Red Hat Security AdvisoryRHSA-2014:1354
rhev-hypervisor6 security update
Released 2014-10-02 · Red Hat rating Critical · View on Red Hat →
Fixed in
- RHEV-M 3.4 rhev-hypervisor6-6.5-20140930.1.el6ev
Fixes 5 records
Priority CRITICAL 100KEV
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown oth…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.9994 · Published 2014-09-25 · Fixed CWE-78
Priority CRITICAL 100KEV
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vec…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99999 · Published 2014-09-24 · Fixed CWE-78
Priority HIGH 79
The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impa…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.64336 · Published 2014-09-28 · Partial fix CWE-119
Priority HIGH 77
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unsp…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.60279 · Published 2014-09-28 · Fixed CWE-119
Priority MEDIUM 50
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Th…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.16703 · Published 2014-09-25 · Fixed CWE-310