# CVEs published 2014-09-28

42 CVEs were published on September 28, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-0205](https://cve.now/CVE-2014-0205.md): The futex\_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requ (no CVSS)
- [CVE-2014-2639](https://cve.now/CVE-2014-2639.md): Unspecified vulnerability in HP MPIO Device Specific Module Manager before 4.02.00 allows local users to gain privileges via unknown vectors (no CVSS)
- [CVE-2014-3535](https://cve.now/CVE-2014-3535.md): include/linux/netdevice.h in the Linux kernel before 2.6.36 incorrectly uses macros for netdev\_printk and its related logging implementation (no CVSS)
- [CVE-2014-7186](https://cve.now/CVE-2014-7186.md): The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bo (no CVSS)
- [CVE-2014-7187](https://cve.now/CVE-2014-7187.md): Off-by-one error in the read\_token\_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2012-6657](https://cve.now/CVE-2012-6657.md): The sock\_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with (no CVSS)
- [CVE-2014-3181](https://cve.now/CVE-2014-3181.md): Multiple stack-based buffer overflows in the magicmouse\_raw\_event function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in (no CVSS)
- [CVE-2014-3182](https://cve.now/CVE-2014-3182.md): Array index error in the logi\_dj\_raw\_event function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically pro (no CVSS)
- [CVE-2014-3183](https://cve.now/CVE-2014-3183.md): Heap-based buffer overflow in the logi\_dj\_ll\_raw\_request function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows (no CVSS)
- [CVE-2014-3184](https://cve.now/CVE-2014-3184.md): The report\_fixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically proximate attackers to cause a deni (no CVSS)
- [CVE-2014-3185](https://cve.now/CVE-2014-3185.md): Multiple buffer overflows in the command\_port\_read\_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in (no CVSS)
- [CVE-2014-3186](https://cve.now/CVE-2014-3186.md): Buffer overflow in the picolcd\_raw\_event function in devices/hid/hid-picolcd\_core.c in the PicoLCD HID device driver in the Linux kernel thr (no CVSS)
- [CVE-2014-3631](https://cve.now/CVE-2014-3631.md): The assoc\_array\_gc function in the associative-array implementation in lib/assoc\_array.c in the Linux kernel before 3.16.3 does not properly (no CVSS)
- [CVE-2014-6410](https://cve.now/CVE-2014-6410.md): The \_\_udf\_read\_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB indirection, which al (no CVSS)
- [CVE-2014-6416](https://cve.now/CVE-2014-6416.md): Buffer overflow in net/ceph/auth\_x.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2014-6417](https://cve.now/CVE-2014-6417.md): net/ceph/auth\_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider the possibility of kmalloc failure, which a (no CVSS)
- [CVE-2014-6418](https://cve.now/CVE-2014-6418.md): net/ceph/auth\_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate auth replies, which allows remote attackers (no CVSS)
- [CVE-2014-7145](https://cve.now/CVE-2014-7145.md): The SMB2\_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL (no CVSS)
- [CVE-2014-6748](https://cve.now/CVE-2014-6748.md): The GEMAIRE's HVAC Assist (aka com.es.Gemaire) application 5.0 for Android does not verify X.509 certificates from SSL servers, which allows (no CVSS)
- [CVE-2014-6749](https://cve.now/CVE-2014-6749.md): The American Nurses Association (aka com.dub.poweredbydub.assoc.ana) application 1.0.0 for Android does not verify X.509 certificates from S (no CVSS)
- [CVE-2014-6750](https://cve.now/CVE-2014-6750.md): The $0.99 Kindle Books (aka com.kindle.books.for99) application 6.0 for Android does not verify X.509 certificates from SSL servers, which a (no CVSS)
- [CVE-2014-6751](https://cve.now/CVE-2014-6751.md): The Grasshopper Beta (aka com.grasshopper.dialer) application 2.1 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-6752](https://cve.now/CVE-2014-6752.md): The Mindless Behavior Fan Base (aka com.mindless.behavior.fan.base) application 1.0 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-6753](https://cve.now/CVE-2014-6753.md): The sunnat e rasool (aka com.imsoft.sunnat\_e\_rasool) application 2.0 for Android does not verify X.509 certificates from SSL servers, which (no CVSS)
- [CVE-2014-6754](https://cve.now/CVE-2014-6754.md): The Vector Outage Manager (aka nz.co.vector.outagemanager) application 1.7 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-6755](https://cve.now/CVE-2014-6755.md): The SDN Forum (TapaTalk) (aka com.tapatalk.forumshiftdeletenet) application 3.6.5 for Android does not verify X.509 certificates from SSL se (no CVSS)
- [CVE-2014-6756](https://cve.now/CVE-2014-6756.md): The Reddit Aww (aka org.biais.redditawww) application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-6757](https://cve.now/CVE-2014-6757.md): The Koran - AlqoranVideos (aka com.alqoran.videos.example) application 1.0 for Android does not verify X.509 certificates from SSL servers, (no CVSS)
- [CVE-2014-6758](https://cve.now/CVE-2014-6758.md): The Qin Story (aka com.kongzhong.tjmammoth.android.cqqslengp) application 1.00 for Android does not verify X.509 certificates from SSL serve (no CVSS)
- [CVE-2014-6759](https://cve.now/CVE-2014-6759.md): The Downton Abbey Fan Portal (aka com.downton.abbey.fan.portal) application 1.0 for Android does not verify X.509 certificates from SSL serv (no CVSS)
- [CVE-2014-6760](https://cve.now/CVE-2014-6760.md): The Harem Thief Dating (aka com.haremthief.haremthief) application 1.2.1 for Android does not verify X.509 certificates from SSL servers, wh (no CVSS)
- [CVE-2014-6761](https://cve.now/CVE-2014-6761.md): The Aprende a Meditar (aka com.rareartifact.aprendeameditar544CB0A2) application 1.0 for Android does not verify X.509 certificates from SSL (no CVSS)
- [CVE-2014-6762](https://cve.now/CVE-2014-6762.md): The bongomovie (aka com.mbwasi.bongomovie) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man (no CVSS)
- [CVE-2014-6763](https://cve.now/CVE-2014-6763.md): The Codename Birdgame (aka com.devsecondfictioncom.devsecondfictioncom.birdadhoc) application 1.0 for Android does not verify X.509 certific (no CVSS)
- [CVE-2014-6764](https://cve.now/CVE-2014-6764.md): The Assyrian (aka com.b2.assyrian.activity) application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows ma (no CVSS)
- [CVE-2014-6765](https://cve.now/CVE-2014-6765.md): The No Fuss Home Loans (aka com.soln.SA2CAA74BBC3AFEFE7C8BE3F3AAC499E7) application 1.0035.b0035 for Android does not verify X.509 certifica (no CVSS)
- [CVE-2014-6766](https://cve.now/CVE-2014-6766.md): The Afro-Beat (aka com.zero.themelock.tambourine) application 0.2 for Android does not verify X.509 certificates from SSL servers, which all (no CVSS)
- [CVE-2014-6767](https://cve.now/CVE-2014-6767.md): The Juggle! FREE (aka com.jakyl.juggleforfree) application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allo (no CVSS)
- [CVE-2014-6768](https://cve.now/CVE-2014-6768.md): The Anywhere Anytime Yoga Workout (aka com.bayart.yoga) application 1.0 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-6769](https://cve.now/CVE-2014-6769.md): The Meteo Belgique (aka com.mobilesoft.belgiumweather) application 3.2 for Android does not verify X.509 certificates from SSL servers, whic (no CVSS)
- [CVE-2014-6770](https://cve.now/CVE-2014-6770.md): The Aerospace Jobs (aka com.app\_aerospacejobs.layout) application 1.399 for Android does not verify X.509 certificates from SSL servers, whi (no CVSS)
- [CVE-2014-6771](https://cve.now/CVE-2014-6771.md): The United Heritage Mobile (aka Fi\_Mobile.UHCU) application 1.1 for Android does not verify X.509 certificates from SSL servers, which allow (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-09-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.