PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2014 document archive · 6

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,003 documents · Identifier year 2014 · 6 / 21

  1. CVE-2014-8161postgresql: information leak through constraint violation errors
  2. CVE-2014-8160kernel: iptables restriction bypass if a protocol handler kernel module not loaded
  3. CVE-2014-8159kernel: infiniband: uverbs: unprotected physical memory access
  4. CVE-2014-8158jasper: unrestricted stack memory use in jpc_qmfb.c (oCERT-2015-001)
  5. CVE-2014-8157jasper: dec->numtiles off-by-one check in jpc_dec_process_sot() (oCERT-2015-001)
  6. CVE-2014-8155gnutls: gnutls does not perform date/time checks on CA certificates
  7. CVE-2014-8154Vala: Heap-buffer overflow in vala-gstreamer bindings at Gst.MapInfo()
  8. CVE-2014-8151curl: certificate check bypass when built with DarwinSSL as TLS backend
  9. CVE-2014-8150curl: URL request injection vulnerability in parseurlandfillconn()
  10. CVE-2014-8147icu: integer truncation in the resolveImplicitLevels function
  11. CVE-2014-8146icu: heap overflow via incorrect isolateCount
  12. CVE-2014-8145sox: two heap out-of-bounds access issues (oCERT-2014-010)
  13. CVE-2014-8143samba: Privileges elevation to Active Directory Domain Controller
  14. CVE-2014-8142php: use after free vulnerability in unserialize()
  15. CVE-2014-8141unzip: getZip64Data() out-of-bounds read issues (oCERT-2014-011)
  16. CVE-2014-8140unzip: out-of-bounds write issue in test_compr_eb() (oCERT-2014-011)
  17. CVE-2014-8139unzip: CRC32 verification heap-based buffer overread (oCERT-2014-011)
  18. CVE-2014-8138jasper: heap overflow in jp2_decode() (oCERT-2014-012)
  19. CVE-2014-8137jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012)
  20. CVE-2014-8136libvirt: local denial of service in qemu/qemu_driver.c
  21. CVE-2014-8135libvirt: local denial of service in storage/storage_driver.c
  22. CVE-2014-8134kernel: x86: espfix not working for 32-bit KVM paravirt guests
  23. CVE-2014-8133kernel: x86: espfix(64) bypass via set_thread_area and CLONE_SETTLS
  24. CVE-2014-8131libvirt: deadlock and segfault in qemuConnectGetAllDomainStats
  25. CVE-2014-8130libtiff: divide by zero in the tiffdither tool
  26. CVE-2014-8129libtiff: out-of-bounds read/write with malformed TIFF image in tiff2pdf
  27. CVE-2014-8128libtiff: out-of-bounds write in multiple tools
  28. CVE-2014-8127libtiff: out-of-bounds read with malformed TIFF image in multiple tools
  29. CVE-2014-8121glibc: Unexpected closing of nss_files databases after lookups causes denial of service
  30. CVE-2014-8119netcf: augeas path expression injection via interface name
  31. CVE-2014-8118rpm: integer overflow and stack overflow in CPIO header parsing
  32. CVE-2014-8117file: denial of service issue (resource consumption)
  33. CVE-2014-8116file: multiple denial of service issues (resource consumption)
  34. CVE-2014-8112389-ds-base: password hashing bypassed when "nsslapd-unhashed-pw-switch" is set to off
  35. CVE-2014-8109httpd: LuaAuthzProvider argument handling issue
  36. CVE-2014-8108subversion: NULL pointer dereference flaw in mod_dav_svn when handling URIs for virtual transaction names
  37. CVE-2014-8106qemu: cirrus: insufficient blit region checks
  38. CVE-2014-8105389-ds-base: information disclosure through 'cn=changelog' subtree
  39. CVE-2014-8103xorg-x11-server: out of bounds access due to not validating length or offset values in DRI3 & Present extensions
  40. CVE-2014-8102xorg-x11-server: out of bounds access due to not validating length or offset values in XFixes extension
  41. CVE-2014-8101xorg-x11-server: out of bounds access due to not validating length or offset values in RandR extension
  42. CVE-2014-8100xorg-x11-server: out of bounds access due to not validating length or offset values in Render extension
  43. CVE-2014-8099xorg-x11-server: out of bounds access due to not validating length or offset values in XVideo extension
  44. CVE-2014-8098xorg-x11-server: out of bounds access due to not validating length or offset values in GLX extension
  45. CVE-2014-8097xorg-x11-server: out of bounds access due to not validating length or offset values in DBE extension
  46. CVE-2014-8096xorg-x11-server: out of bounds access due to not validating length or offset values in XC-MISC extension
  47. CVE-2014-8095xorg-x11-server: out of bounds access due to not validating length or offset values in XInput extension
  48. CVE-2014-8094xorg-x11-server: integer overflow in DRI2 extension function ProcDRI2GetBuffers()
  49. CVE-2014-8093xorg-x11-server: integer overflow in GLX extension requests when calculating memory needs for requests
  50. CVE-2014-8092xorg-x11-server: integer overflow in X11 core protocol requests when calculating memory needs for requests
CVE 2014 document archive — Page 6 | PulseLinux