CVE-2015-8327

cups-filters: foomatic-rip did not consider the back tick as an illegal shell escape character

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

CVSS 2.0 · 7.5 High EPSS 10.6% KEV · Not listed

Vendors

Canonical Debian Linuxfoundation and 1 more

Products

Ubuntu Linux Debian Linux Cups-filters and 7 more

CVE-2015-8317

libxml2: Out-of-bounds heap read when parsing file with unfinished xml declaration

The xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive information via an (1) unterminated encoding value or (2) incomplete XML declaration in XML data, which triggers an out-of-bounds heap read.

CVSS 2.0 · 5.0 Medium EPSS 5.9% KEV · Not listed

Vendors

Canonical Debian Hp and 2 more

Products

Ubuntu Linux Debian Linux Icewall Federation Agent and 8 more

CVE-2015-8242

libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.

CVSS 2.0 · 5.8 Medium EPSS 4.3% KEV · Not listed

Vendors

Apple Canonical Hp and 2 more

Products

Iphone Os Mac Os X Tvos and 11 more

CVE-2015-8241

libxml2: Buffer overread with XML parser in xmlNextChar

The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.

CVSS 2.0 · 6.4 Medium EPSS 5.4% KEV · Not listed

Vendors

Canonical Debian Hp and 2 more

Products

Ubuntu Linux Debian Linux Icewall Federation Agent and 8 more

CVE-2015-7547

glibc: getaddrinfo stack-based buffer overflow

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.

CVSS 3.0 · 8.1 High EPSS 92.4% KEV · Not listed

Vendors

Canonical Debian F5 and 7 more

Products

Ubuntu Linux Debian Linux Big-ip Access Policy Manager and 31 more

CVE-2015-7512

Qemu: net: pcnet: buffer overflow in non-loopback mode

Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.

CVSS 3.1 · 9.0 Critical EPSS 7.7% KEV · Not listed

Vendors

Debian Oracle Qemu and 1 more

Products

Debian Linux Linux Qemu and 7 more

CVE-2015-7500

libxml2: Heap buffer overflow in xmlParseMisc

The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.

CVSS 2.0 · 5.0 Medium EPSS 5.9% KEV · Not listed

Vendors

Apple Canonical Debian and 3 more

Products

Iphone Os Mac Os X Tvos and 12 more

CVE-2015-7499

libxml2: Heap-based buffer overflow in xmlGROW

Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 6.4% KEV · Not listed

Vendors

Apple Canonical Debian and 4 more

Products

Iphone Os Mac Os X Tvos and 14 more

CVE-2015-7498

libxml2: Heap-based buffer overflow in xmlParseXmlDecl

Heap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors related to extracting errors after an encoding conversion failure.

CVSS 2.0 · 5.0 Medium EPSS 7.2% KEV · Not listed

Vendors

Canonical Debian Hp and 2 more

Products

Ubuntu Linux Debian Linux Icewall Federation Agent and 8 more

CVE-2015-7497

libxml2: Heap-based buffer overflow in xmlDictComputeFastQKey

Heap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 7.2% KEV · Not listed

Vendors

Canonical Debian Hp and 2 more

Products

Ubuntu Linux Debian Linux Icewall Federation Agent and 8 more

CVE-2015-5312

libxml2: CPU exhaustion when processing specially crafted XML input

The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.

CVSS 2.0 · 7.1 High EPSS 4.5% KEV · Not listed

Vendors

Apple Canonical Debian and 3 more

Products

Iphone Os Mac Os X Tvos and 12 more

CVE-2015-5277

glibc: data corruption while reading the NSS files database

The get_contents function in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) before 2.20 might allow local users to cause a denial of service (heap corruption) or gain privileges via a long line in the NSS files database.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Canonical Gnu Redhat

Products

Ubuntu Linux Glibc Enterprise Linux and 5 more

CVE-2015-5273

abrt: Insecure temporary directory usage in abrt-action-install-debuginfo-to-abrt-cache

The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Automatic Bug Reporting Tool Enterprise Linux Enterprise Linux Desktop and 3 more

CVE-2015-5261

spice: host memory access from guest using crafted images

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation.

CVSS 3.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Redhat and 1 more

Products

Ubuntu Linux Debian Linux Enterprise Linux and 7 more

CVE-2015-5260

spice: insufficient validation of surface_id parameter can cause crash

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory corruption and QEMU-KVM crash) or possibly execute arbitrary code on the host via QXL commands related to the surface_id parameter.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Redhat and 1 more

Products

Ubuntu Linux Debian Linux Enterprise Linux and 7 more

CVE-2015-5235

icedtea-web: applet origin spoofing

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page.

CVSS 2.0 · 4.3 Medium EPSS 3.0% KEV · Not listed

Vendors

Fedoraproject Opensuse Redhat

Products

Fedora Opensuse Enterprise Linux and 5 more

CVE-2015-5234

icedtea-web: unexpected permanent authorization of unsigned applets

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute the applet via a crafted web page, possibly related to line breaks.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed

Vendors

Fedoraproject Opensuse Redhat

Products

Fedora Opensuse Enterprise Linux and 5 more

CVE-2015-5229

glibc: calloc may return non-zero memory

The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash) via unspecified vectors.

CVSS 3.0 · 7.5 High EPSS 2.2% KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Enterprise Linux Desktop Enterprise Linux Hpc Node and 5 more

CVE-2015-5165

Qemu: rtl8139 uninitialized heap memory information leakage to guest (XSA-140)

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 13.3% KEV · Not listed

Vendors

Arista Debian Fedoraproject and 4 more

Products

Eos Debian Linux Fedora and 22 more

CVE-2015-5157

kernel: x86-64: IRET faults during NMIs processing

arch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges by triggering an NMI.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Linux Desktop and 6 more