CVE 2018 document archive · 2

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 2 / 33

51. CVE-2018-1000078rubygems: XSS vulnerability in homepage attribute when displayed via gem server→
52. CVE-2018-1000077rubygems: Missing URL validation on spec home attribute allows malicious gem to set an invalid homepage URL→
53. CVE-2018-1000076rubygems: Improper verification of signatures in tarball allows to install mis-signed gem→
54. CVE-2018-1000075rubygems: Infinite loop vulnerability due to negative size in tar header causes Denial of Service→
55. CVE-2018-1000074rubygems: Unsafe Object Deserialization Vulnerability in gem owner allowing arbitrary code execution on specially crafted YAML→
56. CVE-2018-1000073rubygems: Path traversal when writing to a symlinked basedir outside of the root→
57. CVE-2018-1000041librsvg: Improper input validation vulnerability in rsvg-io.c→
58. CVE-2018-1000035unzip: Heap-based buffer overflow in fileio.c:UzpPassword function allows code execution→
59. CVE-2018-1000034unzip: Invalid access in the LZMA compression algorithm→
60. CVE-2018-1000033unzip: Heap-based out-of-bounds access in extract.c:ef_scan_for_stream() possibly causing crash→
61. CVE-2018-1000032unzip: Heap-based buffer overflow in charset_to_intern()→
62. CVE-2018-1000031unzip: Heap-based out-of-bounds write in fileio.c:set_zipfn_sgmnt_name() possibly causing crash→
63. CVE-2018-1000030python: Heap-Buffer-Overflow and Heap-Use-After-Free in Objects/fileobject.c→
64. CVE-2018-1000028kernel: Improper sorting of GIDs in nfsd can lead to incorrect permissions being applied→
65. CVE-2018-1000027squid: Incorrect pointer handling in HTTP processing and certificate download can lead to denial of service→
66. CVE-2018-1000026kernel: Improper validation in bnx2x network card driver can allow for denial of service attacks via crafted packet→
67. CVE-2018-1000024squid: Incorrect pointer handling when processing ESI Responses can lead to denial of service→
68. CVE-2018-1000021git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands→
69. CVE-2018-1000007curl: HTTP authentication leak in redirects→
70. CVE-2018-1000005curl: Out-of-bounds read in code handling HTTP/2 trailers→
71. CVE-2018-1000004kernel: Race condition in sound system can lead to denial of service→
72. CVE-2018-1000001glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation→
73. CVE-2018-25282nmap: zenmap: Nmap/ZenMap: Denial of Service via XML entity expansion→
74. CVE-2018-25091urllib3: urllib3 does not remove the authorization HTTP header when following a cross-origin redirect→
75. CVE-2018-25032zlib: A flaw found in zlib when compressing (not decompressing) certain inputs→
76. CVE-2018-25020kernel: long jump over an instruction sequence can lead to overflow in the BPF subsystem→
77. CVE-2018-25015kernel: use-after-free in net/sctp/socket.c for a held lock after a peel off→
78. CVE-2018-25014libwebp: use of uninitialized value in ReadSymbol()→
79. CVE-2018-25013libwebp: out-of-bounds read in ShiftBytes()→
80. CVE-2018-25012libwebp: out-of-bounds read in WebPMuxCreateInternal()→
81. CVE-2018-25011libwebp: heap-based buffer overflow in PutLE16()→
82. CVE-2018-25010libwebp: out-of-bounds read in ApplyFilter()→
83. CVE-2018-25009libwebp: out-of-bounds read in WebPMuxCreateInternal→
84. CVE-2018-25008rust: weak synchronization in the Arc::get_mut method→
85. CVE-2018-21247libvncserver: uninitialized memory contents are vulnerable to Information Leak→
86. CVE-2018-21232re2c: uncontrolled recursion that causes stack consumption in find_fixed_tags→
87. CVE-2018-21035qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages therefore attacker can cause DOS→
88. CVE-2018-21029systemd: incorrect certificate validation results in acceptance of any certificate signed by a trusted certificate authority for DNS over TLS→
89. CVE-2018-21010openjpeg: heap buffer overflow in color_apply_icc_profile in bin/common/color.c→
90. CVE-2018-21009poppler: integer overflow in Parser::makeStream in Parser.cc→
91. CVE-2018-21008kernel: use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c→
92. CVE-2018-20976kernel: use-after-free in fs/xfs/xfs_super.c→
93. CVE-2018-20969patch: do_ed_script in pch.c does not block strings beginning with a ! character→
94. CVE-2018-20961kernel: double free vulnerability in function f_midi_set_alt in drivers/usb/gadget/function/f_midi.c causing denial of service→
95. CVE-2018-20856kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c→
96. CVE-2018-20855kernel: Information leak in create_qp_common in drivers/infiniband/hw/mlx5/qp.c→
97. CVE-2018-20854kernel: Out-of-bounds read in drivers/phy/mscc/phy-ocelot-serdes.c→
98. CVE-2018-20852python: Cookie domain check returns incorrect results→
99. CVE-2018-20847openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c→
100. CVE-2018-20846openjpeg: out-of-bounds read in functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c leads to denial of service→