Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-0044 State: PUBLISHED Published: 2014-02-08T00:00:00 Last Updated: 2024-08-06T08:58:26.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: The opus_packet_get_samples_per_frame function in client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots allows remote attackers to cause a denial of service (crash) via a crafted length prefix value, which triggers a NULL pointer dereference or a heap-based buffer over-read (aka "out-of-bounds array access"). Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2854 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00063.html - http://osvdb.org/102904 - http://mumb
2014/dsa-2854 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00063.html - http://osvdb.org/102904 - http://mumble.info/security/Mumble-SA-2014-001.txt
CVE ID: CVE-2014-0045 State: PUBLISHED Published: 2014-02-08T00:00:00 Last Updated: 2024-08-06T08:58:26.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: The needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots, Mumble for iOS 1.1 through 1.2.2, and MumbleKit before commit fd190328a9b24d37382b269a5674b0c0c7a7e36d does not check the return value of the opus_decode_float function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Opus voice packet, which triggers an error in opus_decode_float, a conversion of a negative integer to an unsigned integer, and a
packet, which triggers an error in opus_decode_float, a conversion of a negative integer to an unsigned integer, and a heap-based buffer over-read and over-write. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2854 - http://osvdb.org/102958 - http://mumble.info/security/Mumble-SA-2014-004.txt - http://osvdb.org/102905 - http://mumble.info/security/Mumble-SA-2014-002.txt - http://lists.opensuse.org/opensuse-updates/2014-02/msg00063.html - http://www.securityfocus.com/bid/65374
CVE ID: CVE-2014-0046 State: PUBLISHED Published: 2014-02-27T15:00:00 Last Updated: 2024-08-06T09:05:38.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the link-to helper in Ember.js 1.2.x before 1.2.2, 1.3.x before 1.3.2, and 1.4.x before 1.4.0-beta.6, when used in non-block form, allows remote attackers to inject arbitrary web script or HTML via the title attribute. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/91242 - http://secunia.com/advisories/56965 - http://www.securityfocus.com/bid/65579 - https://groups.google.com/forum/#%21topic/ember-security/1h6FRgr
sories/56965 - http://www.securityfocus.com/bid/65579 - https://groups.google.com/forum/#%21topic/ember-security/1h6FRgr8lXQ - http://emberjs.com/blog/2014/02/07/ember-security-releases.html - http://www.openwall.com/lists/oss-security/2014/02/14/6
CVE ID: CVE-2014-0047 State: PUBLISHED Published: 2017-10-06T15:00:00 Last Updated: 2024-08-06T09:05:37.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73315 - http://www.openwall.com/lists/oss-security/2015/03/24/23 - https://bugzilla.redhat.com/show_bug.cgi?id=1063549
CVE ID: CVE-2014-0048 State: PUBLISHED Published: 2020-01-02T16:22:06 Last Updated: 2024-08-06T09:05:37.067Z Vendors: docker.io Products: docker.io Problem Types: Other Description: An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2014-0048 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0048 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-0048 - https://access.redhat.com/security/cve/cve-2014-0048 - http://www.openwall.com/lists/oss-security/2015/03/24/23 - http://www.openw
cess.redhat.com/security/cve/cve-2014-0048 - http://www.openwall.com/lists/oss-security/2015/03/24/23 - http://www.openwall.com/lists/oss-security/2015/03/24/18 - http://www.openwall.com/lists/oss-security/2015/03/24/22 - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E
CVE ID: CVE-2014-0049 State: PUBLISHED Published: 2014-03-11T01:00:00 Last Updated: 2024-08-06T09:05:37.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the complete_emulated_mmio function in arch/x86/kvm/x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that triggers an invalid memory copy affecting certain cancel_work_item data. Additional Analyst Notes: - CVE Program Container: References: - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.6 - http://www.openwall.com/lists/oss-security/2014/03/03/1 - https://github.com/torvalds/linux/commit/a08d3b3b99efd509133946056531cdf8
openwall.com/lists/oss-security/2014/03/03/1 - https://github.com/torvalds/linux/commit/a08d3b3b99efd509133946056531cdf8f3a0c09b - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a08d3b3b99efd509133946056531cdf8f3a0c09b - https://bugzilla.redhat.com/show_bug.cgi?id=1062368
CVE ID: CVE-2014-0050 State: PUBLISHED Published: 2014-03-28T19:00:00 Last Updated: 2024-08-06T09:05:38.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html - http://www.vmware.com/security/advisories/VMSA-2014-0008.html - http://www-01.ibm.com/su
urity-Advisory-2014-0007.html - http://www.vmware.com/security/advisories/VMSA-2014-0008.html - http://www-01.ibm.com/support/docview.wss?uid=swg21676656 - http://jvn.jp/en/jp/JVN14876762/index.html - http://marc.info/?l=bugtraq&m=143136844732487&w=2 - http://secunia.com/advisories/60753 - https://bugzilla.redhat.com/show_bug.cgi?id=1062337 - http://secunia.com/advisories/59184 - http://www-01.ibm.com/support/docview.wss?uid=swg21677691 - http://www.debian.org/security/2014/dsa-2856 - http://secunia.com/advisories/59039 - http://secunia.com/advisories/59185 - http://www-01.ibm.com/support/docview.wss?uid=swg21676401 - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://sec
ibm.com/support/docview.wss?uid=swg21676401 - http://www.vmware.com/security/advisories/VMSA-2014-0012.html - http://secunia.com/advisories/58075 - http://www-01.ibm.com/support/docview.wss?uid=swg21676853 - http://secunia.com/advisories/59187 - http://secunia.com/advisories/59041 - http://www-01.ibm.com/support/docview.wss?uid=swg21676092 - http://www-01.ibm.com/support/docview.wss?uid=swg21681214 - http://www.vmware.com/security/advisories/VMSA-2014-0007.html - http://secunia.com/advisories/60475 - http://svn.apache.org/r1565143 - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376
security/cpuoct2015-2367953.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917 - http://advisories.mageia.org/MGASA-2014-0110.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755 - http://blog.spiderlabs.com/2014/02/cve-2014-0050-exploit-with-boundaries-loops-without-boundaries.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:084 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-017/index.html - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://www-01.ibm.com/support/docview.wss?uid=swg21676410 - http://www-01.ibm.com/support/docvi
pujan2016-2367955.html - http://www-01.ibm.com/support/docview.wss?uid=swg21676410 - http://www-01.ibm.com/support/docview.wss?uid=swg21676405 - http://tomcat.apache.org/security-7.html - http://secunia.com/advisories/59492 - http://www.securityfocus.com/archive/1/534161/100/0/threaded - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - http://secunia.com/advisories/59500 - http://secunia.com/advisories/59183 - http://tomcat.apache.org/security-8.html - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://www-01.ibm.com/support/docview.wss?uid=swg21676403 - ht
com/technetwork/topics/security/cpuapr2015-2365600.html - http://www-01.ibm.com/support/docview.wss?uid=swg21676403 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://rhn.redhat.com/errata/RHSA-2014-0252.html - http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm - http://jvndb.jvn.jp/jvndb/JVNDB-2014-000017 - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://www.ubuntu.com/usn/USN-2130-1 - http://www.securityfocus.com/bid/65400 - http://rhn.redhat.com/errata/RHSA-2014-0400.html - http://secunia
/USN-2130-1 - http://www.securityfocus.com/bid/65400 - http://rhn.redhat.com/errata/RHSA-2014-0400.html - http://secunia.com/advisories/59725 - http://seclists.org/fulldisclosure/2014/Dec/23 - http://www-01.ibm.com/support/docview.wss?uid=swg21675432 - http://secunia.com/advisories/57915 - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html - http://secunia.com/advisories/59399 - http://mail-archives.apache.org/mod_mbox/commons-dev/201402.mbox/%3C52F373FC.9030907%40apache.org%3E - http://www-01.ibm.com/support/docview.wss?uid=swg21676091 - http://secunia.com/advisories/58976 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-015/index.html - http:
ia.com/advisories/58976 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-015/index.html - http://rhn.redhat.com/errata/RHSA-2014-0253.html - http://secunia.com/advisories/59232 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS14-016/index.html - http://www-01.ibm.com/support/docview.wss?uid=swg21677724 - http://www.securityfocus.com/archive/1/532549/100/0/threaded - http://www-01.ibm.com/support/docview.wss?uid=swg21669554 - https://security.gentoo.org/glsa/202107-39
CVE ID: CVE-2014-0051 State: REJECTED Published: 2017-05-15T15:00:00 Last Updated: 2017-05-15T14:57:01 Description: No description available.
CVE ID: CVE-2014-0052 State: REJECTED Published: 2017-07-20T15:00:00 Last Updated: 2017-07-20T14:57:01 Description: No description available.
CVE ID: CVE-2014-0053 State: PUBLISHED Published: 2014-04-15T18:00:00 Last Updated: 2024-08-06T09:05:38.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 before 2.3.6 does not properly restrict access to files in the WEB-INF directory, which allows remote attackers to obtain sensitive information via a direct request. NOTE: this identifier has been SPLIT due to different researchers and different vulnerability types. See CVE-2014-2857 for the META-INF variant and CVE-2014-2858 for the directory traversal. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.c
2014-2858 for the directory traversal. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/56841 - https://exchange.xforce.ibmcloud.com/vulnerabilities/91270 - http://www.securityfocus.com/archive/1/531281/100/0/threaded - http://www.securityfocus.com/bid/65678 - http://www.gopivotal.com/security/cve-2014-0053 - https://twitter.com/Ramsharan065/status/434975409134792704 - http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0267.html - http://archives.neohapsis.com/archives/fulldisclosure/2014-02/0194.html
CVE ID: CVE-2014-0054 State: PUBLISHED Published: 2014-04-17T14:00:00 Last Updated: 2024-08-06T09:05:38.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External Entity (XXE) issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4152, CVE-2013-7315, and CVE-2013-6429. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/
5, and CVE-2013-6429. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/66148 - https://jira.spring.io/browse/SPR-11376 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://rhn.redhat.com/errata/RHSA-2014-0400.html - http://secunia.com/advisories/57915
CVE ID: CVE-2014-0055 State: PUBLISHED Published: 2014-03-26T14:00:00 Last Updated: 2024-08-06T09:05:37.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc errors, which allows guest OS users to cause a denial of service (host OS crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0328.html - http://secunia.com/advisories/59386 - http://www.securityfocus.com/bid/66441 - http://rhn.redhat.com/err
014-0328.html - http://secunia.com/advisories/59386 - http://www.securityfocus.com/bid/66441 - http://rhn.redhat.com/errata/RHSA-2014-0339.html - https://bugzilla.redhat.com/show_bug.cgi?id=1062577
CVE ID: CVE-2014-0056 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T09:05:37.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The l3-agent in OpenStack Neutron 2012.2 before 2013.2.3 does not check the tenant id when creating ports, which allows remote authenticated users to plug ports into the routers of arbitrary tenants via the device id in a port-create command. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2014/03/27/5 - http://rhn.redhat.com/errata/RHSA-2014-0516.html - http://www.ubuntu.com/usn/USN-2194-1 - https://bugs.launchpad.net/neutron/+bug/1243327
CVE ID: CVE-2014-0057 State: PUBLISHED Published: 2014-03-18T14:00:00 Last Updated: 2024-08-06T09:05:38.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: The x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red Hat CloudForms 3.0 Management Engine 5.2 allows remote attackers to execute arbitrary methods via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0215.html - https://bugzilla.redhat.com/show_bug.cgi?id=1064140 - http://secunia.com/advisories/57376
CVE ID: CVE-2014-0058 State: PUBLISHED Published: 2014-02-26T15:00:00 Last Updated: 2024-08-06T09:05:38.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The security audit functionality in Red Hat JBoss Enterprise Application Platform (EAP) 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by reading the log files. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0204.html - http://rhn.redhat.com/errata/RHSA-2015-0034.html - http://rhn.redhat.com/errata/RHSA-2014-0205.html - http://www.securityfocus.com/bid/65762
CVE ID: CVE-2014-0059 State: PUBLISHED Published: 2014-11-17T22:00:00 Last Updated: 2024-08-06T09:05:37.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: JBoss SX and PicketBox, as used in Red Hat JBoss Enterprise Application Platform (EAP) before 6.2.3, use world-readable permissions on audit.log, which allows local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0565.html - http://rhn.redhat.com/errata/RHSA-2015-0675.html - http://rhn.redhat.com/errata/RHSA-2015-0850.html - http://rhn.redhat.com/errata/RHSA-2014-0563.html - http://rhn.redhat.com/errata/RHSA-2015
m/errata/RHSA-2015-0850.html - http://rhn.redhat.com/errata/RHSA-2014-0563.html - http://rhn.redhat.com/errata/RHSA-2015-0851.html - http://rhn.redhat.com/errata/RHSA-2014-0564.html
CVE ID: CVE-2014-0060 State: PUBLISHED Published: 2014-03-28T17:00:00 Last Updated: 2024-08-06T09:05:38.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly enforce the ADMIN OPTION restriction, which allows remote authenticated members of a role to add or remove arbitrary users to that role by calling the SET ROLE command before the associated GRANT command. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0211.html - http://rhn.redhat.com/errata/RHSA-2014-0221.html - http://support.apple.com/kb/HT6
dhat.com/errata/RHSA-2014-0211.html - http://rhn.redhat.com/errata/RHSA-2014-0221.html - http://support.apple.com/kb/HT6448 - http://rhn.redhat.com/errata/RHSA-2014-0469.html - http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html - http://wiki.postgresql.org/wiki/20140220securityrelease - http://www.debian.org/security/2014/dsa-2864 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://rhn.redhat.com/errata/RHSA-2014-0249.html - http://www.postgresql.org/about/news/1506/ - http://www.ubuntu.com/usn/USN-2120-1 - https://support.apple.com/kb/HT6536 - http://www.debian.org/security/2014/dsa-2865 - http://lists.opensuse.org/opensuse-updates/2014-03/ms
ple.com/kb/HT6536 - http://www.debian.org/security/2014/dsa-2865 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html - http://secunia.com/advisories/61307 - https://puppet.com/security/cve/cve-2014-0060
CVE ID: CVE-2014-0061 State: PUBLISHED Published: 2014-03-28T17:00:00 Last Updated: 2024-08-06T09:05:38.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to gain privileges via a function that is (1) defined in another language or (2) not allowed to be directly called by the user due to permissions. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0211.html - http://rhn.redhat.com/errata/RHSA-2014-0221.html - http://suppo
es: - http://rhn.redhat.com/errata/RHSA-2014-0211.html - http://rhn.redhat.com/errata/RHSA-2014-0221.html - http://support.apple.com/kb/HT6448 - http://rhn.redhat.com/errata/RHSA-2014-0469.html - http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html - http://wiki.postgresql.org/wiki/20140220securityrelease - http://www.debian.org/security/2014/dsa-2864 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://rhn.redhat.com/errata/RHSA-2014-0249.html - http://www.postgresql.org/about/news/1506/ - http://www.ubuntu.com/usn/USN-2120-1 - https://support.apple.com/kb/HT6536 - http://www.debian.org/security/2014/dsa-2865 - http://lists.opensuse.org/opensuse
https://support.apple.com/kb/HT6536 - http://www.debian.org/security/2014/dsa-2865 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html - http://secunia.com/advisories/61307
CVE ID: CVE-2014-0062 State: PUBLISHED Published: 2014-03-28T17:00:00 Last Updated: 2024-08-06T09:05:38.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allows remote authenticated users to create an unauthorized index or read portions of unauthorized tables by creating or deleting a table with the same name during the timing window. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0211.html - http://rhn.redhat.com/errata/RHSA-2014-
gram Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0211.html - http://rhn.redhat.com/errata/RHSA-2014-0221.html - http://support.apple.com/kb/HT6448 - http://rhn.redhat.com/errata/RHSA-2014-0469.html - http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html - http://wiki.postgresql.org/wiki/20140220securityrelease - http://www.debian.org/security/2014/dsa-2864 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://rhn.redhat.com/errata/RHSA-2014-0249.html - http://www.securityfocus.com/bid/65727 - http://www.postgresql.org/about/news/1506/ - http://www.ubuntu.com/usn/USN-2120-1 - https://support.apple.com/kb/HT6536 - http://www.debia
sql.org/about/news/1506/ - http://www.ubuntu.com/usn/USN-2120-1 - https://support.apple.com/kb/HT6536 - http://www.debian.org/security/2014/dsa-2865 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00018.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://lists.opensuse.org/opensuse-updates/2014-03/msg00038.html - http://secunia.com/advisories/61307
CVE ID: CVE-2014-0063 State: PUBLISHED Published: 2014-03-28T17:00:00 Last Updated: 2024-08-06T09:05:37.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via vectors related to an incorrect MAXDATELEN constant and datetime values involving (1) intervals, (2) timestamps, or (3) timezones, a different vulnerability than CVE-2014-0065. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/
ility than CVE-2014-0065. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0211.html - http://rhn.redhat.com/errata/RHSA-2014-0221.html - https://github.com/postgres/postgres/commit/4318daecc959886d001a6e79c6ea853e8b1dfb4b - http://support.apple.com/kb/HT6448 - https://bugzilla.redhat.com/show_bug.cgi?id=1065226 - http://rhn.redhat.com/errata/RHSA-2014-0469.html - http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html - http://wiki.postgresql.org/wiki/20140220securityrelease - http://www.debian.org/security/2014/dsa-2864 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.postgresql.org/su