PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2014 document archive · 9

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,003 documents · Identifier year 2014 · 9 / 21

  1. CVE-2014-6408docker: potential container escalation
  2. CVE-2014-6278bash: incorrect parsing of function definitions with nested command substitutions
  3. CVE-2014-6277bash: uninitialized here document closing delimiter pointer use
  4. CVE-2014-6272libevent: potential heap overflow in buffer/bufferevent APIs
  5. CVE-2014-6271bash: specially-crafted environment variables can be used to inject shell commands
  6. CVE-2014-6270squid: off-by-one error in snmpHandleUdp() leading to a bss-based buffer overflow (SQUID-2014:3)
  7. CVE-2014-6269haproxy: remote client denial of service vulnerability
  8. CVE-2014-6055libvncserver: server stacked-based buffer overflow flaws in file transfer handling
  9. CVE-2014-6054libvncserver: server divide-by-zero flaw in scaling factor handling
  10. CVE-2014-6053libvncserver: server NULL pointer dereference flaw in ClientCutText message handling
  11. CVE-2014-6052libvncserver: NULL pointer dereference flaw in framebuffer setup
  12. CVE-2014-6051libvncserver: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling
  13. CVE-2014-6040glibc: crash in code page decoding functions (IBM933, IBM935, IBM937, IBM939, IBM1364)
  14. CVE-2014-5472kernel: isofs: unbound recursion when processing relocated directories
  15. CVE-2014-5471kernel: isofs: unbound recursion when processing relocated directories
  16. CVE-2014-5461lua: overflow flaw in vararg functions
  17. CVE-2014-5459php-pear: insecure temporary file use for cache data
  18. CVE-2014-5388Qemu: out of bounds memory access
  19. CVE-2014-5355krb5: unauthenticated denial of service in recvauth_common() and others
  20. CVE-2014-5354krb5: NULL pointer dereference when using keyless entries
  21. CVE-2014-5353krb5: NULL pointer dereference when using a ticket policy name as a password policy name
  22. CVE-2014-5352krb5: gss_process_context_token() incorrectly frees context (MITKRB5-SA-2015-001)
  23. CVE-2014-5351krb5: current keys returned when randomizing the keys for a service principal
  24. CVE-2014-5282docker: tagging image to ID can redirect images on subsequent pulls
  25. CVE-2014-5277docker: fallback to HTTP when HTTPS connections to the registry fail
  26. CVE-2014-5270libgcrypt: ELGAMAL side-channel attack
  27. CVE-2014-5263qemu: missing field list terminator in vmstate_xhci_event
  28. CVE-2014-5220mdadm: Improper sanitization of device names allows arbitrary command execution
  29. CVE-2014-5209ntp: Information Disclosure vulnerability via GET_RESTRICT control message
  30. CVE-2014-5207kernel: mount flags handling during remount
  31. CVE-2014-5206kernel: mount flags handling during remount
  32. CVE-2014-5177libvirt: unsafe parsing of XML documents allows libvirt DoS and/or arbitrary file read
  33. CVE-2014-5165wireshark: ASN.1 BER dissector crash (wnpa-sec-2014-11)
  34. CVE-2014-5164wireshark: RLC dissector crash (wnpa-sec-2014-10)
  35. CVE-2014-5163wireshark: GTP and GSM Management dissectors crash (wnpa-sec-2014-09)
  36. CVE-2014-5162wireshark: Catapult DCT2000 and IrDA dissectors buffer underrun (wnpa-sec-2014-08)
  37. CVE-2014-5161wireshark: Catapult DCT2000 and IrDA dissectors buffer underrun (wnpa-sec-2014-08)
  38. CVE-2014-5139openssl: crash with SRP ciphersuite in Server Hello message
  39. CVE-2014-5120php: gd extension NUL byte injection in file names
  40. CVE-2014-5119glibc: off-by-one error leading to a heap-based buffer overflow flaw in __gconv_translit_find()
  41. CVE-2014-5118tboot: argument measurement vulnerability for GRUB2+ELF kernels
  42. CVE-2014-5116cairo: NULL pointer dereference in cairo_image_surface_get_data()
  43. CVE-2014-5077Kernel: net: SCTP: fix a NULL pointer dereference during INIT collisions
  44. CVE-2014-5045kernel: vfs: refcount issues during unmount on symlink
  45. CVE-2014-5044gcc: integer overflow flaws in libgfortran
  46. CVE-2014-5033polkit-qt: insecure calling of polkit
  47. CVE-2014-5031cups: world-readable permissions
  48. CVE-2014-5030cups: allows local users to read arbitrary files via a symlink attack
  49. CVE-2014-5029cups: Incomplete fix for CVE-2014-3537
  50. CVE-2014-4975ruby: off-by-one stack-based buffer overflow in the encodes() function
CVE 2014 document archive — Page 9 | PulseLinux