PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 17

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 17 / 33

  1. CVE-2018-12127hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)
  2. CVE-2018-12126hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)
  3. CVE-2018-12123nodejs: Hostname spoofing in URL parser for javascript protocol
  4. CVE-2018-12122nodejs: Slowloris HTTP Denial of Service
  5. CVE-2018-12121nodejs: Denial of Service with large HTTP headers
  6. CVE-2018-12120nodejs: Debugger port 5858 listens on any interface by default
  7. CVE-2018-12116nodejs: HTTP request splitting
  8. CVE-2018-12115nodejs: Out of bounds (OOB) write via UCS-2 encoding
  9. CVE-2018-12086wireshark: OpcUa dissector crash
  10. CVE-2018-12085liblouis: Stack-based buffer overflow in compileTranslationTable.c
  11. CVE-2018-12023jackson-databind: improper polymorphic deserialization of types from Oracle JDBC driver
  12. CVE-2018-12022jackson-databind: improper polymorphic deserialization of types from Jodd-db library
  13. CVE-2018-12020gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification
  14. CVE-2018-12015perl: Directory traversal in Archive::Tar
  15. CVE-2018-11987kernel: Double-free in ion_system_heap.c
  16. CVE-2018-11806QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams
  17. CVE-2018-11805spamassassin: crafted configuration files can run system commands without any output or errors
  18. CVE-2018-11803subversion: malicious SVN clients can crash mod_dav_svn
  19. CVE-2018-11784tomcat: Open redirect in default servlet
  20. CVE-2018-11782subversion: remotely triggerable DoS vulnerability in svnserve 'get-deleted-rev'
  21. CVE-2018-11781spamassassin: Local user code injection in the meta rule syntax
  22. CVE-2018-11780spamassassin: Potential remote code execution vulnerability in PDFInfo plugin
  23. CVE-2018-11771apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip
  24. CVE-2018-11763httpd: DoS for HTTP/2 connections by continuous SETTINGS frames
  25. CVE-2018-11713webkitgtk: WebSockets don't use system proxy settings
  26. CVE-2018-11712webkitgtk: Improper TLS certificate verification for WebSocket connections
  27. CVE-2018-11685liblouis: Stack-based buffer overflow in function compileHyphenation in compileTranslationTable.c
  28. CVE-2018-11684liblouis: Stack-based buffer overflow in function includeFile in compileTranslationTable.c
  29. CVE-2018-11683liblouis: Stack-based buffer overflow in function parseChars in compileTranslationTable.c
  30. CVE-2018-11656ImageMagick: memory leak in ReadDCMImage function in coders/dcm.c
  31. CVE-2018-11655ImageMagick: memory leak in GetImagePixelCache function in MagickCore/cache.c
  32. CVE-2018-11645ghostscript: status command permitted with -dSAFER in psi/zfile.c allowing attackers to identify the size and existence of files
  33. CVE-2018-11627rubygem-sinatra: XSS in the 400 Bad Request page
  34. CVE-2018-11625ImageMagick: heap-based buffer over-read in SetGrayscaleImage in the quantize.c
  35. CVE-2018-11624ImageMagick: use after free in ReadMATImage function in coders/mat.c
  36. CVE-2018-11574ppp: Remote client crash in ppp EAP-TLS patch
  37. CVE-2018-11508kernel: Missing initialization in kernel/compat.c:compat_get_timex() allows local attacker to obtain possibly sensitive information via adjtimex
  38. CVE-2018-11506kernel: Stack-based buffer overflow in drivers/scsi/sr_ioctl.c allows denial of service or other unspecified impact
  39. CVE-2018-11504discount: Heap-based buffer-overflow in markdown.c:islist() allows for denial of service
  40. CVE-2018-11503discount: Heap-based buffer-overflow in markdown.c:isfootnote() allows for denial of service
  41. CVE-2018-11490giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c
  42. CVE-2018-11489giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c
  43. CVE-2018-11469haproxy: Information disclosure in check_request_for_cacheability function in proto_http.c
  44. CVE-2018-11468discount: heap-based buffer over-read __mkd_trim_line function in mkdio.c
  45. CVE-2018-11440liblouis: Stack-based Buffer Overflow in parseChars function in compileTranslationTable.c
  46. CVE-2018-11439taglib: heap-based buffer over-read via a crafted audio file
  47. CVE-2018-11412kernel: out-of-bounds memcpy in fs/ext4/inline.c:ext4_read_inline_data() with crafted ext4 image
  48. CVE-2018-11410liblouis: invalid free in compileRule function in compileTranslationTable.c
  49. CVE-2018-11362wireshark: Out-of-bounds read in packet-ldss.c
  50. CVE-2018-11361wireshark: Heap-based Buffer Overflow in dot11decrypt.c
CVE 2018 document archive — Page 17 | PulseLinux