huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2014-2068: jenkins: information leak via system diagnostic functionalities (SECURITY-73)
Component: jenkins
Severity: Low
CWE: CWE-1220 (Insufficient Granularity of Access Control)
Public date: 2014-02-07T00:00:00+00:00

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.


Affected upstream versions: n/a
Fixed upstream versions: jenkins-1.532.2
Upstream repository: https://github.com/jenkinsci/jenkins
Upstream fix commit: 0530a6645aac10fec005614211660e98db44b5eb
CVE-2014-2270: file: out-of-bounds access in search rules with offsets from input file
Component: file
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2013-12-20T00:00:00+00:00

A denial of service flaw was found in the way the File Information (fileinfo) extension handled search rules. A remote attacker could use this flaw to cause a PHP application using fileinfo to crash or consume an excessive amount of CPU.

Statement: This issue did not affect the php packages as shipped with Red Hat Enterprise Linux 5. This issue did not affect the php packages as shipped with Red Hat Enterprise Linux 7.

Affected upstream versions: n/a
Fixed upstream versions: FILE5_17
Upstream repository: https://github.com/file/file
Upstream fix commit: 447558595a3650db2886cd2f416ad0beba965801
CVE-2014-2283: wireshark: RLC dissector crash (wnpa-sec-2014-03)
Component: wireshark
Severity: Moderate
Public date: 2014-03-07T00:00:00+00:00

epan/dissectors/packet-rlc in the RLC dissector in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 uses inconsistent memory-management approaches, which allows remote attackers to cause a denial of service (use-after-free error and application crash) via a crafted UMTS Radio Link Control packet.


Affected upstream versions: n/a
Fixed upstream versions: v1.8.13
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: 217293ba4a0353bf5d657e74fe8623dd3c86fe08
CVE-2014-2299: wireshark: buffer overflow in MPEG file parser (wnpa-sec-2014-04)
Component: wireshark
Severity: Moderate
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Public date: 2014-03-07T00:00:00+00:00

Buffer overflow in the mpeg_read function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a large record in MPEG data.


Affected upstream versions: n/a
Fixed upstream versions: v1.8.13
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: f567435ac7140c96a5de56dbce3d5e7659af4d09
CVE-2014-2309: Kernel: net: IPv6: crash due to router advertisement flooding
Component: Kernel
Severity: Important
Public date: 2014-03-06T00:00:00+00:00

The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets.

Statement: This issue does not affect the versions of Linux kernel as shipped with
Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.

Affected upstream versions: n/a
Fixed upstream versions: v3.14
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/davem/net.git
Upstream fix commit: c88507fbad8055297c1d1e21e599f46960cbee39
CVE-2014-2483: OpenJDK: Restrict use of privileged annotations (Libraries, 8034985)
Component: OpenJDK
Severity: Critical
Public date: 2014-07-15T00:00:00+00:00

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-4223. NOTE: the previous information is from the July 2014 CPU. Oracle has not commented on another vendor's claim that the issue is related to improper restriction of the "use of privileged annotations."


Affected upstream versions: n/a
Upstream repository: https://hg.openjdk.java.net/jdk7u/jdk7u/hotspot
Upstream fix commit: 848481af9003
CVE-2014-2523: kernel: netfilter: nf_conntrack_dccp: incorrect skb_header_pointer API usages
Component: kernel
Severity: Important
Public date: 2014-01-06T00:00:00+00:00

net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a DCCP packet that triggers a call to the (1) dccp_new, (2) dccp_packet, or (3) dccp_error function.

Statement: This issue does not affect the versions of the kernel package as shipped with
Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: v3.14
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: b22f5126a24b3b2f15448c3f2a254fc10cbc2b92
CVE-2014-2525: libyaml: heap-based buffer overflow when parsing URLs
Component: libyaml
Severity: Important
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2014-03-27T00:00:00+00:00

A heap based buffer overflow exists in the libyaml package such that an attacker by supplying a specially crafted yaml document when parsed by the application might result in remote code execution leading to complete compromise of the system.

Statement: Redhat satellite does not ship libyaml package but instead consumes the package from the RHEL distribution which is why it has been marked as not affected.

Affected upstream versions: n/a
Upstream repository: https://bitbucket.org/xi/libyaml
Upstream fix commit: bce8b60f0b9af69fa9fab3093d0a41ba243de048
CVE-2014-2669: postgresql: multiple integer overflows in hstore_io.c
Component: postgresql
Severity: Important
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2014-02-17T00:00:00+00:00

Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact via vectors related to the (1) hstore_recv, (2) hstore_from_arrays, and (3) hstore_from_array functions in contrib/hstore/hstore_io.c; and the (4) hstoreArrayToPairs function in contrib/hstore/hstore_op.c, which triggers a buffer overflow.  NOTE: this issue was SPLIT from CVE-2014-0064 because it has a different set of affected versions.

Statement: Not vulnerable. This issue did not affect the versions of PostgreSQL as shipped with Red Hat Enterprise Linux 5 and 6.

Affected upstream versions: n/a
Fixed upstream versions: REL9_4_0
Upstream repository: https://github.com/postgres/postgres
Upstream fix commit: 31400a673325147e1205326008e32135a78b4d8a
CVE-2014-2672: kernel: ath9k: tid->sched race in ath_tx_aggr_sleep()
Component: kernel
Severity: Moderate
Public date: 2014-02-20T00:00:00+00:00

It was found that a remote attacker could use a race condition flaw in the ath_tx_aggr_sleep() function to crash the system by creating large network traffic on the system's Atheros 9k wireless network adapter.

Statement: This issued does not affect Red Hat Enterprise Linux 5 because we do not provide support for Atheros 9k wireless network adapters.

Affected upstream versions: n/a
Fixed upstream versions: v3.14
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 21f8aaee0c62708654988ce092838aa7df4d25d8
CVE-2014-2673: kernel: powerpc: tm: crash when forking inside a transaction
Component: kernel
Severity: Moderate
Public date: 2014-03-07T00:00:00+00:00

A flaw was found in the way the Linux kernel performed forking inside of a transaction. A local, unprivileged user on a PowerPC system that supports transactional memory could use this flaw to crash the system.

Statement: This issue does not affect Red Hat Enterprise Linux 5 and 6 because we do not provide support for Transactional Memory on Power PC architecture.

This issue does not affect Red Hat Enterprise MRG 2 because we do not support Power PC architecture.

Affected upstream versions: n/a
Fixed upstream versions: v3.14
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 621b5060e823301d0cba4cb52a7ee3491922d291
CVE-2014-2706: Kernel: net: mac80211: crash dues to AP powersave TX vs. wakeup race
Component: Kernel
Severity: Moderate
Public date: 2014-02-20T00:00:00+00:00

A race condition flaw was found in the way the Linux kernel's mac80211 subsystem implementation handled synchronization between TX and STA wake-up code paths. A remote attacker could use this flaw to crash the system.

Statement: This issue does not affect the version of the kernel package as shipped with
Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: v3.14
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 1d147bfa64293b2723c4fec50922168658e613ba
CVE-2014-2851: kernel: net: ping: refcount issue in ping_init_sock() function
Component: kernel
Severity: Important
Public date: 2014-04-11T00:00:00+00:00

A use-after-free flaw was found in the way the ping_init_sock() function of the Linux kernel handled the group_info reference counter. A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system.

Statement: This issue does not affect Linux kernel packages as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: v3.15
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/davem/net.git
Upstream fix commit: b04c46190219a4f845e46a459e3102137b7f6cac
CVE-2014-3122: Kernel: mm: try_to_unmap_cluster() should lock_page() before mlocking
Component: Kernel
Severity: Moderate
Public date: 2013-03-19T00:00:00+00:00

It was found that the try_to_unmap_cluster() function in the Linux kernel's Memory Managment subsystem did not properly handle page locking in certain cases, which could potentially trigger the BUG_ON() macro in the mlock_vma_page() function. A local, unprivileged user could use this flaw to crash the system.

Statement: This issue does not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5.

This issue affects the versions of Linux kernel as shipped with Red Hat Enterprise Linux 6. Future kernel updates for Red Hat Enterprise Linux 6 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.15
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 57e68e9cd65b4b8eb4045a1e0d0746458502554c
CVE-2014-3144: Kernel: filter: prevent nla extensions to peek beyond the end of the message
Component: Kernel
Severity: Moderate
Public date: 2014-04-13T00:00:00+00:00

The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is sufficiently large, which allows local users to cause a denial of service (integer underflow and system crash) via crafted BPF instructions.  NOTE: the affected code was moved to the __skb_get_nlattr and __skb_get_nlattr_nest functions before the vulnerability was announced.

Statement: This issue does not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: v3.15
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 05ab8f2647e4221cbdb3856dd7d32bd5407316b3
CVE-2014-3145: Kernel: filter: prevent nla extensions to peek beyond the end of the message
Component: Kernel
Severity: Moderate
Public date: 2014-04-13T00:00:00+00:00

The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause a denial of service (over-read and system crash) via crafted BPF instructions.  NOTE: the affected code was moved to the __skb_get_nlattr_nest function before the vulnerability was announced.

Statement: This issue does not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: v3.15
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 05ab8f2647e4221cbdb3856dd7d32bd5407316b3
CVE-2014-3153: kernel: futex: pi futexes requeue issue
Component: kernel
Severity: Important
Public date: 2014-06-04T00:00:00+00:00

A flaw was found in the way the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance (PI) futexes. A local, unprivileged user could use this flaw to escalate their privileges on the system.

Statement: This issue did not affect the versions of the Linux kernel packages as shipped with Red Hat Enterprise Linux 5.

This issue requires local system access to be exploited. We are currently not aware of any working exploit for Red Hat Enterprise Linux 6 or Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.15
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 13fbca4c6ecd96ec1a1cfa2e4f2ce191fe928a5e
CVE-2014-3181: Kernel: HID: OOB write in magicmouse driver
Component: Kernel
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
Public date: 2014-08-27T00:00:00+00:00

An out-of-bounds write flaw was found in the way the Apple Magic Mouse/Trackpad multi-touch driver handled Human Interface Device (HID) reports with an invalid size. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system.

Statement: This issue does not affect the version of the kernel package as shipped with
Red Hat Enterprise Linux 5 and 6.

This issue affects the versions of Linux kernel as shipped with Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG 2 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.17
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: c54def7bd64d7c0b6993336abcffb8444795bf38
CVE-2014-3182: Kernel: HID: logitech-dj OOB array access
Component: Kernel
Severity: Low
Public date: 2014-08-21T00:00:00+00:00

An out-of-bounds read flaw was found in the way the Logitech Unifying receiver driver handled HID reports with an invalid device_index value. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system.

Statement: This issue does not affect the version of the kernel package as shipped with
Red Hat Enterprise Linux 5 and 6.

This issue affects the versions of Linux kernel as shipped with Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG 2 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.17
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: ad3e14d7c5268c2e24477c6ef54bbdf88add5d36
CVE-2014-3184: Kernel: HID: off by one error in various _report_fixup routines
Component: Kernel
Severity: Low
CWE: CWE-193 (Off-by-one Error)
Public date: 2014-08-21T00:00:00+00:00

Multiple out-of-bounds write flaws were found in the way the Cherry Cymotion keyboard driver, KYE/Genius device drivers, Logitech device drivers, Monterey Genius KB29E keyboard driver, Petalynx Maxter remote control driver, and Sunplus wireless desktop driver handled HID reports with an invalid report descriptor size. An attacker with physical access to the system could use either of these flaws to write data past an allocated memory buffer.

Statement: This issue did not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: v3.17
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 4ab25786c87eb20857bbb715c3ae34ec8fd6a214
CVE-2014-3185: Kernel: USB serial: memory corruption flaw
Component: Kernel
Severity: Moderate
Public date: 2014-08-24T00:00:00+00:00

A memory corruption flaw was found in the way the USB ConnectTech WhiteHEAT serial driver processed completion commands sent via USB Request Blocks buffers. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system.

Statement: This issue affects the versions of the Linux kernel as shipped with
Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2. Future kernel
updates for Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2 may
address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.17
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 6817ae225cd650fb1c3295d769298c38b1eba818
CVE-2014-3186: Kernel: HID: memory corruption via OOB write
Component: Kernel
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
Public date: 2014-08-27T00:00:00+00:00

A buffer overflow flaw was found in the way the Minibox PicoLCD driver handled Human Interface Device (HID) reports with an invalid size. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system.

Statement: This issue does not affect the versions of Linux kernel as shipped with
Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.

This issue affects the version of the kernel package as shipped with
Red Hat Enterprise Linux 7. Future kernel updates for Red Hat Enterprise
Linux 7 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.17
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 844817e47eef14141cf59b8d5ac08dd11c0a9189
CVE-2014-3465: gnutls: gnutls_x509_dn_oid_name NULL pointer dereference
Component: gnutls
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2014-01-31T00:00:00+00:00

The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted X.509 certificate, related to a missing LDAP description for an OID when printing the DN.

Statement: This issue did not affect the versions of gnutls as shipped with Red Hat Enterprise Linux 4, 5, and 6.

Affected upstream versions: n/a
Upstream repository: https://www.gitorious.org/gnutls/gnutls
Upstream fix commit: d3648ebb04b650e6d20a2ec1fb839256b30b9fc6
CVE-2014-3466: gnutls: insufficient session id length check in _gnutls_read_server_hello (GNUTLS-SA-2014-3)
Component: gnutls
Severity: Important
CWE: CWE-130 (Improper Handling of Length Parameter Inconsistency)
Public date: 2014-05-30T00:00:00+00:00

A flaw was found in the way GnuTLS parsed session IDs from ServerHello messages of the TLS/SSL handshake. A malicious server could use this flaw to send an excessively long session ID value, which would trigger a buffer overflow in a connecting TLS/SSL client application using GnuTLS, causing the client application to crash or, possibly, execute arbitrary code.


Affected upstream versions: n/a
Upstream repository: https://www.gitorious.org/gnutls/gnutls
Upstream fix commit: 688ea6428a432c39203d00acd1af0e7684e5ddfd
CVE-2014-3468: libtasn1: asn1_get_bit_der() can return negative bit length
Component: libtasn1
Severity: Moderate
CWE: CWE-805 (Buffer Access with Incorrect Length Value)
Public date: 2014-05-25T00:00:00+00:00

The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/libtasn1.git
Upstream fix commit: 1c3ccb3e040bf13e342ee60bc23b21b97b11923f
CVE-2014-3470: openssl: client-side denial of service when using anonymous ECDH
Component: openssl
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2014-06-05T00:00:00+00:00

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.

Statement: This issue does not affect the version of openssl and openssl097a as shipped with Red Hat Enterprise Linux 5. This issue does not affect the openssl098e as shipped with Red Hat Enterprise Linux 6.

Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_0_1h
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: 8011cd56e39a433b1837465259a9bd24a38727fb
CVE-2014-3478: file: mconvert incorrect handling of truncated pascal string size
Component: file
Severity: Moderate
Public date: 2014-06-27T00:00:00+00:00

A buffer overflow flaw was found in the way the File Information (fileinfo) extension processed certain Pascal strings. A remote attacker able to make a PHP application using fileinfo convert a specially crafted Pascal string provided by an image file could cause that application to crash.

Statement: This issue did not affect the versions of file, php, and php53 as shipped with Red Hat Enterprise Linux 5 and 6.

This issue affects the versions of file as shipped with Red Hat Enterprise Linux 7. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: FILE5_19
Upstream repository: https://github.com/file/file
Upstream fix commit: 27a14bc7ba285a0a5ebfdb55e54001aa11932b08
CVE-2014-3479: file: cdf_check_stream_offset insufficient boundary check
Component: file
Severity: Moderate
Public date: 2014-06-27T00:00:00+00:00

A denial of service flaw was found in the way the File Information (fileinfo) extension parsed certain Composite Document Format (CDF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file.

Statement: This issue did not affect the php and the file packages as shipped with Red Hat Enterprise Linux 5.

This issue affects the versions of file as shipped with Red Hat Enterprise Linux 7. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: FILE5_19
Upstream repository: https://github.com/file/file
Upstream fix commit: 36fadd29849b8087af9f4586f89dbf74ea45be67