PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2014 document archive · 15

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,000 documents · Identifier year 2014 · 15 / 20

  1. CVE-2014-2427OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)
  2. CVE-2014-2423OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026188)
  3. CVE-2014-2422JDK: unspecified vulnerability fixed in 7u55 and 8u5 (JavaFX)
  4. CVE-2014-2421OpenJDK: JPEG decoder input stream handling (2D, 8029854)
  5. CVE-2014-2420JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)
  6. CVE-2014-2419mysql: unspecified DoS related to Partition (CPU April 2014)
  7. CVE-2014-2414OpenJDK: incorrect caching of data initialized via TCCL (JAXB, 8025030)
  8. CVE-2014-2413OpenJDK: method handle call hierachy bypass (Libraries, 8032686)
  9. CVE-2014-2412OpenJDK: AWT thread context handling (AWT, 8025010)
  10. CVE-2014-2410JDK: unspecified vulnerabilities fixed in 8u5 (JavaFX, Scripting)
  11. CVE-2014-2409JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)
  12. CVE-2014-2405OpenJDK: libpng unhandled zero-length PLTE chunk or NULL palette (AWT, 8031352)
  13. CVE-2014-2403OpenJDK: JAXP CharInfo file access restriction (JAXP, 8029282)
  14. CVE-2014-2402OpenJDK: Incorrect NIO channel separation (Libraries, 8026716)
  15. CVE-2014-2401JDK: unspecified vulnerability fixed in 5.0u75, 6u75, 7u55 and 8u5 (2D)
  16. CVE-2014-2398OpenJDK: insufficient escaping of window title string (Javadoc, 8026736)
  17. CVE-2014-2397OpenJDK: classfile parser invalid BootstrapMethods attribute length (Hotspot, 8034926)
  18. CVE-2014-2310net-snmp: AgentX incorrectly handles multi-object requests leading to DoS
  19. CVE-2014-2309Kernel: net: IPv6: crash due to router advertisement flooding
  20. CVE-2014-2299wireshark: buffer overflow in MPEG file parser (wnpa-sec-2014-04)
  21. CVE-2014-2285net-snmp: snmptrapd crash when using a trap with empty community string
  22. CVE-2014-2284net-snmp: denial of service flaw in Linux implementation of ICMP-MIB
  23. CVE-2014-2283wireshark: RLC dissector crash (wnpa-sec-2014-03)
  24. CVE-2014-2282wireshark: M3UA dissector crash (wnpa-sec-2014-02)
  25. CVE-2014-2281wireshark: NFS dissector crash (wnpa-sec-2014-01)
  26. CVE-2014-2277perltidy: insecure temporary file creation
  27. CVE-2014-2270file: out-of-bounds access in search rules with offsets from input file
  28. CVE-2014-2241freetype: OOB stack-based read/write in cf2_hintmap_build()
  29. CVE-2014-2240freetype: OOB stack-based read/write in cf2_hintmap_build()
  30. CVE-2014-2039Kernel: s390: crash due to linkage stack instructions
  31. CVE-2014-2038kernel: nfs: data leak during extended writes
  32. CVE-2014-2030ImageMagick: PSD writing layer name buffer overflow ("L%06ld")
  33. CVE-2014-2020php: multiple vulnerabilities in gdImageCrop()
  34. CVE-2014-2015freeradius: stack-based buffer overflow flaw in rlm_pap module
  35. CVE-2014-1959gnutls: incorrect handling of V1 intermediate certificates (GNUTLS-SA-2014-1)
  36. CVE-2014-1958ImageMagick: buffer overflow flaw when handling PSD images that use RLE encoding
  37. CVE-2014-1947ImageMagick: PSD writing layer name buffer overflow ("L%02ld")
  38. CVE-2014-1943file: unrestricted recursion in handling of indirect type rules
  39. CVE-2014-1933python-imaging: temporary file name exposure in process list
  40. CVE-2014-1932python-imaging: insecure temporary file creation
  41. CVE-2014-1912python: buffer overflow in socket.recvfrom_into()
  42. CVE-2014-1904Framework: cross-site scripting flaw when using Spring MVC
  43. CVE-2014-1876OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618)
  44. CVE-2014-1875perl-Capture-Tiny: insecure temporary file usage
  45. CVE-2014-1874Kernel: SELinux: local denial-of-service
  46. CVE-2014-1859numpy: f2py insecure temporary file use
  47. CVE-2014-1858numpy: f2py insecure temporary file use
  48. CVE-2014-1830python-requests: Proxy-Authorization header leak
  49. CVE-2014-1829python-requests: redirect can expose netrc password
  50. CVE-2014-1745webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents
CVE 2014 document archive — Page 15 | PulseLinux