huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2012-5134: libxml2: Heap-buffer-underflow in xmlParseAttValueComplex
Component: libxml2
Severity: Important
Public date: 2012-11-27T00:00:00+00:00

Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.1
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: 6a36fbe3b3e001a8a840b5c1fdd81cefc9947f0d
CVE-2012-5195: perl: heap buffer overrun flaw may lead to arbitrary code execution
Component: perl
Severity: Moderate
Public date: 2012-10-10T00:00:00+00:00

Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service (memory consumption and crash) or possibly execute arbitrary code via the 'x' string repeat operator.


Affected upstream versions: n/a
Upstream repository: https://perl5.git.perl.org/perl.git
Upstream fix commit: 2709980d5a193ce6f3a16f0d19879a6560dcde44
CVE-2012-5484: ipa: weakness when initiating join from IPA client can potentially compromise IPA domain
Component: ipa
Severity: Important
Public date: 2013-01-23T00:00:00+00:00

The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.


Affected upstream versions: n/a
Upstream repository: https://git.fedorahosted.org/cgit/freeipa.git
Upstream fix commit: 31e41eea6c2322689826e6065ceba82551c565aa
CVE-2012-5517: kernel: mm/hotplug: failure in propagating hot-added memory to other nodes
Component: kernel
Severity: Moderate
Public date: 2012-08-01T00:00:00+00:00

The online_pages function in mm/memory_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact in opportunistic circumstances by using memory that was hot-added by an administrator.

Statement: This issue did affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 6.

This issue did not affect the versions of kernel package as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG.

Affected upstream versions: n/a
Fixed upstream versions: v3.6
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 08dff7b7d629807dbb1f398c68dd9cd58dd657a1
CVE-2012-5532: hypervkvpd: Netlink source address validation allows denial of service
Component: hypervkvpd
Severity: Low
Public date: 2012-06-06T00:00:00+00:00

The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.8-rc1, allows local users to cause a denial of service (daemon exit) via a crafted application that sends a Netlink message.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-2669.

Statement: The Red Hat Security Response Team has rated this issue as having low security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: v3.8
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 95a69adab9acfc3981c504737a2b6578e4d846ef
CVE-2012-5536: pam_ssh_agent_auth: symbol crash leading to glibc error() called incorrectly
Component: pam_ssh_agent_auth
Severity: Moderate
Public date: 2013-02-21T00:00:00+00:00

A certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux (RHEL) 6 and Fedora Rawhide calls the glibc error function instead of the error function in the OpenSSH codebase, which allows local users to obtain sensitive information from process memory or possibly gain privileges via crafted use of an application that relies on this module, as demonstrated by su and sudo.

Statement: This issue does not affect the version of openssh as shipped with Red Hat Enterprise Linux 5. This issue was addressed in Red Hat Enterprise Linux 6 via RHSA-2013:0519.

Affected upstream versions: n/a
Upstream repository: https://pkgs.fedoraproject.org/cgit/openssh.git
Upstream fix commit: 4f4687ce8045418f678c323bb22c837f35d7b9fa
CVE-2012-5563: OpenStack: Keystone extension of token validity through token chaining
Component: OpenStack
Severity: Moderate
Public date: 2012-11-28T00:00:00+00:00

OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating new tokens through token chaining.  NOTE: this issue exists because of a CVE-2012-3426 regression.


Affected upstream versions: n/a
Fixed upstream versions: grizzly-2
Upstream repository: https://github.com/openstack/keystone
Upstream fix commit: 38c7e46a640a94da4da89a39a5a1ea9c081f1eb5
CVE-2012-5576: plug-in): Stack-based buffer overflow when loading XWD file
Component: plug-in)
Severity: Moderate
CWE: CWE-121 (Stack-based Buffer Overflow)
Public date: 2012-11-02T00:00:00+00:00

Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large (1) red, (2) green, or (3) blue color mask in an XWD file.


Affected upstream versions: n/a
Fixed upstream versions: GIMP_2_8_4
Upstream repository: https://git.gnome.org/browse/gimp
Upstream fix commit: 2873262fccba12af144ed96ed91be144d92ff2e1
CVE-2012-5622: openshift-console: CSRF attack
Component: openshift-console
Severity: Important
CWE: CWE-352 (Cross-Site Request Forgery (CSRF))
Public date: 2012-12-10T00:00:00+00:00

Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.


Affected upstream versions: n/a
Fixed upstream versions: rubygem-openshift-origin-container-libvirt-0.0.0.1-1
Upstream repository: https://github.com/openshift/origin-server
Upstream fix commit: 1ad0d1d792395306b59a34ad7b6e7e89a35d041e
CVE-2012-5646: openshift-origin-node-util: restorer.php preg_match shell code injection
Component: openshift-origin-node-util
Severity: Moderate
CWE: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))
Public date: 2013-01-08T00:00:00+00:00

node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a crafted uuid in the PATH_INFO.


Affected upstream versions: n/a
Fixed upstream versions: rubygem-openshift-origin-container-libvirt-0.0.0.1-1
Upstream repository: https://github.com/openshift/origin-server
Upstream fix commit: 32564a0839b1517d762afab2013c26c0959bac00
CVE-2012-5647: openshift-origin-node-util: restorer.php arbitrary URL redirection
Component: openshift-origin-node-util
Severity: Low
Public date: 2013-01-08T00:00:00+00:00

Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the PATH_INFO.


Affected upstream versions: n/a
Fixed upstream versions: rubygem-openshift-origin-container-libvirt-0.0.0.1-1
Upstream repository: https://github.com/openshift/origin-server
Upstream fix commit: 32564a0839b1517d762afab2013c26c0959bac00
CVE-2012-5659: abrt: Arbitrary Python code execution due improper sanitization of the PYTHONPATH environment variable by installing debuginfo packages into cache
Component: abrt
Severity: Important
Public date: 2013-01-30T00:00:00+00:00

Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.


Affected upstream versions: n/a
Upstream repository: https://git.fedorahosted.org/cgit/abrt.git
Upstream fix commit: b173d81b577953b96a282167c7eecd66bf111a4f
CVE-2012-5660: abrt: Race condition in abrt-action-install-debuginfo
Component: abrt
Severity: Moderate
CWE: CWE-426 (Untrusted Search Path)
Public date: 2013-01-30T00:00:00+00:00

abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."


Affected upstream versions: n/a
Upstream repository: https://git.fedorahosted.org/cgit/libreport.git
Upstream fix commit: 3bbf961b1884dd32654dd39b360dd78ef294b10a
CVE-2012-5667: grep: Integer overflow leading to heap-based buffer-overflow when reading large lines
Component: grep
Severity: Low
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2012-12-22T00:00:00+00:00

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way grep parsed large lines of data. An attacker able to trick a user into running grep on a specially crafted data file could use this flaw to crash grep or, potentially, execute arbitrary code with the privileges of the user running grep.

Statement: This issue did not affect the version of grep as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/grep.git
Upstream fix commit: 8fcf61523644df42e1905c81bed26838e0b04f91
CVE-2012-5669: freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)
Component: freetype
Severity: Important
Public date: 2012-12-15T00:00:00+00:00

The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: 07bdb6e289c7954e2a533039dc93c1c136099d2d
CVE-2012-6075: qemu: e1000 driver buffer overflow when processing large packets when SBP and LPE flags are disabled
Component: qemu
Severity: Important
Public date: 2012-12-16T00:00:00+00:00

Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.


Affected upstream versions: n/a
Fixed upstream versions: v1.3.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: b0d9ffcd0251161c7c92f94804dcf599dfa3edeb
CVE-2012-6085: GnuPG: read_block() corrupt key input validation
Component: GnuPG
Severity: Low
CWE: CWE-20 (Improper Input Validation)
Public date: 2012-12-29T00:00:00+00:00

The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers to corrupt the public keyring database or cause a denial of service (application crash) via a crafted length field of an OpenPGP packet.


Affected upstream versions: n/a
Upstream repository: https://git.gnupg.org/cgi-bin/gnupg.git
Upstream fix commit: f0b33b6fb8e0586e9584a7a409dcc31263776a67
CVE-2012-6109: rubygem-rack: parsing Content-Disposition header DoS
Component: rubygem-rack
Severity: Moderate
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
Public date: 2012-05-04T00:00:00+00:00

lib/rack/multipart.rb in Rack before 1.1.4, 1.2.x before 1.2.6, 1.3.x before 1.3.7, and 1.4.x before 1.4.2 uses an incorrect regular expression, which allows remote attackers to cause a denial of service (infinite loop) via a crafted Content-Disposion header.


Affected upstream versions: n/a
Fixed upstream versions: 1.3.7
Upstream repository: https://github.com/rack/rack
Upstream fix commit: c9f65df37a151821eb88ddd1dc404b83e52c52d5
CVE-2012-6115: rhev: rhevm-manage-domains logs admin passwords
Component: rhev
Severity: Moderate
Public date: 2012-12-17T00:00:00+00:00

The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier, when the validate action is enabled, logs the administrative password to a world-readable log file, which allows local users to obtain sensitive information by reading this file.


Affected upstream versions: n/a
Upstream repository: https://gerrit.ovirt.org/ovirt-engine.git
Upstream fix commit: e8c72daec4efa8be0fcd8ea55c41e855ddd8eedf
CVE-2012-6116: Candlepin: bootstrap RPM deploys CA certificate file with mode 666
Component: Candlepin
Severity: Moderate
Public date: 2013-02-21T00:00:00+00:00

modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.


Affected upstream versions: n/a
Upstream repository: https://github.com/jsomara/katello
Upstream fix commit: 65f1e42b7bda0f3410931c50598540d944d8bf0d
CVE-2012-6119: Candlepin: Re-enable manifest signature checking
Component: Candlepin
Severity: Moderate
Public date: 2012-06-27T00:00:00+00:00

Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.


Affected upstream versions: n/a
Fixed upstream versions: candlepin-0.7.24-1
Upstream repository: https://github.com/candlepin/candlepin
Upstream fix commit: f4d93230e58b969c506b4c9778e04482a059b08c
CVE-2012-6149: (spacewalk-java): XSS in system.addNote XML-RPC call due improper sanitization of note's subject and content
Component: (spacewalk-java)
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Public date: 2014-02-10T00:00:00+00:00

Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) content values of a note in a system.addNote XML-RPC call.


Affected upstream versions: n/a
Upstream repository: https://git.fedorahosted.org/cgit/spacewalk.git
Upstream fix commit: 1d0f4b4a78ea03d9f2d05fbd52236b1f2ab68e85
CVE-2012-6152: pidgin: DoS when decoding non-UTF-8 strings in Yahoo protocol plugin
Component: pidgin
Severity: Moderate
CWE: CWE-172 (Encoding Error)
Public date: 2014-01-28T00:00:00+00:00

The Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows remote attackers to cause a denial of service (application crash) via crafted byte sequences.


Affected upstream versions: n/a
Upstream repository: https://hg.pidgin.im/pidgin/main
Upstream fix commit: b0345c25f886
CVE-2012-6329: perl: possible arbitrary code execution via Locale::Maketext
Component: perl
Severity: Moderate
Public date: 2012-12-04T00:00:00+00:00

The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.


Affected upstream versions: n/a
Upstream repository: https://perl5.git.perl.org/perl.git
Upstream fix commit: 1735f6f53ca19f99c6e9e39496c486af323ba6a8
CVE-2012-6537: Kernel: xfrm_user information leaks copy_to_user_
Component: Kernel
Severity: Low
Public date: 2012-09-19T00:00:00+00:00

net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel memory by leveraging the CAP_NET_ADMIN capability.

Statement: This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise MRG 2.

This issue did affect the version of the Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.

Affected upstream versions: n/a
Fixed upstream versions: v3.6
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: f778a636713a435d3a922c60b1622a91136560c1
CVE-2012-6538: Kernel: xfrm_user: info leak in copy_to_user_auth
Component: Kernel
Severity: Low
Public date: 2012-09-19T00:00:00+00:00

The copy_to_user_auth function in net/xfrm/xfrm_user.c in the Linux kernel before 3.6 uses an incorrect C library function for copying a string, which allows local users to obtain sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability.

Statement: This issue does not affect the versions of the kernel package as shipped with
Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

This issue affects the versions of Linux kernel as shipped with Red Hat
Enterprise Linux 6 . This issue has been addressed in Red Hat Enterprise Linux 6 via https://rhn.redhat.com/errata/RHSA-2013-0744.html.

Affected upstream versions: n/a
Fixed upstream versions: v3.6
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 4c87308bdea31a7b4828a51f6156e6f721a1fcc9
CVE-2012-6542: Kernel: llc: information leak via getsockname
Component: Kernel
Severity: Low
Public date: 2012-08-15T00:00:00+00:00

The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel before 3.6 has an incorrect return value in certain circumstances, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that leverages an uninitialized pointer argument.

Statement: This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise MRG 2.

This issue affects the version of the Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.  Future kernel updates for Red Hat Enterprise Linux 6 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.6
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 3592aaeb80290bda0f2cf0b5456c97bfc638b192
CVE-2012-6544: Kernel: Bluetooth: HCI & L2CAP information leaks
Component: Kernel
Severity: Low
Public date: 2012-08-15T00:00:00+00:00

The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application that targets the (1) L2CAP or (2) HCI implementation.

Statement: This issue does not affect the version of the kernel package as shipped with
Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.6
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 792039c73cf176c8e39a6e8beef2c94ff46522ed
CVE-2012-6545: Kernel: Bluetooth: RFCOMM - information leak
Component: Kernel
Severity: Low
Public date: 2012-08-15T00:00:00+00:00

The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obtain sensitive information from kernel memory via a crafted application.

Statement: This issue does not affect the version of the kernel package as shipped with
Red Hat Enterprise MRG 2.

This issue affects the versions of Linux kernel as shipped with
Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6. Future kernel
updates for Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6 may
address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.6
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 9344a972961d1a6d2c04d9008b13617bcb6ec2ef
CVE-2012-6546: Kernel: atm: information leak in getsockopt & getsockname
Component: Kernel
Severity: Low
Public date: 2012-08-15T00:00:00+00:00

The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.

Statement: This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise MRG 2.

This issue did affect the version of the Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.

Affected upstream versions: n/a
Fixed upstream versions: v3.6
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: e862f1a9b7df4e8196ebec45ac62295138aa3fc2
CVE-2012-6547: Kernel: net/tun: ioctl() based information leaks
Component: Kernel
Severity: Low
Public date: 2012-08-15T00:00:00+00:00

The __tun_chr_ioctl function in drivers/net/tun.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.

Statement: This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise MRG 2.

This issue did affect the version of the Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.

Affected upstream versions: n/a
Fixed upstream versions: v3.6
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: a117dacde0288f3ec60b6e5bcedae8fa37ee0dfc
CVE-2012-6548: Kernel: udf: information leak on export
Component: Kernel
Severity: Low
Public date: 2012-08-15T00:00:00+00:00

The udf_encode_fh function in fs/udf/namei.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted application.

Statement: This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

This issue affects the version of Linux kernel as shipped with Red Hat Enterprise Linux 6. Future kernel updates for Red Hat Enterprise Linux 6 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.6
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 0143fc5e9f6f5aad4764801015bc8d4b4a278200
CVE-2012-6638: Kernel: net: tcp: potential DoS via SYN+FIN messages
Component: Kernel
Severity: Moderate
Public date: 2011-12-02T00:00:00+00:00

The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service (kernel resource consumption) via a flood of SYN+FIN TCP packets, a different vulnerability than CVE-2012-2663.

Statement: This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.3
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: fdf5af0daf8019cec2396cdef8fb042d80fe71fa