CVE 2015 document archive · 19
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,111 documents · Identifier year 2015 · 19 / 23
- CVE-2015-1860qt: segmentation fault in qgifhandler.cpp
- CVE-2015-1859qt: segmentation fault in qicohandler.cpp
- CVE-2015-1858qt: segmentation fault in qbmphandler.cpp
- CVE-2015-1856Swift: unauthorized deletion of versioned Swift object
- CVE-2015-1855ruby: OpenSSL extension hostname matching implementation violates RFC 6125
- CVE-2015-1854389-ds-base: access control bypass with modrdn
- CVE-2015-1853chrony: authentication doesn't protect symmetric associations against DoS attacks
- CVE-2015-1848pcs: improper web session variable signing
- CVE-2015-1841RHEV-M: webadmin automatic logout fails if VM is selected
- CVE-2015-1827ipa: memory corruption when using get_user_grouplist()
- CVE-2015-1822chrony: uninitialized pointer in cmdmon reply slots
- CVE-2015-1821chrony: Heap out of bound write in address filter
- CVE-2015-1819libxml2: denial of service processing a crafted XML document
- CVE-2015-1815setroubleshoot: command injection via crafted file name
- CVE-2015-1805kernel: pipe: iovec overrun leading to memory corruption
- CVE-2015-1804libXfont: out-of-bounds memory access in bdfReadCharacters
- CVE-2015-1803libXfont: crash on invalid read in bdfReadCharacters
- CVE-2015-1802libXfont: missing range check in bdfReadProperties
- CVE-2015-1799ntp: authentication doesn't protect symmetric associations against DoS attacks
- CVE-2015-1798ntp: ntpd accepts unauthenticated packets with symmetric key crypto
- CVE-2015-1795glusterfs: glusterfs-server %pretrans rpm script temporary file issue
- CVE-2015-1794OpenSSL: Anon DH ServerKeyExchange with 0 p parameter
- CVE-2015-1793openssl: alternative chains certificate forgery
- CVE-2015-1792OpenSSL: CMS verify infinite loop with unknown hash function
- CVE-2015-1791OpenSSL: Race condition handling NewSessionTicket
- CVE-2015-1790OpenSSL: PKCS7 crash with missing EnvelopedContent
- CVE-2015-1789OpenSSL: out-of-bounds read in X509_cmp_time
- CVE-2015-1788OpenSSL: Malformed ECParameters causes infinite loop
- CVE-2015-1787openssl: segmentation fault in client authentication with empty CKE and DHE
- CVE-2015-1783lasso: use of uninitialized value leading to a crash
- CVE-2015-1782libssh2: Using SSH_MSG_KEXINIT data unbounded
- CVE-2015-1781glibc: buffer overflow in gethostbyname_r() and related functions with misaligned buffer
- CVE-2015-1780oVirt: Users with MANIPULATE_STORAGE_DOMAIN can attach a storage domain to any data-center
- CVE-2015-1779qemu: vnc: insufficient resource limiting in VNC websockets decoder
- CVE-2015-1777rhn-setup: rhnreg_ks fails to properly validate SSL/TLS certificates
- CVE-2015-1774libreoffice: HWP file filter vulnerability
- CVE-2015-1772Hive: authentication vulnerability in HiveServer2
- CVE-2015-1607gnupg2: memcpy with overlapping ranges (keybox_search.c)
- CVE-2015-1606gnupg2: invalid memory read using a garbled keyring
- CVE-2015-1593kernel: Linux stack ASLR implementation Integer overflow
- CVE-2015-1573kernel: panic while flushing nftables rules that reference deleted chains.
- CVE-2015-1572e2fsprogs: potential buffer overflow in closefs() (incomplete CVE-2015-0247 fix)
- CVE-2015-1547libtiff: use of uninitialized memory in NeXTDecode
- CVE-2015-1546openldap: slapd crash in valueReturnFilter cleanup
- CVE-2015-1545openldap: slapd crashes on search with deref control and empty attr list
- CVE-2015-1473glibc: Stack-overflow in glibc swscanf
- CVE-2015-1472glibc: heap buffer overflow in glibc swscanf
- CVE-2015-1465kernel: net: DoS due to routing packets to too many different dsts/too fast
- CVE-2015-1421kernel: net: slab corruption from use after free on INIT collisions
- CVE-2015-1420kernel: fs/fhandle.c race condition