# CVEs published 2014-04-14

15 CVEs were published on April 14, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0077](https://cve.now/CVE-2014-0077.md): drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, whic (no CVSS)
- [CVE-2014-0155](https://cve.now/CVE-2014-0155.md): The ioapic\_deliver function in virt/kvm/ioapic.c in the Linux kernel through 3.14.1 does not properly validate the kvm\_irq\_delivery\_to\_apic (no CVSS)
- [CVE-2014-2706](https://cve.now/CVE-2014-2706.md): Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system cras (no CVSS)
- [CVE-2014-2739](https://cve.now/CVE-2014-2739.md): The cma\_req\_handler function in drivers/infiniband/core/cma.c in the Linux kernel 3.14.x through 3.14.1 attempts to resolve an RDMA over Con (no CVSS)
- [CVE-2014-2851](https://cve.now/CVE-2014-2851.md): Integer overflow in the ping\_init\_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial o (no CVSS)
- [CVE-2010-5298](https://cve.now/CVE-2010-5298.md): Race condition in the ssl3\_read\_bytes function in s3\_pkt.c in OpenSSL through 1.0.1g, when SSL\_MODE\_RELEASE\_BUFFERS is enabled, allows remot (no CVSS)
- [CVE-2014-0128](https://cve.now/CVE-2014-0128.md): Squid 3.1 before 3.3.12 and 3.4 before 3.4.4, when SSL-Bump is enabled, allows remote attackers to cause a denial of service (assertion fail (no CVSS)
- [CVE-2014-0159](https://cve.now/CVE-2014-0159.md): Buffer overflow in the GetStatistics64 remote procedure call (RPC) in OpenAFS 1.4.8 before 1.6.7 allows remote attackers to cause a denial o (no CVSS)
- [CVE-2014-0612](https://cve.now/CVE-2014-0612.md): Unspecified vulnerability in Juniper Junos before 11.4R10-S1, before 11.4R11, 12.1X44 before 12.1X44-D26, 12.1X44 before 12.1X44-D30, 12.1X4 (no CVSS)
- [CVE-2014-0614](https://cve.now/CVE-2014-0614.md): Juniper Junos 13.2 before 13.2R3 and 13.3 before 13.3R1, when PIM is enabled, allows remote attackers to cause a denial of service (kernel p (no CVSS)
- [CVE-2014-2711](https://cve.now/CVE-2014-2711.md): Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 11.4R11, 11.4X27 before 11.4X27.62 (BBE), 12.1 before 12.1R9, 12.1 (no CVSS)
- [CVE-2014-2712](https://cve.now/CVE-2014-2712.md): Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12. (no CVSS)
- [CVE-2014-2713](https://cve.now/CVE-2014-2713.md): Juniper Junos before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R7, 12.3R4 before 12.3R4-S3, 13.1 before 13.1R4, 13.2 before 13.2R2, and 1 (no CVSS)
- [CVE-2014-2714](https://cve.now/CVE-2014-2714.md): The Enhanced Web Filtering (EWF) in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X4 (no CVSS)
- [CVE-2014-2852](https://cve.now/CVE-2014-2852.md): OpenAFS before 1.6.7 delays the listen thread when an RXS\_CheckResponse fails, which allows remote attackers to cause a denial of service (p (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-04-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.