PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 15

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 15 / 33

  1. CVE-2018-13096kernel: out-of-bounds memory access in fs/f2fs/super.c
  2. CVE-2018-13095kernel: NULL pointer dereference in fs/xfs/libxfs/xfs_inode_buf.c
  3. CVE-2018-13094kernel: NULL pointer dereference in xfs_da_shrink_inode function
  4. CVE-2018-13093kernel: NULL pointer dereference in lookup_slow function
  5. CVE-2018-13053kernel: Integer overflow in the alarm_timer_nsleep function
  6. CVE-2018-13033binutils: Uncontrolled Resource Consumption in execution of nm
  7. CVE-2018-12934binutils: Uncontrolled Resource Consumption in remember_Ktype in cplus-dem.c
  8. CVE-2018-12931kernel: stack-based out-of-bounds write in ntfs_attr_find in the ntfs.ko
  9. CVE-2018-12930kernel: stack-based out-of-bounds write in ntfs_end_buffer_async_read in the ntfs.ko
  10. CVE-2018-12929kernel: use-after-free in ntfs_read_locked_inode in the ntfs.ko
  11. CVE-2018-12928kernel: NULL pointer dereference in hfs_ext_read_extent in hfs.ko
  12. CVE-2018-12910libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames
  13. CVE-2018-12904kernel: kvm: nVMX: missing privilege check allows privilege escalation in nested virtualization
  14. CVE-2018-12900libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution
  15. CVE-2018-12896kernel: Integer overflow in kernel/time/posix-timers.c
  16. CVE-2018-12886gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass
  17. CVE-2018-12882php: Use-after-free reachable via the exif.c:exif_read_from_impl() function
  18. CVE-2018-12714kernel: slab out-of-bounds write in trace/trace_events_filter.c
  19. CVE-2018-12713gimp: predictable temporary file name in test-xcf.c unit test
  20. CVE-2018-12699binutils: heap-based buffer overflow in finish_stab in stabs.c
  21. CVE-2018-12698binutils: excessive memory consumption in demangle_template in cplus-dem.c
  22. CVE-2018-12697binutils: NULL pointer dereference in work_stuff_copy_to_from in cplus-dem.c.
  23. CVE-2018-12648exempi: NULL pointer dereference in WEBP_Support.hpp:WEBP::GetLE32() allows for denial of service
  24. CVE-2018-12641binutils: Stack Exhaustion in the demangling functions provided by libiberty
  25. CVE-2018-12633kernel: Double-fetch vulnerability in drivers/virt/vboxguest/vboxguest_linux.c:vbg_misc_device_ioctl() allows information leak and local denial of service
  26. CVE-2018-12617Qemu: qemu-guest-agent: Integer overflow causes segmentation fault in qmp_guest_file_read()
  27. CVE-2018-12600ImageMagick: out of bounds write ReadDIBImage and WriteDIBImage in coders/dib.c
  28. CVE-2018-12599ImageMagick: out of bounds write in ReadBMPImage and WriteBMPImage in coders/bmp.c
  29. CVE-2018-12558perl-Email-Address: Specially crafted input could cause Denial of Service due to complex parse() method
  30. CVE-2018-12549JDK: missing null check when accelerating Unsafe calls
  31. CVE-2018-12547JDK: buffer overflow in jio_snprintf() and jio_vsnprintf()
  32. CVE-2018-12545jetty: large settings frames causing denial of service
  33. CVE-2018-12538jetty: HttpSessions access/hijack in the FileSystem's storage for the FileSessionDataStore.
  34. CVE-2018-12536jetty: full server path revealed when using the default Error Handling
  35. CVE-2018-12495discount: heap-based buffer over-read via a crafted file
  36. CVE-2018-12453redis: type confusion in the xgroupCommand function in t_stream.c
  37. CVE-2018-12437libtomcrypt: memory-cache side-channel attack on ECDSA signatures
  38. CVE-2018-12422evolution-data-server: Unsafe use of strcat allows buffer overflow in addressbook/backends/ldap/e-book-backend-ldap.c
  39. CVE-2018-12407firefox: buffer overflow with ANGLE library when using VertexBuffer11 module
  40. CVE-2018-12406firefox: memory safety bugs showing evidence of memory corruption leading to run arbitrary code
  41. CVE-2018-12405Mozilla: Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4
  42. CVE-2018-12404nss: Cache side-channel variant of the Bleichenbacher attack
  43. CVE-2018-12403firefox: mixed content warning is not displayed when HTTPS page loads a favicon over HTTP
  44. CVE-2018-12402firefox: WebBrowserPersist uses incorrect origin information
  45. CVE-2018-12401firefox: special resource URI parsing leading to denial of service
  46. CVE-2018-12399firefox: Spoofing of protocol registration notification bar
  47. CVE-2018-12398firefox: Content Security Policy bypass through stylesheet injection in resource URIs
  48. CVE-2018-12397Mozilla: WebExtension local file permission check bypass
  49. CVE-2018-12396Mozilla: WebExtension content scripts can execute in disallowed contexts
  50. CVE-2018-12395Mozilla: WebExtension bypass of domain restrictions through header rewriting
CVE 2018 document archive — Page 15 | PulseLinux