PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 18

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 18 / 33

  1. CVE-2018-11360wireshark: Heap-based Buffer Overflow in packet-gsm_a_dtap.c
  2. CVE-2018-11359wireshark: Out-of-bounds Read in proto.c
  3. CVE-2018-11358wireshark: Use after free in packet-q931.c
  4. CVE-2018-11357wireshark: Uncontrolled Resource Consumption in epan/tvbuff.c
  5. CVE-2018-11356wireshark: DNS dissector crash in packet-dns.c
  6. CVE-2018-11355wireshark: Heap-based Buffer Overflow in packet-rtcp.c
  7. CVE-2018-11354wireshark: Out-of-bounds Read in packet-ieee1905.c
  8. CVE-2018-11307jackson-databind: Potential information exfiltration with default typing, serialization gadget from MyBatis
  9. CVE-2018-11251ImageMagick: heap-based buffer over-read in ReadSUNImage in coders/sun.c
  10. CVE-2018-11237glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper
  11. CVE-2018-11236glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow
  12. CVE-2018-11235git: arbitrary code execution when recursively cloning a malicious repository
  13. CVE-2018-11233git: path sanity check in is_ntfs_dotgit() can read arbitrary memory
  14. CVE-2018-11232kernel: coresight: kernel panic caused by invalid CPU
  15. CVE-2018-11219redis: Integer overflow in lua_struct.c:b_unpack()
  16. CVE-2018-11218redis: Heap corruption in lua_cmsgpack.c
  17. CVE-2018-11214libjpeg: Segmentation fault in get_text_rgb_row function in rdppm.c
  18. CVE-2018-11213libjpeg: Segmentation fault in get_text_gray_row function in rdppm.c
  19. CVE-2018-11212libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c
  20. CVE-2018-11210tinyxml2: heap-based buffer over-read in the XMLDocument::Parse function
  21. CVE-2018-11207hdf5: division by zero in H5D__chunk_init in H5Dchunk.c
  22. CVE-2018-11206hdf5: out of bounds read in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c
  23. CVE-2018-11205hdf5: out of bounds read in H5VM_memcpyvv in H5VM.c
  24. CVE-2018-11204hdf5: NULL pointer dereference in H5O__chunk_deserialize in H5Ocache.c
  25. CVE-2018-11203hdf5: division by zero in H5D__btree_decode_key in H5Dbtree.c
  26. CVE-2018-11202hdf5: NULL pointer dereference in H5S_hyper_make_spans in H5Shyper.c
  27. CVE-2018-11037exiv2: information leak via a crafted file
  28. CVE-2018-10999exiv2: heap-based buffer over-read in parseTXTChunk function
  29. CVE-2018-10998exiv2: SIGABRT by triggering an incorrect Safe::add call
  30. CVE-2018-10963libtiff: reachable assertion in TIFFWriteDirectorySec function in tif_dirwrite.c
  31. CVE-2018-10958exiv2: SIGABRT caused by memory allocation in types.cpp:Exiv2::Internal::PngChunk::zlibUncompress()
  32. CVE-2018-10940kernel: incorrect memory bounds check in drivers/cdrom/cdrom.c
  33. CVE-2018-10938kernel: infinite loop in net/ipv4/cipso_ipv4.c:cipso_v4_optptr() allows for DoS
  34. CVE-2018-10936PostgreSQL: Postgres JDBC driver does not perform host name validation by default
  35. CVE-2018-10935389-ds-base: ldapsearch with server side sort allows users to cause a crash
  36. CVE-2018-10933libssh: Authentication Bypass due to improper message callbacks implementation
  37. CVE-2018-10932lldptool: improper sanitization of shell-escape codes
  38. CVE-2018-10931cobbler: CobblerXMLRPCInterface exports all its methods over XMLRPC
  39. CVE-2018-10930glusterfs: Files can be renamed outside volume
  40. CVE-2018-10929glusterfs: Arbitrary file creation on storage server allows for execution of arbitrary code
  41. CVE-2018-10928glusterfs: Improper resolution of symlinks allows for privilege escalation
  42. CVE-2018-10927glusterfs: File status information leak and denial of service
  43. CVE-2018-10926glusterfs: Device files can be created in arbitrary locations
  44. CVE-2018-10925postgresql: Missing authorization and memory disclosure in INSERT ... ON CONFLICT DO UPDATE statements
  45. CVE-2018-10924glusterfs: Denial-of-service via fsync(2) in Gluster FUSE client
  46. CVE-2018-10923glusterfs: I/O to arbitrary devices on storage server
  47. CVE-2018-10922ttembed: use of untrusted length field may lead to denial of service
  48. CVE-2018-10921ttembed: failure to check file bounds may lead to input file corruption
  49. CVE-2018-10919samba: Confidential attribute disclosure via substring search
  50. CVE-2018-10918samba: DsCrackNames on a user without an SPN can trigger NULL-pointer de-reference
CVE 2018 document archive — Page 18 | PulseLinux