huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2015-0292: openssl: integer underflow leading to buffer overflow in base64 decoding
Component: openssl
Severity: Moderate
CWE: CWE-191 (Integer Underflow (Wrap or Wraparound))
Public date: 2015-03-19T00:00:00+00:00

An integer underflow flaw, leading to a buffer overflow, was found in the way OpenSSL decoded malformed Base64-encoded inputs. An attacker able to make an application using OpenSSL decode a specially crafted Base64-encoded input (such as a PEM file) could use this flaw to cause the application to crash. Note: this flaw is not exploitable via the TLS/SSL protocol because the data being transferred is not Base64-encoded.


Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_0_1h
Upstream repository: https://git.openssl.org/gitweb/openssl.git
Upstream fix commit: d0666f289ac013094bbbf547bfbcd616199b7d2d
CVE-2015-0293: openssl: assertion failure in SSLv2 servers
Component: openssl
Severity: Moderate
CWE: CWE-617 (Reachable Assertion)
Public date: 2015-03-19T00:00:00+00:00

A denial of service flaw was found in the way OpenSSL handled SSLv2 handshake messages. A remote attacker could use this flaw to cause a TLS/SSL server using OpenSSL to exit on a failed assertion if it had both the SSLv2 protocol and EXPORT-grade cipher suites enabled.


Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_0_2a
Upstream repository: https://git.openssl.org/openssl.git
Upstream fix commit: 86f8fb0e344d62454f8daf3e15236b2b59210756
CVE-2015-0294: gnutls: certificate algorithm consistency checking issue
Component: gnutls
Severity: Low
CWE: CWE-295 (Improper Certificate Validation)
Public date: 2015-02-27T00:00:00+00:00

It was discovered that GnuTLS did not check if all sections of X.509 certificates indicate the same signature algorithm. This flaw, in combination with a different flaw, could possibly lead to a bypass of the certificate signature check.

Statement: This issue affects the version of gnutls package as shipped with Red Hat Enterprise Linux 7. Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates.

This issue affects the version of gnutls package as shipped with Red Hat Enterprise Linux 5. Red Hat Enterprise Linux 5 is now in Extended Life Cycle phase of the support and maintenance life cycle. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: before 3.3.13
Fixed upstream versions: gnutls_3_3_13
Upstream repository: https://gitlab.com/gnutls/gnutls
Upstream fix commit: 6e76e9b9fa845b76b0b9a45f05f4b54a052578ff
CVE-2015-0562: wireshark: DEC DNA Routing Protocol dissector crash (wnpa-sec-2015-03)
Component: wireshark
Severity: Moderate
CWE: CWE-416 (Use After Free)
Public date: 2015-01-07T00:00:00+00:00

Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service (application crash) via a crafted packet, related to the use of packet-scope memory instead of pinfo-scope memory.

Statement: This issue affects the verison of wireshark as shipped with Red Hat Enterprsie Linux 5. Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates.

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: a559f2a050947f793c00159c0cd4d30f403f217c
CVE-2015-0563: wireshark: SMTP dissector crash (wnpa-sec-2015-04)
Component: wireshark
Severity: Moderate
CWE: CWE-131 (Incorrect Calculation of Buffer Size)
Public date: 2015-01-07T00:00:00+00:00

epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an incorrect length value for certain string-append operations, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Statement: This issue did not affect the version of wireshark as shipped with Red Hat Enterprise Linux 5 and 6.

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: 611cfd00c283e7a77a2f1fd89c01b0b9f691411b
CVE-2015-0564: wireshark: TLS/SSL decryption crash (wnpa-sec-2015-05)
Component: wireshark
Severity: Moderate
CWE: CWE-131 (Incorrect Calculation of Buffer Size)
Public date: 2015-01-07T00:00:00+00:00

Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of service (application crash) via a crafted packet that is improperly handled during decryption of an SSL session.

Statement: This issue affects the verison of wireshark as shipped with Red Hat Enterprsie Linux 5. Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates.

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: d3581aecda62d2a51ea7088fd46975415b03ec57
CVE-2015-1333: kernel: denial of service due to memory leak in add_key()
Component: kernel
Severity: Moderate
CWE: CWE-401 (Missing Release of Memory after Effective Lifetime)
Public date: 2015-07-27T00:00:00+00:00

It was found that the Linux kernel's keyring implementation would leak memory when adding a key to a keyring via the add_key() function. A local attacker could use this flaw to exhaust all available memory on the system.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6.

Affected upstream versions: n/a
Fixed upstream versions: v4.2
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: ca4da5dd1f99fe9c59f1709fb43e818b18ad20e0
CVE-2015-1345: grep: heap buffer overrun
Component: grep
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2015-01-18T00:00:00+00:00

A heap-based buffer overflow flaw was found in the way grep processed certain pattern and text combinations. An attacker able to trick a user into running grep on specially crafted input could use this flaw to crash grep or, potentially, read from uninitialized memory.

Statement: This issue did not affect versions of grep as shipped in Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/grep.git
Upstream fix commit: 83a95bd8c8561875b948cadd417c653dbe7ef2e2
CVE-2015-1351: php: use after free in opcache extension
Component: php
Severity: Low
CWE: CWE-416 (Use After Free)
Public date: 2014-12-29T00:00:00+00:00

A use-after-free flaw was found in PHP's OPcache extension. This flaw could possibly lead to a disclosure of a portion of the server memory.

Statement: This issue did not affect the versions of PHP as shipped with Red Hat Enterprise Linux 5, 6 and 7.

Affected upstream versions: n/a
Fixed upstream versions: POST_PHP7_REMOVALS
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 777c39f4042327eac4b63c7ee87dc1c7a09a3115
CVE-2015-1352: php: NULL pointer dereference in pgsql extension
Component: php
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2015-01-04T00:00:00+00:00

A NULL pointer dereference flaw was found in PHP's pgsql extension. A specially crafted table name passed to a function such as pg_insert() or pg_select() could cause a PHP application to crash.

Statement: This issue did not affect the versions of PHP as shipped with Red Hat Enterprise Linux 5, 6 and 7.

Affected upstream versions: n/a
Fixed upstream versions: POST_PHP7_REMOVALS
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 124fb22a13fafa3648e4e15b4f207c7096d8155e
CVE-2015-1421: kernel: net: slab corruption from use after free on INIT collisions
Component: kernel
Severity: Important
CWE: CWE-416 (Use After Free)
Public date: 2015-01-22T00:00:00+00:00

A use-after-free flaw was found in the way the Linux kernel's SCTP implementation handled authentication key reference counting during INIT collisions. A remote attacker could use this flaw to crash the system or, potentially, escalate their privileges on the system.

Statement: This issue did not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2. Future Linux kernel updates for the respective releases may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.19
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 600ddd6825543962fb807884169e57b580dba208
CVE-2015-1472: glibc: heap buffer overflow in glibc swscanf
Component: glibc
Severity: Low
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2014-02-21T00:00:00+00:00

A heap-based buffer overflow flaw was found in glibc's swscanf() function. An attacker able to make an application call the swscanf() function could use this flaw to crash that application or, potentially, execute arbitrary code with the permissions of the user running the application.

Statement: This issue did not affect the versions of glibc as shipped with Red Hat Enterprise Linux 5 and 6 as they did use different memory allocation algorithm in swscanf() function.

Affected upstream versions: n/a
Fixed upstream versions: glibc-2.21
Upstream repository: https://sourceware.org/git/glibc.git
Upstream fix commit: 5bd80bfe9ca0d955bfbbc002781bc7b01b6bcb06
CVE-2015-1473: glibc: Stack-overflow in glibc swscanf
Component: glibc
Severity: Low
CWE: CWE-121 (Stack-based Buffer Overflow)
Public date: 2014-02-21T00:00:00+00:00

A stack overflow flaw was found in glibc's swscanf() function. An attacker able to make an application call the swscanf() function could use this flaw to crash that application or, potentially, execute arbitrary code with the permissions of the user running the application.

Statement: This issue does not affect the version of glibc package as shipped with Red Hat Enterprise Linux 5 and 6.

Affected upstream versions: n/a
Fixed upstream versions: glibc-2.21
Upstream repository: https://sourceware.org/git/glibc.git
Upstream fix commit: 5bd80bfe9ca0d955bfbbc002781bc7b01b6bcb06
CVE-2015-1573: kernel: panic while flushing nftables rules that reference deleted chains.
Component: kernel
Severity: Low
CWE: CWE-416 (Use After Free)
Public date: 2015-01-16T00:00:00+00:00

A flaw was found in the way the nft_flush_table() function of the Linux kernel's netfilter tables implementation flushed rules that were referencing deleted chains. A local user who has the CAP_NET_ADMIN capability could use this flaw to crash the system.

Statement: This issue does not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5 and 6 (as they did not include support for netfilter tables API).

This issue affects the versions of the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and MRG 2. Future kernel updates for the respective releases may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.19
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: a2f18db0c68fec96631c10cad9384c196e9008ac
CVE-2015-1593: kernel: Linux stack ASLR implementation Integer overflow
Component: kernel
Severity: Low
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2015-02-13T00:00:00+00:00

An integer overflow flaw was found in the way the Linux kernel randomized the stack for processes on certain 64-bit architecture systems, such as x86-64, causing the stack entropy to be reduced by four.

Statement: This issue does affect the Linux kernel versions as shipped with Red Hat Enterprise Linux 6, 7 and Red Hat Enterprise MRG 2. Future kernel updates in the respective releases may address this issue.

This issue does affect the Linux kernel versions as shipped with Red Hat Enterprise Linux 5. Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v4.0
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 4e7c22d447bb6d7e37bfe39ff658486ae78e8d77
CVE-2015-1781: glibc: buffer overflow in gethostbyname_r() and related functions with misaligned buffer
Component: glibc
Severity: Moderate
CWE: CWE-131 (Incorrect Calculation of Buffer Size)
Public date: 2015-04-21T00:00:00+00:00

A buffer overflow flaw was found in the way glibc's gethostbyname_r() and other related functions computed the size of a buffer when passed a misaligned buffer as input. An attacker able to make an application call any of these functions with a misaligned buffer could use this flaw to crash the application or, potentially, execute arbitrary code with the permissions of the user running the application.

Statement: Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: glibc-2.22
Upstream repository: https://sourceware.org/git/glibc.git
Upstream fix commit: 2959eda9272a03386
CVE-2015-1789: OpenSSL: out-of-bounds read in X509_cmp_time
Component: OpenSSL
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2015-06-11T00:00:00+00:00

An out-of-bounds read flaw was found in the X509_cmp_time() function of OpenSSL, which is used to test the expiry dates of SSL/TLS certificates. An attacker could possibly use a specially crafted SSL/TLS certificate or CRL (Certificate Revocation List), which when parsed by an application would cause that application to crash.


Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: f48b83b4fb7d6689584cf25f61ca63a4891f5b11
CVE-2015-1790: OpenSSL: PKCS7 crash with missing EnvelopedContent
Component: OpenSSL
Severity: Moderate
Public date: 2015-06-11T00:00:00+00:00

A NULL pointer dereference was found in the way OpenSSL handled certain PKCS#7 inputs. An attacker able to make an application using OpenSSL verify, decrypt, or parse a specially crafted PKCS#7 input could cause that application to crash. TLS/SSL clients and servers using OpenSSL were not affected by this flaw.


Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: 59302b600e8d5b77ef144e447bb046fd7ab72686
CVE-2015-1791: OpenSSL: Race condition handling NewSessionTicket
Component: OpenSSL
Severity: Low
Public date: 2015-06-11T00:00:00+00:00

A race condition was found in the session handling code of OpenSSL. This issue could possibly cause a multi-threaded TLS/SSL client using OpenSSL to double free session ticket data and crash.

Statement: This issue does NOT affect the version of OpenSSL package as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: 98ece4eebfb6cd45cc8d550c6ac0022965071afc
CVE-2015-1792: OpenSSL: CMS verify infinite loop with unknown hash function
Component: OpenSSL
Severity: Moderate
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
Public date: 2015-06-11T00:00:00+00:00

A denial of service flaw was found in the way OpenSSL verified certain signed messages using CMS (Cryptographic Message Syntax). A remote attacker could cause an application using OpenSSL to use excessive amounts of memory by sending a specially crafted message for verification.

Statement: This issue does NOT affect the version of OpenSSL package as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: cd30f03ac5bf2962f44bd02ae8d88245dff2f12c
CVE-2015-1805: kernel: pipe: iovec overrun leading to memory corruption
Component: kernel
Severity: Important
Public date: 2015-06-02T00:00:00+00:00

It was found that the Linux kernel's implementation of vectored pipe read and write functionality did not take into account the I/O vectors that were already processed when retrying after a failed atomic access operation, potentially resulting in memory corruption due to an I/O vector array overrun. A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system.

Statement: This issue does affect the Linux kernel packages as shipped with Red Hat
Enterprise Linux 5, 6, and 7, and Red Hat Enterprise MRG 2. Future Linux
kernel updates for the respective releases will address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.16
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: f0d1bec9d58d4c038d0ac958c9af82be6eb18045
CVE-2015-1819: libxml2: denial of service processing a crafted XML document
Component: libxml2
Severity: Low
Public date: 2015-04-14T00:00:00+00:00

A denial of service flaw was found in the way the libxml2 library parsed certain XML files. An attacker could provide a specially crafted XML file that, when parsed by an application using libxml2, could cause that application to use an excessive amount of memory.

Statement: Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw in libxml2.

Affected upstream versions: n/a
Fixed upstream versions: v2.9.3
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: 213f1fe0d76d30eaed6e5853057defc43e6df2c9
CVE-2015-1849: EAP: LDAP bind password is being logged with TRACE log level
Component: EAP
Severity: Low
Public date: 2015-03-23T00:00:00+00:00

AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled.


Affected upstream versions: n/a
Fixed upstream versions: 2.3.7.Final
Upstream repository: https://github.com/wildfly-security/jboss-negotiation
Upstream fix commit: 0dc9d191b6eb1d13b8f0189c5b02ba6576f4722e
CVE-2015-1867: pacemaker: acl read-only access allow role assignment
Component: pacemaker
Severity: Moderate
CWE: CWE-863 (Incorrect Authorization)
Public date: 2015-03-31T00:00:00+00:00

A flaw was found in the way pacemaker, a cluster resource manager, evaluated added nodes in certain situations. A user with read-only access could potentially assign any other existing roles to themselves and then add privileges to other users as well.


Affected upstream versions: n/a
Fixed upstream versions: Pacemaker-1.1.13
Upstream repository: https://github.com/ClusterLabs/pacemaker
Upstream fix commit: 84ac07c
CVE-2015-1869: abrt: default event scripts follow symbolic links
Component: abrt
Severity: Important
CWE: CWE-59 (Improper Link Resolution Before File Access ('Link Following'))
Public date: 2015-04-17T00:00:00+00:00

It was discovered that the default event handling scripts installed by ABRT did not handle symbolic links correctly. A local attacker with write access to an ABRT problem directory could use this flaw to escalate their privileges.


Affected upstream versions: before 7417505e1d93cc95ec648b74e3c801bc67aacb9f
Fixed upstream versions: 2.1.11-20.el7
Upstream repository: https://github.com/abrt/abrt
Upstream fix commit: 3287aa12eb205cff95cdd00d6d6c5c9a4f8f0eca
CVE-2015-1870: abrt: default abrt event scripts lead to information disclosure
Component: abrt
Severity: Low
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
Public date: 2015-04-17T00:00:00+00:00

It was found that the ABRT event scripts created a user-readable copy of an sosreport file in ABRT problem directories, and included excerpts of /var/log/messages selected by the user-controlled process name, leading to an information disclosure. The fix for this issue prevents non-privileged users from accessing any crash reports, even reports of crashes of processes owned by those users. Only administrators (the wheel group members) are allowed to access crash reports via the "System" tab in the ABRT GUI, or by running abrt-cli as root (that is, via "sudo abrt-cli" or "su -c abrt-cli").


Affected upstream versions: n/a
Fixed upstream versions: 2.1.11-20.el7
Upstream repository: https://github.com/abrt/abrt
Upstream fix commit: 7d023c32a565e83306cddf34c894477b7aaf33d1
CVE-2015-2188: wireshark: The WCP dissector could crash while decompressing data (wnpa-sec-2015-07)
Component: wireshark
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2015-03-04T00:00:00+00:00

epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that is improperly handled during decompression.

Statement: Not vulnerable. This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 5, and 6.

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: b204ff4846fe84b7789893c6b1d9afbdecac5b5d
CVE-2015-2189: wireshark: The pcapng file parser could crash (wnpa-sec-2015-08)
Component: wireshark
Severity: Low
CWE: CWE-193 (Off-by-one Error)
Public date: 2015-03-04T00:00:00+00:00

Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via an invalid Interface Statistics Block (ISB) interface ID in a crafted packet.

Statement: This issue did not affect the versions of wireshark as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: a835c85e3d662343d7283f1dcdacb8a11d1d0727
CVE-2015-2191: wireshark: The TNEF dissector could go into an infinite loop on 32-bit architectures (wnpa-sec-2015-10)
Component: wireshark
Severity: Low
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
Public date: 2015-03-04T00:00:00+00:00

Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted length field in a packet.

Statement: Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: 608cf324b3962877e9699f3e81e8f82ac9f1ea14