# CVEs published 2015-03-16

10 CVEs were published on March 16, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9687](https://cve.now/CVE-2014-9687.md): eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords v (no CVSS)
- [CVE-2015-0778](https://cve.now/CVE-2015-0778.md): osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a \_service file. (no CVSS)
- [CVE-2014-7822](https://cve.now/CVE-2014-7822.md): The implementation of certain splice\_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum siz (no CVSS)
- [CVE-2014-8159](https://cve.now/CVE-2014-8159.md): The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly (no CVSS)
- [CVE-2014-8172](https://cve.now/CVE-2014-8172.md): The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking ap (no CVSS)
- [CVE-2014-8173](https://cve.now/CVE-2014-8173.md): The pmd\_none\_or\_trans\_huge\_or\_clear\_bad function in include/asm-generic/pgtable.h in the Linux kernel before 3.13 on NUMA systems does not p (no CVSS)
- [CVE-2015-0274](https://cve.now/CVE-2015-0274.md): The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows l (no CVSS)
- [CVE-2015-1420](https://cve.now/CVE-2015-1420.md): Race condition in the handle\_to\_path function in fs/fhandle.c in the Linux kernel through 3.19.1 allows local users to bypass intended size (no CVSS)
- [CVE-2015-1421](https://cve.now/CVE-2015-1421.md): Use-after-free vulnerability in the sctp\_assoc\_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attac (no CVSS)
- [CVE-2015-1593](https://cve.now/CVE-2015-1593.md): The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise l (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-03-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.