CVE 2015 document archive

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,111 documents · Identifier year 2015 · 1 / 23

1. CVE-2015-1142857kernel: net: ethernet flow control vulnerability in SRIOV devices→
2. CVE-2015-20109glibc: buffer overflow (read past end of buffer) in internal_fnmatch=>end_pattern with "**(!()" pattern→
3. CVE-2015-20107python: mailcap: findmatch() function does not sanitize the second argument→
4. CVE-2015-10141xdebug: Xdebug Remote Debugger Command Execution→
5. CVE-2015-10082libplist: XXE injection→
6. CVE-2015-9541qt: XML entity expansion vulnerability→
7. CVE-2015-9383freetype: a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c may lead to a DoS→
8. CVE-2015-9382freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read→
9. CVE-2015-9381freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash→
10. CVE-2015-9290freetype: buffer over-read in function T1_Get_Private_Dict in type1/t1parse.c→
11. CVE-2015-9289kernel: out of bound read in DVB connexant driver.→
12. CVE-2015-9274harfbuzz: DoS due to GPOS and GSUB table mishandling→
13. CVE-2015-9262libxcursor: 1-byte heap-based overflow in _XcursorThemeInherits function in library.c→
14. CVE-2015-9253php: Infinite loop in php-fpm when restarting a child using program execution function→
15. CVE-2015-9252qpdf: Infinite loop in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc→
16. CVE-2015-9251jquery: Cross-site scripting via cross-domain ajax requests→
17. CVE-2015-9101lame: heap-based buffer over-read in fill_buffer_resample function in util.c in libmp3lame.a→
18. CVE-2015-9100lame: Multiple vulnerabilities→
19. CVE-2015-9099lame: Multiple vulnerabilities→
20. CVE-2015-9096ruby: SMTP command injection via CRLF sequences in RCPT TO or MAIL FROM commands in Net::SMTP→
21. CVE-2015-9019libxslt: math.random() in xslt uses unseeded randomness→
22. CVE-2015-9016kernel: Race condition in block/blk-mq.c:blk_mq_tag_to_rq() can lead to kernel oops→
23. CVE-2015-9004kernel: Allows creating groups that can't be co-scheduled→
24. CVE-2015-8994php: Zend OPCache code permission/sensitive data protection issues→
25. CVE-2015-8985glibc: potential denial of service in pop_fail_stack()→
26. CVE-2015-8984glibc: potential denial of service in internal_fnmatch()→
27. CVE-2015-8983glibc: _IO_wstr_overflow integer overflow→
28. CVE-2015-8982glibc: multiple overflows in strxfrm()→
29. CVE-2015-8970kernel: crypto: GPF in lrw_crypt caused by null-deref→
30. CVE-2015-8967kernel: arm64: Strict page permission bypass→
31. CVE-2015-8966kernel: Local privileges escalation via crafted F_OFD_GETLK/F_OFD_SETLK/F_OFD_SETLKW commands→
32. CVE-2015-8964kernel: tty: Prevent ldisc drivers from re-using stale tty fields→
33. CVE-2015-8963kernel: Race condition on CPU unplug leading to use-after-free→
34. CVE-2015-8962kernel: Double free vulnerability in SCSI driver→
35. CVE-2015-8961kernel: Use after free in __ext4_journal_stop→
36. CVE-2015-8959ImageMagick: CPU usage DOS due to corrupted DDS files→
37. CVE-2015-8958ImageMagick: OOB read and possible crash when processing malformed SUN files→
38. CVE-2015-8957ImageMagick: OOB read and possible crash when handling malformed SUN files→
39. CVE-2015-8956kernel: NULL dereference in RFCOMM bind callback→
40. CVE-2015-8955kernel: Possible privilege escalation via groups spanning multiple HW PMUs→
41. CVE-2015-8953kernel: overlayfs: Double dentry reference leak in copy-up failure→
42. CVE-2015-8952kernel: mbcache code subject to softlockup DOS in cache management→
43. CVE-2015-8950kernel: Missing cleaning of allocated buffers→
44. CVE-2015-8949perl-DBD-MySQL: Use after free when my_login fails→
45. CVE-2015-8948libidn: Out-of-bounds read due to use of fgets with fixed-size buffer→
46. CVE-2015-8947chromium-browser: Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6→
47. CVE-2015-8935php: HTTP response splitting in header() function→
48. CVE-2015-8934libarchive: out of bounds heap read in RAR parser→
49. CVE-2015-8933libarchive: Undefined behavior / signed integer overflow in TAR parser→
50. CVE-2015-8932libarchive: Undefined behavior / invalid shiftleft in TAR parser→