PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2015 document archive · 5

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,111 documents · Identifier year 2015 · 5 / 23

  1. CVE-2015-8461bind: race condition when handling socket errors can lead to an assertion failure in resolver.c
  2. CVE-2015-8395pcre: Buffer overflow caused by duplicate named references (8.38/36)
  3. CVE-2015-8394pcre: Integer overflow caused by missing check for certain conditions (8.38/31)
  4. CVE-2015-8393pcre: pcregrep -q is not always quiet (8.38/28)
  5. CVE-2015-8392pcre: buffer overflow caused by patterns with duplicated named groups with (?| (8.38/27)
  6. CVE-2015-8391pcre: inefficient posix character class syntax check (8.38/16)
  7. CVE-2015-8390pcre: uninitialized memory read triggered by malformed posix character class (8.38/22)
  8. CVE-2015-8389pcre: infinite recursion in JIT compiler when processing certain patterns (8.38/21)
  9. CVE-2015-8388pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)
  10. CVE-2015-8387pcre: Integer overflow in subroutine calls (8.38/8)
  11. CVE-2015-8386pcre: Buffer overflow caused by lookbehind assertion (8.38/6)
  12. CVE-2015-8385pcre: buffer overflow caused by named forward reference to duplicate group number (8.38/30)
  13. CVE-2015-8384pcre: buffer overflow caused by recursive back reference by name within certain group (8.38/4)
  14. CVE-2015-8383pcre: Buffer overflow caused by repeated conditional group (8.38/3)
  15. CVE-2015-8382php: Regular Expression Uninitialized Pointer Information Disclosure Vulnerability (ZDI-CAN-2547)
  16. CVE-2015-8381pcre: Buffer overflow caused by duplicate named references (8.38/36)
  17. CVE-2015-8380pcre: OOB write when pcre_exec() is called with ovecsize of 1 (8.38/10)
  18. CVE-2015-8374kernel: Information leak when truncating of compressed/inlined extents on BTRFS
  19. CVE-2015-8370grub2: buffer overflow when checking password entered during bootup
  20. CVE-2015-8367LibRaw: Memory objects are not intialized properly
  21. CVE-2015-8366LibRaw: Index overflow in smal_decode_segment
  22. CVE-2015-8345Qemu: net: eepro100: infinite loop in processing command block list
  23. CVE-2015-8338xen: Long running memory operations on ARM cause DoS
  24. CVE-2015-8327cups-filters: foomatic-rip did not consider the back tick as an illegal shell escape character
  25. CVE-2015-8325openssh: privilege escalation via user's PAM environment and UseLogin=yes
  26. CVE-2015-8324kernel: Null pointer dereference when mounting ext4
  27. CVE-2015-8317libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration
  28. CVE-2015-8242libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode
  29. CVE-2015-8241libxml2: Buffer overread with XML parser in xmlNextChar
  30. CVE-2015-8239sudo: Race condition when checking digests in sudoers
  31. CVE-2015-8215kernel: MTU value is not validated in IPv6 stack causing packet loss
  32. CVE-2015-8158ntp: potential infinite loop in ntpq
  33. CVE-2015-8140ntp: ntpq protocol vulnerable to replay attacks
  34. CVE-2015-8139ntp: ntpq and ntpdc disclose origin timestamp to unauthenticated clients
  35. CVE-2015-8138ntp: missing check for zero originate timestamp
  36. CVE-2015-8126libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions
  37. CVE-2015-8107a2ps: output_file() format string flaw
  38. CVE-2015-8104virt: guest to host DoS by triggering an infinite loop in microcode via #DB exception
  39. CVE-2015-8078cyrus-imapd: Integer overflow in index_urlfetch
  40. CVE-2015-8077cyrus-imapd: Integer overflow in range checks
  41. CVE-2015-8076cyrus-imapd: Out of bounds heap read in index_urlfetch
  42. CVE-2015-8075libsndfile: Out of bounds memory access in psf_strlcpy_crlf
  43. CVE-2015-8041wpa_supplicant: Incomplete WPS and P2P NFC NDEF record payload length validation
  44. CVE-2015-8035libxml2: DoS caused by incorrect error detection during XZ decompression
  45. CVE-2015-8023strongswan: Authentication bypass in eap-mschapv2 plugin
  46. CVE-2015-8019kernel: net: buffer overflow when copying data from skbuff to userspace
  47. CVE-2015-8012lldpd: malformed packet leads to assertion failure and daemon crash
  48. CVE-2015-8011lldpd: buffer overflow in the lldp_decode function in daemon/protocols/lldp.c
  49. CVE-2015-8000bind: responses with a malformed class attribute can trigger an assertion failure in db.c
  50. CVE-2015-7995libxslt: Type confusion may cause DoS
CVE 2015 document archive — Page 5 | PulseLinux