Linux kernel multiple security vulnerabilities

Multiple KVM vulnerabilities, CIFS client DoS, remote DoS vulnerabilities, tracesyscalls privilege escalation and protection bypass...

CVE-2014-5426: Undefined Security Weakness

MatrikonOPC OPC Server for DNP3 1.2.3 and earlier allows remote attackers to cause a denial of service unhandled exception and DNP3 process crash via a crafted message...

CVE-2014-2037: Improper Input Validation

Openswan 2.6.40 allows remote attackers to cause a denial of service NULL pointer dereference and IKE daemon restart via IKEv2 packets that lack expected payloads. NOTE: this vulnerability exists because of an incomplete fix for CVE 2013-6466...

CVE-2014-8711

Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allow remote attackers to cause a denial of service application crash via a crafted amqp010 PDU in a packet...

PT-2014-8722

Name of the Vulnerable Software and Affected Versions tcpdump versions 3.9.6 through 4.6.2 Description The issue is related to an integer underflow in the olsr print function when tcpdump is in verbose mode. This allows remote attackers to cause a denial of service, resulting in a crash, by sendi...

CVE-2014-3756

The client in Mumble 1.2.x before 1.2.6 allows remote attackers to force the loading of an external file and cause a denial of service hang and resource consumption via a crafted string that is treated as rich-text by a Qt widget, as demonstrated by the 1 user or 2 channel name in a Qt dialog, 3...

CVE-2014-8950: Undefined Security Weakness

Unspecified vulnerability in Check Point Security Gateway R77 and R77.10, when the 1 URL Filtering or 2 Identity Awareness blade is used, allows remote attackers to cause a denial of service crash via vectors involving an HTTPS request...

CVE-2014-7815: Improper Input Validation

The setpixelformat function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service crash via a small bytesperpixel value...

CVE-2014-8567: Undefined Security Weakness

The modauthmellon module before 0.8.1 allows remote attackers to cause a denial of service Apache HTTP server crash via a crafted logout request that triggers a read of uninitialized data...

CVE-2014-8564: Undefined Security Weakness

The gnutlseccansix963export function in gnutlsecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to cause a denial of service out-of-bounds write via a crafted 1 Elliptic Curve Cryptography ECC certificate or 2 certificate signing requests CSR,...

CVE-2014-8652: Undefined Security Weakness

Elipse E3 3.x and earlier allows remote attackers to cause a denial of service application crash and plant outage via a rapid series of HTTP requests to index.html on TCP port 1681...

CVE-2014-3693: Undefined Security Weakness

Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted request to TCP port 1599...

CVE-2014-8483: Out-of-bounds Read

The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service out-of-bounds read via a malformed string...

PT-2014-8610

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 2.4.2 Description The issue is caused by an off-by-one error in the libavcodec/smc.c file, which can be exploited by remote attackers using crafted Quicktime Graphics aka SMC video data. This can lead to a denial of...

PT-2014-8636

Name of the Vulnerable Software and Affected Versions SAP Network Interface Router SAProuter version 40.4 Description The issue is related to an integer overflow that allows remote attackers to cause a denial of service by consuming resources via crafted requests. Recommendations For SAP Network...

CVE-2014-8591: Undefined Security Weakness

Unspecified vulnerability in SAP Internet Communication Manager ICM, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service process termination via unknown vectors...

CVE-2013-4533: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the pxa2xxsspload function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-rxlevel value in a savevm image...

CVE-2014-3668

Buffer overflow in the datefromISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service application crash via 1 a crafted first argument to t...

CVE-2014-7815

The setpixelformat function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service crash via a small bytesperpixel value...

libpurple: remote dos and information leakage

A malicious server and possibly even a malicious remote user could create a carefully crafted XMPP message that causes libpurple to send an XMPP message containing arbitrary memory. A malicious server or man-in-the-middle could trigger a crash in libpurple by sending an emoticon via MXit with an...