PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 23

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 23 / 33

  1. CVE-2018-7728exempi: Heap-based buffer overflow in third-party/zuid/interfaces/MD5.cpp:MD5Update() allows for denial of service via crafted TIFF image
  2. CVE-2018-7727zziplib: Memory leak in memdisk.c:zzip_mem_disk_new() can lead to denial of service via crafted zip
  3. CVE-2018-7726zziplib: Bus error in zip.c:__zzip_parse_root_directory() cause crash via crafted zip file
  4. CVE-2018-7725zziplib: out of bound read in mmapped.c:zzip_disk_fread() causes crash
  5. CVE-2018-7714opencv: assertion failure in validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp
  6. CVE-2018-7713opencv: assertion failure in validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp
  7. CVE-2018-7712opencv: assertion failure in validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp
  8. CVE-2018-7643binutils: Integer overflow in the display_debug_ranges function resulting in crash
  9. CVE-2018-7642binutils: NULL pointer dereference in swap_std_reloc_in function in aoutx.h resulting in crash
  10. CVE-2018-7584php: Stack-based buffer under-read in php_stream_url_wrap_http_ex() in http_fopen_wrapper.c when parsing HTTP response
  11. CVE-2018-7570binutils: NULL pointer dereference the assign_file_positions_for_non_load_sections function in libbfd library
  12. CVE-2018-7569binutils: integer underflow or overflow via an ELF file with a corrupt DWARF FORM block in libbfd library
  13. CVE-2018-7568binutils: integer overflow via an ELF file with corrupt dwarf1 debug information in libbfd library
  14. CVE-2018-7566kernel: race condition in snd_seq_write() may lead to UAF or OOB-access
  15. CVE-2018-7550QEMU: i386: multiboot OOB access while loading kernel image
  16. CVE-2018-7549zsh: crash on copying empty hash table
  17. CVE-2018-7548zsh: null-pointer deref when using ${(PA)...} on an empty array result
  18. CVE-2018-7492kernel: Null pointer dereference in net/rds/rdma.c:__rds_rdma_map() allowing local attackers to cause denial-of-service
  19. CVE-2018-7489jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries
  20. CVE-2018-7485unixODBC: Insecure buffer copy in SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c
  21. CVE-2018-7480kernel: Double free in block/blk-cgroup.c:blkcg_init_queue() can allow a local user to cause a denial of service
  22. CVE-2018-7470ImageMagick: denial of service (DoS) in IsWEBPImageLossless function in coders/webp.c
  23. CVE-2018-7456libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes a denial of service
  24. CVE-2018-7443ImageMagick: Memory allocation failure in ReadTIFFImage function in memory.c
  25. CVE-2018-7439freexl: heap-based buffer over-read in the function read_mini_biff_next_record
  26. CVE-2018-7438freexl: heap-buffer-overflow in parse_unicode_string in freexl.c
  27. CVE-2018-7437freexl: heap-buffer-overflow in parse_SST in freexl.c
  28. CVE-2018-7436freexl: heap-buffer-overflow in parse_SST parse_SST in freexl.c
  29. CVE-2018-7435freexl: heap-buffer-overflow in freexl::destroy_cell
  30. CVE-2018-7420wireshark: Pcapng file parser crash in pcapng.c
  31. CVE-2018-7419wireshark: NBAP dissector crash in nbap.cnf
  32. CVE-2018-7418wireshark: SIGCOMP dissector crash in packet-sigcomp.c
  33. CVE-2018-7417wireshark: IPMI dissector crash in packet-ipmi-picmg.c
  34. CVE-2018-7409unixODBC: Buffer overflow in unicode_to_ansi_copy() can lead to crash or other unspecified impact
  35. CVE-2018-7337wireshark: DOCSIS dissector crash in packet-docsis.c by injecting a malformed packet
  36. CVE-2018-7336wireshark: FCP dissector crash in packet-fcp.c
  37. CVE-2018-7335wireshark: IEEE 802.11 dissector crash in airpdcap.c
  38. CVE-2018-7334wireshark: out of bounds access in UMTS MAC dissector in packet-umts_mac.c
  39. CVE-2018-7320wireshark: Heap-based Buffer Overflow in SIGCOMP dissector crash in packet-sigcomp.c
  40. CVE-2018-7273kernel: Kernel address information leak in drivers/block/floppy.c:show_floppy function potentially allowing KASLR bypass
  41. CVE-2018-7263libmad: Double-free in the mad_decoder_run() function
  42. CVE-2018-7262ceph: Unauthenticated malformed HTTP requests handled by rgw_civetweb.cc:RGW::init_env() can lead to denial of service
  43. CVE-2018-7254wavpack: Global buffer over-read in ParseCaffHeaderConfig function in cli/caff.c
  44. CVE-2018-7253wavpack: Heap-based buffer over-read in ParseDsdiffHeaderConfig function in cli/dsdiff.c
  45. CVE-2018-7226libvncserver: integer overflow in vcSetXCutTextProc in VNConsole.c
  46. CVE-2018-7225libvncserver: Improper input sanitization in rfbProcessClientNormalMessage in rfbserver.c
  47. CVE-2018-7212rubygem-sinatra: path traversal via backslash characters
  48. CVE-2018-7208binutils: Improper bounds check in coffgen.c:coff_pointerize_aux() allows for denial of service when parsing a crafted COFF file
  49. CVE-2018-7191kernel: denial of service via ioctl call in network tun handling
  50. CVE-2018-7187golang: arbitrary command execution via VCS path
CVE 2018 document archive — Page 23 | PulseLinux