huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2015-6243: wireshark: Dissector table crash (wnpa-sec-2015-23)
Component: wireshark
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2015-08-11T00:00:00+00:00

The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to the (1) dissector_get_string_handle and (2) dissector_get_default_string_handle functions.

Statement: This issue affects the verison of wireshark as shipped with Red Hat Enterprsie Linux 5 and 6. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates of Red Hat Enterprise Linux 5 and 6.

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: eb1ccbdccde89701f255f921d88992878057477d
CVE-2015-6244: wireshark: ZigBee dissector crash (wnpa-sec-2015-24)
Component: wireshark
Severity: Moderate
CWE: CWE-130 (Improper Handling of Length Parameter Inconsistency)
Public date: 2015-08-11T00:00:00+00:00

The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x before 1.12.7 improperly relies on length fields contained in packet data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Statement: This issue did not affect the version of wireshark as shipped with Red Hat Enterprise Linux 5. This issue affects the verison of wireshark as shipped with Red Hat Enterprise Linux 6. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates of Red Hat Enterprise Linux 6.

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: 31571144be5f03f054a9c7e195b38c2f5792fe54
CVE-2015-6245: wireshark: GSM RLC/MAC dissector infinite loop (wnpa-sec-2015-25)
Component: wireshark
Severity: Moderate
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
Public date: 2015-08-11T00:00:00+00:00

epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

Statement: This issue did not affect the version of wireshark as shipped with Red Hat Enterprise Linux 5 and 6.

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: 78bc3dd93a562ca1b1c5dbc8f71d2967008be7ed
CVE-2015-6246: wireshark: WaveAgent dissector crash (wnpa-sec-2015-26)
Component: wireshark
Severity: Moderate
Public date: 2015-08-11T00:00:00+00:00

The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Statement: This issue did not affect the version of wireshark as shipped with Red Hat Enterprise Linux 5. This issue affects the verison of wireshark as shipped with Red Hat Enterprise Linux 6. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates of Red Hat Enterprise Linux 6.

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: 5523726e6960fe9d7e301376fd7a94599f65fd42
CVE-2015-6248: wireshark: Ptvcursor crash (wnpa-sec-2015-28)
Component: wireshark
Severity: Moderate
Public date: 2015-08-11T00:00:00+00:00

The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not check whether the expected amount of data is available, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Statement: This issue affects the version of wireshark as shipped with Red Hat Enterprise Linux 5 and 6. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates of Red Hat Enterprise Linux 5 and 6.

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: 5b53445e815fd6b652d49df03ec3d60b088c4fbc
CVE-2015-6526: kernel: perf on ppc64 can loop forever getting userlevel stacktraces
Component: kernel
Severity: Moderate
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
Public date: 2015-04-13T00:00:00+00:00

A flaw was found in the way the Linux kernel's perf subsystem retrieved userlevel stack traces on PowerPC systems. A local, unprivileged user could use this flaw to cause a denial of service on the system by creating a special stack layout that would force the perf_callchain_user_64() function into an infinite loop.

Statement: This issue does not affect the Linux kernels as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.

This issue affects the Linux kernels as shipped with Red Hat Enterprise Linux 7  and may be addressed in a future update.

Affected upstream versions: n/a
Fixed upstream versions: v4.1
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 9a5cbce421a283e6aea3c4007f141735bf9da8c3
CVE-2015-6563: openssh: Privilege separation weakness related to PAM support
Component: openssh
Severity: Moderate
CWE: CWE-266 (Incorrect Privilege Assignment)
Public date: 2015-08-11T00:00:00+00:00

A flaw was found in the way OpenSSH handled PAM authentication when using privilege separation. An attacker with valid credentials on the system and able to fully compromise a non-privileged pre-authentication process using a different flaw could use this flaw to authenticate as other users.


Affected upstream versions: n/a
Fixed upstream versions: V_7_0_P1
Upstream repository: https://github.com/openssh/openssh-portable
Upstream fix commit: d4697fe9a28dab7255c60433e4dd23cf7fce8a8b
CVE-2015-6564: openssh: Use-after-free bug related to PAM support
Component: openssh
Severity: Moderate
CWE: CWE-416 (Use After Free)
Public date: 2015-08-11T00:00:00+00:00

A use-after-free flaw was found in OpenSSH. An attacker able to fully compromise a non-privileged pre-authentication process using a different flaw could possibly cause sshd to crash or execute arbitrary code with root privileges.


Affected upstream versions: n/a
Fixed upstream versions: V_7_0_P1
Upstream repository: https://github.com/openssh/openssh-portable
Upstream fix commit: 5e75f5198769056089fb06c4d738ab0e5abc66f7
CVE-2015-6761: chromium-browser: Memory corruption in FFMpeg
Component: chromium-browser
Severity: Moderate
Public date: 2015-10-13T00:00:00+00:00

The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.


Affected upstream versions: n/a
Upstream repository: https://git.videolan.org/ffmpeg.git
Upstream fix commit: dabea74d0e82ea80cd344f630497cafcb3ef872c
CVE-2015-6781: chromium-browser: Integer overflow in Sfntly
Component: chromium-browser
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2015-12-01T00:00:00+00:00

Integer overflow in the FontData::Bound function in data/font_data.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT container.


Affected upstream versions: n/a
Upstream repository: https://github.com/googlei18n/sfntly
Upstream fix commit: de776d4ef06ca29c240de3444348894f032b03ff
CVE-2015-6908: openldap: ber_get_next denial of service vulnerability
Component: openldap
Severity: Important
CWE: CWE-20 (Improper Input Validation)
Public date: 2015-09-09T00:00:00+00:00

A flaw was found in the way the OpenLDAP server daemon (slapd) parsed certain Basic Encoding Rules (BER) data. A remote attacker could use this flaw to crash slapd via a specially crafted packet.


Affected upstream versions: n/a
Upstream repository: https://www.openldap.org/devel/openldap.git
Upstream fix commit: 6fe51a9ab04fd28bbc171da3cf12f1c1040d6629
CVE-2015-7497: libxml2: Heap-based buffer overflow in xmlDictComputeFastQKey
Component: libxml2
Severity: Moderate
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2015-12-01T00:00:00+00:00

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.3
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: 6360a31a84efe69d155ed96306b9a931a40beab9
CVE-2015-7498: libxml2: Heap-based buffer overflow in xmlParseXmlDecl
Component: libxml2
Severity: Moderate
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2015-12-01T00:00:00+00:00

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.3
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: afd27c21f6b36e22682b7da20d726bce2dcb2f43
CVE-2015-7499: libxml2: Heap-based buffer overflow in xmlGROW
Component: libxml2
Severity: Moderate
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2015-12-01T00:00:00+00:00

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.3
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: 35bcb1d758ed70aa7b257c9c3b3ff55e54e3d0da
CVE-2015-7500: libxml2: Heap buffer overflow in xmlParseMisc
Component: libxml2
Severity: Moderate
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2015-12-01T00:00:00+00:00

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.3
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: f1063fdbe7fa66332bbb76874101c2a7b51b519f
CVE-2015-7509: kernel: Mounting ext2 fs e2fsprogs/tests/f_orphan as ext4 crashes system
Component: kernel
Severity: Low
CWE: CWE-250 (Execution with Unnecessary Privileges)
Public date: 2015-11-24T00:00:00+00:00

A flaw was found in the way the Linux kernel's ext4 file system driver handled non-journal file systems with an orphan list. An attacker with physical access to the system could use this flaw to crash the system or, although unlikely, escalate their privileges on the system.

Statement: This problem did not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and MRG-2. This issue is not planned to be corrected in future updates for Red Hat Enterprise Linux 5.

This issue is rated low as exploiting it requires physical (to plug in specially prepared usb disk) or root (to mount specially prepared filesystem) access to the system. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.

Affected upstream versions: n/a
Fixed upstream versions: v3.7
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: c9b92530a723ac5ef8e352885a1862b18f31b2f5
CVE-2015-7512: Qemu: net: pcnet: buffer overflow in non-loopback mode
Component: Qemu
Severity: Important
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2015-11-30T00:00:00+00:00

A buffer overflow flaw was found in the way QEMU's AMD PC-Net II emulation validated certain received packets from a remote host in non-loopback mode. A remote, unprivileged attacker could potentially use this flaw to execute arbitrary code on the host with the privileges of the QEMU process. Note that to exploit this flaw, the guest network interface must have a large MTU limit.

Statement: This issue does not affect the versions of the qemu-kvm packages as shipped with Red Hat Enterprise Linux 7 as they do not enable the pcnet backend driver.

This issue does not affect the Red Hat Enterprise Linux 7 based versions of the qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3.

This issue affects the versions of the kvm and xen packages as shipped with Red Hat Enterprise Linux 5, the versions of the qemu-kvm packages as shipped with Red Hat Enterprise Linux 6, and the Red Hat Enterprise Linux 6 based versions of qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3. Future updates for the respective releases may address this flaw.

Please note that AMD PCNet adapter has to be explicitly enabled per-guest as it is not enabled in default configuration and is not supported by Red Hat in Red Hat Enterprise Linux 6 (for a list of supported devices please consult https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Virtualization_Administration_Guide/sect-whitelist-device-options.html).

Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and
maintenance life cycle. Though this has been rated as having Important security
impact and is not currently planned to be addressed in future updates. For
additional information, refer to the Red Hat Enterprise Linux Life
Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v2.5.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: 8b98a2f07175d46c3f7217639bd5e03f
CVE-2015-7540: samba: DoS to AD-DC due to insufficient checking of asn1 memory allocation
Component: samba
Severity: Moderate
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
Public date: 2015-12-16T00:00:00+00:00

A denial of service flaw was found in the LDAP server provided by the AD DC in the Samba process daemon. A remote attacker could exploit this flaw by sending a specially crafted packet, which could cause the server to consume an excessive amount of memory and crash.


Affected upstream versions: n/a
Fixed upstream versions: samba-4.1.22
Upstream repository: https://git.samba.org/samba.git
Upstream fix commit: 9d989c9dd7a5b92d0c5d65287935471b83b6e884
CVE-2015-7551: ruby: dlopen could open a library with tainted library name
Component: ruby
Severity: Low
CWE: CWE-267 (Privilege Defined With Unsafe Actions)
Public date: 2009-05-11T00:00:00+00:00

The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted string, related to the DL module and the libffi library.  NOTE: this vulnerability exists because of a CVE-2009-5147 regression.

Statement: Red Hat Product Security has rated this issue as having Low security
impact. This issue is not currently planned to be addressed in future updates. 

For additional information, refer to the Issue Severity Classification:
https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: v2_1_8
Upstream repository: https://github.com/ruby/ruby
Upstream fix commit: 339e11a7f178312d937b7c95dd3115ce7236597a
CVE-2015-7613: kernel: Unauthorized access to IPC objects with SysV shm
Component: kernel
Severity: Important
CWE: CWE-732 (Incorrect Permission Assignment for Critical Resource)
Public date: 2015-10-01T00:00:00+00:00

A race condition flaw was found in the way the Linux kernel's IPC subsystem initialized certain fields in an IPC object structure that were later used for permission checking before inserting the object into a globally visible list. A local, unprivileged user could potentially use this flaw to elevate their privileges on the system.

Statement: This issue does not affect the Linux kernels as shipped with Red Hat Enterprise Linux 5.

This issue affects the Linux kernels as shipped with Red Hat Enterprise Linux 6, 7 and Red Hat MRG 2 kernels. Future kernel updates for the respective releases may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v4.3
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: b9a532277938798b53178d5a66af6e2915cb27cf
CVE-2015-7803: php: NULL pointer dereference in phar_get_fp_offset()
Component: php
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2015-10-01T00:00:00+00:00

A flaw was found in the way the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened.


Affected upstream versions: n/a
Fixed upstream versions: php-5.5.30
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: d698f0ae51f67c9cce870b09c59df3d6ba959244
CVE-2015-7804: php: uninitialized pointer in phar_make_dirstream()
Component: php
Severity: Moderate
CWE: CWE-822 (Untrusted Pointer Dereference)
Public date: 2015-10-01T00:00:00+00:00

A flaw was found in the way the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened.


Affected upstream versions: n/a
Fixed upstream versions: php-5.5.30
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 1ddf72180a52d247db88ea42a3e35f824a8fbda1
CVE-2015-7837: kernel: securelevel disabled after kexec
Component: kernel
Severity: Low
CWE: CWE-456 (Missing Initialization of a Variable)
Public date: 2015-10-14T00:00:00+00:00

A flaw was found in the way the Linux kernel handled the securelevel functionality after performing a kexec operation. A local attacker could use this flaw to bypass the security mechanism of the securelevel/secureboot combination.

Statement: This issue does not affect the Linux kernels as shipped with Red Hat Enterprise Linux 5 and 6.

This issue affects the Linux kernels as shipped with Red Hat Enterprise Linux 7, kernel-rt and MRG-2.

Affected upstream versions: n/a
Upstream repository: https://github.com/mjg59/linux
Upstream fix commit: 4b2b64d5a6ebc84214755ebccd599baef7c1b798
CVE-2015-7872: kernel: Keyrings crash triggerable by unprivileged user
Component: kernel
Severity: Important
CWE: CWE-456 (Missing Initialization of a Variable)
Public date: 2015-10-12T00:00:00+00:00

It was found that the Linux kernel's keys subsystem did not correctly garbage collect uninstantiated keyrings. A local attacker could use this flaw to crash the system or, potentially, escalate their privileges on the system.

Statement: This issue affects the Linux kernels as shipped with Red Hat Enterprise Linux 6 , 7 and Red Hat MRG 2. Future updates for the respective releases may address this flaw.

Affected upstream versions: n/a
Fixed upstream versions: v4.3
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: f05819df10d7b09f6d1eb6f8534a8f68e5a4fe61
CVE-2015-7941: libxml2: Out-of-bounds memory access
Component: libxml2
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2015-02-22T00:00:00+00:00

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash.


Affected upstream versions: n/a
Fixed upstream versions: v2.9.3
Upstream repository: https://git.gnome.org/browse/libxml2
Upstream fix commit: 9b8512337d14c8ddf662fcb98b0135f225a1c489
CVE-2015-8011: lldpd: buffer overflow in the lldp_decode function in daemon/protocols/lldp.c
Component: lldpd
Severity: Important
CWE: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))
CVSS v3: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2015-10-15T00:00:00+00:00

A buffer overflow was found in the lldp_decode function in daemon/protocols/lldp.c in lldpd. This flaw allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries. This threatens the system's confidentiality, integrity, and availability.

Statement: The lldpd package as shipped with Red Hat Enterprise Linux 8 is not affected by this flaw because it has already received the patch. The flaw affects versions before 0.8.0 and the shipped version is 1.0.1+. In addition, Red Hat Virtualization 4.3 manager appliance is out of support scope and therefore no fix for it will be delivered.

Affected upstream versions: n/a
Fixed upstream versions: 0.8.0
Upstream repository: https://github.com/vincentbernat/lldpd
Upstream fix commit: dd4f16e7e816f2165fba76e3d162cd8d2978dcb2
CVE-2015-8104: virt: guest to host DoS by triggering an infinite loop in microcode via #DB exception
Component: virt
Severity: Important
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
Public date: 2015-11-10T00:00:00+00:00

It was found that the x86 ISA (Instruction Set Architecture) is prone to a denial of service attack inside a virtualized environment in the form of an infinite loop in the microcode due to the way (sequential) delivering of benign exceptions such as #DB (debug exception) is handled. A privileged user inside a guest could use this flaw to create denial of service conditions on the host kernel.

Statement: This issue affects the version of the kvm & xen packages as shipped with Red Hat Enterprise Linux 5.

This issue does not affect the versions of the kernel package as shipped with
Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

This issue affects the version of Linux kernel as shipped with
Red Hat Enterprise Linux 6 and 7. Future kernel updates for the respective releases may address this issue.

Red Hat Enterprise Linux 5 is now in Production Phase 3 of the support and
maintenance life cycle. Thus it is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v4.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: cbdb967af3d54993f5814f1cee0ed311a055377d
CVE-2015-8213: python-django: Information leak through date template filter
Component: python-django
Severity: Moderate
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
Public date: 2015-11-24T00:00:00+00:00

An information-exposure flaw was found in the Django date filter. If an application allowed users to provide non-validated date formats, a malicious end user could expose application-settings data by providing the relevant applications-settings key instead of a valid date format.


Affected upstream versions: n/a
Fixed upstream versions: 1.10
Upstream repository: https://github.com/django/django
Upstream fix commit: 316bc3fc9437c5960c24baceb93c73f1939711e4