PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2014 document archive · 19

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,003 documents · Identifier year 2014 · 19 / 21

  1. CVE-2014-0376OpenJDK: document builder missing security checks (JAXP, 8027201, 8025018)
  2. CVE-2014-0375JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)
  3. CVE-2014-0373OpenJDK: SnmpStatusException handling issues (Serviceability, 7068126)
  4. CVE-2014-0368OpenJDK: insufficient Socket checkListen checks (Networking, 8011786)
  5. CVE-2014-0333libpng: denial of service via png_push_read_chunk()
  6. CVE-2014-0249sssd: incorrect expansion of group membership when encountering a non-POSIX group
  7. CVE-2014-0247libreoffice: VBA macros executed unconditionally
  8. CVE-2014-0246sos: md5 hash of GRUB password collected when running sosreport
  9. CVE-2014-0244samba: nmbd denial of service
  10. CVE-2014-0242mod_wsgi: information leak
  11. CVE-2014-0240mod_wsgi: possible privilege escalation in setuid() failure scenarios
  12. CVE-2014-0239samba: potential DoS in the internal DNS server
  13. CVE-2014-0238file: CDF property info parsing nelements infinite loop
  14. CVE-2014-0237file: cdf_unpack_summary_info() excessive looping DoS
  15. CVE-2014-0236file: root_storage NULL pointer deference flaw in CDF parser
  16. CVE-2014-0231httpd: mod_cgid denial of service
  17. CVE-2014-0230tomcat: non-persistent DoS attack by feeding data by aborting an upload
  18. CVE-2014-0227Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter
  19. CVE-2014-0226httpd: mod_status heap-based buffer overflow
  20. CVE-2014-0225Framework: Information disclosure via SSRF
  21. CVE-2014-0224openssl: SSL/TLS MITM vulnerability
  22. CVE-2014-0223Qemu: qcow1: validate image size to avoid out-of-bounds memory access
  23. CVE-2014-0222Qemu: qcow1: validate L2 table size to avoid integer overflows
  24. CVE-2014-0221openssl: DoS when sending invalid DTLS handshake
  25. CVE-2014-0211libXfont: integer overflows calculating memory needs for xfs replies
  26. CVE-2014-0210libXfont: unvalidated length fields when parsing xfs protocol replies
  27. CVE-2014-0209libXfont: integer overflow of allocations in font metadata file parsing
  28. CVE-2014-0207file: cdf_read_short_sector insufficient boundary check
  29. CVE-2014-0206kernel: aio: insufficient sanitization of head in aio_read_events_ring()
  30. CVE-2014-0205kernel: futex: refcount issue in case of requeue
  31. CVE-2014-0203kernel: fs: slab corruption due to the invalid last component type during do_filp_open()
  32. CVE-2014-0198openssl: SSL_MODE_RELEASE_BUFFERS NULL pointer dereference in do_ssl3_write()
  33. CVE-2014-0196kernel: pty layer race condition leading to memory corruption
  34. CVE-2014-0195openssl: Buffer overflow via DTLS invalid fragment
  35. CVE-2014-0191libxml2: external parameter entity loaded when entity substitution is disabled
  36. CVE-2014-0190qt: NULL pointer dereference flaw in QGIFFormat::fillRect
  37. CVE-2014-0189virt-who: plaintext hypervisor passwords in world-readable /etc/sysconfig/virt-who configuration file
  38. CVE-2014-0186tomcat7: RHEL-7 regression causing DoS
  39. CVE-2014-0185php: insecure default permissions on the FPM unix socket
  40. CVE-2014-0182qemu: virtio: out-of-bounds buffer write on state load with invalid config_len
  41. CVE-2014-0181kernel: net: insufficient permision checks of netlink messages
  42. CVE-2014-0179libvirt: unsafe parsing of XML documents allows libvirt DoS and/or arbitrary file read
  43. CVE-2014-0178samba: Uninitialized memory exposure
  44. CVE-2014-0172elfutils: integer overflow, leading to a heap-based buffer overflow in libdw
  45. CVE-2014-0160openssl: information disclosure in handling of TLS heartbeat extension packets
  46. CVE-2014-0155kernel: kvm: BUG caused by invalid entry in guest ioapic redirection table
  47. CVE-2014-0150qemu: virtio-net: buffer overflow in virtio_net_handle_mac() function
  48. CVE-2014-0148Qemu: vhdx: bounds checking for block_size and logical_sector_size
  49. CVE-2014-0147Qemu: block: possible crash due signed types or logic error
  50. CVE-2014-0146Qemu: qcow2: NULL dereference in qcow2_open() error path
CVE 2014 document archive — Page 19 | PulseLinux