Skip to content
OpenAdvisories
Unscored RHSA-2004:233 5 CVEs

Red Hat Security Advisory: cvs security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as cvs 0:1.11.2-24
Red Hat · RHEL 3 enterprise_linux:3::as cvs-debuginfo 0:1.11.2-24
Red Hat · RHEL 3 enterprise_linux:3::desktop cvs 0:1.11.2-24
Red Hat · RHEL 3 enterprise_linux:3::desktop cvs-debuginfo 0:1.11.2-24
Red Hat · RHEL 3 enterprise_linux:3::es cvs 0:1.11.2-24
Red Hat · RHEL 3 enterprise_linux:3::es cvs-debuginfo 0:1.11.2-24
Red Hat · RHEL 3 enterprise_linux:3::ws cvs 0:1.11.2-24
Red Hat · RHEL 3 enterprise_linux:3::ws cvs-debuginfo 0:1.11.2-24

Vulnerabilities 5

  • Unscored —
    CVE-2004-0414

    CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents…

    cvs Debian
  • Unscored —
    CVE-2004-0416 Public exploit EPSS 13%

    Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may …

    cvs Debian
  • Unscored —
    CVE-2004-0417

    Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x …

    cvs Debian
  • Unscored —
    CVE-2004-0418

    serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which…

    cvs Debian
  • Unscored —
    CVE-2004-0778

    CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary fi…

    cvs Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_233.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-0414
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617197
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0414
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0414
  • report
    https://access.redhat.com/security/cve/CVE-2004-0416
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617200
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0416
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0416
  • report
    https://access.redhat.com/security/cve/CVE-2004-0417
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617201
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0417
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0417
  • report
    https://access.redhat.com/security/cve/CVE-2004-0418
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617202
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0418
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0418
  • report
    https://access.redhat.com/security/cve/CVE-2004-0778
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617282
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0778
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0778