CVE-2014-3461

Qemu: usb: fix up post load checks

hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post load checks."

CVSS 2.0 · 6.8 Medium EPSS 2.7% KEV · Not listed

Vendors

Qemu Redhat

Products

Qemu Enterprise Linux Openstack

CVE-2014-3561

ovirt-engine-log-collector: database password disclosed in process listing

The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive information by listing the processes.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Enterprise Virtualization Rhev Manager

CVE-2014-3570

openssl: Bignum squaring may produce incorrect results

The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.

CVSS 3.0 · 3.7 Low EPSS 21.9% KEV · Not listed

Vendors

Openssl Redhat

Products

Openssl Enterprise Linux Jboss Enterprise Application Platform and 1 more

CVE-2014-3578

Framework: Directory traversal

Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL.

CVSS 2.0 · 5.0 Medium EPSS 6.4% KEV · Not listed

Vendors

Pivotal Software Redhat

Products

Spring Framework Jboss Bpms Jboss Brms and 2 more

CVE-2014-3602

OpenShift: /proc/net/tcp information disclosure

Red Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number information for remote systems by reading /proc/net/tcp.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Openshift

CVE-2016-4186

flash-plugin: multiple code execution issues fixed in APSB16-25

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

CVSS 3.1 · 8.8 High EPSS 4.5% KEV · Not listed

Vendors

Adobe Apple Google and 3 more

Products

Flash Player Flash Player Desktop Runtime Mac Os X and 6 more

CVE-2014-3610

kernel: kvm: noncanonical MSR writes

The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific register, which allows guest OS users to cause a denial of service (host OS crash) by leveraging guest OS privileges, related to the wrmsr_interception function in arch/x86/kvm/svm.c and the handle_wrmsr function in arch/x86/kvm/vmx.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 3 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 3 more

CVE-2014-3615

Qemu: information leakage when guest sets high resolution

The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Opensuse and 2 more

Products

Ubuntu Linux Debian Linux Opensuse and 10 more

CVE-2014-3687

kernel: net: sctp: fix panic on duplicate ASCONF chunks

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.

CVSS 3.1 · 7.5 High EPSS 8.6% KEV · Not listed

Vendors

Canonical Debian Linux and 5 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 12 more

CVE-2016-4225

flash-plugin: multiple code execution issues fixed in APSB16-25

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2016-4223 and CVE-2016-4224.

CVSS 3.1 · 8.8 High EPSS 7.4% KEV · Not listed

Vendors

Adobe Apple Google and 3 more

Products

Flash Player Flash Player Desktop Runtime Mac Os X and 6 more

CVE-2014-3692

CFME: default fallback password in customization_templates.yml

The customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default password for the root account when a password is not specified for a new image, which allows remote attackers to gain privileges.

CVSS 2.0 · 10.0 Critical EPSS 2.9% KEV · Not listed

Vendors

Redhat

Products

Cloudforms 3.1 Management Engine Cloudforms Managementengine

CVE-2014-3707

curl: incorrect handle duplication after COPYPOSTFIELDS

The curl_easy_duphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPT_COPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds read that allows remote web servers to read sensitive memory information.

CVSS 2.0 · 4.3 Medium EPSS 5.1% KEV · Not listed

Vendors

Apple Canonical Debian and 4 more

Products

Mac Os X Ubuntu Linux Debian Linux and 4 more

CVE-2015-8839

kernel: ext4 filesystem page fault race condition with fallocate call.

Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption) by writing to a page that is associated with a different user's file after unsynchronized hole punching and page-fault handling.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Linux Redhat

Products

Ubuntu Linux Linux Kernel Enterprise Linux and 2 more

CVE-2016-4160

flash-plugin: multiple code execution issues fixed in APSB16-15

Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1096, CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1102, CVE-2016-1104, CVE-2016-4109, CVE-2016-4111, CVE-2016-4112, CVE-2016-4113, CVE-2016-4114, CVE-2016-4115, CVE-2016-4120, CVE-2016-4161, CVE-2016-4162, and CVE-2016-4163.

CVSS 3.1 · 9.8 Critical EPSS 6.3% KEV · Not listed

Vendors

Adobe Apple Google and 3 more

Products

Air Desktop Runtime Air Sdk Air Sdk \& Compiler and 11 more

CVE-2014-3188

v8: IPC and v8 issue fixed in Google Chrome 38.0.2125.101

Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.

CVSS 2.0 · 10.0 Critical EPSS 6.8% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Chrome Os Enterprise Linux Desktop Supplementary and 4 more

CVE-2014-5352

krb5: gss_process_context_token() incorrectly frees context (MITKRB5-SA-2015-001)

The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgssapi_krb5 library in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly maintain security-context handles, which allows remote authenticated users to cause a denial of service (use-after-free and double free, and daemon crash) or possibly execute arbitrary code via crafted GSSAPI traffic, as demonstrated by traffic to kadmind.

CVSS 2.0 · 9.0 Critical EPSS 6.2% KEV · Not listed

Vendors

Mit Redhat

Products

Kerberos 5 Enterprise Linux

CVE-2014-5355

krb5: unauthenticated denial of service in recvauth_common() and others

MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '\0' character, which allows remote attackers to (1) cause a denial of service (NULL pointer dereference) via a zero-byte version string or (2) cause a denial of service (out-of-bounds read) by omitting the '\0' character, related to appl/user_user/server.c and lib/krb5/krb/recvauth.c.

CVSS 2.0 · 5.0 Medium EPSS 4.6% KEV · Not listed

Vendors

Mit Redhat

Products

Kerberos 5 Enterprise Linux

CVE-2016-4221

flash-plugin: multiple code execution issues fixed in APSB16-25

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

CVSS 3.1 · 8.8 High EPSS 4.5% KEV · Not listed

Vendors

Adobe Apple Google and 3 more

Products

Flash Player Flash Player Desktop Runtime Mac Os X and 6 more

CVE-2015-1774

libreoffice: HWP file filter vulnerability

The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted HWP document, which triggers an out-of-bounds write.

CVSS 2.0 · 6.8 Medium EPSS 7.6% KEV · Not listed

Vendors

Apache Canonical Debian and 3 more

Products

Openoffice Ubuntu Linux Debian Linux and 6 more

CVE-2015-1802

libXfont: missing range check in bdfReadProperties

The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a (1) negative or (2) large property count in a BDF font file.

CVSS 2.0 · 8.5 High EPSS 4.9% KEV · Not listed

Vendors

Canonical Debian Redhat and 1 more

Products

Ubuntu Linux Debian Linux Enterprise Linux and 1 more