CVE 2015 document archive · 2
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,111 documents · Identifier year 2015 · 2 / 23
- CVE-2015-8931libarchive: Undefined behavior (signed integer overflow) in mtree parser
- CVE-2015-8930libarchive: Endless loop in ISO parser
- CVE-2015-8929libarchive: Memory leak in TAR parser
- CVE-2015-8928libarchive: Heap out of bounds read in mtree parser
- CVE-2015-8927libarchive: Heap out of bounds read when reading password for malformed ZIP
- CVE-2015-8926libarchive: NULL pointer access in RAR parser
- CVE-2015-8925libarchive: Unclear invalid memory read in mtree parser
- CVE-2015-8924libarchive: Heap out of bounds read in TAR parser
- CVE-2015-8923libarchive: Unclear crashes in ZIP parser
- CVE-2015-8922libarchive: NULL pointer access in 7z parser
- CVE-2015-8921libarchive: Global out of bounds read in mtree parser
- CVE-2015-8920libarchive: Stack out of bounds read in ar parser
- CVE-2015-8919libarchive: Heap out of bounds read in LHA/LZH parser
- CVE-2015-8918libarchive: Overlapping memcpy in CAB parser
- CVE-2015-8917libarchive: NULL pointer access in CAB parser
- CVE-2015-8916libarchive: NULL pointer access in RAR parser through bsdtar
- CVE-2015-8915libarchive: crash via malformed cpio archive
- CVE-2015-8903ImageMagick: denial of service flaw in VICAR file processing
- CVE-2015-8902ImageMagick: denial of service flaw in PDB file processing
- CVE-2015-8901ImageMagick: denial of service flaw in MIFF file processing
- CVE-2015-8900ImageMagick: denial of service flaw in HDR file processing
- CVE-2015-8899dnsmasq: Denial-of-service when empty address from DNS overlays A record from hosts
- CVE-2015-8898ImageMagick: Prevent NULL pointer access in magick/constitute.c
- CVE-2015-8897ImageMagick: Crash due to out of bounds error in SpliceImage
- CVE-2015-8896ImageMagick: Integer truncation vulnerability in coders/pict.c
- CVE-2015-8895ImageMagick: Integer and buffer overflow in coders/icon.c
- CVE-2015-8894ImageMagick: Double free flaw in tga.c
- CVE-2015-8880php: Double free vulnerability in error condition of format printer
- CVE-2015-8879php: odbc_bindcols function mishandles driver behavior for SQL_WVARCHAR columns
- CVE-2015-8878php: main/php_open_temporary_file.c does not ensure thread safety
- CVE-2015-8877gd: gdImageScaleTwoPass function in gd_interpolation.c uses inconsistent allocate and free approaches
- CVE-2015-8876php: Zend/zend_exceptions.c does not validate certain Exception objects
- CVE-2015-8875gdk-pixbuf: Integer overflows in various pixops functions
- CVE-2015-8874gd: gdImageFillToBorder deep recursion leading to stack overflow
- CVE-2015-8873php: Stack consumption vulnerability in Zend/zend_exceptions.c
- CVE-2015-8872dosfstools: Off-by-2 error leading to corruption in FAT12
- CVE-2015-8871openjpeg: Use-after-free in opj_j2k_write_mco function
- CVE-2015-8870libtiff: Integer overflow in tools/bmp2tiff.c
- CVE-2015-8869ocaml: sizes arguments are sign-extended from 32 to 64 bits
- CVE-2015-8868poppler: heap buffer overflow in ExponentialFunction
- CVE-2015-8867php: openssl_random_pseudo_bytes() is not cryptographically secure
- CVE-2015-8866php: libxml_disable_entity_loader setting is shared between threads
- CVE-2015-8865file: Buffer over-write in finfo_open with malformed magic file
- CVE-2015-8863jq: heap-buffer-overflow in tokenadd() function
- CVE-2015-8853perl: regexp matching hangs indefinitely on illegal UTF-8 input
- CVE-2015-8845kernel: incorrect restoration of machine specific registers from userspace
- CVE-2015-8844kernel: incorrect restoration of machine specific registers from userspace
- CVE-2015-8842systemd: improper use of tmpfiles.d to create persistent journal files
- CVE-2015-8839kernel: ext4 filesystem page fault race condition with fallocate call.
- CVE-2015-8838php: mysqlnd interface vulnerable to BACKRONYM