PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 10

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 10 / 33

  1. CVE-2018-16745mgetty: Stack-based buffer overflow in fax_notify_mail() in faxrec.c
  2. CVE-2018-16744mgetty: Command injection in faxrec.c
  3. CVE-2018-16743mgetty: Stack-based buffer overflow with long username in contrib/next-login/login.c
  4. CVE-2018-16742mgetty: Stack-based buffer overflow in contrib/scrts.c triggered via command line parameter
  5. CVE-2018-16741mgetty: command injection in faxrunq
  6. CVE-2018-16658kernel: Information leak in cdrom_ioctl_drive_status
  7. CVE-2018-16646poppler: infinite recursion in Parser::getObj function in Parser.cc
  8. CVE-2018-16645ImageMagick: Out-of-memory ReadBMPImage of coders/bmp.c and ReadDIBImage of codes/dib.c
  9. CVE-2018-16644ImageMagick: improper check for length in ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c
  10. CVE-2018-16643ImageMagick: missing check for fputc function in multiple files
  11. CVE-2018-16642ImageMagick: out-of-bounds write in InsertRow function in coders/cut.c
  12. CVE-2018-16641ImageMagick: memory leak in TIFFWritePhotoshopLayers function in coders/tiff.c
  13. CVE-2018-16640ImageMagick: memory leak in ReadOneJNGImage function in coders/png.c
  14. CVE-2018-16597kernel: overlayfs file truncation without permissions
  15. CVE-2018-16588shadow-utils: useradd-mkdirs.patch creates intermediate directories with 0777
  16. CVE-2018-16585ghostscript: .setdistillerkeys PostScript command is accepted even though it is not intended for use
  17. CVE-2018-16548zziplib: Memory leak triggered in the function __zzip_parse_root_directory in zip.c
  18. CVE-2018-16543ghostscript: gssetresolution and gsgetresolution memory corruption (699670)
  19. CVE-2018-16542ghostscript: .definemodifiedfont memory corruption if /typecheck is handled (699668)
  20. CVE-2018-16541ghostscript: Incorrect free logic in pagedevice replacement (699664)
  21. CVE-2018-16540ghostscript: use-after-free in copydevice handling (699661)
  22. CVE-2018-16539ghostscript: incorrect access checking in temp file handling to disclose contents of files (699658)
  23. CVE-2018-16517nasm: NULL Pointer Dereference in asm/labels.c
  24. CVE-2018-16513ghostscript: setcolor missing type check (699655)
  25. CVE-2018-16511ghostscript: missing type check in type checker (699659)
  26. CVE-2018-16510ghostscript: Incorrect exec stack handling in the "CS" and "SC" PDF primitives (699671)
  27. CVE-2018-16509ghostscript: /invalidaccess bypass after failed restore (699654)
  28. CVE-2018-16452tcpdump: Resource exhaustion in smb_fdata() funtion in smbutil.c
  29. CVE-2018-16451tcpdump: Buffer over-read in print_trans() function in print-smb.c
  30. CVE-2018-16435lcms2: Integer overflow in AllocateDataSet() in cmscgats.c leading to heap-based buffer overflow
  31. CVE-2018-16429glib2: Out-of-bounds read in g_markup_parse_context_parse() in gmarkup.c
  32. CVE-2018-16428glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c
  33. CVE-2018-16427opensc: Out of bounds reads handling responses from smartcards
  34. CVE-2018-16426opensc: Infinite recusrion handling responses from IAS-ECC cards in card-iasecc.c:iasecc_select_file()
  35. CVE-2018-16425opensc: Double free handling responses from HSM Cards in pkcs15-sc-hsm.c:sc_pkcs15emu_sc_hsm_init()
  36. CVE-2018-16424opensc: Double free handling responses from smartcards in tools/egk-tool.c:read_file()
  37. CVE-2018-16423opensc: Double free handling responses from smartcards in libopensc/sc.c:sc_file_set_sec_attr()
  38. CVE-2018-16422opensc: Buffer overflow handling responses from esteid cards in pkcs15-esteid.c:sc_pkcs15emu_esteid_init()
  39. CVE-2018-16421opensc: Buffer overflows handling responses from CAC Cards in card-cac.c:cac_get_serial_nr_from_CUID()
  40. CVE-2018-16420opensc: Buffer overflows handling responses from ePass 2003 Cards in card-epass2003.c:decrypt_response()
  41. CVE-2018-16419opensc: Buffer overflow handling responses from Cryptoflex cards in cryptoflex-tool.c:read_public_key()
  42. CVE-2018-16418opensc: Buffer overflow handling string concatention in tools/util.c:util_acl_to_str()
  43. CVE-2018-16413ImageMagick: heap-based buffer over-read in the PushShortPixel function in MagickCore/quantum-private.h
  44. CVE-2018-16412ImageMagick: heap-based buffer over-read in the ParseImageResourceBlocks function in coders/psd.c
  45. CVE-2018-16403elfutils: Heap-based buffer over-read in libdw/dwarf_getabbrev.c and libwd/dwarf_hasattr.c causes crash
  46. CVE-2018-16402elfutils: Double-free due to double decompression of sections in crafted ELF causes crash
  47. CVE-2018-16396ruby: Tainted flags are not propagated in Array#pack and String#unpack with some directives
  48. CVE-2018-16395ruby: OpenSSL::X509:: Name equality check does not work correctly
  49. CVE-2018-16393opensc: Buffer overflows handling responses from Gemsafe V1 Smartcards in pkcs15-gemsafeV1.c:gemsafe_get_cert_len()
  50. CVE-2018-16392opensc: Buffer overflows handling responses from TCOS Cards in card-tcos.c:tcos_select_file()
CVE 2018 document archive — Page 10 | PulseLinux