huzaifas-sidhpurwala/RedHat-security-VeX huggingface dataset:
regular expression denial of service
CVE: CVE-2015-8315
Component: nodejs-ms
CWE: CWE-20
Severity: Moderate
Release date: 2015-10-24T00:00:00+00:00

The ms package before 0.7.1 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression denial of service (ReDoS)."


Remediation:
Untrusted site hosting trusted page can intercept webchannel responses (MFSA 2015-56)
CVE: CVE-2015-2718
Component: Mozilla
Severity: Moderate
Release date: 2015-05-12T00:00:00+00:00

The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive webchannel-response data via a crafted web site containing an IFRAME element referencing a different web site that is intended to read this data.

Statement: This issue does not affect the version of firefox and thunderbird as shipped with Red Hat Enterprise Linux 5, 6 and 7.

Remediation:
CVE: CVE-2015-5198
Component: libvdpau incorrect check for security transition
Severity: Moderate
Release date: 2015-08-31T00:00:00+00:00

libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related to the VDPAU_DRIVER_PATH environment variable.


Remediation:
net: slab corruption from use after free on INIT collisions
CVE: CVE-2015-1421
Component: kernel
CWE: CWE-416
Severity: Important
Release date: 2015-01-22T00:00:00+00:00

A use-after-free flaw was found in the way the Linux kernel's SCTP implementation handled authentication key reference counting during INIT collisions. A remote attacker could use this flaw to crash the system or, potentially, escalate their privileges on the system.

Statement: This issue did not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2. Future Linux kernel updates for the respective releases may address this issue.

Remediation:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
request phase of the OmniAuth Ruby gem is vulnerable to Cross-Site Request Forgery leading to connection without user intent
CVE: CVE-2015-9284
Component: rubygem-omniauth
CWE: CWE-352
Severity: Important
CVSS v3: 8.0/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Release date: 2015-05-27T00:00:00+00:00

A flaw was found in rubygem-omniauth. The request phase of the OmniAuth Ruby gem is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework. Accounts are allowed to be connected without user intent, user interaction, or feedback to the user which permits a secondary account to be able to sign into the web application as the primary account. The highest threat from this vulnerability is to data confidentiality and integrity.

Statement: Red Hat CloudForms 4.5 is on maintenance support phase, thus only critical issues will be fixed.

Remediation:
Reflected Download Vulnerability
CVE: CVE-2015-5248
Component: Mobile
CWE: CWE-22
Severity: Low
Release date: 2015-05-07T00:00:00+00:00

Reflected file download vulnerability in Red Hat Feedhenry Enterprise Mobile Application Platform.


Remediation:
net: rds: NULL pointer dereference in net/rds/connection.c
CVE: CVE-2015-6937
Component: kernel
CWE: CWE-476
Severity: Moderate
Release date: 2015-09-14T00:00:00+00:00

A NULL-pointer dereference vulnerability was discovered in the Linux kernel. The kernel's Reliable Datagram Sockets (RDS) protocol implementation did not verify that an underlying transport existed before creating a connection to a remote server.  A local system user could exploit this flaw to crash the system by creating sockets at specific times to trigger a NULL pointer dereference.

Statement: This issue did not affect kernel, kernel-rt, and realtime-kernel versions shipped with Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG as they do not include the Reliable Datagram Sockets (RDS) protocol implementation.

Remediation:
multiple code execution issues fixed in APSB15-25
CVE: CVE-2015-7625
Component: flash-plugin
Severity: Critical
Release date: 2015-10-13T00:00:00+00:00

Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7626, CVE-2015-7627, CVE-2015-7630, CVE-2015-7633, and CVE-2015-7634.


Remediation:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
Memory leak in TAR parser
CVE: CVE-2015-8929
Component: libarchive
CWE: CWE-401
Severity: Low
CVSS v3: 3.3/CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
Release date: 2015-01-01T00:00:00+00:00

A vulnerability was found in libarchive.  A specially crafted TAR file could cause the application to leak small amounts of memory, eventually leading to denial of service.


Remediation:
lingering HTTP credentials in connection re-use
CVE: CVE-2015-3236
Component: curl
CWE: CWE-201
Severity: Low
Release date: 2015-06-17T00:00:00+00:00

cURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote attackers to obtain sensitive information via unspecified vectors.

Statement: This issue did not affect the versions of curl as shipped with Red Hat Enterprise Linux 5, 6, and 7.

Remediation:
directory traversal attack
CVE: CVE-2015-5531
Component: elasticsearch
CWE: CWE-22
Severity: Low
Release date: 2015-07-16T00:00:00+00:00

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.

Statement: This issue does not affect the versions of elasticsearch as shipped with Red Hat Satellite 6.x and Subscription Asset Manager 1.x.

Remediation:
Constrain access to the snapshot API to trusted sources.
Heap out of bound write in address filter
CVE: CVE-2015-1821
Component: chrony
CWE: CWE-787
Severity: Moderate
Release date: 2015-04-07T00:00:00+00:00

An out-of-bounds write flaw was found in the way Chrony stored certain addresses when configuring NTP or cmdmon access. An attacker that has the command key and is allowed to access cmdmon (only localhost is allowed by default) could use this flaw to crash chronyd or, possibly, execute arbitrary code with the privileges of the chronyd process.


Remediation:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
XML external entity injection (XXE) on PHP FPM
CVE: CVE-2015-5161
Component: php-ZendFramework
Release date: 2015-08-12T00:00:00+00:00

The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external entity (XXE) and XML entity expansion (XEE) attacks via multibyte encoded characters.

Statement: Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.

Remediation:
potential buffer overflow in closefs() (incomplete CVE-2015-0247 fix)
CVE: CVE-2015-1572
Component: e2fsprogs
CWE: CWE-122
Severity: Low
Release date: 2015-02-11T00:00:00+00:00

A heap-based buffer overflow flaw was found in e2fsprogs. A specially crafted Ext2/3/4 file system could cause an application using the ext2fs library (for example, fsck) to crash or, possibly, execute arbitrary code.

Statement: This issue affects e2fsprogs packages as shipped with Red Hat Enterprise Linux 6 and 7. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

This issue affects e4fsprogs packages as shipped with Red Hat Enterprise Linux 5. The issue is not planned to be addressed in Red Hat Enterprise Linux 5.

This issue did not affect e2fsprogs packages as shipped with Red Hat Enterprise Linux 5.

Remediation:
Use after free vulnerability in Collator::sortWithSortKeys
CVE: CVE-2015-8616
Component: php
CWE: CWE-416
Severity: Low
Release date: 2015-12-03T00:00:00+00:00

Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collator_sort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging the relationships between a key buffer and a destroyed array.


Remediation:
missing check for zero originate timestamp
CVE: CVE-2015-8138
Component: ntp
CWE: CWE-294
Severity: Important
Release date: 2015-01-01T00:00:00+00:00

It was discovered that ntpd as a client did not correctly check the originate timestamp in received packets. A remote attacker could use this flaw to send a crafted packet to an ntpd client that would effectively disable synchronization with the server, or push arbitrary offset/delay measurements to modify the time on the client.

Statement: This issue did not affect the versions of ntp as shipped with Red Hat Enterprise Linux 5 as they do not include the affected code, which was introduced in version 4.2.6 of NTP.

Remediation:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
unspecified vulnerability related to Server:InnoDB (CPU April 2015)
CVE: CVE-2015-0508
Component: mysql
Severity: Moderate
Release date: 2015-04-15T00:00:00+00:00

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability than CVE-2015-0506.

Statement: This issue did not affect the versions of mysql or mysql55 as shipped with Red Hat Enterprise Linux 5, 6 or 7 as it only affects MySQL 5.6.x which are not shipped with these versions of Red Hat Enterprise Linux.

Remediation:
net: vmxnet3: host memory leakage
CVE: CVE-2015-8568
Component: Qemu
CWE: CWE-401
Severity: Low
Release date: 2015-12-02T00:00:00+00:00

A memory-leak flaw was found in the QEMU emulator built with VMWARE VMXNET3 paravirtual NIC emulator support. The flaw occurred when a guest repeatedly tried to activate the VMXNET3 device. A privileged guest attacker could use this flaw to leak host memory, resulting in denial of service on the host.

Statement: This issue does not affect the versions of the kvm and xen packages as shipped with Red Hat Enterprise Linux 5.

This issue does not affect the versions of the qemu-kvm packages as shipped with Red Hat Enterprise Linux 6, and the Red Hat Enterprise Linux 6 based versions of qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3.

This issue affects the versions of the qemu-kvm packages as shipped with Red Hat Enterprise Linux 7.

This issue affects the Red Hat Enterprise Linux 7 based versions of the qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3.

This has been rated as having Low security impact and is not currently
planned to be addressed in future updates. For additional information, refer
to the Red Hat Enterprise Linux Life Cycle:
https://access.redhat.com/support/policy/updates/errata/.

Remediation:
volume mounts allow LSM profile escalation
CVE: CVE-2015-3631
Component: docker
CWE: CWE-642
Severity: Moderate
Release date: 2015-05-07T00:00:00+00:00

Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.


Remediation:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
Integer underflow and buffer overflow processing MP4 metadata in libstagefright (MFSA 2015-147)
CVE: CVE-2015-7222
Component: Mozilla
CWE: CWE-119
Severity: Important
Release date: 2015-12-16T00:00:00+00:00

Integer underflow in the Metadata::setData function in MetaData.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect memory allocation and application crash) via an MP4 video file with crafted covr metadata that triggers a buffer overflow.


Remediation:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
Negotiate not treated as connection-oriented
CVE: CVE-2015-3148
Component: curl
CWE: CWE-287
Severity: Moderate
Release date: 2015-04-22T00:00:00+00:00

It was discovered that libcurl could incorrectly reuse Negotiate authenticated HTTP connections for subsequent requests. If an application using libcurl established a Negotiate authenticated HTTP connection to a server and sent subsequent requests with different credentials, the connection could be re-used with the initial set of credentials instead of using the new ones.

Statement: This issue affects the version of curl package as shipped with Red Hat Enterprise Linux 5. Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This issue is not planned to be addressed in a future update for Red Hat Enterprise Linux 5.

Remediation:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
multiple code execution issues fixed in APSB15-05
CVE: CVE-2015-0334
Component: flash-plugin
Severity: Critical
Release date: 2015-03-12T00:00:00+00:00

Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-0336.


Remediation:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
specific APL data could trigger an INSIST in apl_42.c
CVE: CVE-2015-8704
Component: bind
CWE: CWE-20
Severity: Moderate
Release date: 2015-01-01T00:00:00+00:00

A denial of service flaw was found in the way BIND processed certain malformed Address Prefix List (APL) records. A remote, authenticated attacker could use this flaw to cause named to crash.


Remediation:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
multiple code execution flaws (APSB15-19)
CVE: CVE-2015-5566
Component: flash-plugin
Severity: Critical
Release date: 2015-08-12T00:00:00+00:00

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.


Remediation:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)
CVE: CVE-2015-5073
Component: pcre
CWE: CWE-122
Severity: Moderate
Release date: 2015-06-23T00:00:00+00:00

Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis.


Remediation:
For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, the MariaDB server daemon (mysqld) will be restarted automatically.
For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, the httpd daemon must be restarted for the update to take effect.
segmentation fault in Phar::convertToData on invalid file
CVE: CVE-2015-5589
Component: php
Severity: Moderate
Release date: 2015-07-05T00:00:00+00:00

A flaw was found in the way the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened.


Remediation:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
log file arbitrary file retrieval
CVE: CVE-2015-0271
Component: dashboard
CWE: CWE-552
Severity: Important
Release date: 2015-03-05T00:00:00+00:00

It was found that the local log-viewing function of the redhat-access-plugin for OpenStack Dashboard (horizon) did not sanitize user input. An authenticated user could use this flaw to read an arbitrary file with the permissions of the web server.


Remediation:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
multiple code execution issues fixed in APSB16-01
CVE: CVE-2015-8641
Component: flash-plugin
Severity: Critical
Release date: 2015-12-28T00:00:00+00:00

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650.


Remediation:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
potential flaws fixed in version 3.0.22
CVE: CVE-2015-1030
Component: privoxy
CWE: CWE-401
Severity: Moderate
Release date: 2015-01-01T00:00:00+00:00

Memory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of requests that are rejected because the socket limit is reached.


Remediation:
Remote code execution via Twig templates
CVE: CVE-2015-7809
Component: php-twig
Release date: 2015-08-12T00:00:00+00:00

The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote attackers to execute arbitrary code via the _self variable in a template.

Statement: Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.

Remediation:
insecure hsperfdata temporary file handling, CVE-2015-0383 regression (Hotspot)
CVE: CVE-2015-3149
Component: OpenJDK8
CWE: CWE-377
Severity: Low
Release date: 2015-01-01T00:00:00+00:00

The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack.


Remediation:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258
crash when converting OPT resource records and ECS options to text format
CVE: CVE-2015-8705
Component: bind
Severity: Low
Release date: 2015-01-01T00:00:00+00:00

buffer.c in named in ISC BIND 9.10.x before 9.10.3-P3, when debug logging is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit, or daemon crash) or possibly have unspecified other impact via (1) OPT data or (2) an ECS option.


Remediation:
Disable debug logging in named.