34. CVE-2014-2497gd: NULL pointer dereference in gdImageCreateFromXpm()
  35. CVE-2014-2494mysql: unspecified vulnerability related to ENARC (CPU July 2014)
  36. CVE-2014-2490OpenJDK: Event logger format string vulnerability (Hotspot, 8037076)
  37. CVE-2014-2483OpenJDK: Restrict use of privileged annotations (Libraries, 8034985)
  38. CVE-2014-2451mysql: unspecified DoS related to Privileges (CPU April 2014)
  39. CVE-2014-2450mysql: unspecified DoS related to Optimizer (CPU April 2014)
  40. CVE-2014-2444mysql: unspecified vulnerability related to InnoDB (CPU April 2014)
  41. CVE-2014-2442mysql: unspecified DoS related to MyIASM (CPU April 2014)
  42. CVE-2014-2440mysql: unspecified vulnerability related to Client (CPU April 2014)
  43. CVE-2014-2438mysql: unspecified DoS related to Replication (CPU April 2014)
  44. CVE-2014-2436mysql: unspecified vulnerability related to RBR (CPU April 2014)
  45. CVE-2014-2435mysql: unspecified DoS related to InnoDB (CPU April 2014)
  46. CVE-2014-2434mysql: unspecified DoS related to DML (CPU April 2014)
  47. CVE-2014-2432mysql: unspecified DoS related to Federated (CPU April 2014)
  48. CVE-2014-2431mysql: unspecified DoS related to Options (CPU April 2014)
  49. CVE-2014-2430mysql: unspecified DoS related to Performance Schema (CPU April 2014)
  50. CVE-2014-2428JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)
CVE 2014 document archive — Page 14 | PulseLinux