huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2014-8133: kernel: x86: espfix(64) bypass via set_thread_area and CLONE_SETTLS
Component: kernel
Severity: Low
Public date: 2014-12-15T00:00:00+00:00

It was found that the espfix functionality could be bypassed by installing a 16-bit RW data segment into GDT instead of LDT (which espfix checks), and using that segment on the stack. A local, unprivileged user could potentially use this flaw to leak kernel stack addresses.

Statement: This issue did not affect the Linux kernel packages as shipped with Red
Hat Enterprise Linux 7 and Red Hat Enterprise Linux MRG 2.

Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and
maintenance life cycle. This has been rated as having Low security
impact and is not currently planned to be addressed in future updates. For
additional information, refer to the Red Hat Enterprise Linux Life
Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v3.19
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 41bdc78544b8a93a9c6814b8bbbfef966272abbe
CVE-2014-8136: libvirt: local denial of service in qemu/qemu_driver.c
Component: libvirt
Severity: Low
Public date: 2014-12-17T00:00:00+00:00

It was found that QEMU's qemuDomainMigratePerform() and qemuDomainMigrateFinish2() functions did not correctly perform a domain unlock on a failed ACL check. A remote attacker able to establish a connection to libvirtd could use this flaw to lock a domain of a more privileged user, causing a denial of service.


Affected upstream versions: n/a
Fixed upstream versions: v1.2.11
Upstream repository: https://libvirt.org/git/libvirt.git
Upstream fix commit: 2bdcd29c713dfedd813c89f56ae98f6f3898313d
CVE-2014-8142: php: use after free vulnerability in unserialize()
Component: php
Severity: Moderate
CWE: CWE-416 (Use After Free)
Public date: 2014-12-18T00:00:00+00:00

A flaws was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize() function could cause a PHP application to crash or, possibly, execute arbitrary code.

Statement: This issue did not affect the versions of php as shipped with Red Hat Enterprise Linux 5 and 6 or the versions of php53 as shipped with Red Hat Enterprise Linux 5.

The PHP manual documents that using unserialize() on untrusted user input is unsafe and not recommended.

Affected upstream versions: n/a
Fixed upstream versions: php-5.4.36
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: 630f9c33c23639de85c3fd306b209b538b73b4c9
CVE-2014-8155: gnutls: gnutls does not perform date/time checks on CA certificates
Component: gnutls
Severity: Moderate
CWE: CWE-325 (Missing Cryptographic Step)
Public date: 2010-03-14T00:00:00+00:00

It was found that GnuTLS did not check activation and expiration dates of CA certificates. This could cause an application using GnuTLS to incorrectly accept a certificate as valid when its issuing CA is already expired.

Statement: This issue did not affect the version of gnutls package as shipped with Red Hat Enterprise Linux 7.

This issue affects the version of gnutls as shipped with Red Hat Enterprise Linux 5. Red Hat Enterprise Linux 5 is now in Extended Life Cycle phase of the support and maintenance life cycle. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: gnutls_2_9_10
Upstream repository: https://gitlab.com/gnutls/gnutls
Upstream fix commit: 897cbce62c0263a498088ac3e465aa5f05f8719c
CVE-2014-8160: kernel: iptables restriction bypass if a protocol handler kernel module not loaded
Component: kernel
Severity: Moderate
Public date: 2014-09-25T00:00:00+00:00

A flaw was found in the way the Linux kernel's netfilter subsystem handled generic protocol tracking. As demonstrated in the Stream Control Transmission Protocol (SCTP) case, a remote attacker could use this flaw to bypass intended iptables rule restrictions when the associated connection tracking module was not loaded on the system.


Affected upstream versions: n/a
Fixed upstream versions: v3.18
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: db29a9508a9246e77087c5531e45b2c88ec6988b
CVE-2014-8172: kernel: soft lockup on aio
Component: kernel
Severity: Moderate
Public date: 2013-11-09T00:00:00+00:00

It was found that due to excessive files_lock locking, a soft lockup could be triggered in the Linux kernel when performing asynchronous I/O operations. A local, unprivileged user could use this flaw to crash the system.

Statement: This issue does not affect the versions of the kernel package as shipped with
Red Hat Enterprise Linux 5 and 6.

Affected upstream versions: n/a
Fixed upstream versions: v3.13
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: eee5cc2702929fd41cce28058dc6d6717f723f87
CVE-2014-8173: kernel: NULL pointer dereference in madvise(MADV_WILLNEED) support
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 6.2 (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2013-12-20T00:00:00+00:00

A NULL pointer dereference flaw was found in the way the Linux kernel's madvise MADV_WILLNEED functionality handled page table locking. A local, unprivileged user could use this flaw to crash the system.

Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6. This issue does affect the Linux kernel packages as shipped with Red Hat Enterprise Linux 7 and MRG-2. Future updates for the respective releases may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.13
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: ee53664bda169f519ce3c6a22d378f0b946c8178
CVE-2014-8176: OpenSSL: Invalid free in DTLS
Component: OpenSSL
Severity: Moderate
CVSS v3: 7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2015-06-11T00:00:00+00:00

An invalid-free flaw was found in the way OpenSSL handled certain DTLS handshake messages. A malicious DTLS client or server could send a specially crafted message to the peer, which could cause the application to crash or potentially result in arbitrary code execution.

Statement: This issue does NOT affect the version of OpenSSL package as shipped with Red Hat Enterprise Linux 5.

Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: 470990fee0182566d439ef7e82d1abf18b7085d7
CVE-2014-8275: openssl: Fix various certificate fingerprint issues
Component: openssl
Severity: Low
Public date: 2015-01-05T00:00:00+00:00

Multiple flaws were found in the way OpenSSL parsed X.509 certificates. An attacker could use these flaws to modify an X.509 certificate to produce a certificate with a different fingerprint without invalidating its signature, and possibly bypass fingerprint-based blacklisting in applications.

Statement: This issue affects the version of openssl098e as shipped with Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this issue as having Low security impact and does not plan to address this flaw for the above components in any future security updates.

This issue affects the version of openssl097a as shipped with Red Hat Enterprise Linux 5. Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: OpenSSL_1_1_0
Upstream repository: https://github.com/openssl/openssl
Upstream fix commit: cb62ab4b17818fe66d2fed0a7fe71969131c811b
CVE-2014-8369: kernel: kvm: excessive pages un-pinning in kvm_iommu_map error path
Component: kernel
Severity: Moderate
Public date: 2014-10-24T00:00:00+00:00

It was found that the fix for CVE-2014-3601 was incomplete: the Linux kernel's kvm_iommu_map_pages() function still handled IOMMU mapping failures incorrectly. A privileged user in a guest with an assigned host device could use this flaw to crash the host.

Statement: This issue did not affect the Linux kernel versions as shipped with Red Hat Enterprise Linux 5, 7 and Red Hat Enterprise MRG 2. Future Linux kernel updates for Red Hat Enterprise Linux 6 may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.18
Upstream repository: https://git.kernel.org/linux/kernel/git/torvalds/linux-2.6.git
Upstream fix commit: 3d32e4dbe71374a6780eaf51d719d76f9a9bf22f
CVE-2014-8484: binutils: invalid read flaw in libbfd
Component: binutils
Severity: Moderate
CWE: CWE-839 (Numeric Range Comparison Without Minimum Check)
Public date: 2014-10-20T00:00:00+00:00

An integer overflow flaw was found in the way the strings utility processed certain files. If a user were tricked into running the strings utility on a specially crafted file, it could cause the strings executable to crash.

Statement: Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: bd25671c6f202c4a5108883caa2adb24ff6f361f
CVE-2014-8485: binutils: lack of range checking leading to controlled write in _bfd_elf_setup_sections()
Component: binutils
Severity: Moderate
CWE: CWE-822 (Untrusted Pointer Dereference)
Public date: 2014-10-24T00:00:00+00:00

A buffer overflow flaw was found in the way various binutils utilities processed certain files. If a user were tricked into processing a specially crafted file, it could cause the utility used to process that file to crash or, potentially, execute arbitrary code with the privileges of the user running that utility.

Statement: Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: 493a33860c71cac998f1a56d6d87d6faa801fbaa
CVE-2014-8501: binutils: out-of-bounds write when parsing specially crafted PE executable
Component: binutils
Severity: Low
CWE: CWE-787 (Out-of-bounds Write)
Public date: 2014-10-26T00:00:00+00:00

A stack-based buffer overflow flaw was found in the way various binutils utilities processed certain files. If a user were tricked into processing a specially crafted file, it could cause the utility used to process that file to crash or, potentially, execute arbitrary code with the privileges of the user running that utility.

Statement: Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: 7e1e19887abd24aeb15066b141cdff5541e0ec8e
CVE-2014-8502: binutils: heap overflow in objdump when parsing a crafted ELF/PE binary file (incomplete fix for CVE-2014-8485)
Component: binutils
Severity: Low
CWE: CWE-122 (Heap-based Buffer Overflow)
Public date: 2014-10-28T00:00:00+00:00

It was found that the fix for the CVE-2014-8485 issue was incomplete: a heap-based buffer overflow in the objdump utility could cause it to crash or, potentially, execute arbitrary code with the privileges of the user running objdump when processing specially crafted files.

Statement: Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: 5a4b0ccc20ba30caef53b01bee2c0aaa5b855339
CVE-2014-8503: binutils: stack overflow in objdump when parsing specially crafted ihex file
Component: binutils
Severity: Low
CWE: CWE-121 (Stack-based Buffer Overflow)
Public date: 2014-10-30T00:00:00+00:00

A stack-based buffer overflow flaw was found in the way objdump processed IHEX files. A specially crafted IHEX file could cause objdump to crash or, potentially, execute arbitrary code with the privileges of the user running objdump.

Statement: Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: 0102ea8cec5fc509bba6c91df61b7ce23a799d32
CVE-2014-8504: binutils: stack overflow in the SREC parser
Component: binutils
Severity: Low
CWE: CWE-121 (Stack-based Buffer Overflow)
Public date: 2014-10-27T00:00:00+00:00

A stack-based buffer overflow flaw was found in the SREC parser of the libbfd library. A specially crafted file could cause an application using the libbfd library to crash or, potentially, execute arbitrary code with the privileges of the user running that application.

Statement: Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: 708d7d0d11f0f2d776171979aa3479e8e12a38a0
CVE-2014-8559: kernel: fs: deadlock due to incorrect usage of rename_lock
Component: kernel
Severity: Moderate
Public date: 2014-10-25T00:00:00+00:00

A flaw was found in the way the Linux kernel's VFS subsystem handled file system locks. A local, unprivileged user could use this flaw to trigger a deadlock in the kernel, causing a denial of service on the system.

Statement: This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.

This issue affects the version of the kernel package as shipped with Red Hat Enterprise Linux 7 and Red Hat Enterprise MRG 2. Future kernel updates for the respective releases may address this issue.

Affected upstream versions: n/a
Fixed upstream versions: v3.19
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: ca5358ef75fc69fee5322a38a340f5739d997c10
CVE-2014-8567: mod_auth_mellon: logout processing leads to denial of service
Component: mod_auth_mellon
Severity: Moderate
Public date: 2014-11-03T00:00:00+00:00

It was found that uninitialized data could be accessed when processing a user's logout request. By attempting to log out, a user could possibly cause the Apache HTTP Server to crash.


Affected upstream versions: n/a
Fixed upstream versions: v0.9.0
Upstream repository: https://github.com/UNINETT/mod_auth_mellon
Upstream fix commit: 0f5b4fd860fa7e3a6c47201637aab05395f32647
CVE-2014-8626: php: xmlrpc ISO8601 date format parsing buffer overflow
Component: php
Severity: Critical
CWE: CWE-121 (Stack-based Buffer Overflow)
Public date: 2014-11-05T00:00:00+00:00

A stack-based buffer overflow flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash or execute arbitrary code with the privileges of the user running that PHP application.

Statement: This issue did not affect php53 packages in Red Hat Enterprise Linux 5, php packages in Red Hat Enterprise Linux 6 and 7, and php54-php and php55-php packages in Red Hat Software Collections 1.

Affected upstream versions: n/a
Fixed upstream versions: RELEASE_1_3_5
Upstream repository: https://git.php.net/php-src.git
Upstream fix commit: c818d0d01341907fee82bdb81cab07b7d93bb9db
CVE-2014-8709: kernel: net: mac80211: plain text information leak
Component: kernel
Severity: Low
Public date: 2014-11-06T00:00:00+00:00

An information leak flaw was found in the Linux kernel's IEEE 802.11 wireless networking implementation. When software encryption was used, a remote attacker could use this flaw to leak up to 8 bytes of plaintext.

Statement: This issue did not affect the version of the kernel package as shipped with Red Hat Enterprise MRG 2.

This issue affects the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5. Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: v3.14
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 338f977f4eb441e69bb9a46eaa0ac715c931a67f
CVE-2014-8710: wireshark: SigComp dissector crash (wnpa-sec-2014-20)
Component: wireshark
Severity: Moderate
Public date: 2014-11-04T00:00:00+00:00

The decompress_sigcomp_message function in epan/sigcomp-udvm.c in the SigComp UDVM dissector in Wireshark 1.10.x before 1.10.11 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet.

Statement: This issue affects the verison of wireshark as shipped with Red Hat Enterprsie Linux 5. Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates.

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: 2bd15c7cefcf87aa6b2d9d53477f0ece897ba620
CVE-2014-8711: wireshark: AMQP dissector crash (wnpa-sec-2014-21)
Component: wireshark
Severity: Moderate
Public date: 2014-10-17T00:00:00+00:00

Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allow remote attackers to cause a denial of service (application crash) via a crafted amqp_0_10 PDU in a packet.

Statement: This issue did not affect the version of wireshark as shipped with Red Hat Enterprise Linux 5

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: 8f62bb7cce5a82baa543b14800fd7c12548b497a
CVE-2014-8712: wireshark: NCP dissector crashes (wnpa-sec-2014-22)
Component: wireshark
Severity: Moderate
Public date: 2014-10-09T00:00:00+00:00

The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Statement: This issue affects the verison of wireshark as shipped with Red Hat Enterprsie Linux 5. Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates.

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: 41f6923b3049dfb57bef544a4c580f256f807e85
CVE-2014-8713: wireshark: NCP dissector crashes (wnpa-sec-2014-22)
Component: wireshark
Severity: Moderate
Public date: 2014-10-09T00:00:00+00:00

Stack-based buffer overflow in the build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Statement: This issue affects the verison of wireshark as shipped with Red Hat Enterprsie Linux 5. Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates.

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: b9988e2bbfc7c6c41ef82c559bd11a8c19170491
CVE-2014-8714: wireshark: TN5250 infinite loop (wnpa-sec-2014-23)
Component: wireshark
Severity: Moderate
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
Public date: 2014-10-20T00:00:00+00:00

The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

Statement: This issue did not affect the version of wireshark as shipped with Red Hat Enterprise Linux 5

Affected upstream versions: n/a
Fixed upstream versions: ssv0.9.0
Upstream repository: https://code.wireshark.org/review/wireshark.git
Upstream fix commit: bc2726578156f3608960fc65ce1f691639e6addc
CVE-2014-8737: binutils: directory traversal vulnerability
Component: binutils
Severity: Moderate
CWE: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
Public date: 2014-11-04T00:00:00+00:00

A directory traversal flaw was found in the strip and objcopy utilities. A specially crafted file could cause strip or objdump to overwrite an arbitrary file writable by the user running either of these utilities.

Statement: Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Upstream repository: https://sourceware.org/git/binutils-gdb.git
Upstream fix commit: dd9b91de2149ee81d47f708e7b0bbf57da10ad42