CVE 2018 document archive · 24
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,627 documents · Identifier year 2018 · 24 / 33
- CVE-2018-7185ntp: Unauthenticated packet can reset authenticated interleaved association
- CVE-2018-7184ntp: Interleaved symmetric mode cannot recover from bad state
- CVE-2018-7183ntp: decodearr() can write beyond its buffer limit
- CVE-2018-7182ntp: buffer read overrun leads information leak in ctl_getitem()
- CVE-2018-7170ntp: Ephemeral association time spoofing additional protection
- CVE-2018-7169shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation
- CVE-2018-7167nodejs: Denial of Service by calling Buffer.fill() or Buffer.alloc() with specially crafted parameters
- CVE-2018-7166nodejs: Unintentional exposure of uninitialized memory
- CVE-2018-7164nodejs: uncontrolled memory consumption when using the net.Socket as a stream
- CVE-2018-7162nodejs: denial of service (DoS) by causing a node process which provides an http server supporting TLS server to crash
- CVE-2018-7161nodejs: denial of service (DoS) by causing a node server providing an http2 server to crash
- CVE-2018-7160nodejs: Inspector DNS rebinding vulnerability
- CVE-2018-7159nodejs: HTTP parser allowed for spaces inside Content-Length header values
- CVE-2018-7158nodejs: path module regular expression denial of service
- CVE-2018-7054irssi: use-after-free when a server is disconnected during netsplits
- CVE-2018-7053irssi: use-after-free when SASL messages are received in unexpected order
- CVE-2018-7052irssi: Denial of Service (DoS) due to a NULL pointer dereference
- CVE-2018-7051irssi: out-of-bounds access when printing theme strings with certain nick names
- CVE-2018-7050irssi: Null pointer dereference when an "empty" nick joins a channel
- CVE-2018-6969open-vm-tools: Out-of-bounds read in HGFS allows for information disclosure or potential privilege escalation
- CVE-2018-6954systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files
- CVE-2018-6952patch: Double free of memory in pch.c:another_hunk() causes a crash
- CVE-2018-6951patch: NULL pointer dereference in pch.c:intuit_diff_type() causes a crash
- CVE-2018-6942freetype: NULL pointer dereference in the Ins_GETVARIATION() function
- CVE-2018-6930ImageMagick: Stack-based buffer over-read in the ComputeResizeImage function
- CVE-2018-6927kernel: Integer overflow in futex.c:futux_requeue can lead to denial of service or unspecified impact
- CVE-2018-6914ruby: Unintentional file and directory creation with directory traversal in tempfile and tmpdir
- CVE-2018-6913perl: heap buffer overflow in pp_pack.c
- CVE-2018-6876ImageMagick: Stack-based buffer under-read in ole/oleprop.cpp
- CVE-2018-6872binutils: out of bounds read in elf_parse_notes function in elf.c file in libbfd library
- CVE-2018-6871libreoffice: Remote arbitrary file disclosure vulnerability via WEBSERVICE formula
- CVE-2018-6869zziplib: uncontrolled memory allocation in __zzip_parse_root_directory in zzip/zip.c
- CVE-2018-6836wireshark: free operation on an uninitialized memory address in wiretap/netmon.c
- CVE-2018-6829libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information
- CVE-2018-6798perl: heap read overflow in regexec.c
- CVE-2018-6797perl: heap write overflow in regcomp.c
- CVE-2018-6791kde-runtime: Arbitrary command execution in the removable device notifier
- CVE-2018-6790kde-workspace: Missing sanitization of notifications allows to leak client IP address via IMG element
- CVE-2018-6767wavpack: stack buffer overread via crafted wav file
- CVE-2018-6764libvirt: guest could inject executable code via libnss_dns.so loaded by libvirt_lxc before init
- CVE-2018-6759binutils: Unchecked strnlen in opncls.c:bfd_get_debug_link_info_1() can allow lead to denial of service
- CVE-2018-6644sblim-sfcb: NULL pointer dereference (DoS) vulnerability via POST request to /cimom
- CVE-2018-6616openjpeg2: Excessive iteration in openjp2/t1.c:opj_t1_encode_cblks can allow for denial of service via crafted BMP file
- CVE-2018-6594python-crypto: Weak ElGamal key parameters in PublicKey/ElGamal.py allow attackers to obtain sensitive information by reading ciphertext
- CVE-2018-6574golang: arbitrary code execution during "go get" via C compiler options
- CVE-2018-6560flatpak: sandbox escape in D-Bus filtering by a crafted authentication handshake
- CVE-2018-6555kernel: irda: use-after-free vulnerability in the hashbin list
- CVE-2018-6554kernel: irda: Memory leak caused by repeated binds of irda socket
- CVE-2018-6553cups: AppArmor cupsd Sandbox Bypass Due to Use of Hard Links
- CVE-2018-6551glibc: integer overflow in malloc functions