PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2014 document archive · 5

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,003 documents · Identifier year 2014 · 5 / 21

  1. CVE-2014-8651kde-workspace: arbitrary code execution and local privilege escalation
  2. CVE-2014-8642Mozilla: Delegated OCSP responder certificates failure with id-pkix-ocsp-nocheck extension (MFSA 2015-08)
  3. CVE-2014-8641Mozilla: Read-after-free in WebRTC (MFSA 2015-06)
  4. CVE-2014-8640Mozilla: Read of uninitialized memory in Web Audio (MFSA 2015-05)
  5. CVE-2014-8639Mozilla: Cookie injection through Proxy Authenticate responses (MFSA 2015-04)
  6. CVE-2014-8638Mozilla: sendBeacon requests lack an Origin header (MFSA 2015-03)
  7. CVE-2014-8637Mozilla: Uninitialized memory use during bitmap rendering (MFSA 2015-02)
  8. CVE-2014-8636Mozilla: XrayWrapper bypass through DOM objects (MFSA 2015-09)
  9. CVE-2014-8635Mozilla: Miscellaneous memory safety hazards (rv:35.0) (MFSA 2015-01)
  10. CVE-2014-8634Mozilla: Miscellaneous memory safety hazards (rv:31.4) (MFSA 2015-01)
  11. CVE-2014-8632Mozilla: Privileged access to security wrapped protected objects (MFSA 2014-91)
  12. CVE-2014-8631Mozilla: Privileged access to security wrapped protected objects (MFSA 2014-91)
  13. CVE-2014-8626php: xmlrpc ISO8601 date format parsing buffer overflow
  14. CVE-2014-8602unbound: specially crafted request can lead to denial of service
  15. CVE-2014-8600kde-runtime: Insufficient Input Validation By IO Slaves and Webkit Part
  16. CVE-2014-8583mod_wsgi: failure to handle errors when attempting to drop group privileges
  17. CVE-2014-8564gnutls: Heap corruption when generating key ID for ECC (GNUTLS-SA-2014-5)
  18. CVE-2014-8562ImageMagick: out-of-bounds memory error in DCM decode
  19. CVE-2014-8559kernel: fs: deadlock due to incorrect usage of rename_lock
  20. CVE-2014-8504binutils: stack overflow in the SREC parser
  21. CVE-2014-8503binutils: stack overflow in objdump when parsing specially crafted ihex file
  22. CVE-2014-8502binutils: heap overflow in objdump when parsing a crafted ELF/PE binary file (incomplete fix for CVE-2014-8485)
  23. CVE-2014-8501binutils: out-of-bounds write when parsing specially crafted PE executable
  24. CVE-2014-8500bind: delegation handling denial of service
  25. CVE-2014-8485binutils: lack of range checking leading to controlled write in _bfd_elf_setup_sections()
  26. CVE-2014-8484binutils: invalid read flaw in libbfd
  27. CVE-2014-8481kernel: kvm: NULL pointer dereference during rip relative instruction emulation
  28. CVE-2014-8480kernel: kvm: NULL pointer dereference during rip relative instruction emulation
  29. CVE-2014-8369kernel: kvm: excessive pages un-pinning in kvm_iommu_map error path
  30. CVE-2014-8355ImageMagick: out-of-bounds memory access in PCX parser
  31. CVE-2014-8354ImageMagick: out-of-bounds memory access in resize code
  32. CVE-2014-8275openssl: Fix various certificate fingerprint issues
  33. CVE-2014-8271uefi: INTEL-TA-201410-001 && INTEL-TA-201410-002
  34. CVE-2014-8241tigervnc: NULL pointer dereference flaw in XRegion
  35. CVE-2014-8240tigervnc: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling
  36. CVE-2014-8184liblouis: stack-based buffer overflow in findTable()
  37. CVE-2014-8182openldap: crash in ldap_domain2hostlist when processing SRV records
  38. CVE-2014-8181kernel: scsi: do not fill dirty page content in the SG_IO buffer
  39. CVE-2014-8179docker: Manifest validation and parsing logic errors allow pull-by-digest validation bypass
  40. CVE-2014-8178docker: Attacker controlled layer IDs lead to local graph content poisoning
  41. CVE-2014-8177swiftonfile: gluster-swift metadata constraints are not correctly enforced
  42. CVE-2014-8176OpenSSL: Invalid free in DTLS
  43. CVE-2014-8173kernel: NULL pointer dereference in madvise(MADV_WILLNEED) support
  44. CVE-2014-8172kernel: soft lockup on aio
  45. CVE-2014-8171kernel: memcg: OOM handling DoS
  46. CVE-2014-8170ovirt-node: unsafe quoting in command lines
  47. CVE-2014-8169autofs: priv escalation via interpreter load path for program based automount maps
  48. CVE-2014-8167vdsclient: does not validate certficate hostname from another vdsm
  49. CVE-2014-8166cups: code execution via unescape ANSI escape sequences
  50. CVE-2014-8165powerpc-utils-python: arbitrary code execution due to unpickling untrusted input
CVE 2014 document archive — Page 5 | PulseLinux