CVE 2015 document archive · 9
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,111 documents · Identifier year 2015 · 9 / 23
- CVE-2015-6252kernel: vhost fd leak in ioctl VHOST_SET_LOG_FD
- CVE-2015-6251gnutls: double free flaw in certificate DN decoding (GNUTLS-SA-2015-3)
- CVE-2015-6249wireshark: WCCP dissector crash (wnpa-sec-2015-29)
- CVE-2015-6248wireshark: Ptvcursor crash (wnpa-sec-2015-28)
- CVE-2015-6247wireshark: OpenFlow dissector infinite loop (wnpa-sec-2015-27)
- CVE-2015-6246wireshark: WaveAgent dissector crash (wnpa-sec-2015-26)
- CVE-2015-6245wireshark: GSM RLC/MAC dissector infinite loop (wnpa-sec-2015-25)
- CVE-2015-6244wireshark: ZigBee dissector crash (wnpa-sec-2015-24)
- CVE-2015-6243wireshark: Dissector table crash (wnpa-sec-2015-23)
- CVE-2015-6242wireshark: memory manager crash (wnpa-sec-2015-22)
- CVE-2015-6241wireshark: protocol tree crash (wnpa-sec-2015-21)
- CVE-2015-5986Bind: fromwire_openpgpkey() incorrect boundary check Denial of Service
- CVE-2015-5745kernel: qemu buffer overflow in virtio-serial
- CVE-2015-5741golang: HTTP request smuggling in net/http library
- CVE-2015-5740golang: HTTP request smuggling in net/http library
- CVE-2015-5739golang: HTTP request smuggling in net/http library
- CVE-2015-5722bind: malformed DNSSEC key failed assertion denial of service
- CVE-2015-5707kernel: number wraparound vulnerability in function start_req()
- CVE-2015-5706kernel: Use-after-free in path lookup
- CVE-2015-5701texlive: insecure use of /tmp in mktexlsr
- CVE-2015-5700texlive: insecure use of /tmp in mktexlsr
- CVE-2015-5697kernel: information leak in md driver
- CVE-2015-5621net-snmp: snmp_pdu_parse() incompletely parsed varBinds left in list of variables
- CVE-2015-5602sudo: Unauthorized privilege escalation in sudoedit
- CVE-2015-5600openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices
- CVE-2015-5590php: buffer overflow and stack smashing error in phar_fix_filepath
- CVE-2015-5589php: segmentation fault in Phar::convertToData on invalid file
- CVE-2015-5477bind: TKEY query handling flaw leading to denial of service
- CVE-2015-5400squid: information disclosure due to incorrect handling of peer responses in tunnel.cc (SQUID-2015:2)
- CVE-2015-5370samba: crash in dcesrv_auth_bind_ack due to missing error check
- CVE-2015-5366kernel: net: incorrect processing of checksums in UDP implementation
- CVE-2015-5364kernel: net: incorrect processing of checksums in UDP implementation
- CVE-2015-5352openssh: XSECURITY restrictions bypass under certain conditions in ssh(1)
- CVE-2015-5351tomcat: CSRF token leak
- CVE-2015-5346tomcat: Session fixation
- CVE-2015-5345tomcat: directory disclosure
- CVE-2015-5343subversion: (mod_dav_svn) integer overflow when parsing skel-encoded request bodies
- CVE-2015-5330libldb: remote memory read in the Samba LDAP server
- CVE-2015-5327kernel: User triggerable out-of-bounds read
- CVE-2015-5316wpa_supplicant: EAP-pwd peer error path failure on unexpected Confirm message
- CVE-2015-5315wpa_supplicant: EAP-pwd missing last fragment length validation
- CVE-2015-5313libvirt: filesystem storage volume names path traversal flaw
- CVE-2015-5312libxml2: CPU exhaustion when processing specially crafted XML input
- CVE-2015-5310wpa_supplicant: unauthorized WNM Sleep Mode GTK control
- CVE-2015-5307virt: guest to host DoS by triggering an infinite loop in microcode via #AC exception
- CVE-2015-5302libreport: Possible private data leak in Bugzilla bugs opened by ABRT
- CVE-2015-5301ipsilon: missing user authorization check when deleting a service provider
- CVE-2015-5300ntp: MITM attacker can force ntpd to make a step larger than the panic threshold
- CVE-2015-5299Samba: Missing access control check in shadow copy code
- CVE-2015-5297pixman: general_composite_rect() integer overflow