CVE 2015 document archive · 14
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,110 documents · Identifier year 2015 · 14 / 23
- CVE-2015-4178kernel: list corruption of m_list or s_list if unused
- CVE-2015-4177kernel: Race conditions in collect_mounts
- CVE-2015-4176kernel: deletion of a file or directory could unmount and reveal data under a mount point.
- CVE-2015-4171strongswan: rogue servers are able to gain user credentials from a client in certain IKEv2 setups
- CVE-2015-4170kernel: pty layer race condition on tty ldisc shutdown.
- CVE-2015-4167Kernel: fs: udf: Check length of extended attributes to avoid oops
- CVE-2015-4148php: SoapClient's do_soap_call() type confusion after unserialize()
- CVE-2015-4147php: SoapClient's __call() type confusion through unserialize()
- CVE-2015-4146hostapd: EAP-pwd missing payload length validation
- CVE-2015-4145hostapd: EAP-pwd missing payload length validation
- CVE-2015-4144hostapd: EAP-pwd missing payload length validation
- CVE-2015-4143hostapd: EAP-pwd missing payload length validation
- CVE-2015-4142hostapd: integer underflow in AP mode WMM Action frame processing
- CVE-2015-4141hostapd: WPS UPnP vulnerability with HTTP chunked transfer encoding
- CVE-2015-4116php: Use-after-free vulnerability in the spl_ptr_heap_insert function
- CVE-2015-4042coreutils: possible buffer overflow in keycompare_mb()
- CVE-2015-4041coreutils: heap buffer overflow in sort(1) keycompare_mb()
- CVE-2015-4037qemu: insecure temporary file use in /net/slirp.c
- CVE-2015-4036kernel: potential memory corruption (denial of service) in vhost/scsi driver
- CVE-2015-4035xzgrep: incorrect parsing of filenames containing a semicolon
- CVE-2015-4026php: pcntl_exec() accepts paths with NUL character
- CVE-2015-4025php: regressions in 5.4+
- CVE-2015-4024php: multipart/form-data request parsing CPU usage DoS
- CVE-2015-4022php: integer overflow leading to heap overflow when reading FTP file listing
- CVE-2015-4021php: memory corruption in phar_parse_tarfile caused by empty entry file name
- CVE-2015-4020rubygems: incomplete fix for CVE-2015-3900
- CVE-2015-4004kernel: ozwpan: multiple out-of-bounds read issues
- CVE-2015-4003kernel: ozwpan: divide-by-zero in the softirq path
- CVE-2015-4002kernel: ozwpan: improper bounds checking leads to DoS or heap overflow
- CVE-2015-4001kernel: ozwpan: integer signedness error leading to heap buffer overflow
- CVE-2015-4000LOGJAM: TLS connections which support export grade DHE key-exchange are vulnerable to MITM attacks
- CVE-2015-3983pcs: improper web session variable signing
- CVE-2015-3905t1utils: buffer overflow flaw
- CVE-2015-3900rubygems: DNS hijacking vulnerability in api_endpoint()
- CVE-2015-3885dcraw: input sanitization flaw leading to buffer overflow
- CVE-2015-3815wireshark: Android Logcat file parser crash (wnpa-sec-2015-18)
- CVE-2015-3814wireshark: IEEE 802.11 infinite loop (wnpa-sec-2015-17)
- CVE-2015-3813wireshark: Reassembly memory leak (wnpa-sec-2015-16)
- CVE-2015-3812wireshark: X11 memory leak (wnpa-sec-2015-15)
- CVE-2015-3811wireshark: WCP dissector crash (wnpa-sec-2015-14)
- CVE-2015-3810wireshark: WebSocket DoS (wnpa-sec-2015-13)
- CVE-2015-3809wireshark: LBMR infinite loop (wnpa-sec-2015-12)
- CVE-2015-3808wireshark: LBMR infinite loop (wnpa-sec-2015-12)
- CVE-2015-3644stunnel: authentication bypass with the "redirect" option
- CVE-2015-3636kernel: ping sockets: use-after-free leading to local privilege escalation
- CVE-2015-3622libtasn1: heap overflow flaw in _asn1_extract_der_octet()
- CVE-2015-3456qemu: fdc: out-of-bounds fifo buffer memory access
- CVE-2015-3455squid: incorrect X509 server certificate validation (SQUID-2015:1)
- CVE-2015-3451perl-XML-LibXML: "expand_entities" option was not preserved under some circumstances
- CVE-2015-3420dovecot: SSL/TLS handshake failures leading to a crash of the login process.