Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-8089 State: PUBLISHED Published: 2020-02-17T21:39:04 Last Updated: 2024-08-06T13:10:50.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/70011 - http://seclists.org/oss-sec/2014/q4/276 - https://bugzilla.redhat.com/show_bug.cgi?id=1151277 - http://framework.zend.com/security/advisory/ZF2014-06
CVE ID: CVE-2014-8090 State: PUBLISHED Published: 2014-11-21T15:00:00 Last Updated: 2024-08-06T13:10:50.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a denial of service (CPU and memory consumption) a crafted XML document containing an empty string in an entity that is used in a large number of nested entity references, aka an XML Entity Expansion (XEE) attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1821 and CVE-2014-8080. Additional Analyst Notes: - CVE Program Container: References: - http
ncomplete fix for CVE-2013-1821 and CVE-2014-8080. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-12/msg00035.html - http://secunia.com/advisories/59948 - http://rhn.redhat.com/errata/RHSA-2014-1912.html - http://www.debian.org/security/2015/dsa-3159 - http://secunia.com/advisories/62050 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://rhn.redhat.com/errata/RHSA-2014-1913.html - https://support.apple.com/HT205267 - http://rhn.redhat.com/errata/RHSA-2014-1911.html - http://www.debian.org/security/2015/dsa-315
port.apple.com/HT205267 - http://rhn.redhat.com/errata/RHSA-2014-1911.html - http://www.debian.org/security/2015/dsa-3157 - http://advisories.mageia.org/MGASA-2014-0472.html - https://www.ruby-lang.org/en/news/2014/11/13/rexml-dos-cve-2014-8090/ - http://www.ubuntu.com/usn/USN-2412-1 - http://secunia.com/advisories/62748 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:129 - http://www.securityfocus.com/bid/71230 - http://lists.opensuse.org/opensuse-updates/2015-01/msg00004.html - http://rhn.redhat.com/errata/RHSA-2014-1914.html - http://lists.opensuse.org/opensuse-updates/2015-01/msg00000.html
CVE ID: CVE-2014-8091 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:10:50.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: X.Org X Window System (aka X11 and X) X11R5 and X.Org Server (aka xserver and xorg-server) before 1.16.3, when using SUN-DES-1 (Secure RPC) authentication credentials, does not check the return value of a malloc call, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a crafted connection request. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ -
nces: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://advisories.mageia.org/MGASA-2014-0532.html - https://security.gentoo.org/glsa/201504-06 - http://secunia.com/advisories/62292 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.securityfocus.com/bid/71597 - http://secunia.com/advisories/61947 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2014-8092 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:10:50.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in X.Org X Window System (aka X11 or X) X11R1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) ProcPutImage, (2) GetHosts, (3) RegionSizeof, or (4) REQUEST_FIXED_SIZE function, which triggers an out-of-bounds read or write. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wi
Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - http://www.securityfocus.com/bid/71595 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://advisories.mageia.org/MGASA-2014-0532.html - https://security.gentoo.org/glsa/201504-06 - http://secunia.com/advisories/62292 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://secunia.com/advisories/61947 - http://www.orac
cle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://secunia.com/advisories/61947 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2014-8093 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:10:50.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) __glXDisp_ReadPixels, (2) __glXDispSwap_ReadPixels, (3) __glXDisp_GetTexImage, (4) __glXDispSwap_GetTexImage, (5) GetSeparableFilter, (6) GetConvolutionFilter, (7) GetHistogram, (8) GetMinmax, (9) GetColorTable, (10) __glXG
Image, (5) GetSeparableFilter, (6) GetConvolutionFilter, (7) GetHistogram, (8) GetMinmax, (9) GetColorTable, (10) __glXGetAnswerBuffer, (11) __GLX_GET_ANSWER_BUFFER, (12) __glXMap1dReqSize, (13) __glXMap1fReqSize, (14) Map2Size, (15) __glXMap2dReqSize, (16) __glXMap2fReqSize, (17) __glXImageSize, or (18) __glXSeparableFilter2DReqSize function, which triggers an out-of-bounds read or write. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://nvidia.custhelp.com/app/answers/detail/a_id/36
w.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://nvidia.custhelp.com/app/answers/detail/a_id/3610 - http://advisories.mageia.org/MGASA-2014-0532.html - https://security.gentoo.org/glsa/201504-06 - http://secunia.com/advisories/62292 - http://www.securityfocus.com/bid/71596 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://secunia.com/advisories/61947
CVE ID: CVE-2014-8094 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:10:49.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka xserver and xorg-server) 1.7.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request, which triggers an out-of-bounds read or write. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - http://advisories.magei
n.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - http://advisories.mageia.org/MGASA-2014-0532.html - https://security.gentoo.org/glsa/201504-06 - http://www.securityfocus.com/bid/71601 - http://secunia.com/advisories/62292 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://secunia.com/advisories/61947
CVE ID: CVE-2014-8095 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:10:49.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XInput extension in X.Org X Window System (aka X11 or X) X11R4 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXChangeDeviceControl, (2) ProcXChangeDeviceControl, (3) ProcXChangeFeedbackControl, (4) ProcXSendExtensionEvent, (5) SProcXIAllowEvents, (6) SProcXIChangeCursor, (7) ProcXIChangeHierarchy, (8) SProcXIGetClientPointer, (9) SP
onEvent, (5) SProcXIAllowEvents, (6) SProcXIChangeCursor, (7) ProcXIChangeHierarchy, (8) SProcXIGetClientPointer, (9) SProcXIGrabDevice, (10) SProcXIUngrabDevice, (11) ProcXIUngrabDevice, (12) SProcXIPassiveGrabDevice, (13) ProcXIPassiveGrabDevice, (14) SProcXIPassiveUngrabDevice, (15) ProcXIPassiveUngrabDevice, (16) SProcXListDeviceProperties, (17) SProcXDeleteDeviceProperty, (18) SProcXIListProperties, (19) SProcXIDeleteProperty, (20) SProcXIGetProperty, (21) SProcXIQueryDevice, (22) SProcXIQueryPointer, (23) SProcXISelectEvents, (24) SProcXISetClientPointer, (25) SProcXISetFocus, (26) SProcXIGetFocus, or (27) SProcXIWarpPointer function. Additional Analyst Notes: - CVE Program Container:
SetFocus, (26) SProcXIGetFocus, or (27) SProcXIWarpPointer function. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://advisories.mageia.org/MGASA-2014-0532.html - https://security.gentoo.org/glsa/201504-06 - http://www.securityfocus.com/bid/71599 - http://secunia.com/advisories/62292 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://secunia.com/advisories/61947 - http://www.oracl
le.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://secunia.com/advisories/61947 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2014-8096 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:10:50.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SProcXCMiscGetXIDList function in the XC-MISC extension in X.Org X Window System (aka X11 or X) X11R6.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - http://www.oracle.co
bian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://advisories.mageia.org/MGASA-2014-0532.html - https://security.gentoo.org/glsa/201504-06 - http://secunia.com/advisories/62292 - http://www.securityfocus.com/bid/71598 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://secunia.com/advisories/61947 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2014-8097 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:10:50.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DBE extension in X.Org X Window System (aka X11 or X) X11R6.1 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) ProcDbeSwapBuffers or (2) SProcDbeSwapBuffers function. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09
erences: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://advisories.mageia.org/MGASA-2014-0532.html - https://security.gentoo.org/glsa/201504-06 - http://secunia.com/advisories/62292 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://secunia.com/advisories/61947 - http://www.securityfocus.com/bid/71604 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2014-8098 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:10:49.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) __glXDisp_Render, (2) __glXDisp_RenderLarge, (3) __glXDispSwap_VendorPrivate, (4) __glXDispSwap_VendorPrivateWithReply, (5) set_client_info, (6) __glXDispSwap_SetClientInfoARB, (7) DoSwapInterval, (8) DoGetProgramStr
VendorPrivateWithReply, (5) set_client_info, (6) __glXDispSwap_SetClientInfoARB, (7) DoSwapInterval, (8) DoGetProgramString, (9) DoGetString, (10) __glXDispSwap_RenderMode, (11) __glXDisp_GetCompressedTexImage, (12) __glXDispSwap_GetCompressedTexImage, (13) __glXDisp_FeedbackBuffer, (14) __glXDispSwap_FeedbackBuffer, (15) __glXDisp_SelectBuffer, (16) __glXDispSwap_SelectBuffer, (17) __glXDisp_Flush, (18) __glXDispSwap_Flush, (19) __glXDisp_Finish, (20) __glXDispSwap_Finish, (21) __glXDisp_ReadPixels, (22) __glXDispSwap_ReadPixels, (23) __glXDisp_GetTexImage, (24) __glXDispSwap_GetTexImage, (25) __glXDisp_GetPolygonStipple, (26) __glXDispSwap_GetPolygonStipple, (27) __glXDisp_GetSeparableFilt
wap_GetTexImage, (25) __glXDisp_GetPolygonStipple, (26) __glXDispSwap_GetPolygonStipple, (27) __glXDisp_GetSeparableFilter, (28) __glXDisp_GetSeparableFilterEXT, (29) __glXDisp_GetConvolutionFilter, (30) __glXDisp_GetConvolutionFilterEXT, (31) __glXDisp_GetHistogram, (32) __glXDisp_GetHistogramEXT, (33) __glXDisp_GetMinmax, (34) __glXDisp_GetMinmaxEXT, (35) __glXDisp_GetColorTable, (36) __glXDisp_GetColorTableSGI, (37) GetSeparableFilter, (38) GetConvolutionFilter, (39) GetHistogram, (40) GetMinmax, or (41) GetColorTable function. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory
tainer: References: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://nvidia.custhelp.com/app/answers/detail/a_id/3610 - http://advisories.mageia.org/MGASA-2014-0532.html - https://security.gentoo.org/glsa/201504-06 - http://secunia.com/advisories/62292 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://www.securityfocus.com/bid/71606 - http://secunia.com/advisories/61947
CVE ID: CVE-2014-8099 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:10:50.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SP
Port, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - http://advisories.mageia.org/MGASA-2014-0532.html - https://security.gentoo.org/gl
pment/Security/Advisory-2014-12-09/ - http://advisories.mageia.org/MGASA-2014-0532.html - https://security.gentoo.org/glsa/201504-06 - http://secunia.com/advisories/62292 - http://www.securityfocus.com/bid/71600 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://secunia.com/advisories/61947
CVE ID: CVE-2014-8100 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:10:50.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) ProcRenderQueryVersion, (2) SProcRenderQueryVersion, (3) SProcRenderQueryPictFormats, (4) SProcRenderQueryPictIndexValues, (5) SProcRenderCreatePicture, (6) SProcRenderChangePicture, (7) SProcRenderSetPictureCli
ProcRenderQueryPictIndexValues, (5) SProcRenderCreatePicture, (6) SProcRenderChangePicture, (7) SProcRenderSetPictureClipRectangles, (8) SProcRenderFreePicture, (9) SProcRenderComposite, (10) SProcRenderScale, (11) SProcRenderCreateGlyphSet, (12) SProcRenderReferenceGlyphSet, (13) SProcRenderFreeGlyphSet, (14) SProcRenderFreeGlyphs, or (15) SProcRenderCompositeGlyphs function. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://advisories.mageia.org/MGASA-2014-0532.html - http://www.sec
technetwork/topics/security/cpujul2015-2367936.html - http://advisories.mageia.org/MGASA-2014-0532.html - http://www.securityfocus.com/bid/71602 - https://security.gentoo.org/glsa/201504-06 - http://secunia.com/advisories/62292 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://secunia.com/advisories/61947 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2014-8101 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:10:50.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RandR extension in XFree86 4.2.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcRRQueryVersion, (2) SProcRRGetScreenInfo, (3) SProcRRSelectInput, or (4) SProcRRConfigureOutputProperty function. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/securi
reOutputProperty function. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://advisories.mageia.org/MGASA-2014-0532.html - https://security.gentoo.org/glsa/201504-06 - http://secunia.com/advisories/62292 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 - http://www.securityfocus.com/bid/71605 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://secunia.com/advisories/61947
CVE ID: CVE-2014-8102 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:10:50.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SProcXFixesSelectSelectionInput function in the XFixes extension in X.Org X Window System (aka X11 or X) X11R6.8.0 and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length value. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - http://www.oracle.
debian.org/security/2014/dsa-3095 - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://advisories.mageia.org/MGASA-2014-0532.html - https://security.gentoo.org/glsa/201504-06 - http://secunia.com/advisories/62292 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:119 - http://www.securityfocus.com/bid/71608 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://secunia.com/advisories/61947 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2014-8103 State: PUBLISHED Published: 2014-12-10T15:00:00 Last Updated: 2024-08-06T13:10:50.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: X.Org Server (aka xserver and xorg-server) 1.15.0 through 1.16.x before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) sproc_dri3_query_version, (2) sproc_dri3_open, (3) sproc_dri3_pixmap_from_buffer, (4) sproc_dri3_buffer_from_pixmap, (5) sproc_dri3_fence_from_fd, (6) sproc_dri3_fd_from_fence, (7) proc_present_query_capabilities, (8) sproc_present_query_version, (9) sproc_present_pixmap, (10)
ri3_fd_from_fence, (7) proc_present_query_capabilities, (8) sproc_present_query_version, (9) sproc_present_pixmap, (10) sproc_present_notify_msc, (11) sproc_present_select_input, or (12) sproc_present_query_capabilities function in the (a) DRI3 or (b) Present extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/ - https://security.gentoo.org/glsa/201504-06 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://secunia.com/advisories/61947