huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2014-0238: file: CDF property info parsing nelements infinite loop
Component: file
Severity: Moderate
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
Public date: 2014-05-29T00:00:00+00:00

A denial of service flaw was found in the way the File Information (fileinfo) extension parsed certain Composite Document Format (CDF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted CDF file.

Statement: This issue did not affect the php and the file packages as shipped with Red Hat Enterprise Linux 5.

This issue affects the versions of file as shipped with Red Hat Enterprise Linux 7. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: FILE5_19
Upstream repository: https://github.com/file/file
Upstream fix commit: f97486ef5dc3e8735440edc4fc8808c63e1a3ef0
CVE-2014-0247: libreoffice: VBA macros executed unconditionally
Component: libreoffice
Severity: Moderate
CWE: CWE-356 (Product UI does not Warn User of Unsafe Actions)
Public date: 2014-06-23T00:00:00+00:00

It was found that LibreOffice documents executed macros unconditionally, without user approval, when these documents were opened using LibreOffice. An attacker could use this flaw to execute arbitrary code as the user running LibreOffice by embedding malicious VBA scripts in the document as macros.


Affected upstream versions: n/a
Upstream repository: https://gerrit.libreoffice.org/core.git
Upstream fix commit: 4d4ae52b4339582a039744d03671c1db0633d6c3
CVE-2014-0368: OpenJDK: insufficient Socket checkListen checks (Networking, 8011786)
Component: OpenJDK
Severity: Moderate
Public date: 2014-01-14T00:00:00+00:00

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded 7u45, allows remote attackers to affect confidentiality via unknown vectors related to Networking.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to incorrect permission checks when listening on a socket, which allows attackers to escape the sandbox.


Affected upstream versions: n/a
Upstream repository: https://hg.openjdk.java.net/jdk7u/jdk7u/jdk
Upstream fix commit: e6160aedadd5
CVE-2014-0373: OpenJDK: SnmpStatusException handling issues (Serviceability, 7068126)
Component: OpenJDK
Severity: Important
Public date: 2014-01-14T00:00:00+00:00

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to throwing of an incorrect exception when SnmpStatusException should have been used in the SNMP implementation, which allows attackers to escape the sandbox.


Affected upstream versions: n/a
Upstream repository: https://hg.openjdk.java.net/jdk7u/jdk7u/jdk
Upstream fix commit: 496c51673dec
CVE-2014-0376: OpenJDK: document builder missing security checks (JAXP, 8027201, 8025018)
Component: OpenJDK
Severity: Moderate
Public date: 2014-01-14T00:00:00+00:00

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAXP.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an improper check for "code permissions when creating document builder factories."


Affected upstream versions: n/a
Upstream repository: https://hg.openjdk.java.net/jdk7u/jdk7u/jaxp
Upstream fix commit: 42be8e6266ab
CVE-2014-0411: OpenJDK: TLS/SSL handshake timing issues (JSSE, 8023069)
Component: OpenJDK
Severity: Moderate
Public date: 2014-01-14T00:00:00+00:00

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake.


Affected upstream versions: n/a
Upstream repository: https://hg.openjdk.java.net/jdk7u/jdk7u/jdk
Upstream fix commit: d533e96c7acc
CVE-2014-0416: OpenJDK: insecure subject principals set handling (JAAS, 8024306)
Component: OpenJDK
Severity: Moderate
Public date: 2014-01-14T00:00:00+00:00

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance.


Affected upstream versions: n/a
Upstream repository: https://hg.openjdk.java.net/jdk7u/jdk7u/jdk
Upstream fix commit: abe1cb2d27cb
CVE-2014-0423: OpenJDK: XXE issue in decoder (Beans, 8023245)
Component: OpenJDK
Severity: Moderate
Public date: 2014-01-14T00:00:00+00:00

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding.


Affected upstream versions: n/a
Upstream repository: https://hg.openjdk.java.net/jdk7u/jdk7u/jdk
Upstream fix commit: 995b32f013f5
CVE-2014-0428: OpenJDK: insufficient security checks in IIOP streams (CORBA, 8025767)
Component: OpenJDK
Severity: Critical
Public date: 2014-01-14T00:00:00+00:00

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox.


Affected upstream versions: n/a
Upstream repository: https://hg.openjdk.java.net/jdk7u/jdk7u/corba
Upstream fix commit: 0a879f00b698
CVE-2014-1438: kernel: x86: exceptions are not cleared in AMD FXSAVE workaround
Component: kernel
Severity: Moderate
Public date: 2013-12-30T00:00:00+00:00

The restore_fpu_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms does not clear pending exceptions before proceeding to an EMMS instruction, which allows local users to cause a denial of service (task kill) or possibly gain privileges via a crafted application.

Statement: This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.

Affected upstream versions: n/a
Fixed upstream versions: v3.13
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 26bef1318adc1b3a530ecc807ef99346db2aa8b0
CVE-2014-1491: nss: Do not allow p-1 as a public DH value (MFSA 2014-12)
Component: nss
Severity: Moderate
CWE: CWE-358 (Improperly Implemented Security Check for Standard)
Public date: 2014-02-04T00:00:00+00:00

It was found that NSS accepted weak Diffie-Hellman Key exchange (DHKE) parameters. This could possibly lead to weak encryption being used in communication between the client and the server.


Affected upstream versions: n/a
Upstream repository: https://hg.mozilla.org/projects/nss
Upstream fix commit: 12c42006aed8
CVE-2014-1492: nss: IDNA hostname matching code does not follow RFC 6125 recommendation (MFSA 2014-45)
Component: nss
Severity: Low
CWE: CWE-295 (Improper Certificate Validation)
Public date: 2014-03-18T00:00:00+00:00

It was found that the implementation of Internationalizing Domain Names in Applications (IDNA) hostname matching in NSS did not follow the RFC 6125 recommendations. This could lead to certain invalid certificates with international characters to be accepted as valid.


Affected upstream versions: n/a
Upstream repository: https://hg.mozilla.org/projects/nss
Upstream fix commit: 709d4e597979
CVE-2014-1690: Kernel: netfilter: nf_nat: leakage of uninitialized buffer in IRC NAT helper
Component: Kernel
Severity: Low
Public date: 2013-12-31T00:00:00+00:00

The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature.

Statement: This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.

Affected upstream versions: n/a
Fixed upstream versions: v3.13
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 2690d97ade05c5325cbf7c72b94b90d265659886
CVE-2014-1737: kernel: block: floppy: privilege escalation via FDRAWCMD floppy ioctl command
Component: kernel
Severity: Important
Public date: 2014-05-07T00:00:00+00:00

A flaw was found in the way the Linux kernel's floppy driver handled user space provided data in certain error code paths while processing FDRAWCMD IOCTL commands. A local user with write access to /dev/fdX could use this flaw to free (using the kfree() function) arbitrary kernel memory. (CVE-2014-1737, Important)

It was found that the Linux kernel's floppy driver leaked internal kernel memory addresses to user space during the processing of the FDRAWCMD IOCTL command. A local user with write access to /dev/fdX could use this flaw to obtain information about the kernel heap arrangement. (CVE-2014-1738, Low)

Note: A local user with write access to /dev/fdX could use these two flaws (CVE-2014-1737 in combination with CVE-2014-1738) to escalate their privileges on the system.


Affected upstream versions: n/a
Fixed upstream versions: v3.15
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: ef87dbe7614341c2e7bfe8d32fcb7028cc97442c
CVE-2014-1738: kernel: block: floppy: privilege escalation via FDRAWCMD floppy ioctl command
Component: kernel
Severity: Important
Public date: 2014-05-07T00:00:00+00:00

A flaw was found in the way the Linux kernel's floppy driver handled user space provided data in certain error code paths while processing FDRAWCMD IOCTL commands. A local user with write access to /dev/fdX could use this flaw to free (using the kfree() function) arbitrary kernel memory. (CVE-2014-1737, Important)

It was found that the Linux kernel's floppy driver leaked internal kernel memory addresses to user space during the processing of the FDRAWCMD IOCTL command. A local user with write access to /dev/fdX could use this flaw to obtain information about the kernel heap arrangement. (CVE-2014-1738, Low)

Note: A local user with write access to /dev/fdX could use these two flaws (CVE-2014-1737 in combination with CVE-2014-1738) to escalate their privileges on the system.


Affected upstream versions: n/a
Fixed upstream versions: v3.15
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 2145e15e0557a01b9195d1c7199a1b92cb9be81f
CVE-2014-1739: Kernel: drivers: media: an information leakage
Component: Kernel
Severity: Low
Public date: 2014-04-30T00:00:00+00:00

An information leak flaw was found in the way the Linux kernel handled media device enumerate entities IOCTL requests. A local user able to access the /dev/media0 device file could use this flaw to leak kernel memory bytes.

Statement: This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.15
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: e6a623460e5fc960ac3ee9f946d3106233fd28d8
CVE-2014-1869: stapler-adjunct-zeroclipboard: multiple cross-site scripting (XSS) flaws
Component: stapler-adjunct-zeroclipboard
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Public date: 2014-01-31T00:00:00+00:00

Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained by Jon Rohan and James M. Greene, allow remote attackers to inject arbitrary web script or HTML via vectors related to certain SWF query parameters (aka loaderInfo.parameters).

Statement: This issue affects the versions of Jenkins as shipped with Red Hat OpenShift Enterprise 1 and 2. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: v2.0.0
Upstream repository: https://github.com/zeroclipboard/zeroclipboard
Upstream fix commit: 2f9eb9750a433965572d047e24b0fc78fd1415ca
CVE-2014-1874: Kernel: SELinux: local denial-of-service
Component: Kernel
Severity: Low
Public date: 2014-01-29T00:00:00+00:00

The security_context_to_sid_core function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows local users to cause a denial of service (system crash) by leveraging the CAP_MAC_ADMIN capability to set a zero-length security context.

Statement: This issue does not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: v3.14
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 2172fa709ab32ca60e86179dc67d0857be8e2c98
CVE-2014-1904: Framework: cross-site scripting flaw when using Spring MVC
Component: Framework
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Public date: 2014-02-13T00:00:00+00:00

Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action.

Statement: The Red Hat Security Response Team has rated this issue as having Moderate security impact. OpenShift Enterprise 1 is currently in the Production 1 phase of its lifecycle, as such this issue is not currently planned to be addressed in future updates. For additional information, refer to the Satellite Life Cycle: https://access.redhat.com/site/support/policy/updates/openshift page.

Fuse ESB Enterprise is now in Maintenance Support phase receiving only qualified Important and Critical impact security fixes. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Fuse Product Life Cycle: https://access.redhat.com/support/policy/updates/fusesource/

Affected upstream versions: n/a
Fixed upstream versions: v4.0.2.RELEASE
Upstream repository: https://github.com/spring-projects/spring-framework
Upstream fix commit: 741b4b229ae032bd17175b46f98673ce0bd2d485
CVE-2014-1912: python: buffer overflow in socket.recvfrom_into()
Component: python
Severity: Moderate
CWE: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))
Public date: 2014-01-14T00:00:00+00:00

It was discovered that the socket.recvfrom_into() function failed to check the size of the supplied buffer. This could lead to a buffer overflow when the function was called with an insufficiently sized buffer.

Statement: This issue did not affect the versions of python as shipped with Red Hat Enterprise Linux 5 as they did not include the vulnerable socket.recvfrom_into() function.  This issue was also corrected in the version of python shipped with Red Hat Enterprise Linux 7.0 prior to release.

The Red Hat Security Response Team has rated this issue as having Moderate security impact. A future update may address this issue in Red Hat Software Collections. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Upstream repository: https://hg.python.org/cpython
Upstream fix commit: 87673659d8f7
CVE-2014-2038: kernel: nfs: data leak during extended writes
Component: kernel
Severity: Low
Public date: 2014-01-17T00:00:00+00:00

The nfs_can_extend_write function in fs/nfs/write.c in the Linux kernel before 3.13.3 relies on a write delegation to extend a write operation without a certain up-to-date verification, which allows local users to obtain sensitive information from kernel memory in opportunistic circumstances by writing to a file in an NFS filesystem and then reading the same file.

Statement: This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.14
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 263b4509ec4d47e0da3e753f85a39ea12d1eff24
CVE-2014-2039: Kernel: s390: crash due to linkage stack instructions
Component: Kernel
Severity: Moderate
Public date: 2014-02-03T00:00:00+00:00

arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack, which allows local users to cause a denial of service (system crash) by executing a crafted instruction.

Statement: This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2. Red Hat Enterprise Linux 7 is not affected by this CVE because the fix was included at 7.0 GA (General Availability).

Affected upstream versions: n/a
Fixed upstream versions: v3.14
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 8d7f6690cedb83456edd41c9bd583783f0703bf0
CVE-2014-2059: jenkins: command line interface job creation directory traversal (SECURITY-108)
Component: jenkins
Severity: Moderate
CWE: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
Public date: 2014-02-07T00:00:00+00:00

Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name.


Affected upstream versions: n/a
Fixed upstream versions: jenkins-1.532.2
Upstream repository: https://github.com/jenkinsci/jenkins
Upstream fix commit: ad38d8480f20ce3cbf8fec3e2003bc83efda4f7d
CVE-2014-2061: jenkins: clear text password disclosure (SECURITY-93)
Component: jenkins
Severity: Moderate
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
Public date: 2014-02-07T00:00:00+00:00

The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value.


Affected upstream versions: n/a
Fixed upstream versions: jenkins-1.532.2
Upstream repository: https://github.com/jenkinsci/jenkins
Upstream fix commit: bf539198564a1108b7b71a973bf7de963a6213ef
CVE-2014-2062: jenkins: user tokens not invalidated correctly (SECURITY-89)
Component: jenkins
Severity: Moderate
CWE: CWE-613 (Insufficient Session Expiration)
Public date: 2014-02-07T00:00:00+00:00

Jenkins before 1.551 and LTS before 1.532.2 does not invalidate the API token when a user is deleted, which allows remote authenticated users to retain access via the token.


Affected upstream versions: n/a
Fixed upstream versions: jenkins-1.532.2
Upstream repository: https://github.com/jenkinsci/jenkins
Upstream fix commit: 5548b5220cfd496831b5721124189ff18fbb12a3
CVE-2014-2063: jenkins: interface vulnerable to clickjacking attacks (SECURITY-80)
Component: jenkins
Severity: Moderate
Public date: 2014-02-12T00:00:00+00:00

Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors.


Affected upstream versions: n/a
Fixed upstream versions: jenkins-1.532.2
Upstream repository: https://github.com/jenkinsci/jenkins
Upstream fix commit: 16931bd7bf7560e26ef98328b8e95e803d0e90f6
CVE-2014-2064: jenkins: failed log in attemps revealing if a user is valid or not (SECURITY-79)
Component: jenkins
Severity: Moderate
CWE: CWE-209 (Generation of Error Message Containing Sensitive Information)
Public date: 2014-02-07T00:00:00+00:00

The loadUserByUsername function in hudson/security/HudsonPrivateSecurityRealm.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to determine whether a user exists via vectors related to failed login attempts.


Affected upstream versions: n/a
Fixed upstream versions: jenkins-1.532.2
Upstream repository: https://github.com/jenkinsci/jenkins
Upstream fix commit: fbf96734470caba9364f04e0b77b0bae7293a1ec
CVE-2014-2065: jenkins: input validation issue (SECURITY-77)
Component: jenkins
Severity: Moderate
CWE: CWE-20 (Improper Input Validation)
Public date: 2014-02-07T00:00:00+00:00

Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.


Affected upstream versions: n/a
Fixed upstream versions: jenkins-1.532.2
Upstream repository: https://github.com/jenkinsci/jenkins
Upstream fix commit: a0b00508eeb74d7033dc4100eb382df4e8fa72e7
CVE-2014-2066: jenkins: session fixation issue (SECURITY-75)
Component: jenkins
Severity: Moderate
CWE: CWE-384 (Session Fixation)
Public date: 2014-02-12T00:00:00+00:00

Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the "override" of Jenkins cookies.


Affected upstream versions: n/a
Fixed upstream versions: jenkins-1.532.2
Upstream repository: https://github.com/jenkinsci/jenkins
Upstream fix commit: 8ac74c350779921598f9d5edfed39dd35de8842a
CVE-2014-2067: jenkins: stored cross-site scripting flaw (SECURITY-74)
Component: jenkins
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Public date: 2014-02-07T00:00:00+00:00

Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a "remote cause note."


Affected upstream versions: n/a
Fixed upstream versions: jenkins-1.532.2
Upstream repository: https://github.com/jenkinsci/jenkins
Upstream fix commit: 5d57c855f3147bfc5e7fda9252317b428a700014