PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 13

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 13 / 33

  1. CVE-2018-14619kernel: crash (possible privesc) in kernel crypto api.
  2. CVE-2018-14618curl: NTLM password overflow via integer overflow
  3. CVE-2018-14617kernel: NULL pointer dereference in fs/hfsplus/dir.c:hfsplus_lookup() when operating on a file in a crafted hfs+ image
  4. CVE-2018-14616kernel: NULL pointer dereference in fs/crypto/crypto.c:fscrypt_do_page_crypto() when operating on a corrupted f2fs image
  5. CVE-2018-14615kernel: Buffer overflow in fs/f2fs/inline.c:truncate_inline_inode() when unmounting a crafted f2fs image
  6. CVE-2018-14614kernel: Out-of-bounds access in fs/f2fs/segment.c:__remove_dirty_segment() when mounting a crafted f2fs image
  7. CVE-2018-14613kernel: Invalid pointer dereference in io_ctl_map_page() when mounting and operating a crafted btrfs image
  8. CVE-2018-14612kernel: Invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image
  9. CVE-2018-14611kernel: Use-after-free in try_merge_free_space() when mounting crafted btrfs image
  10. CVE-2018-14610kernel: Out-of-bounds access in write_extent_buffer() when mounting and operating a crafted btrfs image
  11. CVE-2018-14609kernel: Invalid pointer dereference in fs/btrfs/relocation.c:__del_reloc_root() when mounting crafted btrfs image
  12. CVE-2018-14600libX11: Out of Bounds write in XListExtensions in ListExt.c
  13. CVE-2018-14599libX11: Off-by-one error in XListExtensions in ListExt.c
  14. CVE-2018-14598libX11: Crash on invalid reply in XListExtensions in ListExt.c
  15. CVE-2018-14567libxml2: Infinite loop caused by incorrect error detection during LZMA decompression
  16. CVE-2018-14553gd: NULL pointer dereference in gdImageClone
  17. CVE-2018-14551ImageMagick: Uninitialized variable in coders/mat.c:ReadMATImageV4() allows for memory corruption
  18. CVE-2018-14550libpng: Stack-based buffer overflow in contrib/pngminus/pnm2png.c:get_token() potentially leading to arbitrary code execution
  19. CVE-2018-14526wpa_supplicant: Unauthenticated EAPOL-Key decryption in wpa_supplicant
  20. CVE-2018-14498libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service
  21. CVE-2018-14470tcpdump: Buffer over-read in babel_print_v2() in print-babel.c
  22. CVE-2018-14469tcpdump: Buffer over-read in ikev1_n_print() function in print-isakmp.c
  23. CVE-2018-14468tcpdump: Buffer over-read in mfr_print() function in print-fr.c
  24. CVE-2018-14467tcpdump: Buffer over-read in bgp_capabilities_print() in print-bgp.c
  25. CVE-2018-14466tcpdump: Buffer over-read in print-icmp6.c
  26. CVE-2018-14465tcpdump: Buffer over-read in rsvp_obj_print() function in print-rsvp.c
  27. CVE-2018-14464tcpdump: Buffer over-read in lmp_print_data_link_subobjs() function in print-lmp.c
  28. CVE-2018-14463tcpdump: Buffer over-read in vrrp_print() function in print-vrrp.c
  29. CVE-2018-14462tcpdump: Buffer over-read in icmp_print() function in print-icmp.c
  30. CVE-2018-14461tcpdump: Buffer over-read in ldp_tlv_print() function in print-ldp.c
  31. CVE-2018-14460hdf5: Heap-based buffer over-read in the function H5O_sdspace_decode in H5Osdspace.c
  32. CVE-2018-14438wireshark: Improper Access Control in create_app_running_mutex function in wsutil/file_util.c
  33. CVE-2018-14434ImageMagick: memory leak for a colormap in WriteMPCImage in coders/mpc.c
  34. CVE-2018-14424gdm: use-after-free in the GDM daemon
  35. CVE-2018-14423openjpeg2: Division-by-zero vulnerabilities in lib/openjp3d/pi.c
  36. CVE-2018-14404libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c
  37. CVE-2018-14370wireshark: IEEE dissector infinite loop (wnpa-sec-2018-43)
  38. CVE-2018-14369wireshark: HTTP2 dissector infinite loop (wnpa-sec-2018-41)
  39. CVE-2018-14368wireshark: Bazaar dissector infinite loop (wnpa-sec-2018-40)
  40. CVE-2018-14367wireshark: CoAP dissector infinite loop (wnpa-sec-2018-42)
  41. CVE-2018-14362mutt: POP body caching path traversal vulnerability
  42. CVE-2018-14359mutt: buffer overflow via base64 data
  43. CVE-2018-14358mutt: stack-based buffer overflow in imap/message.c
  44. CVE-2018-14357mutt: Remote Code Execution via backquote characters
  45. CVE-2018-14356mutt: mishandles a zero-length UID in pop.c
  46. CVE-2018-14355mutt: IMAP header caching path traversal vulnerability
  47. CVE-2018-14354mutt: Remote code injection vulnerability to an IMAP mailbox
  48. CVE-2018-14353mutt: integer underflow in imap/util.c
  49. CVE-2018-14352mutt: stack-based buffer overflow in imap/util.c
  50. CVE-2018-14351mutt: IMAP status mailbox literal mishandled in imap/command.c
CVE 2018 document archive — Page 13 | PulseLinux