PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 22

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 22 / 33

  1. CVE-2018-8977exiv2: invalid memory access in Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp
  2. CVE-2018-8976exiv2: out-of-bounds read in Exiv2::Internal::stringFormat image.cpp
  3. CVE-2018-8975netpbm: heap-buffer-overflow in pm_mallocarray2 function in lib/util/mallocvar.c
  4. CVE-2018-8960ImageMagick: heap-buffer-overflow in ReadTIFFImage function in coders/tiff.c
  5. CVE-2018-8956ntp: ntpd allows remote attackers to prevent a broadcast client from synchronizing its clock
  6. CVE-2018-8945binutils: Crash in elf.c:bfd_section_from_shdr() with crafted executable
  7. CVE-2018-8905libtiff: heap-based buffer overflow in tif_lzw.c:LZWDecodeCompat() allows for denial of service
  8. CVE-2018-8897Kernel: error in exception handling leads to DoS
  9. CVE-2018-8883nasm: Buffer over-read in parse_line function in asm/parser.c
  10. CVE-2018-8882nasm: Stack buffer underflow in function ieee_shr at source file asm/float.c
  11. CVE-2018-8881nasm: Heap overflow in function tokenize in asm/preproc.c
  12. CVE-2018-8822kernel: Memory corruption in ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c
  13. CVE-2018-8804ImageMagick: double free in WriteEPTImage function in coders/ept.c
  14. CVE-2018-8789freerdp: Several out-of-bounds reads in NTLM authentication module resulting in a denial of service
  15. CVE-2018-8788freerdp: Out-of-bounds write in nsc_rle_decode() function
  16. CVE-2018-8787freerdp: Integer overflow leading to heap-based buffer overflow in gdi_Bitmap_Decompress() function
  17. CVE-2018-8786freerdp: Integer truncation leading to heap-based buffer overflow in update_read_bitmap_update() function
  18. CVE-2018-8785freerdp: Heap-based buffer overflow in zgfx_decompress() function
  19. CVE-2018-8784freerdp: Heap-based buffer overflow in zgfx_decompress_segment() function
  20. CVE-2018-8781kernel: Integer overflow in drivers/gpu/drm/udl/udl_fb.c:udl_fb_mmap() can allow attackers to execute code in kernel space
  21. CVE-2018-8780ruby: Unintentional directory traversal by poisoned NULL byte in Dir
  22. CVE-2018-8779ruby: Unintentional socket creation by poisoned NULL byte in UNIXServer and UNIXSocket
  23. CVE-2018-8778ruby: Buffer under-read in String#unpack
  24. CVE-2018-8777ruby: DoS by large request in WEBrick
  25. CVE-2018-8769elfutils: buffer over-read in ebldynamictagname.c:ebl_dynamic_tag_name() allows for denial of service
  26. CVE-2018-8740sqlite: NULL pointer dereference with databases with schema corrupted with CREATE TABLE AS allows for denial of service
  27. CVE-2018-8416Core: Arbitrary file and directory creation
  28. CVE-2018-8099libgit2: denial of service (DoS) via crafted repository index files
  29. CVE-2018-8098libgit2: denial of service (DoS) via crafted repository index files
  30. CVE-2018-8088slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution
  31. CVE-2018-8087kernel: Memory leak in drivers/net/wireless/mac80211_hwsim.c:hwsim_new_radio_nl() can lead to potential denial of service
  32. CVE-2018-8043kernel: NULL pointer dereference in drivers/net/phy/mdio-bcm-unimac.c:unimac_mdio_probe() can lead to denial of service
  33. CVE-2018-8039apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.*
  34. CVE-2018-8037tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up
  35. CVE-2018-8034tomcat: Host name verification missing in WebSocket client
  36. CVE-2018-8014tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
  37. CVE-2018-8013batik: information disclosure when deserializing
  38. CVE-2018-8011httpd: mod_md: NULL pointer dereference causing httpd child process crash
  39. CVE-2018-7999graphite2: NULL pointer dereference in Segment.cpp in libgraphite2
  40. CVE-2018-7995kernel: Race condition in the store_int_with_restart() function in cpu/mcheck/mce.c
  41. CVE-2018-7858QEMU: cirrus: OOB access when updating VGA display
  42. CVE-2018-7757kernel: Memory leak in the sas_smp_get_phy_events function in drivers/scsi/libsas/sas_expander.c
  43. CVE-2018-7755kernel: Information exposure in fd_locked_ioctl function in drivers/block/floppy.c
  44. CVE-2018-7754kernel: Information Exposure in aoedisk_debugfs_show function in drivers/block/aoe/aoeblk.c
  45. CVE-2018-7750python-paramiko: Authentication bypass in transport.py
  46. CVE-2018-7740kernel: Denial of service in resv_map_release function in mm/hugetlb.c
  47. CVE-2018-7738util-linux: Shell command injection in unescaped bash-completed mount point names
  48. CVE-2018-7731exempi: NULL pointer dereference in XMPFiles/source/FormatSupport/WEBP_Support.cpp:WEBP::VP8XChunk allows for denial of service via crafted file
  49. CVE-2018-7730exempi: Heap-based buffer overflow in PSD_MetaHandler::CacheFileData function in XMPFiles/source/FormatSupport/PSIR_FileWriter.cpp allows for denial of service via crafted XLS file
  50. CVE-2018-7729exempi: Stack-based buffer overflow in XMPFiles/source/FileHandlers/PostScript_Handler.cpp:PostScript_MetaHandler::ParsePSFile() allows for denial of service
CVE 2018 document archive — Page 22 | PulseLinux