PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2014 document archive · 20

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,003 documents · Identifier year 2014 · 20 / 21

  1. CVE-2014-0145Qemu: prevent possible buffer overflows
  2. CVE-2014-0144Qemu: block: missing input validation
  3. CVE-2014-0143Qemu: block: multiple integer overflow flaws
  4. CVE-2014-0142qemu: crash by possible division by zero
  5. CVE-2014-0139curl: IP address wildcard certificate validation issue in libcurl
  6. CVE-2014-0138curl: wrong re-use of connections in libcurl
  7. CVE-2014-0132389-ds: flaw in parsing authzid can lead to privilege escalation
  8. CVE-2014-0131kernel: net: use-after-free during segmentation with zerocopy
  9. CVE-2014-0128squid: denial of service when using SSL-Bump
  10. CVE-2014-0119Tomcat/JBossWeb: XML parser hijack by malicious web application
  11. CVE-2014-0118httpd: mod_deflate denial of service
  12. CVE-2014-0117httpd: mod_proxy denial of service
  13. CVE-2014-0107Xalan-Java: insufficient constraints in secure processing feature
  14. CVE-2014-0106sudo: certain environment variables not sanitized when env_reset is disabled
  15. CVE-2014-0104fence-agents: no verification of remote SSL certificates
  16. CVE-2014-0102kernel: security: keyring cycle detector DoS
  17. CVE-2014-0101kernel: net: sctp: null pointer dereference when processing authenticated cookie_echo chunk
  18. CVE-2014-0100kernel: net: inet frag code race condition leading to user-after-free
  19. CVE-2014-0099Tomcat/JBossWeb: Request smuggling via malicious content length header
  20. CVE-2014-0098httpd: mod_log_config does not properly handle logging certain cookies resulting in DoS
  21. CVE-2014-0096Tomcat/JBossWeb: XXE vulnerability via user supplied XSLTs
  22. CVE-2014-00958: Denial of service via AJP requests with content length zero
  23. CVE-2014-0092gnutls: incorrect error handling in certificate verification (GNUTLS-SA-2014-2)
  24. CVE-2014-0077kernel: vhost-net: insufficiency in handling of big packets in handle_rx()
  25. CVE-2014-0076openssl: ECDSA nonces susceptible to Yarom/Benger flush+reload cache side-channel attack
  26. CVE-2014-0075Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter
  27. CVE-2014-0069kernel: cifs: incorrect handling of bogus user pointers during uncached writes
  28. CVE-2014-0066postgresql: NULL pointer dereference
  29. CVE-2014-0065postgresql: possible buffer overflow flaws
  30. CVE-2014-0064postgresql: integer overflows leading to buffer overflows
  31. CVE-2014-0063postgresql: stack-based buffer overflow in datetime input/output
  32. CVE-2014-0062postgresql: CREATE INDEX race condition possibly leading to privilege escalation
  33. CVE-2014-0061postgresql: privilege escalation via procedural language validator functions
  34. CVE-2014-0060postgresql: SET ROLE without ADMIN OPTION allows adding and removing group members
  35. CVE-2014-0055kernel: vhost-net: insufficient handling of error conditions in get_rx_bufs()
  36. CVE-2014-0050apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream
  37. CVE-2014-0049kernel: kvm: mmio_fragments out-of-the-bounds access
  38. CVE-2014-0048Docker: multiple files downloaded over HTTP and executed or used unsafely
  39. CVE-2014-0047Docker: multiple temporary file creation vulnerabilities
  40. CVE-2014-0033tomcat: session fixation still possible with disableURLRewriting enabled
  41. CVE-2014-0032subversion: mod_dav_svn crash when handling certain requests with SVNListParentPath on
  42. CVE-2014-0028libvirt: event registration bypasses domain:getattr ACL
  43. CVE-2014-0027flite: insecure temporary file use
  44. CVE-2014-0022yum: yum-cron installs unsigned packages
  45. CVE-2014-0020pidgin: DoS in IRC protocol plugin due to arguement parsing
  46. CVE-2014-0019socat: PROXY-CONNECT address overflow
  47. CVE-2014-0017libssh: Improper initialization of PRNG after fork()
  48. CVE-2014-0016stunnel: Improper initialization of PRNG after fork()
  49. CVE-2014-0015curl: re-use of wrong HTTP NTLM connection in libcurl
  50. CVE-2014-0012python-jinja2: FileSystemBytecodeCache insecure cache temporary file use, incorrect CVE-2014-1402 fix
CVE 2014 document archive — Page 20 | PulseLinux