PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2015 document archive · 16

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,110 documents · Identifier year 2015 · 16 / 23

  1. CVE-2015-3214qemu/kvm: i8254: out-of-bounds memory access in pit_ioport_read function
  2. CVE-2015-3213clutter: screenlock bypass by performing certain mouse gestures
  3. CVE-2015-3212kernel: SCTP race condition allows list corruption and panic from userlevel
  4. CVE-2015-3211php: php-fpm package vulnerable to symlink attack
  5. CVE-2015-3210pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)
  6. CVE-2015-3209qemu: pcnet: multi-tmd buffer overflow in the tx path
  7. CVE-2015-3206python-kerberos: checkPassword() does not verify KDC authenticity
  8. CVE-2015-3204libreswan: crafted IKE packet causes daemon restart
  9. CVE-2015-3202fuse: incorrect filtering of environment variables leading to privilege escalation
  10. CVE-2015-3197OpenSSL: SSLv2 doesn't block disabled ciphers
  11. CVE-2015-3196OpenSSL: Race condition handling PSK identify hint
  12. CVE-2015-3195OpenSSL: X509_ATTRIBUTE memory leak
  13. CVE-2015-3194OpenSSL: Certificate verify crash with missing PSS parameter
  14. CVE-2015-3193OpenSSL: BN_mod_exp may produce incorrect results on x86_64
  15. CVE-2015-3192Framework: denial-of-service attack with XML input
  16. CVE-2015-3187subversion: svn_repos_trace_node_locations() reveals paths hidden by authz
  17. CVE-2015-3185httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4
  18. CVE-2015-3184subversion: Mixed anonymous/authenticated path-based authz with httpd 2.4
  19. CVE-2015-3183httpd: HTTP request smuggling attack against chunked request parser
  20. CVE-2015-3182wireshark: crash on sample file genbroad.snoop
  21. CVE-2015-3171sosreport: temporary file created with world-readable permissions
  22. CVE-2015-3170selinux-policy: policy package update causes denial of service
  23. CVE-2015-3167postgresql: pgcrypto has multiple error messages for decryption with an incorrect key.
  24. CVE-2015-3166postgresql: unanticipated errors from the standard library
  25. CVE-2015-3165postgresql: double-free after authentication timeout
  26. CVE-2015-3164xorg-x11-server: Xwayland allows unconditional open access to display
  27. CVE-2015-3159abrt: missing process environment sanitizaton in abrt-action-install-debuginfo-to-abrt-cache
  28. CVE-2015-3153curl: sensitive HTTP server headers also sent to proxies
  29. CVE-2015-3152mysql: use of SSL/TLS can not be enforced in mysql client library (oCERT-2015-003, BACKRONYM)
  30. CVE-2015-3151abrt: directory traversals in several D-Bus methods implemented by abrt-dbus
  31. CVE-2015-3150abrt: abrt-dbus does not guard against crafted problem directory path arguments
  32. CVE-2015-3149OpenJDK8: insecure hsperfdata temporary file handling, CVE-2015-0383 regression (Hotspot)
  33. CVE-2015-3148curl: Negotiate not treated as connection-oriented
  34. CVE-2015-3147abrt: does not validate contents of uploaded problem reports
  35. CVE-2015-3146libssh: null pointer dereference due to a logical error in the handling of a SSH_MSG_NEWKEYS and KEXDH_REPLY packets
  36. CVE-2015-3145curl: cookie parser out of boundary memory access
  37. CVE-2015-3144curl: host name out of boundary memory access
  38. CVE-2015-3143curl: re-using authenticated connection when unauthenticated
  39. CVE-2015-3142abrt: abrt-hook-ccpp writes core dumps to existing files owned by others
  40. CVE-2015-3138tcpdump: denial of service in print-wb.c
  41. CVE-2015-2925Kernel: vfs: Do not allow escaping from bind mounts
  42. CVE-2015-2924NetworkManager: denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements
  43. CVE-2015-2922kernel: denial of service (DoS) attack against IPv6 network stacks due to improper handling of Router Advertisements.
  44. CVE-2015-2877Kernel: Cross-VM ASL INtrospection (CAIN)
  45. CVE-2015-2830kernel: int80 fork from 64-bit tasks mishandling
  46. CVE-2015-2808SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher
  47. CVE-2015-2806libtasn1: stack overflow in asn1_der_decoding
  48. CVE-2015-2787php: use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re
  49. CVE-2015-2783php: buffer over-read in Phar metadata parsing
  50. CVE-2015-2775mailman: directory traversal in MTA transports that deliver programmatically
CVE 2015 document archive — Page 16 | PulseLinux