CVE 2014 document archive · 4
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,003 documents · Identifier year 2014 · 4 / 21
- CVE-2014-9421krb5: kadmind doubly frees partial deserialization results (MITKRB5-SA-2015-001)
- CVE-2014-9420Kernel: fs: isofs: infinite loop in CE record entries
- CVE-2014-9419kernel: partial ASLR bypass through TLS base addresses leak
- CVE-2014-9410kernel: DoS in drivers/media/video/msm/vfe/msm_vfe31.c via crafted ioctl call
- CVE-2014-9402glibc: denial of service in getnetbyname function
- CVE-2014-9390git: arbitrary command execution vulnerability on case-insensitive file systems
- CVE-2014-9365python: failure to validate certificates in the HTTP client with TLS (PEP 476)
- CVE-2014-9330libtiff: Out-of-bounds reads followed by a crash in bmp2tiff
- CVE-2014-9322kernel: x86: local privesc due to bad_iret and paranoid entry incompatibility
- CVE-2014-9298ntp: drop packets with source address ::1
- CVE-2014-9297ntp: vallen in extension fields are not validated
- CVE-2014-9296ntp: receive() missing return on error
- CVE-2014-9295ntp: Multiple buffer overflows via specially-crafted packets
- CVE-2014-9294ntp: ntp-keygen uses weak random number generator and seed when generating MD5 keys
- CVE-2014-9293ntp: automatic generation of weak default key in config_auth()
- CVE-2014-9278openssh: ~/.k5users unexpectedly grants remote login
- CVE-2014-9273hivex: missing checks for small-sized files
- CVE-2014-9221strongswan: denial-of-service vulnerability in libtls when processing crafted Key Exchange payload
- CVE-2014-9157graphviz: format string vulnerability in yyerror()
- CVE-2014-9140tcpdump: incorrect handling of PPP packets printing
- CVE-2014-9130libyaml: assert failure when processing wrapped strings
- CVE-2014-9116mutt: incorrect use of mutt_substrdup() in write_one_header()
- CVE-2014-9114util-linux: command injection flaw in blkid
- CVE-2014-9112cpio: heap-based buffer overflow flaw in list_file()
- CVE-2014-9093libreoffice: crash importing malformed .rtf
- CVE-2014-9092libjpeg-turbo: denial of service via specially-crafted JPEG file
- CVE-2014-9090kernel: espfix64: local DoS via do_double_fault() due to improper handling of faults associated with SS segment register
- CVE-2014-9087libksba: integer underflow flaw leading to a heap-based buffer overflow in ksba_oid_to_str()
- CVE-2014-9029jasper: incorrect component number check in COC, RGN and QCC marker segment decoders (oCERT-2014-009)
- CVE-2014-9028flac: Heap buffer write overflow in read_residual_partitioned_rice_
- CVE-2014-8991python-pip: local DoS vulnerability
- CVE-2014-8989kernel: Linux user namespaces can bypass group-based restrictions
- CVE-2014-8964pcre: incorrect handling of zero-repeat assertion conditions
- CVE-2014-8962flac: Buffer read overflow when processing ID3V2 metadata
- CVE-2014-8884kernel: usb: buffer overflow in ttusb-dec
- CVE-2014-8878kdepim: KMail attachments are not encrypted when "automatic encryption" is selected
- CVE-2014-8769tcpdump: unreliable output using malformed AOVD payload
- CVE-2014-8768tcpdump: denial of service in verbose mode using malformed Geonet payload
- CVE-2014-8767tcpdump: denial of service in verbose mode using malformed OLSR payload
- CVE-2014-8738binutils: out of bounds memory write
- CVE-2014-8737binutils: directory traversal vulnerability
- CVE-2014-8730TLS: incorrect check of padding bytes when using CBC cipher suites
- CVE-2014-8716ImageMagick: out-of-bounds memory error in JPEG decoder
- CVE-2014-8714wireshark: TN5250 infinite loop (wnpa-sec-2014-23)
- CVE-2014-8713wireshark: NCP dissector crashes (wnpa-sec-2014-22)
- CVE-2014-8712wireshark: NCP dissector crashes (wnpa-sec-2014-22)
- CVE-2014-8711wireshark: AMQP dissector crash (wnpa-sec-2014-21)
- CVE-2014-8710wireshark: SigComp dissector crash (wnpa-sec-2014-20)
- CVE-2014-8709kernel: net: mac80211: plain text information leak
- CVE-2014-8680bind: flaws in GeoIP leading to a denial of service