MA
Product
Mageia
On CISA KEVExploited in the wild
22
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 1Low 1
Watch
Add Mageia to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-7169 In wildKEV | 9.8 | Sep 25 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 3.0; 4.0 |
| CVE-2014-6271 In wildKEV | 9.8 | Sep 24 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 3.0; 4.0 |
| CVE-2014-9637 | 5.5 | Aug 25 | GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory consumption and segmentation fault) via a crafted diff file Affected: 4.0 |
| CVE-2014-3566 | 3.4 | Oct 15 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain… Affected: 3.0; 4.0 |
| CVE-2015-2191 | – | Mar 8 | Integer overflow in the dissect_tnef function in epan/dissectors/packet-tnef.c in the TNEF dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote… Affected: 4.0 |
| CVE-2015-2189 | – | Mar 8 | Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to… Affected: 4.0 |
| CVE-2015-2188 | – | Mar 8 | epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote… Affected: 4.0 |
| CVE-2015-0236 | – | Jan 29 | libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the… Affected: 4.0 |
| CVE-2014-8136 | – | Dec 19 | The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unlock the domain when an ACL check fails, which allow local… Affected: 4.0 |
| CVE-2014-8117 | – | Dec 17 | softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors Affected: 4.0 |
| CVE-2014-8116 | – | Dec 17 | The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section… Affected: 4.0 |
| CVE-2014-9253 | – | Dec 17 | The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML… Affected: 4.0 |
| CVE-2014-8104 | – | Dec 3 | OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control… Affected: 4.0 |
| CVE-2014-9116 | – | Dec 2 | The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service… Affected: 4.0 |
| CVE-2014-9087 | – | Dec 1 | Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a… Affected: 3.0; 4.0 |
| CVE-2014-1829 | – | Oct 15 | Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request Affected: 4.0 |
| CVE-2014-7204 | – | Oct 7 | jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript file Affected: 3.0; 4.0 |
| CVE-2014-5461 | – | Sep 4 | Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number… Affected: 3.0; 4.0 |
| CVE-2014-2524 | – | Aug 20 | The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID]… Affected: 3.0; 4.0 |
| CVE-2014-3429 | – | Aug 7 | IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of… Affected: 3.0; 4.0 |
| CVE-2013-4159 | – | Aug 6 | ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1)… Affected: 3.0; 4.0 |
| CVE-2014-3532 | – | Jul 19 | dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other… Affected: 3.0; 4.0 |
Showing 22