PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 20

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 20 / 33

  1. CVE-2018-10779libtiff: heap-based buffer over-read in TIFFWriteScanline function in tif_write.c
  2. CVE-2018-10775bibutils: NULL pointer dereference in _fields_add function in fields.c in libbibcore.a
  3. CVE-2018-10774bibutils: Out-of-bounds Read in isiin_keyword function in isiin.c in libbibutils.a
  4. CVE-2018-10773bibutils: NULL pointer deference in addsn function in serialno.c in libbibcore.a
  5. CVE-2018-10772exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file
  6. CVE-2018-10768poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF
  7. CVE-2018-10767libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c
  8. CVE-2018-10754ncurses: NULL Pointer Dereference in _nc_parse_entry function in tinfo/parse_entry.c.
  9. CVE-2018-10733libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c
  10. CVE-2018-10689blktrace: buffer overflow in the dev_map_read function in btt/devmap.c
  11. CVE-2018-10675kernel: mm: use-after-free in do_get_mempolicy function allows local DoS or other unspecified impact
  12. CVE-2018-10583libreoffice: Information disclosure via SMB connection embedded in malicious file
  13. CVE-2018-10549php: Out-of-bounds read in ext/exif/exif.c:exif_read_data() when reading crafted JPEG data
  14. CVE-2018-10548php: NULL pointer dereference due to mishandling of ldap_get_dn return value allows DoS via malicious LDAP server reply
  15. CVE-2018-10547php: Reflected XSS vulnerability on PHAR 403 and 404 error pages
  16. CVE-2018-10546php: Infinite loop in ext/iconv/iconv.c when using stream filter with convert.incov on invalid sequence leads to denial-of-service
  17. CVE-2018-10545php: Dumpable FPM child processes allow bypassing opcache access controls
  18. CVE-2018-10540wavpack: out of bounds write in ParseWave64HeaderConfig in wave64.c
  19. CVE-2018-10539wavpack: out of bounds write in ParseDsdiffHeaderConfig in dsdiff.c
  20. CVE-2018-10538wavpack: out of bounds write in ParseRiffHeaderConfig in riff.c
  21. CVE-2018-10537wavpack: out of bounds write in ParseWave64HeaderConfig in wave64.c
  22. CVE-2018-10536wavpack: out of bounds write in ParseRiffHeaderConfig in riff.c
  23. CVE-2018-10535binutils: NULL pointer dereference in elf.c
  24. CVE-2018-10534binutils: out of bounds memory write in peXXigen.c files
  25. CVE-2018-10529LibRaw: Out-of-bounds read in X3F property table list functionality in libraw_x3f.cpp and libraw_cxx.cpp
  26. CVE-2018-10528LibRaw: Stack-based buffer overflow in libraw_cxx.cpp:utf2char() allows for potential code execution
  27. CVE-2018-10393libvorbis: stack buffer overflow in bark_noise_hybridmp function
  28. CVE-2018-10392libvorbis: heap buffer overflow in mapping0_forward function
  29. CVE-2018-10373binutils: NULL pointer dereference in dwarf2.c:concat_filename() allows for denial of service via crafted file
  30. CVE-2018-10372binutils: Heap-base buffer over-read in dwarf.c:process_cu_tu_index() allows for denial of service via crafted file
  31. CVE-2018-10360file: out-of-bounds read via a crafted ELF file
  32. CVE-2018-10323kernel: Invalid pointer dereference in xfs_bmapi_write() when mounting and operating on crafted xfs image allows denial of service
  33. CVE-2018-10322kernel: Invalid pointer dereference in xfs_ilock_attr_map_shared() when mounting crafted xfs image allowing denial of service
  34. CVE-2018-10316nasm: Endless while loop in the assemble_file function of asm/nasm.c
  35. CVE-2018-10254nasm: Stack-based buffer over-read in disasm/disasm.c:disasm() can allow attackers to cause a denial of service
  36. CVE-2018-10237guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service
  37. CVE-2018-10196graphviz: NULL pointer dereference in rebuild_vlis
  38. CVE-2018-10195lrzsz: Integer overflow in src/zm.c:zsdata() causes crash in sz and can leak information to receiver
  39. CVE-2018-10194ghostscript: Stack-based out-of-bounds write in pdf_set_text_matrix function in gdevpdts.c
  40. CVE-2018-10184haproxy: Heap buffer overflow in mux_h2.c:h2_process_demux() can allow attackers to cause a denial of service
  41. CVE-2018-10177ImageMagick: Infinite loop in coders/png.c:ReadOneMNGImage() allows attackers to cause a denial of service via crafted MNG file
  42. CVE-2018-10126libtiff: NULL pointer dereference in the jpeg_fdct_16x16 function in jfdctint.c
  43. CVE-2018-10124kernel: Undefined behaviour with INT_MIN argument in kernel/signal.c:kill_something_info() allows for denial of service
  44. CVE-2018-10120libreoffice: Out of bounds write in filter/ww8/ww8toolbar.cxx:SwCTBWrapper class allows for denial of service with crafted document
  45. CVE-2018-10119libreoffice: Use-after-free in sdstor/stgstrms.cxx:StgSmallStrm class allows for denial of service with crafted document
  46. CVE-2018-10115p7zip: unitialized memory due to incorrect logic of RAR decoder might lead to arbitrary code execution
  47. CVE-2018-10114gegl: write access violation gegl_buffer_iterate_read_simple function in buffer/gegl-buffer-access.c
  48. CVE-2018-10113gegl: unbounded memory allocation in process function in operations/external/ppm-load.c
  49. CVE-2018-10112gegl: write access violation in gegl_tile_backend_swap_constructed function in buffer/gegl-tile-backend-swap.c
  50. CVE-2018-10111gegl: unbounded memory allocation in render_rectangle function in process/gegl-processor.c
CVE 2018 document archive — Page 20 | PulseLinux