linux

CVEs (3,015)

• CVE-2015-0501Apr 16, 2015
  MariaDB

  MariaDB
  risk 0.01cvss —epss 0.10

  Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Compiling.

• CVE-2015-2775Apr 13, 2015
  GNU

  Mailman
  risk 0.01cvss —epss 0.08

  Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. (dot dot) in a list name.

• CVE-2015-2806Apr 10, 2015
  GNU

  Libtasn1
  risk 0.01cvss —epss 0.08

  Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.

• CVE-2015-2305Mar 30, 2015
  Henry Spencer

  rxspencer
  risk 0.01cvss —epss 0.08

  Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular…

• CVE-2015-2301Mar 30, 2015
  PHP

  PHP
  risk 0.01cvss —epss 0.15

  Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted renaming of a Phar…

• CVE-2014-9709Mar 30, 2015
  PHP

  PHP
  risk 0.01cvss —epss 0.16

  The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the…

• CVE-2015-2155Mar 24, 2015
  Tcpdump

  Tcpdump
  risk 0.01cvss —epss 0.08

  The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

• CVE-2014-9636Feb 6, 2015
  Unzip Project

  Unzip
  risk 0.01cvss —epss 0.12

  unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression.

• CVE-2014-8158Jan 26, 2015
  Jasper

  JasPer
  risk 0.01cvss —epss 0.14

  Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.

• CVE-2014-8157Jan 26, 2015
  Jasper

  JasPer
  risk 0.01cvss —epss 0.17

  Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image, which triggers a heap-based buffer overflow.

• CVE-2015-0411Jan 21, 2015
  Fedoraproject

  Fedora
  risk 0.01cvss —epss 0.10

  Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption.

• CVE-2015-0408Jan 21, 2015
  Novell

  Suse Linux Enterprise Desktop
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.

• CVE-2015-0382Jan 21, 2015
  Fedoraproject

  Fedora
  risk 0.01cvss —epss 0.10

  Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0381.

• CVE-2014-6601Jan 21, 2015
  Novell

  Suse Linux Enterprise Desktop
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

• CVE-2014-6568Jan 21, 2015
  Fedoraproject

  Fedora
  risk 0.01cvss —epss 0.07

  Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DML.

• CVE-2014-8150Jan 15, 2015
  Curl

  Libcurl
  risk 0.01cvss —epss 0.07

  CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a URL.

• CVE-2014-8145Dec 31, 2014
  Sound Exchange Project

  Sound Exchange
  risk 0.01cvss —epss 0.08

  Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and earlier allow remote attackers to have unspecified impact via a crafted WAV file to the (1) start_read or (2) AdpcmReadBlock function.

• CVE-2014-3580Dec 18, 2014
  Apache

  Subversion
  risk 0.01cvss —epss 0.11

  The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a REPORT request for a resource that does not exist.

• CVE-2013-6435Dec 16, 2014
  Rpm

  Rpm
  risk 0.01cvss —epss 0.08

  Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory.

• CVE-2014-9116Dec 2, 2014
  Mutt

  Mutt
  risk 0.01cvss —epss 0.10

  The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, which triggers a heap-based buffer overflow in the…