IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
8.8Alta KEV

CVE-2015-8651Adobe Flash Player Integer Overflow Vulnerability

adobe air sdk; adobe air sdk & compiler; adobe flash player; adobe air Publicada: (hace 10 años)

Explotación conocida — Adobe Flash Player Integer Overflow Vulnerability

CISA confirmó el 25.05.2022 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 15.06.2022.

Acción requerida: The impacted product is end-of-life and should be disconnected if still in use. https://nvd.nist.gov/vuln/detail/CVE-2015-8651

Descripción

Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.

Debilidad (CWE): CWE-190

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
adobe air < 20.0.0.233
adobe air sdk < 20.0.0.233
adobe air sdk & compiler < 20.0.0.233
adobe flash player < 11.2.202.559
hp insight control < 7.6
hp insight control server provisioning < 7.6
hp matrix operating environment 7.6
hp system management homepage < 7.6
hp systems insight manager < 7.6
hp version control repository manager < 7.6
opensuse evergreen 11.4
opensuse opensuse 13.1
redhat enterprise linux desktop 5.0
redhat enterprise linux server 5.0
redhat enterprise linux workstation 5.0
suse linux enterprise desktop 11
suse linux enterprise workstation extension 12

Referencias y parches

Coincidencias CPE (NVD) (27)
  • cpe:2.3:a:adobe:air_sdk:*:*:*:*:*:*:*:* < 20.0.0.233
  • cpe:2.3:a:adobe:air_sdk_\&_compiler:*:*:*:*:*:*:*:* < 20.0.0.233
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* < 11.2.202.559
  • cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:* < 20.0.0.233
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* < 18.0.0.324
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* ≥ 19.0.0.185 < 20.0.0.267
  • cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:sp1:*:*:*:*:*:*
  • cpe:2.3:a:hp:insight_control:*:*:*:*:*:*:*:* < 7.6
  • cpe:2.3:a:hp:insight_control_server_provisioning:*:*:*:*:*:*:*:* < 7.6
  • cpe:2.3:a:hp:matrix_operating_environment:7.6:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:* < 7.6
  • cpe:2.3:a:hp:systems_insight_manager:*:*:*:*:*:*:*:* < 7.6
  • cpe:2.3:a:hp:version_control_repository_manager:*:*:*:*:*:*:*:* < 7.6

CVE recientes del mismo producto — Red Hat Enterprise Linux

4.4Media
CVE-2026-123876

Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Hardened Images

A flaw was found in the default seccomp profile used by Podman via containers-common. Deny rules for AF_VSOCK and NETLINK_AUDIT compared socket arguments with unmasked 64-bit equality. Because the kernel truncates those int arguments to 32 bits, setting upper…

6.2Media
CVE-2026-120749

Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in D-Bus. With a privileged Monitoring client attached (for example dbus-monitor or busctl monitor), an unprivileged local user can cause dbus-daemon to abort if a driver-originated broadcast such as NameOwnerChanged or ActivatableServicesCha…

6.7Media
CVE-2026-123037

Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)

Red Hat Migration Toolkit for Applications 8; Red Hat Migration Toolkit for Virtualization; Red Hat OpenShift Service Mesh 3; Red Hat Red Hat Advanced Cluster Management for Kubernetes 2

A flaw was found in the ansible-core user module. When generate_ssh_key is enabled, User.ssh_key_gen() guards the key files against symlinks but checks the ~/.ssh directory only with os.path.exists(). An unprivileged user on a managed node who replaces their …

7.5Alta
CVE-2026-123151

Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the GNU debugger (GDB). When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow the target to execute arbitr…

8.1Alta
CVE-2026-121997

Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actua…

8.2Alta
CVE-2026-121996

Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A length validation flaw in gdbserver's agent-expression parser allows an unauthenticated remote attacker to read uninitialized heap memory from the gdbserver process and cause a denial of service. Disclosed heap content includes addresses suitable for defeat…