huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2015-8215: kernel: MTU value is not validated in IPv6 stack causing packet loss
Component: kernel
Severity: Moderate
CWE: CWE-20 (Improper Input Validation)
Public date: 2015-02-23T00:00:00+00:00

It was found that the Linux kernel's IPv6 network stack did not properly validate the value of the MTU variable when it was set. A remote attacker could potentially use this flaw to disrupt a target system's networking (packet loss) by setting an invalid MTU value, for example, via a NetworkManager daemon that is processing router advertisement packets running on the target system.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and MRG-2 as this flaw was fixed in the recent releases.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise
Linux 6. Future updates for the respective releases may address the issue.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates of Red Hat Enterprise Linux 5. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v4.0
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 77751427a1ff25b27d47a4c36b12c3c8667855ac
CVE-2015-8241: libxml2: Buffer overread with XML parser in xmlNextChar
Component: libxml2
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2015-10-08T00:00:00+00:00

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.3
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: ab2b9a93ff19cedde7befbf2fcc48c6e352b6cbe
CVE-2015-8242: libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode
Component: libxml2
Severity: Low
Public date: 2015-10-11T00:00:00+00:00

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.3
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: 8fb4a770075628d6441fb17a1e435100e2f3b1a2
CVE-2015-8317: libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration
Component: libxml2
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2015-06-29T00:00:00+00:00

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.3
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: 9aa37588ee78a06ca1379a9d9356eab16686099c
CVE-2015-8324: kernel: Null pointer dereference when mounting ext4
Component: kernel
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2015-11-23T00:00:00+00:00

A NULL pointer dereference flaw was found in the way the Linux kernel's ext4 file system driver handled certain corrupted file system images. An attacker with physical access to the system could use this flaw to crash the system.

Statement: This problem did not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 7 and MRG-2.

Affected upstream versions: n/a
Fixed upstream versions: v2.6.34
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 744692dc059845b2a3022119871846e74d4f6e11
CVE-2015-8325: openssh: privilege escalation via user's PAM environment and UseLogin=yes
Component: openssh
Severity: Moderate
CWE: CWE-863 (Incorrect Authorization)
CVSS v3: 7 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2016-04-13T00:00:00+00:00

It was discovered that the OpenSSH sshd daemon fetched PAM environment settings before running the login program. In configurations with UseLogin=yes and the pam_env PAM module configured to read user environment settings, a local user could use this flaw to execute arbitrary code as root.


Affected upstream versions: n/a
Fixed upstream versions: V_7_3_P1
Upstream repository: https://anongit.mindrot.org/openssh.git
Upstream fix commit: 85bdcd7c92fe7ff133bbc4e10a65c91810f88755
CVE-2015-8374: kernel: Information leak when truncating of compressed/inlined extents on BTRFS
Component: kernel
Severity: Moderate
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
Public date: 2015-10-16T00:00:00+00:00

An information-leak vulnerability was found in the kernel when it truncated a file to a smaller size which consisted of an inline extent that was compressed. The data between the new file size and the old file size was not discarded and the number of bytes used by the inode were not correctly decremented, which gave the wrong report for callers of the stat(2) syscall. This wasted metadata space and allowed for the truncated data to be leaked, and data corruption or loss to occur.  A caller of the clone ioctl could exploit this flaw by using only standard file-system operations without root access to read the truncated data.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 as the code with the flaw is not present in the products listed.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6 and is not currently planned to be addressed in future updates.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and MRG-2. Future Linux kernel updates for the respective releases might address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v4.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 0305cd5f7fca85dae392b9ba85b116896eb7c1c7
CVE-2015-8539: kernel: local privesc in key management
Component: kernel
Severity: Important
CWE: CWE-667 (Improper Locking)
CVSS v3: 7.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2015-12-09T00:00:00+00:00

A flaw was found in the Linux kernel's key management system where it was possible for an attacker to escalate privileges or crash the machine. If a user key gets negatively instantiated, an error code is cached in the payload area. A negatively instantiated key may be then be positively instantiated by updating it with valid data. However, the ->update key type method must be aware that the error code may be there.

Statement: This issue does not affect the Linux kernels as shipped with Red Hat Enterprise Linux 4 and 5.  This issue does affect the kernels shipped with Red Hat Enterprise Linux 6, 7, MRG-2 and realtime kernels and plans to be addressed in a future update.

Affected upstream versions: n/a
Fixed upstream versions: v4.4
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 096fe9eaea40a17e125569f9e657e34cdb6d73bd
CVE-2015-8543: kernel: IPv6 connect causes DoS via NULL pointer dereference
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2015-12-09T00:00:00+00:00

A NULL pointer dereference flaw was found in the way the Linux kernel's network subsystem handled socket creation with an invalid protocol identifier. A local user could use this flaw to crash the system.

Statement: This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7 and MRG-2. Future updates for the respective releases may address the issue.

This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates of Red Hat Enterprise Linux 5. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v4.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 79462ad02e861803b3840cc782248c7359451cd9
CVE-2015-8629: krb5: xdr_nullstring() doesn't check for terminating null character
Component: krb5
Severity: Low
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Public date: 2016-01-08T00:00:00+00:00

An out-of-bounds read flaw was found in the kadmind service of MIT Kerberos. An authenticated attacker could send a maliciously crafted message to force kadmind to read beyond the end of allocated memory, and write the memory contents to the KDC database if the attacker has write permission, leading to information disclosure.


Affected upstream versions: n/a
Fixed upstream versions: krb5-1.15-final
Upstream repository: https://github.com/krb5/krb5
Upstream fix commit: df17a1224a3406f57477bcd372c61e04c0e5a5bb
CVE-2015-8630: krb5: krb5 doesn't check for null policy when KADM5_POLICY is set in the mask
Component: krb5
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2016-01-08T00:00:00+00:00

A NULL pointer dereference flaw was found in the procedure used by the MIT Kerberos kadmind service to store policies: the kadm5_create_principal_3() and kadm5_modify_principal() function did not ensure that a policy was given when KADM5_POLICY was set. An authenticated attacker with permissions to modify the database could use this flaw to add or modify a principal with a policy set to NULL, causing the kadmind service to crash.


Affected upstream versions: n/a
Fixed upstream versions: krb5-1.15-final
Upstream repository: https://github.com/krb5/krb5
Upstream fix commit: b863de7fbf080b15e347a736fdda0a82d42f4f6b
CVE-2015-8631: krb5: Memory leak caused by supplying a null principal name in request
Component: krb5
Severity: Moderate
CWE: CWE-401 (Missing Release of Memory after Effective Lifetime)
Public date: 2016-01-08T00:00:00+00:00

A memory leak flaw was found in the krb5_unparse_name() function of the MIT Kerberos kadmind service. An authenticated attacker could repeatedly send specially crafted requests to the server, which could cause the server to consume large amounts of memory resources, ultimately leading to a denial of service due to memory exhaustion.


Affected upstream versions: n/a
Fixed upstream versions: krb5-1.15-final
Upstream repository: https://github.com/krb5/krb5
Upstream fix commit: 83ed75feba32e46f736fcce0d96a0445f29b96c2
CVE-2015-8660: kernel: Permission bypass on overlayfs during copy_up
Component: kernel
Severity: Moderate
CWE: CWE-732 (Incorrect Permission Assignment for Critical Resource)
Public date: 2015-12-04T00:00:00+00:00

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6 as the code with the flaw is not present in the products listed.

This issue does not affect the Linux kernel packages as shipped with Red Hat
Enterprise Linux 7 and Red Hat Enterprise MRG 2 as the due updates to fix
this issue have been shipped now.

Affected upstream versions: n/a
Fixed upstream versions: v4.4
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: acff81ec2c79492b180fade3c2894425cd35a545
CVE-2015-8710: libxml2: out-of-bounds memory access when parsing an unclosed HTML comment
Component: libxml2
Severity: Moderate
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Public date: 2015-04-19T00:00:00+00:00

It was discovered that libxml2 could access out-of-bounds memory when parsing unclosed HTML comments. A remote attacker could provide a specially crafted XML file that, when processed by an application linked against libxml2, could cause the application to disclose heap memory contents.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.3
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: e724879d964d774df9b7969fc846605aa1bac54c
CVE-2015-8746: kernel: when NFSv4 migration is executed, kernel oops occurs at NFS client
Component: kernel
Severity: Low
CWE: CWE-665 (Improper Initialization)
Public date: 2015-08-15T00:00:00+00:00

A NULL pointer dereference flaw was found in the Linux kernel: the NFSv4.2 migration code improperly initialized the kernel structure. A local, authenticated user could use this flaw to cause a panic of the NFS client (denial of service).

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, 6 as the code with the flaw is not present in the products listed.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and MRG-2. Future updates for the respective releases may address the issue.

Affected upstream versions: n/a
Fixed upstream versions: v4.3
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 18e3b739fdc826481c6a1335ce0c5b19b3d415da
CVE-2015-8767: kernel: SCTP denial of service during timeout
Component: kernel
Severity: Moderate
CWE: CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition)
Public date: 2015-01-11T00:00:00+00:00

A race condition flaw was found in the way the Linux kernel's SCTP implementation handled sctp_accept() during the processing of heartbeat timeout events. A remote attacker could use this flaw to prevent further connections to be accepted by the SCTP server running on the system, resulting in a denial of service.

Statement: This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7 and MRG-2 and may be addressed in future updates. 

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5. Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v4.3
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 635682a14427d241bab7bbdeebb48a7d7b91638e
CVE-2015-8784: libtiff: out-of-bound write in NeXTDecode()
Component: libtiff
Severity: Important
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 5.3 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)
Public date: 2016-01-24T00:00:00+00:00

The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif.


Affected upstream versions: n/a
Fixed upstream versions: Release-v4-0-7
Upstream repository: https://github.com/vadz/libtiff
Upstream fix commit: b18012dae552f85dcc5c57d3bf4e997a15b1cc1c
CVE-2015-8803: nettle: secp256 calculation bug
Component: nettle
Severity: Moderate
CWE: CWE-358 (Improperly Implemented Security Check for Standard)
Public date: 2016-02-02T00:00:00+00:00

The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8805.


Affected upstream versions: n/a
Fixed upstream versions: nettle_3.2_release_20160128
Upstream repository: https://git.lysator.liu.se/nettle/nettle
Upstream fix commit: c71d2c9d20eeebb985e3872e4550137209e3ce4d
CVE-2015-8804: nettle: miscalculations on secp384 curve
Component: nettle
Severity: Moderate
CWE: CWE-358 (Improperly Implemented Security Check for Standard)
Public date: 2016-02-02T00:00:00+00:00

x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors.


Affected upstream versions: n/a
Fixed upstream versions: nettle_3.2_release_20160128
Upstream repository: https://git.lysator.liu.se/nettle/nettle
Upstream fix commit: fa269b6ad06dd13c901dbd84a12e52b918a09cd7
CVE-2015-8805: nettle: secp256 calculation bug
Component: nettle
Severity: Moderate
CWE: CWE-358 (Improperly Implemented Security Check for Standard)
Public date: 2016-02-02T00:00:00+00:00

The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST elliptic curve, which allows attackers to have unspecified impact via unknown vectors, a different vulnerability than CVE-2015-8803.


Affected upstream versions: n/a
Fixed upstream versions: nettle_3.2_release_20160128
Upstream repository: https://git.lysator.liu.se/nettle/nettle
Upstream fix commit: c71d2c9d20eeebb985e3872e4550137209e3ce4d
CVE-2015-8812: kernel: CXGB3: Logic bug in return code handling prematurely frees key structures causing Use after free or kernel panic.
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
Public date: 2016-02-11T00:00:00+00:00

A use-after-free flaw was found in the CXGB3 kernel driver when the network was considered to be congested. The kernel incorrectly misinterpreted the congestion as an error condition and incorrectly freed or cleaned up the socket buffer (skb). When the device then sent the skb's queued data, these structures were referenced. A local attacker could use this flaw to panic the system (denial of service) or, with a local account, escalate their privileges.

Statement: This issue affects the Linux kernels as shipped with Red Hat Enterprise Linux 5, 6 and 7 and Red Hat Enterprise MRG 2 and realtime kernels and may be addressed in a future update.

This has been rated as having Moderate security impact and is not currently
planned to be addressed in future updates in Red Hat Enterprise Linux 5 and 6 . For additional information, refer to the Red Hat Enterprise Linux Life Cycle:
https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v4.5
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3
CVE-2015-8817: Qemu: OOB access in address_space_rw leads to segmentation fault
Component: Qemu
Severity: Low
CWE: CWE-787 (Out-of-bounds Write)
Public date: 2016-01-27T00:00:00+00:00

An out-of-bounds flaw was found in the QEMU emulator built using 'address_space_translate' to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service).


Affected upstream versions: n/a
Fixed upstream versions: v2.4.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: 23820dbfc79d1c9dce090b4c555994f2bb6a69b3
CVE-2015-8818: Qemu: OOB access in address_space_rw leads to segmentation fault
Component: Qemu
Severity: Low
CWE: CWE-787 (Out-of-bounds Write)
Public date: 2016-01-27T00:00:00+00:00

An out-of-bounds flaw was found in the QEMU emulator built using 'address_space_translate' to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service).


Affected upstream versions: n/a
Fixed upstream versions: v2.4.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: b242e0e0e2969c044a318e56f7988bbd84de1f63
CVE-2015-8830: kernel: AIO write triggers integer overflow in some protocols
Component: kernel
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2015-03-21T00:00:00+00:00

Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec.  NOTE: this vulnerability exists because of a CVE-2012-6701 regression.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5, as the related AIO vector code is not present in this product.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7. Future Linux kernel updates for the respective releases might address this issue.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux MRG-2. This flaw is not currently planned to be addressed in future updates due to MRG-2 being an EUS release. For additional information, refer to the Extended Update Support (EUS) Guide: https://access.redhat.com/articles/rhel-eus.

Affected upstream versions: n/a
Fixed upstream versions: v4.1
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 4c185ce06dca14f5cea192f5a2c981ef50663f2b
CVE-2015-8839: kernel: ext4 filesystem page fault race condition with fallocate call.
Component: kernel
Severity: Moderate
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
Public date: 2016-03-31T00:00:00+00:00

A flaw was found in the Linux kernel when attempting to "punch a hole" in files existing on an ext4 filesystem. When punching holes into a file races with the page fault of the same area, it is possible that freed blocks remain referenced from page cache pages mapped to process' address space.

Statement: This issue does not affect the Linux kernels as shipped with Red Hat Enterprise Linux 5 and 6.

This issue affects the Linux kernels as shipped with Red Hat Enterprise Linux 7 and MRG-2 kernels.

Affected upstream versions: n/a
Fixed upstream versions: v4.5
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: ea3d7209ca01da209cda6f0dea8be9cc4b7a933b
CVE-2015-8844: kernel: incorrect restoration of machine specific registers from userspace
Component: kernel
Severity: Moderate
CWE: CWE-772 (Missing Release of Resource after Effective Lifetime)
Public date: 2016-04-13T00:00:00+00:00

A flaw was found in the Linux kernel which could cause a kernel panic when restoring machine specific registers on the PowerPC platform. Incorrect transactional memory state registers could inadvertently change the call path on return from userspace and cause the kernel to enter an unknown state and crash.

Statement: This issue does not affect the Linux kernels as shipped with Red Hat Enterprise Linux 5 and 6,

This issue affects the Linux kernels as shipped with Red Hat Enterprise Linux 7 and MRG-2 realtime kernels.

For additional information, refer
to the Red Hat Enterprise Linux Life Cycle:
https://access.redhat.com/support/policy/updates/errata/ .

Affected upstream versions: n/a
Fixed upstream versions: v4.4
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: d2b9d2a5ad5ef04ff978c9923d19730cb05efd55