# CVEs published 2012-01-27

20 CVEs were published on January 27, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0814](https://cve.now/CVE-2012-0814.md): The auth\_parse\_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized\_keys command o (CVSS 6.5)
- [CVE-2011-1162](https://cve.now/CVE-2011-1162.md): The tpm\_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previ (no CVSS)
- [CVE-2011-2203](https://cve.now/CVE-2011-2203.md): The hfs\_find\_init function in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and Oops) by mo (no CVSS)
- [CVE-2011-3626](https://cve.now/CVE-2011-3626.md): Double free vulnerability in the prepare\_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows r (no CVSS)
- [CVE-2011-3874](https://cve.now/CVE-2011-3874.md): Stack-based buffer overflow in libsysutils in Android 2.2.x through 2.2.2 and 2.3.x through 2.3.6 allows user-assisted remote attackers to e (no CVSS)
- [CVE-2011-4077](https://cve.now/CVE-2011-4077.md): Buffer overflow in the xfs\_readlink function in fs/xfs/xfs\_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG\_XFS\_DEBUG is disabled, all (no CVSS)
- [CVE-2011-4110](https://cve.now/CVE-2011-4110.md): The user\_update function in security/keys/user\_defined.c in the Linux kernel 2.6 allows local users to cause a denial of service (NULL point (no CVSS)
- [CVE-2011-4132](https://cve.now/CVE-2011-4132.md): The cleanup\_journal\_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows local users to cause a d (no CVSS)
- [CVE-2011-4314](https://cve.now/CVE-2011-4314.md): message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay F (no CVSS, org.openid4java:openid4java)
- [CVE-2011-4325](https://cve.now/CVE-2011-4325.md): The NFS implementation in Linux kernel before 2.6.31-rc6 calls certain functions without properly initializing certain data, which allows lo (no CVSS)
- [CVE-2011-4330](https://cve.now/CVE-2011-4330.md): Stack-based buffer overflow in the hfs\_mac2asc function in fs/hfs/trans.c in the Linux kernel 2.6 allows local users to cause a denial of se (no CVSS)
- [CVE-2011-4608](https://cve.now/CVE-2011-4608.md): mod\_cluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, w (no CVSS)
- [CVE-2011-4622](https://cve.now/CVE-2011-4622.md): The create\_pit\_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not properly handle when Programmable Int (no CVSS)
- [CVE-2012-0029](https://cve.now/CVE-2012-0029.md): Heap-based buffer overflow in the process\_tx\_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions (no CVSS)
- [CVE-2012-0056](https://cve.now/CVE-2012-0056.md): The mem\_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/\<p (no CVSS)
- [CVE-2011-4143](https://cve.now/CVE-2011-4143.md): EMC RSA enVision 4.0 before SP4 P5 and 4.1 before P3 allows remote attackers to obtain sensitive information about environment variables in (no CVSS)
- [CVE-2011-4354](https://cve.now/CVE-2011-4354.md): crypto/bn/bn\_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving (no CVSS)
- [CVE-2012-0395](https://cve.now/CVE-2012-0395.md): Buffer overflow in the server in EMC NetWorker 7.5.x and 7.6.x before 7.6.3 SP1 Cumulative Release build 851 allows remote attackers to caus (no CVSS)
- [CVE-2012-0806](https://cve.now/CVE-2012-0806.md): Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via vectors involving a series of (no CVSS)
- [CVE-2012-0807](https://cve.now/CVE-2012-0807.md): Stack-based buffer overflow in the suhosin\_encrypt\_single\_cookie function in the transparent cookie-encryption feature in the Suhosin extens (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-01-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.