Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
14-05/msg00006.html - http://www.novell.com/support/kb/doc.php?id=7015303 - http://linux.oracle.com/errata/ELSA-2014-0594.html - http://secunia.com/advisories/58591 - http://rhn.redhat.com/errata/RHSA-2014-0687.html - http://secunia.com/advisories/58614 - https://bugzilla.redhat.com/show_bug.cgi?id=1102022 - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00015.html - http://rhn.redhat.com/errata/RHSA-2014-0594.html - http://secunia.com/advisories/60415 - http://secunia.com/advisories/59408
CVE ID: CVE-2014-3468 State: PUBLISHED Published: 2014-06-05T20:00:00 Last Updated: 2024-08-06T10:43:06.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60320 - http://www.debian.org/security/2014/dsa-3056 - http://git.savannah.gnu.org/cgit/libtasn1.git/commit/?id=1c3ccb3e040bf13e342ee60bc23b21b97b11923f - http://www.novell.com/support/kb/doc.php?id=7015302 -
ibtasn1.git/commit/?id=1c3ccb3e040bf13e342ee60bc23b21b97b11923f - http://www.novell.com/support/kb/doc.php?id=7015302 - http://secunia.com/advisories/59057 - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html - http://support.f5.com/kb/en-us/solutions/public/15000/400/sol15423.html - http://linux.oracle.com/errata/ELSA-2014-0596.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:116 - http://secunia.com/advisories/59021 - http://secunia.com/advisories/61888 - http://advisories.mageia.org/MGASA-2014-0247.html - http://rhn.redhat.com/errata/RHSA-2014-0815.html - http://rhn.redhat.com/errata/RHSA-2014-0596.html - http://lists.gnu.org/archive/html/help-lib
rata/RHSA-2014-0815.html - http://rhn.redhat.com/errata/RHSA-2014-0596.html - http://lists.gnu.org/archive/html/help-libtasn1/2014-05/msg00006.html - http://www.novell.com/support/kb/doc.php?id=7015303 - http://linux.oracle.com/errata/ELSA-2014-0594.html - https://bugzilla.redhat.com/show_bug.cgi?id=1102323 - http://secunia.com/advisories/58591 - http://rhn.redhat.com/errata/RHSA-2014-0687.html - http://secunia.com/advisories/58614 - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00015.html - http://rhn.redhat.com/errata/RHSA-2014-0594.html - http://secunia.com/advisories/60415 - http://secunia.com/advisories/59408
CVE ID: CVE-2014-3469 State: PUBLISHED Published: 2014-06-05T20:00:00 Last Updated: 2024-08-06T10:43:06.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via a NULL value in an ivalue argument. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/60320 - http://www.debian.org/security/2014/dsa-3056 - http://www.novell.com/support/kb/doc.php?id=7015302 - http://secunia.com/advisories/59057 - http://lists.opensuse.org/opensuse-security-announce/2014-0
b/doc.php?id=7015302 - http://secunia.com/advisories/59057 - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00002.html - http://linux.oracle.com/errata/ELSA-2014-0596.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:116 - http://secunia.com/advisories/59021 - http://secunia.com/advisories/61888 - http://advisories.mageia.org/MGASA-2014-0247.html - http://rhn.redhat.com/errata/RHSA-2014-0815.html - https://bugzilla.redhat.com/show_bug.cgi?id=1102329 - http://rhn.redhat.com/errata/RHSA-2014-0596.html - http://lists.gnu.org/archive/html/help-libtasn1/2014-05/msg00006.html - http://www.novell.com/support/kb/doc.php?id=7015303 - http://linux.oracle.com/errata/EL
libtasn1/2014-05/msg00006.html - http://www.novell.com/support/kb/doc.php?id=7015303 - http://linux.oracle.com/errata/ELSA-2014-0594.html - http://secunia.com/advisories/58591 - http://rhn.redhat.com/errata/RHSA-2014-0687.html - http://secunia.com/advisories/58614 - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00015.html - http://rhn.redhat.com/errata/RHSA-2014-0594.html - http://secunia.com/advisories/60415 - http://secunia.com/advisories/59408
CVE ID: CVE-2014-3470 State: PUBLISHED Published: 2014-06-05T21:00:00 Last Updated: 2024-08-06T10:43:06.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/59342 - http://secunia.com/advisories/59669 - http://secunia.com/advisories/59525 - http://www-01.ibm.com/support/docview.wss?
- http://secunia.com/advisories/59669 - http://secunia.com/advisories/59525 - http://www-01.ibm.com/support/docview.wss?uid=swg21675626 - http://secunia.com/advisories/59282 - http://www.novell.com/support/kb/doc.php?id=7015300 - http://secunia.com/advisories/59990 - http://secunia.com/advisories/59264 - http://secunia.com/advisories/59126 - http://www.novell.com/support/kb/doc.php?id=7015264 - http://secunia.com/advisories/59306 - http://www-01.ibm.com/support/docview.wss?uid=swg21678289 - http://secunia.com/advisories/59445 - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://marc.info/?l=bugtraq&m=140266410314613&w=2 - http://secunia.com/advisories/59340 - http://secun
-2014-0012.html - http://marc.info/?l=bugtraq&m=140266410314613&w=2 - http://secunia.com/advisories/59340 - http://secunia.com/advisories/61254 - http://www-01.ibm.com/support/docview.wss?uid=swg21676655 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E - http://secunia.com/advisories/59223 - http://secunia.com/advisories/59895 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=8011cd56e39a433b1837465259a9bd24a38727fb - http://secunia.com/advisories/59449 - http://www-01.ibm.com/support/docview.wss?uid=isg400001843 - http://secunia.com/advisories/59442 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na
3 - http://secunia.com/advisories/59442 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946 - http://marc.info/?l=bugtraq&m=140317760000786&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21676879 - http://www-01.ibm.com/support/docview.wss?uid=swg24037761 - http://www-01.ibm.com/support/docview.wss?uid=swg21677828 - http://secunia.com/advisories/59441 - http://marc.info/?l=bugtraq&m=140621259019789&w=2 - http://secunia.com/advisories/59189 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:106 - http://secunia.com/advisories/58742 - http://secunia.com/advisories/59300 - http://secunia.com/advisories/58667 - http://security.gentoo.org/
visories/58742 - http://secunia.com/advisories/59300 - http://secunia.com/advisories/58667 - http://security.gentoo.org/glsa/glsa-201407-05.xml - http://secunia.com/advisories/59191 - http://secunia.com/advisories/59284 - http://www.ibm.com/support/docview.wss?uid=swg24037783 - http://secunia.com/advisories/59365 - http://www-01.ibm.com/support/docview.wss?uid=swg21677695 - http://www-01.ibm.com/support/docview.wss?uid=swg21676529 - http://secunia.com/advisories/59483 - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://secunia.com/advisories/59495 - http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163 - http://www-01.ibm.com/support/docview.wss?uid=swg21676889 - htt
://www-01.ibm.com/support/docview.wss?uid=nas8N1020163 - http://www-01.ibm.com/support/docview.wss?uid=swg21676889 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html - http://secunia.com/advisories/58945 - http://www-01.ibm.com/support/docview.wss?uid=isg400001841 - http://secunia.com/advisories/59659 - http://secunia.com/advisories/59440 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://secunia.com/advisories/59655 - http://secunia.com/advisories/58716 - http://www-01.ibm.com/support/docview.wss?uid=swg21676071 - http://www-01.ibm.com/support/docvi
a.com/advisories/58716 - http://www-01.ibm.com/support/docview.wss?uid=swg21676071 - http://www-01.ibm.com/support/docview.wss?uid=swg21677836 - http://secunia.com/advisories/59437 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754 - http://www.vmware.com/security/advisories/VMSA-2014-0006.html - http://secunia.com/advisories/59310 - http://www-01.ibm.com/support/docview.wss?uid=swg21676501 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc - http://www.splunk.com/view/SP-CAAAM2D - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html - http://www
www.splunk.com/view/SP-CAAAM2D - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html - http://www.ibm.com/support/docview.wss?uid=swg21676793 - http://www.ibm.com/support/docview.wss?uid=swg21676356 - http://marc.info/?l=bugtraq&m=140389274407904&w=2 - http://support.citrix.com/article/CTX140876 - http://secunia.com/advisories/59167 - http://secunia.com/advisories/59120 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757 - http://marc.info/?l=bugtraq&m=140499827729550&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:105 - http://secunia.com/advisories/59460 - http://secunia.com/advisories/58939 - http://marc.info/?l=bugtraq&m=
SA-2014:105 - http://secunia.com/advisories/59460 - http://secunia.com/advisories/58939 - http://marc.info/?l=bugtraq&m=140266410314613&w=2 - http://secunia.com/advisories/59514 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl - http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195 - https://kc.mcafee.com/corporate/index?page=content&id=SB10075 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - http://www-01.ibm.com/support/docview.wss?uid=swg21676419 - http://secunia.com/advisories/59438 - http://www-01.ibm.com/support/docview.wss?uid=swg21676496 - http://secunia.com/advisories/58714 - http://marc.info/?l=bu
http://www-01.ibm.com/support/docview.wss?uid=swg21676496 - http://secunia.com/advisories/58714 - http://marc.info/?l=bugtraq&m=140482916501310&w=2 - http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15342.html - http://www.openssl.org/news/secadv_20140605.txt - http://secunia.com/advisories/58615 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - http://support.apple.com/kb/HT6443 - http://secunia.com/advisories/59301 - http://secunia.com/advisories/59784 - https://kb.bluecoat.com/index?page=content&id=SA80 - http://marc.info/?l=bugtraq&m=140904544427729&w=2 - http://www.f-secure.com/en/web/labs_global/f
?page=content&id=SA80 - http://marc.info/?l=bugtraq&m=140904544427729&w=2 - http://www.f-secure.com/en/web/labs_global/fsc-2014-6 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629 - http://www-01.ibm.com/support/docview.wss?uid=swg21678167 - http://www.securityfocus.com/bid/67898 - http://secunia.com/advisories/59192 - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html - http://marc.info/?l=bugtraq&m=140752315422991&w=2 - http://secunia.com/advisories/58579 - http://marc.info/?l=bugtraq&m=140389355508263&w=2 - http://secunia.com/advisories/59175 - http://marc.info/?l=bugtraq&m=140448122410568&w=2 - http://secunia.com/advisories/59666 - http://ma
m/advisories/59175 - http://marc.info/?l=bugtraq&m=140448122410568&w=2 - http://secunia.com/advisories/59666 - http://marc.info/?l=bugtraq&m=140431828824371&w=2 - http://secunia.com/advisories/59413 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://www-01.ibm.com/support/docview.wss?uid=swg21675821 - http://secunia.com/advisories/59721 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756 - http://www-01.ibm.com/support/docview.wss?uid=swg21676062 - http://secunia.com/advisories/58713 - http://www-01.ibm.com/support/docview.wss?uid=swg21673137 - http://secunia.com/advisories/59362 - http://www.mandriva.com/security/advisories?name=MD
/docview.wss?uid=swg21673137 - http://secunia.com/advisories/59362 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://www-01.ibm.com/support/docview.wss?uid=swg21676035 - http://secunia.com/advisories/59450 - http://secunia.com/advisories/59287 - http://www-01.ibm.com/support/docview.wss?uid=swg21683332 - http://secunia.com/advisories/59491 - http://secunia.com/advisories/59364 - http://secunia.com/advisories/59451 - http://secunia.com/advisories/58977 - https://www.novell.com/support/kb/doc.php?id=7015271 - http://secunia.com/advisories/60571 - http://secunia.com/advisories/59459 - http://www.blackberry.com/btsc/KB36051 - http://secunia.com/advisories/59431 - http://
://secunia.com/advisories/59459 - http://www.blackberry.com/btsc/KB36051 - http://secunia.com/advisories/59431 - http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755 - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm - http://www-01.ibm.com/support/docview.wss?uid=swg21677527 - http://secunia.com/advisories/58337 - http://secunia.com/advisories/59518 - http://secunia.com/advisories/59162 - https://bugzilla.redhat.com/show_bug.cgi?id=1103600 - http://secunia.com/advisories/59490 - http://secunia.com/advisories/59916 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E - http://marc
s/59916 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E - http://marc.info/?l=bugtraq&m=140491231331543&w=2 - http://secunia.com/advisories/58797 - http://www-01.ibm.com/support/docview.wss?uid=swg21676615 - https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf
CVE ID: CVE-2014-3471 State: PUBLISHED Published: 2018-01-12T17:00:00 Last Updated: 2024-08-06T10:43:06.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU instance crash) via hotplug and hotunplug operations of Virtio block devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/06/23/4 - https://bugzilla.redhat.com/show_bug.cgi?id=1112271 - http://security.gentoo.org/glsa/glsa-201412-01.xml - http://www.securityfocus.com/bid/68145 - https://lists.gnu.org/archive/html/qemu-devel
too.org/glsa/glsa-201412-01.xml - http://www.securityfocus.com/bid/68145 - https://lists.gnu.org/archive/html/qemu-devel/2014-06/msg05283.html
CVE ID: CVE-2014-3472 State: PUBLISHED Published: 2014-08-19T18:00:00 Last Updated: 2024-08-06T10:43:06.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.3.0, does not properly check caller roles, which allows remote authenticated users to bypass access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-0720.html - http://rhn.redhat.com/errata/RHSA-2014-1020.html - http://www.securityfocus.com/bid/69094 - http://rhn.redhat.com/errata/R
tp://rhn.redhat.com/errata/RHSA-2014-1020.html - http://www.securityfocus.com/bid/69094 - http://rhn.redhat.com/errata/RHSA-2014-1021.html - http://rhn.redhat.com/errata/RHSA-2014-1019.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/95170 - https://bugzilla.redhat.com/show_bug.cgi?id=1103815
CVE ID: CVE-2014-3473 State: PUBLISHED Published: 2014-10-31T15:00:00 Last Updated: 2024-08-06T10:43:06.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject arbitrary web script or HTML via a crafted template. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/08/6 - http://www.securityfocus.com/bid/68459 - https://bugs.la
es: - http://www.openwall.com/lists/oss-security/2014/07/08/6 - http://www.securityfocus.com/bid/68459 - https://bugs.launchpad.net/horizon/+bug/1308727 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html
CVE ID: CVE-2014-3474 State: PUBLISHED Published: 2014-10-31T15:00:00 Last Updated: 2024-08-06T10:43:06.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to inject arbitrary web script or HTML via a network name. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/07/08/6 - http://www.securityfocus.com/bid/68460 - https://review.openstack.org/#/c/105477 - https://bugs.laun
rity/2014/07/08/6 - http://www.securityfocus.com/bid/68460 - https://review.openstack.org/#/c/105477 - https://bugs.launchpad.net/horizon/+bug/1322197 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html
CVE ID: CVE-2014-3475 State: PUBLISHED Published: 2014-10-31T15:00:00 Last Updated: 2024-08-06T10:43:06.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/68456 - https://bugs.launchpad.net/horizon/+bug/1320235 - http://www.openwall.com/lists/oss-security/2014/07/08/6 - http:/
456 - https://bugs.launchpad.net/horizon/+bug/1320235 - http://www.openwall.com/lists/oss-security/2014/07/08/6 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html
CVE ID: CVE-2014-3476 State: PUBLISHED Published: 2014-06-17T14:00:00 Last Updated: 2024-08-06T10:43:06.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Identity (Keystone) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 does not properly handle chained delegation, which allows remote authenticated users to gain privileges by leveraging a (1) trust or (2) OAuth token with impersonation enabled to create a new token with additional roles. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-06/msg00031.html - http://secunia.com/advisories/59547 - http://www.securityfocus.com/bid/6802
se-security-announce/2014-06/msg00031.html - http://secunia.com/advisories/59547 - http://www.securityfocus.com/bid/68026 - https://bugs.launchpad.net/keystone/+bug/1324592 - http://secunia.com/advisories/57886 - http://www.openwall.com/lists/oss-security/2014/06/12/3
CVE ID: CVE-2014-3477 State: PUBLISHED Published: 2014-07-01T17:00:00 Last Updated: 2025-01-16T20:11:35.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an AccessDenied error to the service instead of a client when the client is prohibited from accessing the service, which allows local users to cause a denial of service (initialization failure and exit) or possibly conduct a side-channel attack via a D-Bus message to an inactive service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/59798 - http://secunia.com
- CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/59798 - http://secunia.com/advisories/59611 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00049.html - http://www.securityfocus.com/bid/67986 - http://lists.opensuse.org/opensuse-updates/2014-07/msg00012.html - http://seclists.org/oss-sec/2014/q2/509 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00042.html - http://advisories.mageia.org/MGASA-2014-0266.html - http://secunia.com/advisories/59428 - https://bugs.freedesktop.org/show_bug.cgi?id=78979 - http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.8&id=24c590703ca47eb71ddef453de43126b90954567 - http://www.debian.org/security
reedesktop.org/dbus/dbus/commit/?h=dbus-1.8&id=24c590703ca47eb71ddef453de43126b90954567 - http://www.debian.org/security/2014/dsa-2971 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:176
CVE ID: CVE-2014-3478 State: PUBLISHED Published: 2014-07-09T10:00:00 Last Updated: 2024-08-06T10:43:06.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a FILE_PSTRING conversion. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://rhn.redhat.com/errata/RHSA-2014-1766.html - http://www.debian.org/security/2014/dsa-3021 - http://marc.info/?l=bugtraq&m=14101784470531
errata/RHSA-2014-1766.html - http://www.debian.org/security/2014/dsa-3021 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.debian.org/security/2014/dsa-2974 - http://secunia.com/advisories/59794 - http://www.php.net/ChangeLog-5.php - http://mx.gw.com/pipermail/file/2014/001553.html - https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08 - http://www.securityfocus.com/bid/68239 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - http://support.apple.com/kb/HT6443 - http://rhn.redhat.com/errata/RHSA-2014-1327.html - http://www.oracle.com/technetw
- http://support.apple.com/kb/HT6443 - http://rhn.redhat.com/errata/RHSA-2014-1327.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2014-1765.html - https://bugs.php.net/bug.php?id=67410 - http://marc.info/?l=bugtraq&m=141017844705317&w=2 - http://secunia.com/advisories/59831 - http://lists.opensuse.org/opensuse-updates/2014-09/msg00046.html
CVE ID: CVE-2014-3479 State: PUBLISHED Published: 2014-07-09T10:00:00 Last Updated: 2024-08-06T10:43:06.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cdf_check_stream_offset function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, relies on incorrect sector-size data, which allows remote attackers to cause a denial of service (application crash) via a crafted stream offset in a CDF file. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67 - http://rhn.redhat.com/errata/RHSA-2014-1766.