huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2013-4415: Spacewalk: PAGE_SIZE_LABEL_SELECTED cross-site scripting (XSS)
Component: Spacewalk
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Public date: 2014-02-10T00:00:00+00:00

Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) whereCriteria variable in a software channels search; (2) end_year, (3) start_hour, (4) end_am_pm, (5) end_day, (6) end_hour, (7) end_minute, (8) end_month, (9) end_year, (10) optionScanDateSearch, (11) result_filter, (12) search_string, (13) show_as, (14) start_am_pm, (15) start_day, (16) start_hour, (17) start_minute, (18) start_month, (19) start_year, or (20) whereToSearch variable in an scap audit results search; (21) end_minute, (22) end_month, (23) end_year, (24) errata_type_bug, (25) errata_type_enhancement, (26) errata_type_security, (27) fineGrained, (28) list_1892635924_sortdir, (29) optionIssueDateSearch, (30) start_am_pm, (31) start_day, (32) start_hour, (33) start_minute, (34) start_month, (35) start_year, or (36) view_mode variable in an errata search; or (37) fineGrained variable in a systems search, related to PAGE_SIZE_LABEL_SELECTED.


Affected upstream versions: n/a
Upstream repository: https://git.fedorahosted.org/cgit/spacewalk.git
Upstream fix commit: 18c70164285cae0660fa3ac55c6656bb19b3b13f
CVE-2013-4470: Kernel: net: memory corruption with UDP_CORK and UFO
Component: Kernel
Severity: Important
CWE: CWE-456 (Missing Initialization of a Variable)
Public date: 2013-10-21T00:00:00+00:00

The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.

Statement: This issue does not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: v3.12
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: c547dbf55d5f8cf615ccc0e7265e98db27d3fb8b
CVE-2013-4483: kernel: ipc: ipc_rcu_putref refcount races
Component: kernel
Severity: Moderate
Public date: 2013-10-29T00:00:00+00:00

A flaw was found in the way the ipc_rcu_putref() function in the Linux kernel's IPC implementation handled reference counter decrementing. A local, unprivileged user could use this flaw to trigger an Out of Memory (OOM) condition and, potentially, crash the system.

Statement: This issue does affect Linux kernel packages as shipped with Red Hat Enterprise Linux 6. Future kernel updates for respective releases may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.10
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 6062a8dc0517bce23e3c2f7d2fea5e22411269a3
CVE-2013-4492: rubygem-i18n: cross-site scripting flaw in exception handling
Component: rubygem-i18n
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Public date: 2013-12-04T00:00:00+00:00

Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call.


Affected upstream versions: n/a
Fixed upstream versions: v0.6.6
Upstream repository: https://github.com/svenfuchs/i18n
Upstream fix commit: 92b57b1e4f84adcdcc3a375278f299274be62445
CVE-2013-4527: qemu: hpet: buffer overrun on invalid state load
Component: qemu
Severity: Moderate
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Public date: 2013-12-03T00:00:00+00:00

Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via vectors related to the number of timers.

Statement: This issue does not affect the versions of kvm package as shipped with
Red Hat Enterprise Linux 5.

This issue does not affect the versions of qemu-kvm package as shipped
with Red Hat Enterprise Linux 6.

Affected upstream versions: n/a
Fixed upstream versions: v2.1.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: 3f1c49e2136fa08ab1ef3183fd55def308829584
CVE-2013-4535: qemu: virtio: insufficient validation of num_sg when mapping
Component: qemu
Severity: Moderate
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Public date: 2013-12-03T00:00:00+00:00

The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.


Affected upstream versions: before 1.7.2
Fixed upstream versions: v2.1.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: 36cf2a37132c7f01fa9adb5f95f5312b27742fd4
CVE-2013-4541: qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load
Component: qemu
Severity: Moderate
Public date: 2013-12-03T00:00:00+00:00

The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setup_len or setup_index value.

Statement: This issue does affect the versions of kvm package as shipped with
Red Hat Enterprise Linux 5.

This issue does affect the versions of qemu-kvm package as shipped with
Red Hat Enterprise Linux 7.

Affected upstream versions: n/a
Fixed upstream versions: v2.1.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: 9f8e9895c504149d7048e9fc5eb5cbb34b16e49a
CVE-2013-4542: qemu: virtio-scsi: buffer overrun on invalid state load
Component: qemu
Severity: Moderate
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Public date: 2013-12-03T00:00:00+00:00

The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds array access.

Statement: This issue does not affect the versions of kvm package as shipped with
Red Hat Enterprise Linux 5.

This issue does affect the versions of qemu-kvm package as shipped with
Red Hat Enterprise Linux 7.

Affected upstream versions: n/a
Fixed upstream versions: v2.1.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: 3c3ce981423e0d6c18af82ee62f1850c2cda5976
CVE-2013-4578: OpenJDK: jarsigner does not detect unsigned bytecode injected into signed jars
Component: OpenJDK
Severity: Low
Public date: 2014-01-14T00:00:00+00:00

jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.


Affected upstream versions: n/a
Upstream repository: https://hg.openjdk.java.net/jdk7u/jdk7u/jdk
Upstream fix commit: d5f36e1c927e
CVE-2013-4591: kernel: nfs: missing check for buffer length in __nfs4_get_acl_uncached
Component: kernel
Severity: Moderate
Public date: 2012-12-11T00:00:00+00:00

Buffer overflow in the __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via a getxattr system call for the system.nfs4_acl extended attribute of a pathname on an NFSv4 filesystem.

Statement: This issue did not affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.8
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 7d3e91a89b7adbc2831334def9e494dd9892f9af
CVE-2013-4592: kernel: kvm: memory leak when memory slot is moved with assigned device
Component: kernel
Severity: Moderate
CWE: CWE-401 (Missing Release of Memory after Effective Lifetime)
Public date: 2012-12-10T00:00:00+00:00

Memory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c in the Linux kernel before 3.9 allows local users to cause a denial of service (memory consumption) by leveraging certain device access to trigger movement of memory slots.


Affected upstream versions: n/a
Fixed upstream versions: v3.7
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 12d6e7538e2d418c08f082b1b44ffa5fb7270ed8
CVE-2013-5884: OpenJDK: insufficient security checks in CORBA stub factories (CORBA, 8026193)
Component: OpenJDK
Severity: Moderate
Public date: 2014-01-14T00:00:00+00:00

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories.


Affected upstream versions: n/a
Upstream repository: https://hg.openjdk.java.net/jdk7u/jdk7u/corba
Upstream fix commit: b1548473f261
CVE-2013-5893: OpenJDK: JVM method processing issues (Libraries, 8029507)
Component: OpenJDK
Severity: Critical
Public date: 2014-01-14T00:00:00+00:00

Unspecified vulnerability in Oracle Java SE 7u45 and Java SE Embedded 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to improper handling of methods in MethodHandles in HotSpot JVM, which allows attackers to escape the sandbox.


Affected upstream versions: n/a
Upstream repository: https://hg.openjdk.java.net/jdk7u/jdk7u/hotspot
Upstream fix commit: 839100e42498
CVE-2013-5896: OpenJDK: com.sun.corba.se. should be restricted package (CORBA, 8025022)
Component: OpenJDK
Severity: Moderate
Public date: 2014-01-14T00:00:00+00:00

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that com.sun.corba.se and its sub-packages are not included on the restricted package list.


Affected upstream versions: n/a
Upstream repository: https://hg.openjdk.java.net/jdk7u/jdk7u/jdk
Upstream fix commit: 694ad155b344
CVE-2013-5907: ICU: Layout Engine LookupProcessor insufficient input checks (JDK 2D, 8025034)
Component: ICU
Severity: Critical
Public date: 2014-01-14T00:00:00+00:00

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file.


Affected upstream versions: n/a
Upstream repository: https://hg.openjdk.java.net/jdk7u/jdk7u/jdk
Upstream fix commit: 9d29c19f1de1
CVE-2013-5910: OpenJDK: XML canonicalizer mutable strings passed to untrusted code (Security, 8026417)
Component: OpenJDK
Severity: Moderate
Public date: 2014-01-14T00:00:00+00:00

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays.


Affected upstream versions: n/a
Upstream repository: https://hg.openjdk.java.net/jdk7u/jdk7u/jdk
Upstream fix commit: 07004bb53c3c
CVE-2013-6044: python-django: xss in is_safe_url function
Component: python-django
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Public date: 2013-08-14T00:00:00+00:00

The is_safe_url function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as safe even if it is not HTTP or HTTPS, which might introduce cross-site scripting (XSS) or other vulnerabilities into Django applications that use this function, as demonstrated by "the login view in django.contrib.auth.views" and the javascript: scheme.


Affected upstream versions: n/a
Fixed upstream versions: stable/1.4.x
Upstream repository: https://github.com/django/django
Upstream fix commit: ec67af0bd609c412b76eaa4cc89968a2a8e5ad6a
CVE-2013-6367: kvm: division by zero in apic_get_tmcct()
Component: kvm
Severity: Important
Public date: 2013-12-12T00:00:00+00:00

The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via crafted modifications of the TMICT value.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise MRG 2 as they did not provide support for the KVM subsystem.

Affected upstream versions: n/a
Fixed upstream versions: v3.13
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: b963a22e6d1a266a67e9eecc88134713fd54775c
CVE-2013-6368: kvm: cross page vapic_addr access
Component: kvm
Severity: Important
Public date: 2013-12-12T00:00:00+00:00

The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service (system crash) via a VAPIC synchronization operation involving a page-end address.

Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise MRG 2 as they did not provide support for the KVM subsystem.

Affected upstream versions: n/a
Fixed upstream versions: v3.13
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: fda4e2e85589191b123d31cdc21fd33ee70f50fd
CVE-2013-6370: json-c: buffer overflow if size_t is larger than int
Component: json-c
Severity: Moderate
Public date: 2014-04-09T00:00:00+00:00

Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors.


Affected upstream versions: n/a
Fixed upstream versions: json-c-0.12.1-20160607
Upstream repository: https://github.com/json-c/json-c
Upstream fix commit: 64e36901a0614bf64a19bc3396469c66dcd0b015
CVE-2013-6371: json-c: hash collision DoS
Component: json-c
Severity: Moderate
Public date: 2014-04-09T00:00:00+00:00

The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.


Affected upstream versions: n/a
Fixed upstream versions: json-c-0.12.1-20160607
Upstream repository: https://github.com/json-c/json-c
Upstream fix commit: 64e36901a0614bf64a19bc3396469c66dcd0b015
CVE-2013-6372: Jenkins: insecure storage of passwords in Subversion plugin (SECURITY-58)
Component: Jenkins
Severity: Low
CWE: CWE-522 (Insufficiently Protected Credentials)
Public date: 2013-11-21T00:00:00+00:00

The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file.

Statement: Red Hat OpenShift Enterprise 1.2 is now in Production 1 Phase of the support
and maintenance life cycle. This has been rated as having Moderate security
impact and is not currently planned to be addressed in future updates. For
additional information, refer to the Red Hat OpenShift Enterprise Life Cycle:
https://access.redhat.com/site/support/policy/updates/openshift.

Affected upstream versions: n/a
Fixed upstream versions: subversion-1.54
Upstream repository: https://github.com/jenkinsci/subversion-plugin
Upstream fix commit: 7d4562d6f7e40de04bbe29577b51c79f07d05ba6
CVE-2013-6378: Kernel: drivers: libertas: potential oops in debugfs
Component: Kernel
Severity: Low
Public date: 2013-11-22T00:00:00+00:00

The lbs_debugfs_write function in drivers/net/wireless/libertas/debugfs.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service (OOPS) by leveraging root privileges for a zero-length write operation.

Statement: This issue does not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: v3.13
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: a497e47d4aec37aaf8f13509f3ef3d1f6a717d88
CVE-2013-6381: Kernel: qeth: buffer overflow in snmp ioctl
Component: Kernel
Severity: Important
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Public date: 2013-11-22T00:00:00+00:00

Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.

Statement: This issue does not affect the version of the kernel package as shipped with
Red Hat Enterprise MRG 2.

Please note that this issue only affects s390x architecture.

Affected upstream versions: n/a
Fixed upstream versions: v3.13
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 6fb392b1a63ae36c31f62bc3fc8630b49d602b62
CVE-2013-6383: Kernel: AACRAID Driver compat IOCTL missing capability check
Component: Kernel
Severity: Moderate
Public date: 2013-11-22T00:00:00+00:00

The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAP_SYS_RAWIO capability, which allows local users to bypass intended access restrictions via a crafted ioctl call.


Affected upstream versions: n/a
Fixed upstream versions: v3.12
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: f856567b930dfcdbc3323261bf77240ccdde01f5
CVE-2013-6399: qemu: virtio: buffer overrun on incoming migration
Component: qemu
Severity: Moderate
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Public date: 2013-12-03T00:00:00+00:00

Array index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image.

Statement: This issue does affect the versions of kvm package as shipped with
Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: v2.1.0
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: 4b53c2c72cb5541cf394033b528a6fe2a86c0ac1
CVE-2013-6412: augeas: incorrect permissions set on newly created files
Component: augeas
Severity: Moderate
Public date: 2013-11-25T00:00:00+00:00

The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors.


Affected upstream versions: n/a
Fixed upstream versions: release-1.2.0
Upstream repository: https://github.com/hercules-team/augeas
Upstream fix commit: f5b4fc0c
CVE-2013-6420: php: memory corruption in openssl_x509_parse()
Component: php
Severity: Critical
CWE: CWE-131 (Incorrect Calculation of Buffer Size)
Public date: 2013-12-10T00:00:00+00:00

The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function.


Affected upstream versions: n/a
Fixed upstream versions: php-5.3.28
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: c1224573c773b6845e83505f717fbf820fc18415
CVE-2013-6425: pixman: integer underflow when handling trapezoids
Component: pixman
Severity: Important
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2013-07-16T00:00:00+00:00

Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.


Affected upstream versions: n/a
Upstream repository: https://cgit.freedesktop.org/pixman
Upstream fix commit: 5e14da97f16e421d084a9e735be21b1025150f0c
CVE-2013-6430: Framework: org.spring.web.util.JavaScriptUtils.javaScriptEscape insufficient escaping of characters
Component: Framework
Severity: Moderate
Public date: 2014-01-14T00:00:00+00:00

The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escape certain characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a (1) line separator or (2) paragraph separator Unicode character or (3) left or (4) right angle bracket.


Affected upstream versions: before 3.2.2
Upstream repository: https://github.com/spring-projects/spring-framework
Upstream fix commit: 7a7df6637478607bef0277bf52a4e0a03e20a248
CVE-2013-6431: kernel: net: fib: fib6_add: potential NULL pointer dereference
Component: kernel
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2013-09-07T00:00:00+00:00

The fib6_add function in net/ipv6/ip6_fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability for an IPv6 SIOCADDRT ioctl call.

Statement: This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.

Affected upstream versions: n/a
Fixed upstream versions: v3.12
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: ae7b4e1f213aa659aedf9c6ecad0bf5f0476e1e2