# CVEs published 2015-08-12 20 CVEs were published on August 12, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2013-7443](https://cve.now/CVE-2013-7443.md): Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service (crash) via crafted SQL s (no CVSS) - [CVE-2015-0851](https://cve.now/CVE-2015-0851.md): XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider (SP), does not properly handle integer conversion exception (no CVSS) - [CVE-2015-1331](https://cve.now/CVE-2015-1331.md): lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/\*. (no CVSS) - [CVE-2015-1334](https://cve.now/CVE-2015-1334.md): attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container users to escape AppArmor or SELinux (no CVSS) - [CVE-2015-1867](https://cve.now/CVE-2015-1867.md): Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command. (no CVSS) - [CVE-2015-2058](https://cve.now/CVE-2015-2058.md): c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authent (no CVSS) - [CVE-2015-2059](https://cve.now/CVE-2015-2059.md): The stringprep\_utf8\_to\_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and (no CVSS) - [CVE-2015-3184](https://cve.now/CVE-2015-3184.md): mod\_authz\_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict an (no CVSS) - [CVE-2015-3187](https://cve.now/CVE-2015-3187.md): The svn\_repos\_trace\_node\_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is use (no CVSS) - [CVE-2015-3213](https://cve.now/CVE-2015-3213.md): The gesture handling code in Clutter before 1.16.2 allows physically proximate attackers to bypass the lock screen via certain (1) mouse or (no CVSS) - [CVE-2015-3282](https://cve.now/CVE-2015-3282.md): vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network. (no CVSS) - [CVE-2015-3283](https://cve.now/CVE-2015-3283.md): OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors. (no CVSS) - [CVE-2015-3284](https://cve.now/CVE-2015-3284.md): pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted commands. (no CVSS) - [CVE-2015-3285](https://cve.now/CVE-2015-3285.md): The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local us (no CVSS) - [CVE-2015-3286](https://cve.now/CVE-2015-3286.md): Buffer overflow in the Solaris kernel extension in OpenAFS before 1.6.13 allows local users to cause a denial of service (panic or deadlock) (no CVSS) - [CVE-2015-3908](https://cve.now/CVE-2015-3908.md): Ansible before 1.9.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName fiel (no CVSS, ansible) - [CVE-2015-5154](https://cve.now/CVE-2015-5154.md): Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, all (no CVSS) - [CVE-2015-5165](https://cve.now/CVE-2015-5165.md): The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to (no CVSS) - [CVE-2015-5166](https://cve.now/CVE-2015-5166.md): Use-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated block devices, which allows local HVM gues (no CVSS) - [CVE-2015-5718](https://cve.now/CVE-2015-5718.md): Stack-based buffer overflow in the handle\_debug\_network function in the manager in Websense Content Gateway before 8.0.0 HF02 allows remote (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-08-12 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.