CVE 2015 document archive · 6
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,111 documents · Identifier year 2015 · 6 / 23
- CVE-2015-7990kernel: Race condition when sending message on unbound socket causing NULL pointer dereference
- CVE-2015-7981libpng: Out-of-bounds read in png_convert_to_rfc1123
- CVE-2015-7979ntp: off-path denial of service on authenticated broadcast mode
- CVE-2015-7978ntp: stack exhaustion in recursive traversal of restriction list
- CVE-2015-7977ntp: restriction list NULL pointer dereference
- CVE-2015-7976ntp: 'ntpq saveconfig' command allows dangerous characters in filenames
- CVE-2015-7975ntp: nextvar() missing length check in ntpq
- CVE-2015-7974ntp: missing key check allows impersonation between authenticated peers (VU#357792)
- CVE-2015-7973ntp: replay attack on authenticated broadcast mode
- CVE-2015-7942libxml2: heap-based buffer overflow in xmlParseConditionalSections()
- CVE-2015-7941libxml2: Out-of-bounds memory access
- CVE-2015-7885kernel: staging/dgnc: information leak in ioctl
- CVE-2015-7884kernel: media/vivid-osd: information leak in ioctl
- CVE-2015-7872kernel: Keyrings crash triggerable by unprivileged user
- CVE-2015-7871ntp: crypto-NAK symmetric association authentication bypass vulnerability
- CVE-2015-7855ntp: ASSERT in decodenetnum() on invalid values
- CVE-2015-7854ntp: password length memory corruption vulnerability
- CVE-2015-7853ntp: reference clock memory corruption vulnerability
- CVE-2015-7852ntp: ntpq atoascii memory corruption vulnerability
- CVE-2015-7851ntp: saveconfig directory traversal vulnerability
- CVE-2015-7850ntp: remote configuration denial of service vulnerability
- CVE-2015-7849ntp: trusted keys memory corruption vulnerability
- CVE-2015-7848ntp: multiple integer overflow read access violations
- CVE-2015-7837kernel: securelevel disabled after kexec
- CVE-2015-7833kernel: usbvision: crash on invalid USB device descriptors
- CVE-2015-7830wireshark: Pcapng file parser crash
- CVE-2015-7810(MountManager): TOCTOU race when expanding JAR files
- CVE-2015-7805libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header
- CVE-2015-7804php: uninitialized pointer in phar_make_dirstream()
- CVE-2015-7803php: NULL pointer dereference in phar_get_fp_offset()
- CVE-2015-7802optipng: Buffer overflow in global memory
- CVE-2015-7801optipng: Use-after-free vulnerability in 0.6.4
- CVE-2015-7799kernel: net: slip: crash when using PPP character device driver
- CVE-2015-7747audiofile: Buffer overflow when changing number of channels and sample format
- CVE-2015-7744wolfSSL: insufficient hardening of RSA-CRT implementation (Oracle MySQL CPU Jan 2016)
- CVE-2015-7705ntp: denial of service by trigerring rate limiting on NTP server
- CVE-2015-7704ntp: disabling synchronization via crafted KoD packet
- CVE-2015-7703ntp: config command can be used to set the pidfile and drift file paths
- CVE-2015-7702ntp: incomplete checks in ntp_crypto.c
- CVE-2015-7701ntp: slow memory leak in CRYPTO_ASSOC
- CVE-2015-7700pngcrush: double-free in sPLT and png.c file
- CVE-2015-7697unzip: Heap overflow and DoS in 6.0
- CVE-2015-7696unzip: Heap overflow and DoS in 6.0
- CVE-2015-7692ntp: incomplete checks in ntp_crypto.c
- CVE-2015-7691ntp: incomplete checks in ntp_crypto.c
- CVE-2015-7686perl-Email-Address: denial of service when parsing crafted email address list
- CVE-2015-7674gdk-pixbuf: Heap overflow when scaling a GIF file
- CVE-2015-7673gdk-pixbuf: Heap overflow and DoS vulnerability when scaling a TGA file
- CVE-2015-7613kernel: Unauthorized access to IPC objects with SysV shm
- CVE-2015-7575TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)