PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 14

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 14 / 33

  1. CVE-2018-14350mutt: stack-based buffer overflow in imap/message.c
  2. CVE-2018-14349mutt: Heap Overflow in imap/command.c
  3. CVE-2018-14348libcgroup: cgrulesengd creates log files with insecure permissions
  4. CVE-2018-14344wireshark: ISMP dissector crash (wnpa-sec-2018-35)
  5. CVE-2018-14343wireshark: ASN.1 BER and related dissectors crash (wnpa-sec-2018-37)
  6. CVE-2018-14342wireshark: BGP dissector large loop (wnpa-sec-2018-34)
  7. CVE-2018-14341wireshark: DICOM dissector infinite loop (wnpa-sec-2018-39)
  8. CVE-2018-14340wireshark: Multiple dissectors could crash (wnpa-sec-2018-36)
  9. CVE-2018-14339wireshark: MMSE dissector infinite loop (wnpa-sec-2018-38)
  10. CVE-2018-14338exiv2: buffer overflow in samples/geotag.cpp
  11. CVE-2018-14048libpng: Segmentation fault in png.c:png_free_data function causing denial of service
  12. CVE-2018-14046exiv2: heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp
  13. CVE-2018-14045soundtouch: Reachable assertion in FIRFilter.cpp causing denial of service
  14. CVE-2018-14044soundtouch: Reachable assertion in RateTransposer::setChannels() causing denial of service
  15. CVE-2018-14042bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip
  16. CVE-2018-14041bootstrap: Cross-site Scripting (XSS) in the data-target property of scrollspy
  17. CVE-2018-14040bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
  18. CVE-2018-14036accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c
  19. CVE-2018-14035hdf5: heap-based buffer over-read in the function H5VM_memcpyvv in H5VM.c
  20. CVE-2018-14034hdf5: out of bounds read in the function H5O_pline_reset in H5Opline.c
  21. CVE-2018-14033hdf5: heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c
  22. CVE-2018-14031hdf5: heap-based buffer over-read in the function H5T_copy in H5T.c
  23. CVE-2018-13988poppler: out of bounds read in pdfunite
  24. CVE-2018-13876hdf5: stack-based buffer overflow in the function H5FD_sec2_read in H5FDsec2.c
  25. CVE-2018-13875hdf5: out-of-bounds read in the function H5VM_memcpyvv in H5VM.c
  26. CVE-2018-13874hdf5: stack-based buffer overflow in the function H5FD_sec2_read in H5FDsec2.c
  27. CVE-2018-13873hdf5: buffer over-read in H5O_chunk_deserialize in H5Ocache.c
  28. CVE-2018-13872hdf5: HDF5 library: Arbitrary code execution or denial of service via specially crafted HDF5 files
  29. CVE-2018-13871hdf5: heap-based buffer overflow in the function H5FL_blk_malloc in H5FL.c
  30. CVE-2018-13870hdf5: heap-based buffer over-read in the function H5O_link_decode in H5Olink.c
  31. CVE-2018-13869hdf5: memcpy parameter overlap in the function H5O_link_decode in H5Olink.c
  32. CVE-2018-13868hdf5: heap-based buffer over-read in the function H5O_fill_old_decode in H5Ofill.c
  33. CVE-2018-13867hdf5: out of bounds read in the function H5F__accum_read in H5Faccum.c
  34. CVE-2018-13866hdf5: stack-based buffer over-read in the function H5F_addr_decode_len in H5Fint.c
  35. CVE-2018-13796mailman: Mishandled URLs in Utils.py:GetPathPieces() allows attackers to display arbitrary text on trusted sites
  36. CVE-2018-13785libpng: Integer overflow and resultant divide-by-zero in pngrutil.c:png_check_chunk_length() allows for denial of service
  37. CVE-2018-13440audiofile: NULL pointer dereference in ModuleState::setup() in modules/ModuleState.cpp allows for denial of service via crafted file
  38. CVE-2018-13419libsndfile: libsndfile: Denial of Service via memory leak in psf_allocate()
  39. CVE-2018-13406kernel: Integer overflow in drivers/video/fbdev/uvesafb.c:uvesafb_setcmap() allows for potential denial of service
  40. CVE-2018-13405kernel: Missing check in fs/inode.c:inode_init_owner() does not clear SGID bit on non-directories for non-members
  41. CVE-2018-13348mercurial: Improper length check in mpatch.c
  42. CVE-2018-13347mercurial: Buffer underflow in mpatch.c:mpatch_apply()
  43. CVE-2018-13346mercurial: Missing check for fragment start position in mpatch.c:mpatch_apply()
  44. CVE-2018-13259zsh: Improper handling of shebang line longer than 64
  45. CVE-2018-13153ImageMagick: memory leak in the XMagickCommand function in MagickCore/animate.c
  46. CVE-2018-13139libsndfile: stack-based buffer overflow in sndfile-deinterleave utility
  47. CVE-2018-13100kernel: divide-by-zero in fs/f2fs/super.c
  48. CVE-2018-13099kernel: out-of-bounds memory access in fs/f2fs/inline.c
  49. CVE-2018-13098kernel: slab out-of-bounds read in fs/f2fs/inode.c
  50. CVE-2018-13097kernel: divide-by-zero in fs/f2fs/super.c
CVE 2018 document archive — Page 14 | PulseLinux