huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2014-3480: file: cdf_count_chain insufficient boundary check
Component: file
Severity: Moderate
Public date: 2014-06-27T00:00:00+00:00

A denial of service flaw was found in the way the File Information (fileinfo) extension parsed certain Composite Document Format (CDF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file.

Statement: This issue did not affect the php and the file packages as shipped with Red Hat Enterprise Linux 5.

This issue affects the versions of file as shipped with Red Hat Enterprise Linux 7. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: FILE5_19
Upstream repository: https://github.com/file/file
Upstream fix commit: 40bade80cbe2af1d0b2cd0420cebd5d5905a2382
CVE-2014-3487: file: cdf_read_property_info insufficient boundary check
Component: file
Severity: Moderate
Public date: 2014-06-27T00:00:00+00:00

A denial of service flaw was found in the way the File Information (fileinfo) extension parsed certain Composite Document Format (CDF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file.

Statement: This issue did not affect the versions of file, php, and php53 as shipped with Red Hat Enterprise Linux 5 and 6.

This issue affects the versions of file as shipped with Red Hat Enterprise Linux 7. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: FILE5_19
Upstream repository: https://github.com/file/file
Upstream fix commit: 93e063ee374b6a75729df9e7201fb511e47e259d
CVE-2014-3490: RESTEasy: XXE via parameter entities
Component: RESTEasy
Severity: Moderate
CWE: CWE-611 (Improper Restriction of XML External Entity Reference)
Public date: 2014-07-23T00:00:00+00:00

It was found that the fix for CVE-2012-0818 was incomplete: external parameter entities were not disabled when the resteasy.document.expand.entity.references parameter was set to false. A remote attacker able to send XML requests to a RESTEasy endpoint could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.


Affected upstream versions: n/a
Fixed upstream versions: 3.0.9.Final
Upstream repository: https://github.com/ronsigal/Resteasy
Upstream fix commit: 9b7d0f574cafdcf3bea5428f3145ab4908fc6d83
CVE-2014-3505: openssl: DTLS packet processing double free
Component: openssl
Severity: Moderate
CWE: CWE-672 (Operation on a Resource after Expiration or Release)
Public date: 2014-08-06T00:00:00+00:00

A flaw was discovered in the way OpenSSL handled DTLS packets. A remote attacker could use this flaw to cause a DTLS server or client using OpenSSL to crash or use excessive amounts of memory.


Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: bff1ce4e6a1c57c3d0a5f9e4f85ba6385fccfe8b
CVE-2014-3506: openssl: DTLS memory exhaustion
Component: openssl
Severity: Moderate
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
Public date: 2014-08-06T00:00:00+00:00

A flaw was discovered in the way OpenSSL handled DTLS packets. A remote attacker could use this flaw to cause a DTLS server or client using OpenSSL to crash or use excessive amounts of memory.


Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: 1250f12613b61758675848f6600ebd914ccd7636
CVE-2014-3507: openssl: DTLS memory leak from zero-length fragments
Component: openssl
Severity: Moderate
CWE: CWE-401 (Missing Release of Memory after Effective Lifetime)
Public date: 2014-08-06T00:00:00+00:00

A flaw was discovered in the way OpenSSL handled DTLS packets. A remote attacker could use this flaw to cause a DTLS server or client using OpenSSL to crash or use excessive amounts of memory.

Statement: This did not affect openssl packages in Red Hat Enterprise Linux 5 (based on upstream 0.9.8e) and openssl 1.0.0 packages in Red Hat Enterprise Linux 6 (i.e. packages released before RHBA-2013:1585, which rebased openssl from 1.0.0 to 1.0.1e).  The issue was introduced upstream in versions 0.9.8o and 1.0.0a.

Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: d0a4b7d1a2948fce38515b8d862f43e7ba0ebf74
CVE-2014-3508: openssl: information leak in pretty printing functions
Component: openssl
Severity: Moderate
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
Public date: 2014-08-06T00:00:00+00:00

It was discovered that the OBJ_obj2txt() function could fail to properly NUL-terminate its output. This could possibly cause an application using OpenSSL functions to format fields of X.509 certificates to disclose portions of its memory.


Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: 0042fb5fd1c9d257d713b15a1f45da05cf5c1c87
CVE-2014-3509: openssl: race condition in ssl_parse_serverhello_tlsext
Component: openssl
Severity: Moderate
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
Public date: 2014-08-06T00:00:00+00:00

A race condition was found in the way OpenSSL handled ServerHello messages with an included Supported EC Point Format extension. A malicious server could possibly use this flaw to cause a multi-threaded TLS/SSL client using OpenSSL to write into freed memory, causing the client to crash or execute arbitrary code.


Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: fb0bc2b273bcc2d5401dd883fe869af4fc74bb21
CVE-2014-3510: openssl: DTLS anonymous (EC)DH denial of service
Component: openssl
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2014-08-06T00:00:00+00:00

A NULL pointer dereference flaw was found in the way OpenSSL performed a handshake when using the anonymous Diffie-Hellman (DH) key exchange. A malicious server could cause a DTLS client using OpenSSL to crash if that client had anonymous DH cipher suites enabled.


Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: 17160033765480453be0a41335fa6b833691c049
CVE-2014-3511: openssl: TLS protocol downgrade attack
Component: openssl
Severity: Moderate
CWE: CWE-390 (Detection of Error Condition Without Action)
Public date: 2014-08-06T00:00:00+00:00

A flaw was found in the way OpenSSL handled fragmented handshake packets. A man-in-the-middle attacker could use this flaw to force a TLS/SSL server using OpenSSL to use TLS 1.0, even if both the client and the server supported newer protocol versions.


Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: 280b1f1ad12131defcd986676a8fc9717aaa601b
CVE-2014-3513: openssl: SRTP memory leak causes crash when using specially-crafted handshake message
Component: openssl
Severity: Important
CWE: CWE-401 (Missing Release of Memory after Effective Lifetime)
Public date: 2014-10-15T00:00:00+00:00

A memory leak flaw was found in the way OpenSSL parsed the DTLS Secure Real-time Transport Protocol (SRTP) extension data. A remote attacker could send multiple specially crafted handshake messages to exhaust all available memory of an SSL/TLS or DTLS server.

Statement: This issue did not affect the versions of OpenSSL as shipped with Red Hat Enterprise Linux 5, Red Hat JBoss Enterprise Application Platform 5 and 6, and Red Hat Enterprise JBoss Enterprise Web Server 1 and 2.

Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_0_1j
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: 2b0532f3984324ebe1236a63d15893792384328d
CVE-2014-3515: php: unserialize() SPL ArrayObject / SPLObjectStorage type confusion flaw
Component: php
Severity: Low
CWE: CWE-843 (Access of Resource Using Incompatible Type ('Type Confusion'))
Public date: 2014-07-09T00:00:00+00:00

A type confusion issue was found in the SPL ArrayObject and SPLObjectStorage classes' unserialize() method. A remote attacker able to submit specially crafted input to a PHP application, which would then unserialize this input using one of the aforementioned methods, could use this flaw to execute arbitrary code with the privileges of the user running that PHP application.

Statement: This issue did not affect the versions of php as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: php-5.4.30
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 88223c5245e9b470e1e6362bfd96829562ffe6ab
CVE-2014-3534: kernel: s390: ptrace: insufficient sanitization when setting psw mask
Component: kernel
Severity: Important
CWE: CWE-266 (Incorrect Privilege Assignment)
Public date: 2014-07-21T00:00:00+00:00

It was found that Linux kernel's ptrace subsystem did not properly sanitize the address-space-control bits when the program-status word (PSW) was being set. On IBM S/390 systems, a local, unprivileged user could use this flaw to set address-space-control bits to the kernel space, and thus gain read and write access to kernel memory.

Statement: This issue did not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.16
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: dab6cf55f81a6e16b8147aed9a843e1691dcd318
CVE-2014-3535: Kernel: netdevice.h: NULL pointer dereference over VxLAN
Component: Kernel
Severity: Important
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2014-09-09T00:00:00+00:00

A NULL pointer dereference flaw was found in the way the Linux kernel's networking implementation handled logging while processing certain invalid packets coming in via a VxLAN interface. A remote attacker could use this flaw to crash the system by sending a specially crafted packet to such an interface.

Statement: This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 5, 7 and Red Hat Enterprise MRG 2.

This issue affects the version of Linux kernel as shipped with Red Hat Enterprise Linux 6. Future kernel updates for Red Hat Enterprise Linux 6
may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.36
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 256df2f3879efdb2e9808bdb1b54b16fbb11fa38
CVE-2014-3538: file: unrestricted regular expression matching
Component: file
Severity: Moderate
Public date: 2014-06-27T00:00:00+00:00

Multiple flaws were found in the File Information (fileinfo) extension regular expression rules for detecting various files. A remote attacker could use either of these flaws to cause a PHP application using fileinfo to consume an excessive amount of CPU.


Affected upstream versions: n/a
Fixed upstream versions: FILE5_19
Upstream repository: https://github.com/file/file
Upstream fix commit: 74cafd7de9ec99a14f4480927580e501c8f852c3
CVE-2014-3560: samba: remote code execution in nmbd
Component: samba
Severity: Important
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Public date: 2014-07-31T00:00:00+00:00

A heap-based buffer overflow flaw was found in Samba's NetBIOS message block daemon (nmbd). An attacker on the local network could use this flaw to send specially crafted packets that, when processed by nmbd, could possibly lead to arbitrary code execution with root privileges.

Statement: This issue did not affect the versions of samba or samba3x as shipped with Red Hat Enterprise Linux 5, and the versions of samba as shipped with Red Hat Enterprise Linux 6, as it only affected Samba 4.0.0 and higher.

Affected upstream versions: n/a
Fixed upstream versions: samba-4.1.11
Upstream repository: https://git.samba.org/samba.git
Upstream fix commit: e6a848630da3ba958c442438ea131c99fa088605
CVE-2014-3567: openssl: Invalid TLS/SSL session tickets could cause memory leak leading to server crash
Component: openssl
Severity: Moderate
CWE: CWE-401 (Missing Release of Memory after Effective Lifetime)
Public date: 2014-10-15T00:00:00+00:00

A memory leak flaw was found in the way an OpenSSL handled failed session ticket integrity checks. A remote attacker could exhaust all available memory of an SSL/TLS or DTLS server by sending a large number of invalid session tickets to that server.

Statement: This issue does not affect the version of openssl shipped with Red Hat Enterprise Linux 5; Red Hat JBoss Enterprise Application Server 5 and 6; and Red Hat JBoss Enterprise Web Server 1 and 2 because openssl-0.9.8e does not include support for session tickets.

Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_0_1j
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: 7fd4ce6a997be5f5c9e744ac527725c2850de203
CVE-2014-3570: openssl: Bignum squaring may produce incorrect results
Component: openssl
Severity: Low
CVSS v3: 3.7 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Public date: 2015-01-08T00:00:00+00:00

It was found that OpenSSL's BigNumber Squaring implementation could produce incorrect results under certain special conditions. This flaw could possibly affect certain OpenSSL library functionality, such as RSA blinding. Note that this issue occurred rarely and with a low probability, and there is currently no known way of exploiting it.

Statement: This issue affects the version of openssl098e as shipped with Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this issue as having Low security impact and does not plan to address this flaw for the above components in any future security updates.

This issue affects the version of openssl and openssl097a as shipped with Red Hat Enterprise Linux 5. Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: a7a44ba55cb4f884c6bc9ceac90072dea38e66d0
CVE-2014-3571: openssl: DTLS segmentation fault in dtls1_get_record
Component: openssl
Severity: Moderate
Public date: 2015-01-08T00:00:00+00:00

A NULL pointer dereference flaw was found in the DTLS implementation of OpenSSL. A remote attacker could send a specially crafted DTLS message, which would cause an OpenSSL server to crash.

Statement: This issue does not affect the version of openssl097a as shipped with Red Hat Enterprise Linux 5. This issue affects the version of openssl098e as shipped with Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this issue as having Moderate security impact and does not plan to address this flaw for the above components in any future security updates.

This issue affects the version of openssl as shipped with Red Hat Enterprise Linux 5. Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: feba02f3919495e1b960c33ba849e10e77d0785d
CVE-2014-3572: openssl: ECDH downgrade bug fix
Component: openssl
Severity: Low
Public date: 2015-01-05T00:00:00+00:00

It was discovered that OpenSSL would perform an ECDH key exchange with a non-ephemeral key even when the ephemeral ECDH cipher suite was selected. A malicious server could make a TLS/SSL client using OpenSSL use a weaker key exchange method than the one requested by the user.

Statement: This issue does not affect the version of openssl and openssl097a as shipped with Red Hat Enterprise Linux 5. This issue does not affect the version of openssl098e as shipped with Red Hat Enterprise Linux 6 and 7.

Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: b15f8769644b00ef7283521593360b7b2135cb63
CVE-2014-3587: file: incomplete fix for CVE-2012-1571 in cdf_read_property_info
Component: file
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2014-08-21T00:00:00+00:00

It was found that the fix for CVE-2012-1571 was incomplete; the File Information (fileinfo) extension did not correctly parse certain Composite Document Format (CDF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file.

Statement: This issue did not affect the php and the file packages as shipped with Red Hat Enterprise Linux 5.

This issue affects the versions of file as shipped with Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: FILE5_20
Upstream repository: https://github.com/file/file
Upstream fix commit: 0641e56be1af003aa02c7c6b0184466540637233
CVE-2014-3597: php: multiple buffer over-reads in php_parserr
Component: php
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2014-07-30T00:00:00+00:00

Multiple buffer over-read flaws were found in the php_parserr() function of PHP. A malicious DNS server or a man-in-the-middle attacker could possibly use this flaw to crash a PHP application that used the dns_get_record() function to perform a DNS query.

Statement: This issue did not affect the versions of php as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: php-5.4.33
Upstream repository: https://github.com/php/php-src
Upstream fix commit: 2fefae47716d501aec41c1102f3fd4531f070b05
CVE-2014-3601: kernel: kvm: invalid parameter passing in kvm_iommu_map_pages()
Component: kernel
Severity: Moderate
Public date: 2014-08-19T00:00:00+00:00

A flaw was found in the way the Linux kernel's kvm_iommu_map_pages() function handled IOMMU mapping failures. A privileged user in a guest with an assigned host device could use this flaw to crash the host.


Affected upstream versions: n/a
Fixed upstream versions: v3.17
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7
CVE-2014-3610: kernel: kvm: noncanonical MSR writes
Component: kernel
Severity: Important
CWE: CWE-248 (Uncaught Exception)
Public date: 2014-10-21T00:00:00+00:00

It was found that KVM's Write to Model Specific Register (WRMSR) instruction emulation would write non-canonical values passed in by the guest to certain MSRs in the host's context. A privileged guest user could use this flaw to crash the host.

Statement: This issue does not affect Linux kernel packages as shipped with Red Hat Enterprise Linux 6 and 7. Future kvm package updates for Red Hat Enterprise Linux 5 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.18
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 854e8bb1aa06c578c2c9145fa6bfe3680ef63b23
CVE-2014-3611: kernel: kvm: PIT timer race condition
Component: kernel
Severity: Important
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
Public date: 2014-10-21T00:00:00+00:00

A race condition flaw was found in the way the Linux kernel's KVM subsystem handled PIT (Programmable Interval Timer) emulation. A guest user who has access to the PIT I/O ports could use this flaw to crash the host.

Statement: This issue does affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6 and 7. This issue does affect the kvm packages as shipped with Red Hat Enterprise Linux 5. Future updates may address this issue in the
respective Red Hat Enterprise Linux releases.

Affected upstream versions: n/a
Fixed upstream versions: v3.18
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 2febc839133280d5a5e8e1179c94ea674489dae2
CVE-2014-3615: Qemu: information leakage when guest sets high resolution
Component: Qemu
Severity: Low
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
Public date: 2014-09-05T00:00:00+00:00

An information leak flaw was found in the way QEMU's VGA emulator accessed frame buffer memory for high resolution displays. A privileged guest user could use this flaw to leak memory contents of the host to the guest by setting the display to use a high resolution in the guest.

Statement: This issue does not affect the versions of kvm package as shipped with Red Hat
Enterprise Linux 5 or the versions of qemu-kvm package as shipped with Red Hat Enterprise Linux 6.

Affected upstream versions: n/a
Fixed upstream versions: v2.2.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: ab9509cceabef28071e41bdfa073083859c949a7
CVE-2014-3631: kernel: keys: incorrect termination condition in assoc array garbage collection
Component: kernel
Severity: Moderate
Public date: 2014-09-09T00:00:00+00:00

A flaw was found in the way the Linux kernel's keys subsystem handled the termination condition in the associative array garbage collection functionality. A local, unprivileged user could use this flaw to crash the system.

Statement: This issue does not affect versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 7 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.17
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 95389b08d93d5c06ec63ab49bd732b0069b7c35e
CVE-2014-3633: libvirt: qemu: out-of-bounds read access in qemuDomainGetBlockIoTune() due to invalid index
Component: libvirt
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2014-09-17T00:00:00+00:00

An out-of-bounds read flaw was found in the way libvirt's qemuDomainGetBlockIoTune() function looked up the disk index in a non-persistent (live) disk configuration while a persistent disk configuration was being indexed. A remote attacker able to establish a read-only connection to libvirtd could use this flaw to crash libvirtd or, potentially, leak memory from the libvirtd process.

Statement: This issue does not affect the versions of libvirt packages as shipped with
Red Hat Enterprise Linux 5.

This issue does affect the versions of libvirt packages as shipped with Red Hat
Enterprise Linux 6 and 7. Future updates may address this issue in the
respective Red Hat Enterprise Linux releases.

Affected upstream versions: n/a
Fixed upstream versions: v1.2.9
Upstream repository: https://libvirt.org/git/libvirt.git
Upstream fix commit: 3e745e8f775dfe6f64f18b5c2fe4791b35d3546b