CVE 2015 document archive · 15
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,110 documents · Identifier year 2015 · 15 / 23
- CVE-2015-3418xorg-x11-server: divide-by-zero when checking image dimensions
- CVE-2015-3416sqlite: stack buffer overflow in src/printf.c
- CVE-2015-3415sqlite: invalid free() in src/vdbe.c
- CVE-2015-3414sqlite: use of uninitialized memory when parsing collation sequences in src/where.c
- CVE-2015-3412php: missing null byte checks for paths in various PHP extensions
- CVE-2015-3411php: missing null byte checks for paths in various PHP extensions
- CVE-2015-3409perl-Module-Signature: arbitrary modules loading in some circumstances
- CVE-2015-3408perl-Module-Signature: arbitrary code execution when verifying module signatures
- CVE-2015-3407perl-Module-Signature: arbitrary code execution during test phase
- CVE-2015-3406perl-Module-Signature: unsigned files interpreted as signed in some circumstances
- CVE-2015-3405ntp: ntp-keygen may generate non-random symmetric keys on big-endian systems
- CVE-2015-3339kernel: race condition between chown() and execve()
- CVE-2015-3332kernel: TCP Fast Open local DoS
- CVE-2015-3331Kernel: crypto: buffer overruns in RFC4106 implementation using AESNI
- CVE-2015-3330php: pipelined request executed in deinitialized interpreter under httpd 2.4
- CVE-2015-3329php: buffer overflow in phar_set_inode()
- CVE-2015-3315abrt: Various race-conditions and symlink issues found in abrt
- CVE-2015-3310ppp: buffer overflow in radius plug-in's rc_mksid()
- CVE-2015-3308gnutls: use-after-free flaw in CRL distribution points parsing
- CVE-2015-3307php: invalid pointer free() in phar_tar_process_metadata()
- CVE-2015-3294dnsmasq: unchecked return value of the setup_reply() function
- CVE-2015-3291kernel: x86/nmi: malicious userspace programs can cause the kernel to skip NMIs
- CVE-2015-3290kernel: x86: nested NMI handler and espfix64 interaction privilege escalation
- CVE-2015-3288kernel: zero page memory arbitrary modification
- CVE-2015-3281haproxy: information leak in buffer_slow_realign()
- CVE-2015-3279cups-filters: texttopdf integer overflow
- CVE-2015-3278nss_compat_ossl: incorrect multi-keyword mode cipherstring parsing
- CVE-2015-3277mod_nss: incorrect multi-keyword mode cipherstring parsing
- CVE-2015-3276openldap: incorrect multi-keyword mode cipherstring parsing
- CVE-2015-3258cups-filters: texttopdf heap-based buffer overflow
- CVE-2015-3256polkit: Memory corruption via javascript rule evaluation
- CVE-2015-3255polkit: Heap-corruption on duplicate ids
- CVE-2015-3253groovy: remote execution of untrusted code in class MethodClosure
- CVE-2015-3248openhpi: world writable /var/lib/openhpi directory
- CVE-2015-3247spice: memory corruption in worker_update_monitors_config()
- CVE-2015-3246libuser: Security flaw in handling /etc/passwd file
- CVE-2015-3245libuser: does not filter newline characters in the GECOS field
- CVE-2015-3243rsyslog: some log files are created world-readable
- CVE-2015-3240openswan: denial of service via IKE daemon restart when receiving a bad DH gx value
- CVE-2015-3239libunwind: off-by-one in dwarf_to_unw_regnum()
- CVE-2015-3238pam: DoS/user enumeration due to blocking pipe in pam_unix module
- CVE-2015-3237curl: SMB send off unrelated memory contents
- CVE-2015-3236curl: lingering HTTP credentials in connection re-use
- CVE-2015-3230389-ds-base: nsSSL3Ciphers preference not enforced server side (regression)
- CVE-2015-3228ghostscript-core: out-of-bounbds read and write in gs_ttf.ps
- CVE-2015-3225rubygem-rack: Potential Denial of Service Vulnerability in Rack normalize_params()
- CVE-2015-3223libldb: Remote DoS in Samba (AD) LDAP server
- CVE-2015-3218polkit: crash authentication_agent_new with invalid object path in RegisterAuthenticationAgent
- CVE-2015-3217pcre: stack overflow caused by mishandled group empty match (8.38/11)
- CVE-2015-3216openssl: Crash in ssleay_rand_bytes due to locking regression