CVE-2015-0239

kernel: kvm: insufficient sysenter emulation when invoked from 16-bit code

The em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER MSR initialization, allows guest OS users to gain guest OS privileges or cause a denial of service (guest OS crash) by triggering use of a 16-bit code segment for emulation of a SYSENTER instruction.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 2 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 5 more

CVE-2015-0236

libvirt: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save images and snapshots objects

libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface.

CVSS 2.0 · 3.5 Low EPSS 1.8% KEV · Not listed

Vendors

Canonical Mageia Opensuse and 1 more

Products

Ubuntu Linux Mageia Opensuse and 7 more

CVE-2015-0228

httpd: Possible mod_lua crash due to websocket bug

The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service (child-process crash) by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade function.

CVSS 2.0 · 5.0 Medium EPSS 16.9% KEV · Not listed

Vendors

Apache Apple Canonical and 2 more

Products

Http Server Mac Os X Mac Os X Server and 3 more

CVE-2015-0222

Django: database denial of service with ModelMultipleChoiceField

ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Canonical Djangoproject

Products

Ubuntu Linux Django

CVE-2015-0221

Django: denial of service attack against django.views.static.serve

The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of service (memory consumption) via a long line in a file.

CVSS 2.0 · 5.0 Medium EPSS 4.5% KEV · Not listed

Vendors

Canonical Djangoproject

Products

Ubuntu Linux Django

CVE-2015-0220

Django: Mitigated possible XSS attack via user-supplied redirect URLs

The django.util.http.is_safe_url function in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 does not properly handle leading whitespaces, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL, related to redirect URLs, as demonstrated by a "\njavascript:" URL.

CVSS 2.0 · 4.3 Medium EPSS 3.0% KEV · Not listed

Vendors

Canonical Djangoproject

Products

Ubuntu Linux Django

CVE-2014-9766

pixman: integer overflow in create_bits function

Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via large height and stride values.

CVSS 3.0 · 9.8 Critical EPSS 5.6% KEV · Not listed

Vendors

Canonical Pixman

Products

Ubuntu Linux Pixman

CVE-2014-9765

xdelta: buffer overflow in main_get_appheader

Buffer overflow in the main_get_appheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary code via a crafted input file.

CVSS 3.0 · 8.8 High EPSS 4.2% KEV · Not listed

Vendors

Canonical Debian Opensuse and 1 more

Products

Ubuntu Linux Debian Linux Opensuse and 1 more

CVE-2014-9761

glibc: Unbounded stack allocation in nan* functions

Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function.

CVSS 3.0 · 9.8 Critical EPSS 5.5% KEV · Not listed

Vendors

Canonical Fedoraproject Gnu and 3 more

Products

Ubuntu Linux Fedora Glibc and 7 more

CVE-2014-9756

libsndfile: division by zero leading to denial of service in psf_fwrite()

The psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service (divide-by-zero error and application crash) via unspecified vectors related to the headindex variable.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed

Vendors

Canonical Libsndfile Project Opensuse

Products

Ubuntu Linux Libsndfile Leap and 1 more

CVE-2014-9745

freetype: Infinite loop in parse_encoding in t1load.c

The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop) via a "broken number-with-base" in a Postscript stream, as demonstrated by 8#garbage.

CVSS 2.0 · 5.0 Medium EPSS 3.7% KEV · Not listed

Vendors

Canonical Debian Freetype and 1 more

Products

Ubuntu Linux Debian Linux Freetype and 1 more

CVE-2014-9709

gd: buffer read overflow in gd_gif_in.c

The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function.

CVSS 2.0 · 5.0 Medium EPSS 15.4% KEV · Not listed

Vendors

Canonical Debian Libgd and 3 more

Products

Ubuntu Linux Debian Linux Libgd and 4 more

CVE-2014-9683

kernel: buffer overflow in eCryptfs

Off-by-one error in the ecryptfs_decode_from_filename function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux kernel before 3.18.2 allows local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted filename.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed

Vendors

Canonical Linux Redhat

Products

Ubuntu Linux Linux Kernel Enterprise Linux

CVE-2014-9679

cups: cupsRasterReadPixels buffer overflow

Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified impact via a malformed compressed raster file, which triggers a buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 4.6% KEV · Not listed

Vendors

Apple Canonical Fedoraproject and 2 more

Products

Cups Ubuntu Linux Fedora and 2 more

CVE-2014-9675

freetype: information leak in _bdf_add_property()

bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.

CVSS 2.0 · 5.0 Medium EPSS 4.2% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 3 more

Products

Ubuntu Linux Debian Linux Fedora and 9 more

CVE-2014-9674

freetype: multiple integer overflows Mac_Read_POST_Resource() leading to heap-based buffer overflows

The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.

CVSS 2.0 · 7.5 High EPSS 5.7% KEV · Not listed

Vendors

Canonical Fedoraproject Freetype and 3 more

Products

Ubuntu Linux Fedora Freetype and 9 more

CVE-2014-9673

freetype: integer signedness error in Mac_Read_POST_Resource() leading to heap-based buffer overflow

Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.

CVSS 2.0 · 6.8 Medium EPSS 3.4% KEV · Not listed

Vendors

Canonical Debian Freetype and 2 more

Products

Ubuntu Linux Debian Linux Freetype and 8 more

CVE-2014-9672

freetype: Array index error in the parse_fond function in base/ftmac.c

Array index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file.

CVSS 2.0 · 5.8 Medium EPSS 4.7% KEV · Not listed

Vendors

Canonical Debian Freetype and 2 more

Products

Ubuntu Linux Debian Linux Freetype and 2 more

CVE-2012-5060

mysql: unspecified DoS vulnerability related to GIS (CPU Jan 2013)

Unspecified vulnerability in the Server component in Oracle MySQL 5.1.65 and earlier and 5.5.27 and earlier allows remote authenticated users to affect availability, related to GIS Extension.

CVSS 2.0 · 6.8 Medium EPSS 2.5% KEV · Not listed

Vendors

Canonical Mariadb Oracle

Products

Ubuntu Linux Mariadb Mysql

CVE-2012-4564

libtiff: Missing return value check in ppm2tiff leading to heap-buffer overflow when reading a tiff file

ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.

CVSS 2.0 · 6.8 Medium EPSS 13.5% KEV · Not listed

Vendors

Canonical Debian Libtiff and 2 more

Products

Ubuntu Linux Debian Linux Libtiff and 6 more