PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 11

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 11 / 33

  1. CVE-2018-16391opensc: Buffer overflows handling responses from Muscle Cards in card-muscle.c:muscle_list_files()
  2. CVE-2018-16376openjpeg: Heap-based buffer overflow in function t2_encode_packet in src/lib/openmj2/t2.c
  3. CVE-2018-16375openjpeg: Heap-based buffer overflow in pnmtoimage function in bin/jpwl/convert.c
  4. CVE-2018-16336exiv2: heap-based buffer over-read via a crafted image file
  5. CVE-2018-16335libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c
  6. CVE-2018-16329ImageMagick: NULL pointer dereference in GetMagickProperty function in MagickCore/property.c
  7. CVE-2018-16328ImageMagick: NULL pointer dereference in CheckEventLogging function in MagickCore/log.c
  8. CVE-2018-16323ImageMagick: Information leak in ReadXBMImage in coders/xbm.c
  9. CVE-2018-16301tcpdump: Buffer overflow in the -F command line argument parser
  10. CVE-2018-16300tcpdump: Resource exhaustion in bgp_attr_print() function in print-bgp.c
  11. CVE-2018-16276kernel: incorrect bounds checking in yurex_read in drivers/usb/misc/yurex.c
  12. CVE-2018-16230tcpdump: Buffer over-read in bgp_attr_print() function in print-bgp.c
  13. CVE-2018-16229tcpdump: Buffer over-read in dccp_print_option() function in print-dccp.c
  14. CVE-2018-16228tcpdump: Access to uninitialized buffer in print_prefix() function in print-hncp.c
  15. CVE-2018-16227tcpdump: Buffer over-read in print-802_11.c
  16. CVE-2018-16152strongswan: authentication bypass in verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c
  17. CVE-2018-16151strongswan: authentication bypass in verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c
  18. CVE-2018-16140transfig: Buffer underwrite in read.c:get_line() via crafted FIG file
  19. CVE-2018-16062elfutils: Heap-based buffer over-read in libdw/dwarf_getaranges.c:dwarf_getaranges() via crafted file
  20. CVE-2018-16058wireshark: Bluetooth AVDTP dissector crash
  21. CVE-2018-16057wireshark: Radiotap dissector crash
  22. CVE-2018-16056wireshark: Bluetooth Attribute Protocol dissector crash
  23. CVE-2018-15919openssh: User enumeration via malformed packets in authentication requests
  24. CVE-2018-15911ghostscript: Uninitialized memory access in the aesdecode operator (699665)
  25. CVE-2018-15910ghostscript: LockDistillerParams type confusion (699656)
  26. CVE-2018-15909ghostscript: shading_param incomplete type checking (699660)
  27. CVE-2018-15908ghostscript: .tempfile file permission issues (699657)
  28. CVE-2018-15869awscli: Allows loading of an undesired AMI by setting similar image properties
  29. CVE-2018-15864libxkbcommon: NULL pointer dereference in resolve_keysym resulting in a crash
  30. CVE-2018-15863libxkbcommon: xkbcomp: NULL pointer dereference in ResolveStateAndPredicate resulting in a crash
  31. CVE-2018-15862libxkbcommon: NULL pointer dereference in LookupModMask resulting in a crash
  32. CVE-2018-15861libxkbcommon: xkbcomp: NULL pointer dereference in ExprResolveLhs resulting in a crash
  33. CVE-2018-15859libxkbcommon: xkbcomp: NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash
  34. CVE-2018-15858libxkbcommon: NULL pointer dereference when handling invalid aliases in CopyKeyAliasesToKeymap resulting in a crash
  35. CVE-2018-15857libxkbcommon: Invalid free in ExprAppendMultiKeysymList resulting in a crash
  36. CVE-2018-15856libxkbcommon: Infinite loop when reaching EOL unexpectedly resulting in a crash
  37. CVE-2018-15855libxkbcommon: NULL pointer dereference when handling xkb_geometry
  38. CVE-2018-15854libxkbcommon: NULL pointer dereference resulting in a crash
  39. CVE-2018-15853libxkbcommon: xkbcomp: Endless recursion in xkbcomp/expr.c resulting in a crash
  40. CVE-2018-15746QEMU: seccomp: blacklist is not applied to all threads
  41. CVE-2018-15688systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling
  42. CVE-2018-15687systemd: Dereference of symlinks in chown_recursive.c:chown_one() allows for modification of file privileges
  43. CVE-2018-15686systemd: line splitting via fgets() allows for state injection during daemon-reexec
  44. CVE-2018-15607ImageMagick: CPU Exhaustion via crafted input file
  45. CVE-2018-15594kernel: Mishandling of indirect calls weakens Spectre mitigation for paravirtual guests
  46. CVE-2018-15587evolution: specially crafted email leading to OpenPGP signatures being spoofed for arbitrary messages
  47. CVE-2018-15572Kernel: hw: cpu: userspace-userspace spectreRSB attack
  48. CVE-2018-15518qt5-qtbase: Double free in QXmlStreamReader
  49. CVE-2018-15501libgit2: out-of-bounds reads when processing smart-protocol ng packets
  50. CVE-2018-15473openssh: User enumeration via malformed packets in authentication requests