PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2014 document archive · 3

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,003 documents · Identifier year 2014 · 3 / 21

  1. CVE-2014-9671freetype: integer overflow in pcf_get_properties() leading to NULL pointer dereference
  2. CVE-2014-9670freetype: integer overflow in pcf_get_encodings() leading to NULL pointer dereference
  3. CVE-2014-9669freetype: multiple integer overflows leading to buffer over-reads in cmap handling
  4. CVE-2014-9668freetype: integer overflow in woff_open_font() leading to heap-based buffer overflow
  5. CVE-2014-9667freetype: integer overflow in tt_face_load_font_dir() leading to out-of-bounds read
  6. CVE-2014-9666freetype: integer overflow in tt_sbit_decoder_init() leading to out-of-bounds read
  7. CVE-2014-9665freetype: integer overflow leading to heap-based buffer overflow in Load_SBit_Png()
  8. CVE-2014-9664freetype: off-by-one buffer over-read in parse_charstrings() / t42_parse_charstrings()
  9. CVE-2014-9663freetype: out-of-bounds read in tt_cmap4_validate()
  10. CVE-2014-9662freetype: heap-based buffer overflow in cff/cf2ft.c
  11. CVE-2014-9661freetype: out of bounds read in Type42 font parser
  12. CVE-2014-9660freetype: missing ENDCHAR NULL pointer dereference in the _bdf_parse_glyphs()
  13. CVE-2014-9659freetype: stack-based buffer overflow in cff/cf2intrp.c in the CFF CharString interpreter
  14. CVE-2014-9658freetype: buffer over-read and integer underflow in tt_face_load_kern()
  15. CVE-2014-9657freetype: off-by-one buffer over-read in tt_face_load_hdmx()
  16. CVE-2014-9656freetype: integer underflow in the tt_sbit_decoder_load_image()
  17. CVE-2014-9655libtiff: use of uninitialized memory in putcontig8bitYCbCr21tile and NeXTDecode
  18. CVE-2014-9654icu: insufficient size limit checks in regular expression compiler
  19. CVE-2014-9653file: malformed elf file causes access to uninitialized memory
  20. CVE-2014-9652file: out of bounds read in mconvert()
  21. CVE-2014-9644kernel: crypto api unprivileged arbitrary module load via request_module()
  22. CVE-2014-9640vorbis-tools: segfault when trying to encode trivial raw input
  23. CVE-2014-9639vorbis-tools: integer overflow on crafted WAV file
  24. CVE-2014-9638vorbis-tools: division by zero on crafted WAV file
  25. CVE-2014-9637patch: local denial of service with a crafted patch
  26. CVE-2014-9636unzip: out-of-bounds read/write in test_compr_eb() in extract.c
  27. CVE-2014-9622xdg-utils: Eval injection in xdg-open allows arbitrary command execution on crafted URL
  28. CVE-2014-9621file: limit string printing to 100 chars
  29. CVE-2014-9620file: limit the number of ELF notes processed
  30. CVE-2014-9601python-pillow: potential denial-of-service during PNG decompression
  31. CVE-2014-9585kernel: ASLR bruteforce possible for vdso library
  32. CVE-2014-9584kernel: isofs: unchecked printing of ER records
  33. CVE-2014-9529kernel: use-after-free during key garbage collection
  34. CVE-2014-9527apache-poi: denial of service in HSLFSlideShow via corrupted PPT file
  35. CVE-2014-9512rsync: Transferring file outside destination path via just-sent symlink
  36. CVE-2014-9496libsndfile: 2 buffer overruns in sd2_parse_rsrc_fork()
  37. CVE-2014-9495libpng: buffer overflow in png_combine_row
  38. CVE-2014-9488less: out of bounds read access in is_utf8_well_formed()
  39. CVE-2014-9482libdwarf: use-after-free when parsing a crafted ELF file
  40. CVE-2014-9474mpfr: buffer overflow in mpfr_strtofr
  41. CVE-2014-9471coreutils: memory corruption flaw in parse_datetime()
  42. CVE-2014-9462mercurial: command Injection via sshpeer._validaterepo()
  43. CVE-2014-9449exiv2: buffer overflow in RiffVideo::infoTagsHandler
  44. CVE-2014-9447elfutils: directory traversal in read_long_names()
  45. CVE-2014-9428kernel: remote denial of service via batman-adv module
  46. CVE-2014-9427php: out of bounds read when parsing a crafted .php file
  47. CVE-2014-9425php: Double-free in zend_ts_hash_graceful_destroy()
  48. CVE-2014-9424libressl: Double-free in ssl_parse_clienthello_use_srtp_ext() function
  49. CVE-2014-9423krb5: libgssrpc server applications leak uninitialized bytes (MITKRB5-SA-2015-001)
  50. CVE-2014-9422krb5: kadmind incorrectly validates server principal name (MITKRB5-SA-2015-001)
CVE 2014 document archive — Page 3 | PulseLinux