PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2015 document archive · 11

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,111 documents · Identifier year 2015 · 11 / 23

  1. CVE-2015-5194ntp: crash with crafted logconfig configuration command
  2. CVE-2015-5191open-vm-tools: /tmp race conditions in the libDeployPkg component
  3. CVE-2015-5190pcs: Command injection with root privileges.
  4. CVE-2015-5189pcs: Incorrect authorization when using pcs web UI
  5. CVE-2015-5185sblim-sfcb: lookupProviders() null pointer dereference
  6. CVE-2015-5180glibc: DNS resolver NULL pointer dereference with crafted record type
  7. CVE-2015-5179FreeIPA: non-printable characters aren't checked in every case of user data
  8. CVE-2015-5177openslp: double free in SLPDProcessMessage()
  9. CVE-2015-5174tomcat: URL Normalization issue
  10. CVE-2015-5166Qemu: BlockBackend object use after free issue (XSA-139)
  11. CVE-2015-5165Qemu: rtl8139 uninitialized heap memory information leakage to guest (XSA-140)
  12. CVE-2015-5160libvirt: Ceph id/key leaked in the process list
  13. CVE-2015-5159python-kdcproxy: Missing request size limit allows denial of service
  14. CVE-2015-5158Qemu: scsi stack buffer overflow
  15. CVE-2015-5157kernel: x86-64: IRET faults during NMIs processing
  16. CVE-2015-5156kernel: buffer overflow with fraglist larger than MAX_SKB_FRAGS + 2 in virtio-net
  17. CVE-2015-5155openslp: Packet with crafted "nextoffset" and "extid" values causes DoS
  18. CVE-2015-5154qemu: ide: atapi: heap overflow during I/O buffer memory access
  19. CVE-2015-5146ntp: ntpd control message crash on crafted NUL-byte in configuration directive (VU#668167)
  20. CVE-2015-5073pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)
  21. CVE-2015-4913mysql: unspecified vulnerability related to Server:DML (CPU October 2015)
  22. CVE-2015-4911OpenJDK: incomplete supportDTD enforcement (JAXP, 8130078)
  23. CVE-2015-4910mysql: unspecified vulnerability related to Server:Memcached (CPU October 2015)
  24. CVE-2015-4905mysql: unspecified vulnerability related to Server:DML (CPU October 2015)
  25. CVE-2015-4904mysql: unspecified vulnerability related to libmysqld (CPU October 2015)
  26. CVE-2015-4903OpenJDK: insufficient proxy class checks in RemoteObjectInvocationHandler (RMI, 8076339)
  27. CVE-2015-4895mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)
  28. CVE-2015-4893OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)
  29. CVE-2015-4890mysql: unspecified vulnerability related to Server:Replication (CPU October 2015)
  30. CVE-2015-4883OpenJDK: incorrect access control context used in DGCClient (RMI, 8076413)
  31. CVE-2015-4882OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387)
  32. CVE-2015-4881OpenJDK: missing type checks in IIOPInputStream (CORBA, 8076392)
  33. CVE-2015-4879mysql: unspecified vulnerability related to Server:DML (CPU October 2015)
  34. CVE-2015-4872OpenJDK: incomplete constraints enforcement by AlgorithmChecker (Security, 8131291)
  35. CVE-2015-4871OpenJDK: protected methods can be used as interface methods via DirectMethodHandle (Libraries)
  36. CVE-2015-4870mysql: unspecified vulnerability related to Server:Parser (CPU October 2015)
  37. CVE-2015-4868OpenJDK: CRL checking flaw (Libraries, 8081744)
  38. CVE-2015-4866mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)
  39. CVE-2015-4864mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)
  40. CVE-2015-4862mysql: unspecified vulnerability related to Server:DML (CPU October 2015)
  41. CVE-2015-4861mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)
  42. CVE-2015-4860OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)
  43. CVE-2015-4858mysql: unspecified vulnerability related to Server:DML (CPU October 2015)
  44. CVE-2015-4844ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)
  45. CVE-2015-4843OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891)
  46. CVE-2015-4842OpenJDK: leak of user.dir location (JAXP, 8078427)
  47. CVE-2015-4840OpenJDK: OOB access in CMS code (2D, 8086092)
  48. CVE-2015-4836mysql: unspecified vulnerability related to Server:SP (CPU October 2015)
  49. CVE-2015-4835OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383)
  50. CVE-2015-4833mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)
CVE 2015 document archive — Page 11 | PulseLinux