huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2014-3645: kernel: kvm: vmx: invept vm exit not handled
Component: kernel
Severity: Moderate
CWE: CWE-248 (Uncaught Exception)
Public date: 2014-10-21T00:00:00+00:00

It was found that the Linux kernel's KVM subsystem did not handle the VM exits gracefully for the invept (Invalidate Translations Derived from EPT) instructions. On hosts with an Intel processor and invept VM exit support, an unprivileged guest user could use these instructions to crash the guest.

Statement: This issue does affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6 and 7. Future updates may address this issue in the
respective Red Hat Enterprise Linux releases.


This issue does affect the kvm packages as shipped with Red Hat Enterprise Linux 5.

Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v3.12
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: bfd0a56b90005f8c8a004baf407ad90045c2b11e
CVE-2014-3646: kernel: kvm: vmx: invvpid vm exit not handled
Component: kernel
Severity: Moderate
CWE: CWE-248 (Uncaught Exception)
Public date: 2014-10-21T00:00:00+00:00

It was found that the Linux kernel's KVM subsystem did not handle the VM exits gracefully for the invvpid (Invalidate Translations Based on VPID) instructions. On hosts with an Intel processor and invppid VM exit support, an unprivileged guest user could use these instructions to crash the guest.

Statement: This issue does affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 6 and 7. Future updates may address this issue in the
respective Red Hat Enterprise Linux releases.

This issue does affect the kvm packages as shipped with Red Hat Enterprise Linux 5.

Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v3.18
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: a642fc305053cc1c6e47e4f4df327895747ab485
CVE-2014-3647: kernel: kvm: noncanonical rip after emulation
Component: kernel
Severity: Moderate
CWE: CWE-248 (Uncaught Exception)
Public date: 2014-10-21T00:00:00+00:00

A flaw was found in the way the Linux kernel's KVM subsystem handled non-canonical addresses when emulating instructions that change the RIP (for example, branches or calls). A guest user with access to an I/O or MMIO region could use this flaw to crash the guest.

Statement: This issue does affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 7. Future kernel updates may address this issue.

This issue does affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6. The risks associated with fixing this bug are greater than its security impact. This issue is not currently planned to be addressed in future kernel updates for Red Hat Enterprise Linux 6.

This issue does affect the kvm packages as shipped with Red Hat Enterprise Linux 5.

Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v3.18
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: d1442d85cc30ea75f7d399474ca738e0bc96f715
CVE-2014-3657: libvirt: domain_conf: domain deadlock DoS
Component: libvirt
Severity: Moderate
CWE: CWE-20 (Improper Input Validation)
Public date: 2014-10-01T00:00:00+00:00

A denial of service flaw was found in the way libvirt's virConnectListAllDomains() function computed the number of used domains. A remote attacker able to establish a read-only connection to libvirtd could use this flaw to make any domain operations within libvirt unresponsive.

Statement: This issue does not affect the versions of libvirt packages as shipped with
Red Hat Enterprise Linux 5.

This issue does affect the versions of libvirt packages as shipped with Red Hat
Enterprise Linux 6 and 7. Future updates may address this issue in the
respective Red Hat Enterprise Linux releases.

Affected upstream versions: n/a
Fixed upstream versions: v1.2.9
Upstream repository: https://libvirt.org/git/libvirt.git
Upstream fix commit: fc22b2e74890873848b43fffae43025d22053669
CVE-2014-3668: php: xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime()
Component: php
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2014-10-14T00:00:00+00:00

An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash.

Statement: This issue did not affect the php packages as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: php-5.4.34
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 88412772d295ebf7dd34409534507dc9bcac726e
CVE-2014-3669: php: integer overflow in unserialize()
Component: php
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2014-09-18T00:00:00+00:00

An integer overflow flaw was found in the way custom objects were unserialized. Specially crafted input processed by the unserialize() function could cause a PHP application to crash.


Affected upstream versions: n/a
Fixed upstream versions: php-5.4.34
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 56754a7f9eba0e4f559b6ca081d9f2a447b3f159
CVE-2014-3670: php: heap corruption issue in exif_thumbnail()
Component: php
Severity: Important
Public date: 2014-10-14T00:00:00+00:00

A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_thumbnail() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application.


Affected upstream versions: n/a
Fixed upstream versions: php-5.5.19
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: ddb207e7fa2e9adeba021a1303c3781efda5409b
CVE-2014-3673: kernel: sctp: skb_over_panic when receiving malformed ASCONF chunks
Component: kernel
Severity: Important
CWE: CWE-20 (Improper Input Validation)
Public date: 2014-10-09T00:00:00+00:00

A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation handled malformed Address Configuration Change Chunks (ASCONF). A remote attacker could use either of these flaws to crash the system.

Statement: This issue does affect Red Hat Enterprise Linux 5. This has been rated as having Important security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

This issue does affect Red Hat Enterprise Linux 6, 7 and Red Hat Enterprise MRG. Future Linux kernel updates for the respective releases will address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.18
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 9de7922bc709eee2f609cd01d98aaedc4cf5ea74
CVE-2014-3682: jbpm-designer: XXE in BPMN2 import
Component: jbpm-designer
Severity: Moderate
CWE: CWE-611 (Improper Restriction of XML External Entity Reference)
Public date: 2015-02-17T00:00:00+00:00

An XML External Entity (XXE) flaw was found in the jbpm-designer BPMN2 import function. A remote attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks.


Affected upstream versions: n/a
Upstream repository: https://github.com/droolsjbpm/jbpm-designer
Upstream fix commit: 5641588c730cc75dc3b76c34b76271fbd407fb84
CVE-2014-3687: kernel: net: sctp: fix panic on duplicate ASCONF chunks
Component: kernel
Severity: Important
Public date: 2014-10-09T00:00:00+00:00

A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation handled duplicate Address Configuration Change Chunks (ASCONF). A remote attacker could use either of these flaws to crash the system.

Statement: This issue does affect Red Hat Enterprise Linux 6, 7 and Red Hat Enterprise MRG. Future Linux kernel updates for the respective releases will address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.18
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: b69040d8e39f20d5215a03502a8e8b4c6ab78395
CVE-2014-3688: kernel: net: sctp: remote memory pressure from excessive queueing
Component: kernel
Severity: Important
Public date: 2014-10-09T00:00:00+00:00

A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation handled the association's output queue. A remote attacker could send specially crafted packets that would cause the system to use an excessive amount of memory, leading to a denial of service.

Statement: This issue does affect Red Hat Enterprise Linux 6, 7 and Red Hat Enterprise MRG. Future Linux kernel updates for the respective releases will address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.18
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 26b87c7881006311828bb0ab271a551a62dcceb4
CVE-2014-3690: kernel: kvm: vmx: invalid host cr4 handling across vm entries
Component: kernel
Severity: Moderate
Public date: 2014-10-21T00:00:00+00:00

It was found that the Linux kernel's KVM implementation did not ensure that the host CR4 control register value remained unchanged across VM entries on the same virtual CPU. A local, unprivileged user could use this flaw to cause a denial of service on the system.

Statement: This issue does affects the Linux kernel packages as shipped with Red Hat
Enterprise Linux 6 and 7. Future updates may address this issue in the
respective Red Hat Enterprise Linux releases.

This issue does affect the kvm packages as shipped with Red Hat Enterprise Linux 5, even though the impact is limited.

Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v3.18
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: d974baa398f34393db76be45f7d4d04fbdbb4a0a
CVE-2014-3694: pidgin: SSL/TLS plug-ins failed to check Basic Constraints
Component: pidgin
Severity: Low
CWE: CWE-295 (Improper Certificate Validation)
CVSS v3: 3.1 (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N)
Public date: 2014-10-22T00:00:00+00:00

It was found that Pidgin's SSL/TLS plug-ins had a flaw in the certificate validation functionality. An attacker could use this flaw to create a fake certificate, that Pidgin would trust, which could be used to conduct man-in-the-middle attacks against Pidgin.


Affected upstream versions: n/a
Upstream repository: https://hg.pidgin.im/pidgin/main
Upstream fix commit: 2e4475087f04
CVE-2014-3695: pidgin: crash in Mxit protocol plug-in
Component: pidgin
Severity: Moderate
CVSS v3: 4.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Public date: 2014-10-22T00:00:00+00:00

A denial of service flaw was found in the way Pidgin's Mxit plug-in handled emoticons. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to crash Pidgin by sending a specially crafted emoticon.


Affected upstream versions: n/a
Upstream repository: https://hg.pidgin.im/pidgin/main
Upstream fix commit: 6436e14bdb9d
CVE-2014-3696: pidgin: denial of service parsing Groupwise server message
Component: pidgin
Severity: Moderate
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
CVSS v3: 4.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Public date: 2014-10-22T00:00:00+00:00

A denial of service flaw was found in the way Pidgin parsed Groupwise server messages. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to cause Pidgin to consume an excessive amount of memory, possibly leading to a crash, by sending a specially crafted message.


Affected upstream versions: n/a
Upstream repository: https://hg.pidgin.im/pidgin/main
Upstream fix commit: 44fd89158777
CVE-2014-3698: pidgin: remote information leak via crafted XMPP message
Component: pidgin
Severity: Moderate
CWE: CWE-201 (Insertion of Sensitive Information Into Sent Data)
CVSS v3: 4.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Public date: 2014-10-22T00:00:00+00:00

An information disclosure flaw was discovered in the way Pidgin parsed XMPP messages. A malicious remote server or a man-in-the-middle attacker could potentially use this flaw to disclose a portion of memory belonging to the Pidgin process by sending a specially crafted XMPP message.


Affected upstream versions: n/a
Upstream repository: https://hg.pidgin.im/pidgin/main
Upstream fix commit: ea46ab68f0dc
CVE-2014-3710: file: out-of-bounds read in elf note headers
Component: file
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2014-10-22T00:00:00+00:00

An out-of-bounds read flaw was found in the way the File Information (fileinfo) extension parsed Executable and Linkable Format (ELF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted ELF file.


Affected upstream versions: n/a
Fixed upstream versions: php-5.4.35
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 1803228597e82218a8c105e67975bc50e6f5bf0d
CVE-2014-4027: Kernel: target/rd: imformation leakage
Component: Kernel
Severity: Low
Public date: 2014-01-07T00:00:00+00:00

An information leak flaw was found in the RAM Disks Memory Copy (rd_mcp) backend driver of the iSCSI Target subsystem of the Linux kernel. A privileged user could use this flaw to leak the contents of kernel memory to an iSCSI initiator remote client.

Statement: This issue does not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5.

This issue affects the versions of Linux kernel package as shipped with Red Hat Enterprise Linux 6 and 7. Future kernel updates for Red Hat Enterprise Linux 6 and 7 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.14
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 4442dc8a92b8f9ad8ee9e7f8438f4c04c03a22dc
CVE-2014-4049: php: heap-based buffer overflow in DNS TXT record parsing
Component: php
Severity: Moderate
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2014-06-11T00:00:00+00:00

A heap-based buffer overflow flaw was found in the way PHP parsed DNS TXT records. A malicious DNS server or a man-in-the-middle attacker could possibly use this flaw to execute arbitrary code as the PHP interpreter if a PHP application used the dns_get_record() function to perform a DNS query.

Statement: This issue did not affect the versions of php as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: POST_PHP7_REMOVALS
Upstream repository: https://github.com/php/php-src
Upstream fix commit: b34d7849ed90ced9345f8ea1c59bc8d101c18468
CVE-2014-4172: cas-client: Bypass of security constraints via URL parameter injection
Component: cas-client
Severity: Important
Public date: 2014-08-11T00:00:00+00:00

A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the (1) service parameter to validation/AbstractUrlBasedTicketValidator.java or (2) pgtUrl parameter to validation/Cas20ServiceTicketValidator.java.


Affected upstream versions: n/a
Fixed upstream versions: v1.0.2
Upstream repository: https://github.com/Jasig/dotnet-cas-client
Upstream fix commit: f0e030014fb7a39e5f38469f43199dc590fd0e8d
CVE-2014-4341: krb5: denial of service flaws when handling padding length longer than the plaintext
Component: krb5
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2014-06-26T00:00:00+00:00

A buffer over-read flaw was found in the way MIT Kerberos handled certain requests. A remote, unauthenticated attacker who is able to inject packets into a client or server application's GSSAPI session could use this flaw to crash the application.


Affected upstream versions: n/a
Fixed upstream versions: krb5-1.12.2-final
Upstream repository: https://github.com/krb5/krb5
Upstream fix commit: e6ae703ae597d798e310368d52b8f38ee11c6a73
CVE-2014-4342: krb5: denial of service flaws when handling RFC 1964 tokens
Component: krb5
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2014-06-26T00:00:00+00:00

A buffer over-read flaw was found in the way MIT Kerberos handled certain requests. A remote, unauthenticated attacker who is able to inject packets into a client or server application's GSSAPI session could use this flaw to crash the application.

Statement: This issue did not affect the version of krb5 as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: krb5-1.12.2-final
Upstream repository: https://github.com/krb5/krb5
Upstream fix commit: e6ae703ae597d798e310368d52b8f38ee11c6a73
CVE-2014-4343: krb5: double-free flaw in SPNEGO initiators
Component: krb5
Severity: Low
CWE: CWE-416 (Use After Free)
Public date: 2014-07-15T00:00:00+00:00

A double-free flaw was found in the MIT Kerberos SPNEGO initiators. An attacker able to spoof packets to appear as though they are from an GSSAPI acceptor could use this flaw to crash a client application that uses MIT Kerberos.

Statement: This issue did not affect the version of krb5 as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: kfw-4.1-final
Upstream repository: https://github.com/krb5/krb5
Upstream fix commit: f18ddf5d82de0ab7591a36e465bc24225776940f
CVE-2014-4344: krb5: NULL pointer dereference flaw in SPNEGO acceptor for continuation tokens
Component: krb5
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2014-07-15T00:00:00+00:00

A NULL pointer dereference flaw was found in the MIT Kerberos SPNEGO acceptor for continuation tokens. A remote, unauthenticated attacker could use this flaw to crash a GSSAPI-enabled server application.


Affected upstream versions: n/a
Fixed upstream versions: krb5-1.12.2-final
Upstream repository: https://github.com/krb5/krb5
Upstream fix commit: a7886f0ed1277c69142b14a2c6629175a6331edc
CVE-2014-4345: krb5: buffer overrun in kadmind with LDAP backend (MITKRB5-SA-2014-001)
Component: krb5
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
Public date: 2014-08-07T00:00:00+00:00

A buffer overflow was found in the KADM5 administration server (kadmind) when it was used with an LDAP back end for the KDC database. A remote, authenticated attacker could potentially use this flaw to execute arbitrary code on the system running kadmind.


Affected upstream versions: n/a
Fixed upstream versions: krb5-1.12.2-final
Upstream repository: https://github.com/krb5/krb5
Upstream fix commit: dc7ed55c689d57de7f7408b34631bf06fec9dab1
CVE-2014-4608: kernel: lzo1x_decompress_safe() integer overflow
Component: kernel
Severity: Low
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2014-06-26T00:00:00+00:00

An integer overflow flaw was found in the way the lzo1x_decompress_safe() function of the Linux kernel's LZO implementation processed Literal Runs. A local attacker could, in extremely rare cases, use this flaw to crash the system or, potentially, escalate their privileges on the system.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5.

Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG 2 only support 64-bit architectures. Since exploiting this issue on 64-bit platforms is not feasible given the amount of input data that is necessary to trigger the integer overflow, we are currently not planning planning to fix this issue in Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.16
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 206a81c18401c0cde6e579164f752c4b147324ce
CVE-2014-4652: Kernel: ALSA: control: protect user controls against races & memory disclosure
Component: Kernel
Severity: Low
Public date: 2014-06-18T00:00:00+00:00

An information leak flaw was found in the way the Linux kernel's Advanced Linux Sound Architecture (ALSA) implementation handled access of the user control's state. A local, privileged user could use this flaw to leak kernel memory to user space.


Affected upstream versions: n/a
Fixed upstream versions: v3.16
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 07f4d9d74a04aa7c72c5dae0ef97565f28f17b92
CVE-2014-4653: Kernel: ALSA: control: do not access controls outside of protected regions
Component: Kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
Public date: 2014-06-18T00:00:00+00:00

A use-after-free flaw was found in the way the Linux kernel's Advanced Linux Sound Architecture (ALSA) implementation handled user controls. A local, privileged user could use this flaw to crash the system.

Statement: This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2. Future kernel updates for the respective releases may address this issue.

Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v3.16
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: fd9f26e4eca5d08a27d12c0933fceef76ed9663d
CVE-2014-4654: Kernel: ALSA: control: use-after-free in replacing user controls
Component: Kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
Public date: 2014-06-18T00:00:00+00:00

A use-after-free flaw was found in the way the Linux kernel's Advanced Linux Sound Architecture (ALSA) implementation handled user controls. A local, privileged user could use this flaw to crash the system.

Statement: This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.16
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 82262a46627bebb0febcc26664746c25cef08563