PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2015 document archive · 22

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,111 documents · Identifier year 2015 · 22 / 23

  1. CVE-2015-0408OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)
  2. CVE-2015-0407OpenJDK: directory information leak via file chooser (Swing, 8055304)
  3. CVE-2015-0406JDK: unspecified vulnerability fixed in 6u91, 7u75 and 8u31 (Deployment)
  4. CVE-2015-0405mysql: unspecified vulnerability related to Server:XA (CPU April 2015)
  5. CVE-2015-0403JDK: unspecified vulnerability fixed in 6u91, 7u75 and 8u31 (Deployment)
  6. CVE-2015-0400OpenJDK: NTLM authentication data disclosure via redirect to proxy (Libraries, 8048035)
  7. CVE-2015-0395OpenJDK: phantom references handling issue in garbage collector (Hotspot, 8047125)
  8. CVE-2015-0391mysql: unspecified vulnerability related to Server:DDL (CPU Jan 2015)
  9. CVE-2015-0385mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU Jan 2015)
  10. CVE-2015-0383OpenJDK: insecure hsperfdata temporary file handling (Hotspot, 8050807)
  11. CVE-2015-0382mysql: unspecified vulnerability related to Server:Replication (CPU Jan 2015)
  12. CVE-2015-0381mysql: unspecified vulnerability related to Server:Replication (CPU Jan 2015)
  13. CVE-2015-0374mysql: unspecified vulnerability related to Server:Security:Privileges:Foreign Key (CPU Jan 2015)
  14. CVE-2015-0296texlive rpm scriptlet allows unprivileged user to delete arbitrary files
  15. CVE-2015-0295QT: BMP image handler crash
  16. CVE-2015-0294gnutls: certificate algorithm consistency checking issue
  17. CVE-2015-0293openssl: assertion failure in SSLv2 servers
  18. CVE-2015-0292openssl: integer underflow leading to buffer overflow in base64 decoding
  19. CVE-2015-0291openssl: ClientHello sigalgs NULL pointer dereference DoS
  20. CVE-2015-0290openssl: multiblock corrupted pointer
  21. CVE-2015-0289openssl: PKCS7 NULL pointer dereference
  22. CVE-2015-0288openssl: X509_to_X509_REQ NULL pointer dereference
  23. CVE-2015-0287openssl: ASN.1 structure reuse memory corruption
  24. CVE-2015-0286openssl: invalid pointer use in ASN1_TYPE_cmp()
  25. CVE-2015-0285openssl: handshake with unseeded PRNG
  26. CVE-2015-0283slapi-nis: infinite loop in getgrnam_r() and getgrgid_r()
  27. CVE-2015-0282gnutls: RSA PKCS#1 signature verification forgery
  28. CVE-2015-0275kernel: fs: ext4: fallocate zero range page size > block size BUG()
  29. CVE-2015-0274kernel: xfs: replacing remote attributes memory corruption
  30. CVE-2015-0273php: use after free vulnerability in unserialize() with DateTimeZone
  31. CVE-2015-0272NetworkManager: remote DoS using IPv6 RA with bogus MTU
  32. CVE-2015-0267kexec-tools: insecure use of /tmp/*$$* filenames
  33. CVE-2015-0261tcpdump: IPv6 mobility printer mobility_opt_print() typecastimg/signedness error
  34. CVE-2015-0255xorg-x11-server: information leak in the XkbSetGeometry request of X servers
  35. CVE-2015-0254jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags
  36. CVE-2015-0253httpd: NULL pointer dereference crash with ErrorDocument 400 pointing to a local URL-path
  37. CVE-2015-0252xerces-c: crashes on malformed input
  38. CVE-2015-0251subversion: (mod_dav_svn) spoofing svn:author property values for new revisions
  39. CVE-2015-0250batik: XML External Entity (XXE) injection in SVG parsing
  40. CVE-2015-0248subversion: (mod_dav_svn) remote denial of service with certain requests with dynamically evaluated revision numbers
  41. CVE-2015-0247e2fsprogs: ext2fs_open2() missing first_meta_bg boundary check leading to heap buffer overflow (oCERT-015-002)
  42. CVE-2015-0245dbus: denial of service in dbus systemd activation
  43. CVE-2015-0244postgresql: loss of frontend/backend protocol synchronization after an error
  44. CVE-2015-0243postgresql: buffer overflow flaws in contrib/pgcrypto
  45. CVE-2015-0242postgresql: buffer overflow flaws in replacement *printf() functions
  46. CVE-2015-0241postgresql: buffer overflow in the to_char() function
  47. CVE-2015-0240samba: talloc free on uninitialized stack pointer in netlogon server could lead to remote-code execution
  48. CVE-2015-0239kernel: kvm: insufficient sysenter emulation when invoked from 16-bit code
  49. CVE-2015-0236libvirt: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save images and snapshots objects
  50. CVE-2015-0235glibc: __nss_hostname_digits_dots() heap-based buffer overflow
CVE 2015 document archive — Page 22 | PulseLinux