CVE 2018 document archive

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 1 / 33

1. CVE-2018-1002200plexus-archiver: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file→
2. CVE-2018-1002100kubernetes: Kubectl copy doesn't check for paths outside of it's destination directory→
3. CVE-2018-1000888php-pear: Unsafe deserialization of data in Archive_Tar class→
4. CVE-2018-1000886nasm: Buffer overflow in asm/stdscan.c:130 resulting in a denial of service→
5. CVE-2018-1000880libarchive: Improper input validation in WARC parser resulting in a denial of service→
6. CVE-2018-1000879libarchive: NULL pointer dereference in ACL parser resulting in a denial of service→
7. CVE-2018-1000878libarchive: Use after free in RAR decoder resulting in a denial of service→
8. CVE-2018-1000877libarchive: Double free in RAR decoder resulting in a denial of service→
9. CVE-2018-1000876binutils: integer overflow leads to heap-based buffer overflow in objdump→
10. CVE-2018-1000873jackson-modules-java8: DoS due to an Improper Input Validation→
11. CVE-2018-1000858gnupg2: Cross site request forgery in dirmngr resulting in an information disclosure or denial of service→
12. CVE-2018-1000852freerdp: out of bounds read in drdynvc_process_capability_request→
13. CVE-2018-1000810rust: Buffer overflow in str::repeat function in the standard library→
14. CVE-2018-1000808pyOpenSSL: Failure to release memory before removing last reference in PKCS #12 Store→
15. CVE-2018-1000807pyOpenSSL: Use-after-free in X509 object handling→
16. CVE-2018-1000805python-paramiko: Authentication bypass in auth_handler.py→
17. CVE-2018-1000802python: Command injection in the shutil module→
18. CVE-2018-1000801okular: Directory traversal in function unpackDocumentArchive() in core/document.cpp→
19. CVE-2018-1000667nasm: Memory corruption in assemble_file() function in asm/nasm.c:482→
20. CVE-2018-1000657rust: Buffer Overflow vulnerability in std::collections::vec_deque::VecDeque::reserve() function→
21. CVE-2018-1000656python-flask: Denial of Service via crafted JSON file→
22. CVE-2018-1000654libtasn1: Infinite loop in _asn1_expand_object_id(ptree) leads to memory exhaustion→
23. CVE-2018-1000632dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents→
24. CVE-2018-1000301curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service→
25. CVE-2018-1000300curl: FTP shutdown response heap-based buffer overflow can potentially lead to RCE→
26. CVE-2018-1000226cobbler: XMLRPC API endpoints are not correctly validating security tokens→
27. CVE-2018-1000225cobbler: Persistent XSS vulnerability in cobbler-web→
28. CVE-2018-1000223soundtouch: Heap-based buffer overflow in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() potentially leading to code execution→
29. CVE-2018-1000222gd: Double free in src/gd_bump.c:gdImageBmpPtr() via crafted JPEG→
30. CVE-2018-1000221pkgconf: 1 byte out of bounds read for 0 length keys→
31. CVE-2018-1000204kernel: Infoleak caused by incorrect handling of the SG_IO ioctl→
32. CVE-2018-1000200kernel: NULL pointer dereference on OOM kill of large mlocked process→
33. CVE-2018-1000199kernel: ptrace() incorrect error handling leads to corruption and DoS→
34. CVE-2018-1000180bouncycastle: flaw in the low-level interface to RSA key pair generator→
35. CVE-2018-1000168nghttp2: Null pointer dereference when too large ALTSVC frame is received→
36. CVE-2018-1000164python-gunicorn: Improper neutralization of CRLF Sequences http/wsgi.py:process_headers() can allow an attacker to cause a server to return arbitrary HTTP headers→
37. CVE-2018-1000161nmap: directory traversal in the way the non-default http-fetch script sanitized URLs→
38. CVE-2018-1000156patch: Malicious patch files cause ed to execute arbitrary commands→
39. CVE-2018-1000140librelp: Stack-based buffer overflow in relpTcpChkPeerName function in src/tcp.c→
40. CVE-2018-1000135NetworkManager: Information exposure in DNS resolver→
41. CVE-2018-1000132mercurial: HTTP server permissions bypass→
42. CVE-2018-1000127memcached: Integer Overflow in items.c:item_free()→
43. CVE-2018-1000122curl: RTSP RTP buffer over-read→
44. CVE-2018-1000121curl: LDAP NULL pointer dereference→
45. CVE-2018-1000120curl: FTP path trickery leads to NIL byte out of bounds write→
46. CVE-2018-1000119rack-protection: Timing attack in authenticity_token.rb→
47. CVE-2018-1000116net-snmp: Heap corruption in snmp_pdu_parse function in snmplib/snmp_api.c→
48. CVE-2018-1000115memcached: UDP server support allows spoofed traffic amplification DoS→
49. CVE-2018-1000097sharutils: heap-buffer-overflow in find_archive in unshar.c→
50. CVE-2018-1000079rubygems: Path traversal issue during gem installation allows to write to arbitrary filesystem locations→