CVE 2015 document archive · 10
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,111 documents · Identifier year 2015 · 10 / 23
- CVE-2015-5296samba: client requesting encryption vulnerable to downgrade attack
- CVE-2015-5293RHEV: When "boot protocol" is set to None on an interface, interface still gets IPv6 address
- CVE-2015-5292sssd: memory leak in the sssd_pac_plugin
- CVE-2015-5289postgresql: stack overflow DoS when parsing json or jsonb inputs
- CVE-2015-5288postgresql: limited memory disclosure flaw in crypt()
- CVE-2015-5287abrt: incorrect permissions on /var/spool/abrt
- CVE-2015-5284ipa: ipa-kra-install includes certificate and private key in world readable file
- CVE-2015-5283kernel: Creating multiple sockets when SCTP module isn't loaded leads to kernel panic
- CVE-2015-5281grub2: modules built in on EFI builds that allow loading arbitrary code, circumventing secure boot
- CVE-2015-5279qemu: Heap overflow vulnerability in ne2000_receive() function
- CVE-2015-5278qemu: Infinite loop in ne2000_receive() function
- CVE-2015-5277glibc: data corruption while reading the NSS files database
- CVE-2015-5276gcc: Predictable randomness from std::random_device
- CVE-2015-5275kernel: NULL pointer dereference in USB WhiteHEAT serial driver
- CVE-2015-5273abrt: Insecure temporary directory usage in abrt-action-install-debuginfo-to-abrt-cache
- CVE-2015-5262httpcomponents-core: missing HTTPS connection timeout
- CVE-2015-5261spice: host memory access from guest using crafted images
- CVE-2015-5260spice: insufficient validation of surface_id parameter can cause crash
- CVE-2015-5259subversion: integer overflow in the svn:// protocol parser
- CVE-2015-5257kernel: NULL pointer dereference in USB WhiteHEAT serial driver
- CVE-2015-5252samba: Insufficient symlink verification in smbd
- CVE-2015-5248Mobile: Reflected Download Vulnerability
- CVE-2015-5247libvirt: denial of service when volume creation fails on NFS pool
- CVE-2015-5244mod_nss: incorrect ciphersuite parsing
- CVE-2015-5239qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg()
- CVE-2015-5237protobuf: integer overflow in serialization
- CVE-2015-5236icedtea-web: SOP checks based on codebase and not applet origin
- CVE-2015-5235icedtea-web: applet origin spoofing
- CVE-2015-5234icedtea-web: unexpected permanent authorization of unsigned applets
- CVE-2015-5231criu: service daemon allows to bypass ptrace policy
- CVE-2015-5229glibc: calloc may return non-zero memory
- CVE-2015-5228criu: arbitrary file creation and chown
- CVE-2015-5225Qemu: ui: vnc: heap memory corruption in vnc_refresh_server_surface
- CVE-2015-5224util-linux: File name collision due to incorrect mkstemp use
- CVE-2015-5221jasper: use-after-free and double-free flaws in mif_process_cmpt()
- CVE-2015-5219ntp: infinite loop in sntp processing crafted packet
- CVE-2015-5218colcrt: global-buffer-overflow
- CVE-2015-5217ipsilon: Input validation flaw in handling of user supplied data
- CVE-2015-5216ipsilon: XSS due to exception handling
- CVE-2015-5215ipsilon: XSS in multiple pages
- CVE-2015-5214libreoffice: Bookmarks in DOC documents are insufficiently checked causing memory corruption
- CVE-2015-5213libreoffice: Integer overflow in DOC files
- CVE-2015-5212libreoffice: Integer underflow in PrinterSetup length
- CVE-2015-5203jasper: integer overflow in jas_image_cmpt_create()
- CVE-2015-5201RHEV: vdsm spice disable-ticketing and VM suspend and restore allows auth bypass
- CVE-2015-5200libvdpau vulnerability in trace functionality
- CVE-2015-5199libvdpau directory traversal in dlopen
- CVE-2015-5198libvdpau incorrect check for security transition
- CVE-2015-5196ntp: config command can be used to set the pidfile and drift file paths
- CVE-2015-5195ntp: ntpd crash when processing config commands with statistics type