huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2014-8738: binutils: out of bounds memory write
Component: binutils
Severity: Low
CWE: CWE-787 (Out-of-bounds Write)
Public date: 2014-11-02T00:00:00+00:00

A heap-based buffer overflow flaw was found in the way certain binutils utilities processed archive files. If a user were tricked into processing a specially crafted archive file, it could cause the utility used to process that archive to crash or, potentially, execute arbitrary code with the privileges of the user running that utility.

Statement: Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: bb0d867169d7e9743d229804106a8fbcab7f3b3f
CVE-2014-8884: kernel: usb: buffer overflow in ttusb-dec
Component: kernel
Severity: Low
CWE: CWE-121 (Stack-based Buffer Overflow)
Public date: 2014-11-14T00:00:00+00:00

A stack-based buffer overflow flaw was found in the TechnoTrend/Hauppauge DEC USB device driver. A local user with write access to the corresponding device could use this flaw to crash the kernel or, potentially, elevate their privileges on the system.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

Future kernel updates for Red Hat Enterprise Linux 6 and 7 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.18
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: f2e323ec96077642d397bb1c355def536d489d16
CVE-2014-8962: flac: Buffer read overflow when processing ID3V2 metadata
Component: flac
Severity: Low
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2014-11-18T00:00:00+00:00

A buffer over-read flaw was found in the way flac processed certain ID3v2 metadata. An attacker could create a specially crafted FLAC audio file that could cause an application using the flac library to crash when the file was read.


Affected upstream versions: n/a
Upstream repository: https://git.xiph.org/flac.git
Upstream fix commit: 5b3033a2b355068c11fe637e14ac742d273f076e
CVE-2014-9028: flac: Heap buffer write overflow in read_residual_partitioned_rice_
Component: flac
Severity: Important
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2014-11-25T00:00:00+00:00

A buffer overflow flaw was found in the way flac decoded FLAC audio files. An attacker could create a specially crafted FLAC audio file that could cause an application using the flac library to crash or execute arbitrary code when the file was read.


Affected upstream versions: n/a
Upstream repository: https://git.xiph.org/flac.git
Upstream fix commit: fcf0ba06ae12ccd7c67cee3c8d948df15f946b85
CVE-2014-9130: libyaml: assert failure when processing wrapped strings
Component: libyaml
Severity: Moderate
CWE: CWE-617 (Reachable Assertion)
Public date: 2014-11-26T00:00:00+00:00

An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash.


Affected upstream versions: n/a
Upstream repository: https://bitbucket.org/xi/libyaml
Upstream fix commit: 2b9156756423e967cfd09a61d125d883fca6f4f2
CVE-2014-9273: hivex: missing checks for small-sized files
Component: hivex
Severity: Moderate
CWE: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))
Public date: 2014-10-29T00:00:00+00:00

It was found that hivex attempted to read, and possibly write, beyond its allocated buffer when reading a hive file with a very small size or with a truncated or improperly formatted content. An attacker able to supply a specially crafted hive file to an application using the hivex library could possibly use this flaw to execute arbitrary code with the privileges of the user running that application.


Affected upstream versions: n/a
Fixed upstream versions: 1.3.11
Upstream repository: https://github.com/libguestfs/hivex
Upstream fix commit: 4bbdf555f88baeae0fa804a369a81a83908bd705
CVE-2014-9322: kernel: x86: local privesc due to bad_iret and paranoid entry incompatibility
Component: kernel
Severity: Important
CWE: CWE-841 (Improper Enforcement of Behavioral Workflow)
CVSS v3: 8.4 (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2014-12-15T00:00:00+00:00

A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a #SS (stack segment) fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system.

Statement: This issue does affect the Linux kernel packages as shipped with Red Hat
Enterprise Linux 4, 5, 6, and 7, and Red Hat Enterprise MRG 2. Future Linux
kernel updates for the respective releases will address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.18
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 6f442be2fb22be02cafa606f1769fa1e6f894441
CVE-2014-9419: kernel: partial ASLR bypass through TLS base addresses leak
Component: kernel
Severity: Low
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
Public date: 2014-12-08T00:00:00+00:00

An information leak flaw was found in the way the Linux kernel changed certain segment registers and thread-local storage (TLS) during a context switch. A local, unprivileged user could use this flaw to leak the user space TLS base address of an arbitrary process.

Statement: This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 7 may address this issue.

This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 5 and Red Hat Enterprise MRG 2.

Affected upstream versions: n/a
Fixed upstream versions: v3.19
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: f647d7c155f069c1a068030255c300663516420e
CVE-2014-9420: Kernel: fs: isofs: infinite loop in CE record entries
Component: Kernel
Severity: Low
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
Public date: 2014-12-15T00:00:00+00:00

It was found that the Linux kernel's ISO file system implementation did not correctly limit the traversal of Rock Ridge extension Continuation Entries (CE). An attacker with physical access to the system could use this flaw to trigger an infinite loop in the kernel, resulting in a denial of service.

Statement: This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2. Future kernel updates for the respective releases may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.19
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: f54e18f1b831c92f6512d2eedb224cd63d607d3d
CVE-2014-9421: krb5: kadmind doubly frees partial deserialization results (MITKRB5-SA-2015-001)
Component: krb5
Severity: Moderate
CWE: CWE-416 (Use After Free)
Public date: 2015-02-03T00:00:00+00:00

A double-free flaw was found in the way MIT Kerberos handled invalid External Data Representation (XDR) data. An authenticated user could use this flaw to crash the MIT Kerberos administration server (kadmind), or other applications using Kerberos libraries, using specially crafted XDR packets.

Statement: Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: krb5-1.14-final
Upstream repository: https://github.com/krb5/krb5
Upstream fix commit: a197e92349a4aa2141b5dff12e9dd44c2a2166e3
CVE-2014-9422: krb5: kadmind incorrectly validates server principal name (MITKRB5-SA-2015-001)
Component: krb5
Severity: Moderate
CWE: CWE-676 (Use of Potentially Dangerous Function)
Public date: 2015-02-03T00:00:00+00:00

It was found that the MIT Kerberos administration server (kadmind) incorrectly accepted certain authentication requests for two-component server principal names. A remote attacker able to acquire a key with a particularly named principal (such as "kad/x") could use this flaw to impersonate any user to kadmind, and perform administrative actions as that user.

Statement: Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: krb5-1.14-final
Upstream repository: https://github.com/krb5/krb5
Upstream fix commit: 6609658db0799053fbef0d7d0aa2f1fd68ef32d8
CVE-2014-9423: krb5: libgssrpc server applications leak uninitialized bytes (MITKRB5-SA-2015-001)
Component: krb5
Severity: Moderate
CWE: CWE-212 (Improper Removal of Sensitive Information Before Storage or Transfer)
Public date: 2015-02-03T00:00:00+00:00

An information disclosure flaw was found in the way MIT Kerberos RPCSEC_GSS implementation (libgssrpc) handled certain requests. An attacker could send a specially crafted request to an application using libgssrpc to disclose a limited portion of uninitialized memory used by that application.

Statement: This issue did not affect the versions of krb5 as shipped with Red Hat Enterprise Linux 5 and 6 as the flaw was introduced in a later version (1.11).

Affected upstream versions: n/a
Fixed upstream versions: krb5-1.14-final
Upstream repository: https://github.com/krb5/krb5
Upstream fix commit: 5bb8a6b9c9eb8dd22bc9526751610aaa255ead9c
CVE-2014-9425: php: Double-free in zend_ts_hash_graceful_destroy()
Component: php
Severity: Low
CWE: CWE-416 (Use After Free)
Public date: 2014-12-30T00:00:00+00:00

A double free flaw was found in zend_ts_hash_graceful_destroy() function in the PHP ZTS module. This flaw could possibly cause a PHP application to crash.

Statement: This issue did not affect the versions of php and php53 as shipped with Red Hat Enterprise Linux 5, and the versions of php as shipped with Red Hat Enterprise Linux 7.

Affected upstream versions: n/a
Fixed upstream versions: php-5.5.21
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: fbf3a6bc1abcc8a5b5226b0ad9464c37f11ddbd6
CVE-2014-9427: php: out of bounds read when parsing a crafted .php file
Component: php
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2014-12-17T00:00:00+00:00

A flaw was found in the way PHP handled malformed source files when running in CGI mode. A specially crafted PHP file could cause PHP CGI to crash.

Statement: This flaw requires that a user is able to upload arbitrary PHP code on the system, be a local user able to execute arbitrary PHP code, or have the ability to modify existing PHP code on the system.  It also requires that the modified/arbitrary PHP code is executed with the php-cgi program, and the net result is that php-cgi crashes, effectively resulting in a self-denial of service.

Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: php-5.4.37
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: f9ad3086693fce680fbe246e4a45aa92edd2ac35
CVE-2014-9447: elfutils: directory traversal in read_long_names()
Component: elfutils
Severity: Low
CWE: CWE-73 (External Control of File Name or Path)
Public date: 2014-12-27T00:00:00+00:00

Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / (slash) in a crafted archive, as demonstrated using the ar program.


Affected upstream versions: n/a
Upstream repository: https://git.fedorahosted.org/cgit/elfutils.git
Upstream fix commit: 147018e729e7c22eeabf15b82d26e4bf68a0d18e
CVE-2014-9529: kernel: use-after-free during key garbage collection
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
Public date: 2014-12-29T00:00:00+00:00

A race condition flaw was found in the way the Linux kernel keys management subsystem performed key garbage collection. A local attacker could attempt accessing a key while it was being garbage collected, which would cause the system to crash.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5.

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 6, 7 and Red Hat Enterprise MRG 2. Future kernel updates for the respective releases may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.19
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: a3a8784454692dd72e5d5d34dcdab17b4420e74c
CVE-2014-9584: kernel: isofs: unchecked printing of ER records
Component: kernel
Severity: Low
Public date: 2015-01-07T00:00:00+00:00

An information leak flaw was found in the way the Linux kernel's ISO9660 file system implementation accessed data on an ISO9660 image with RockRidge Extension Reference (ER) records. An attacker with physical access to the system could use this flaw to disclose up to 255 bytes of kernel memory.

Statement: This issue affects the versions of the Linux kernel as shipped with
Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2. Future kernel updates for the respective releases may address this issue.

Red Hat Enterprise Linux 5 is now in Production 3 phase of the support and maintenance life cycle. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v3.19
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 4e2024624e678f0ebb916e6192bd23c1f9fdf696
CVE-2014-9585: kernel: ASLR bruteforce possible for vdso library
Component: kernel
Severity: Low
Public date: 2014-12-11T00:00:00+00:00

An information leak flaw was found in the way the Linux kernel's Virtual Dynamic Shared Object (vDSO) implementation performed address randomization. A local, unprivileged user could use this flaw to leak kernel memory addresses to user-space.


Affected upstream versions: n/a
Fixed upstream versions: v3.19
Upstream repository: https://git.kernel.org/linux/kernel/git/tip/tip.git
Upstream fix commit: fbe1bf140671619508dfa575d74a185ae53c5dbb
CVE-2014-9620: file: limit the number of ELF notes processed
Component: file
Severity: Low
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
Public date: 2015-01-03T00:00:00+00:00

A flaw was found in the way the File Information (fileinfo) extension parsed Executable and Linkable Format (ELF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted ELF file.


Affected upstream versions: n/a
Fixed upstream versions: FILE5_22
Upstream repository: https://github.com/file/file
Upstream fix commit: ce90e05774dd77d86cfc8dfa6da57b32816841c4
CVE-2014-9644: kernel: crypto api unprivileged arbitrary module load via request_module()
Component: kernel
Severity: Low
CWE: CWE-749 (Exposed Dangerous Method or Function)
Public date: 2013-03-04T00:00:00+00:00

A flaw was found in the way the Linux kernel's Crypto subsystem handled automatic loading of kernel modules. A local user could use this flaw to load any installed kernel module, and thus increase the attack surface of the running kernel.

Statement: This issue did not affect the versions of the kernel as shipped
with Red Hat Enterprise Linux 4, 5, and 6.

This issue affects the versions of the Linux as shipped with Red Hat Enterprise Linux 7. Red Hat Product Security has rated this issue as having Low  security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Affected upstream versions: n/a
Fixed upstream versions: v3.19
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 4943ba16bbc2db05115707b3ff7b4874e9e3c560
CVE-2014-9652: file: out of bounds read in mconvert()
Component: file
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2014-11-11T00:00:00+00:00

An ouf-of-bounds read flaw was found in the way the file utility processed certain Pascal strings. A remote attacker could cause an application using the file utility (for example, PHP using the fileinfo module) to crash if it was used to identify the type of the attacker-supplied file.


Affected upstream versions: n/a
Fixed upstream versions: FILE5_21
Upstream repository: https://github.com/file/file
Upstream fix commit: 59e63838913eee47f5c120a6c53d4565af638158
CVE-2014-9653: file: malformed elf file causes access to uninitialized memory
Component: file
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2014-12-16T00:00:00+00:00

A flaw was found in the way the File Information (fileinfo) extension parsed Executable and Linkable Format (ELF) files. A remote attacker could use this flaw to cause a PHP application using fileinfo to crash or disclose certain portions of server memory.


Affected upstream versions: n/a
Fixed upstream versions: FILE5_22
Upstream repository: https://github.com/file/file
Upstream fix commit: 445c8fb0ebff85195be94cd9f7e1df89cade5c7f
CVE-2014-9657: freetype: off-by-one buffer over-read in tt_face_load_hdmx()
Component: freetype
Severity: Low
CWE: CWE-193 (Off-by-one Error)
Public date: 2014-11-24T00:00:00+00:00

The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: eca0f067068020870a429fe91f6329e499390d55
CVE-2014-9658: freetype: buffer over-read and integer underflow in tt_face_load_kern()
Component: freetype
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2014-11-24T00:00:00+00:00

The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: f70d9342e65cd2cb44e9f26b6d7edeedf191fc6c
CVE-2014-9660: freetype: missing ENDCHAR NULL pointer dereference in the _bdf_parse_glyphs()
Component: freetype
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2014-11-24T00:00:00+00:00

The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted BDF font.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: af8346172a7b573715134f7a51e6c5c60fa7f2ab
CVE-2014-9661: freetype: out of bounds read in Type42 font parser
Component: freetype
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2014-11-24T00:00:00+00:00

type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted Type42 font.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: 42fcd6693ec7bd6ffc65ddc63e74287a65dda669
CVE-2014-9663: freetype: out-of-bounds read in tt_cmap4_validate()
Component: freetype
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
Public date: 2014-11-24T00:00:00+00:00

The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted cmap SFNT table.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: 9bd20b7304aae61de5d50ac359cf27132bafd4c1
CVE-2014-9664: freetype: off-by-one buffer over-read in parse_charstrings() / t42_parse_charstrings()
Component: freetype
Severity: Low
CWE: CWE-193 (Off-by-one Error)
Public date: 2014-11-24T00:00:00+00:00

FreeType before 2.5.4 does not check for the end of the data during certain parsing actions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted Type42 font, related to type42/t42parse.c and type1/t1load.c.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: dd89710f0f643eb0f99a3830e0712d26c7642acd
CVE-2014-9667: freetype: integer overflow in tt_face_load_font_dir() leading to out-of-bounds read
Component: freetype
Severity: Low
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2014-11-24T00:00:00+00:00

sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted SFNT table.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: 677ddf4f1dc1b36cef7c7ddd59a14c508f4b1891
CVE-2014-9669: freetype: multiple integer overflows leading to buffer over-reads in cmap handling
Component: freetype
Severity: Low
CWE: CWE-190 (Integer Overflow or Wraparound)
Public date: 2014-11-24T00:00:00+00:00

Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: 602040b1112c9f94d68e200be59ea7ac3d104565
CVE-2014-9670: freetype: integer overflow in pcf_get_encodings() leading to NULL pointer dereference
Component: freetype
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
Public date: 2014-11-24T00:00:00+00:00

Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row.


Affected upstream versions: n/a
Upstream repository: https://git.savannah.gnu.org/cgit/freetype/freetype2.git
Upstream fix commit: ef1eba75187adfac750f326b563fe543dd5ff4e6