PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 25

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 25 / 33

  1. CVE-2018-6543binutils: integer overflow in load_specific_debug_section function in objdump.c
  2. CVE-2018-6542zziplib: bus error in zzip_disk_findfirst function in zzip/mmapped.c
  3. CVE-2018-6541zziplib: Bus error caused by loading of a misaligned address inzzip/zip.c
  4. CVE-2018-6540zziplib: bus error in zzip_disk_findfirst function in zzip/mmapped.c
  5. CVE-2018-6485glibc: Integer overflow in posix_memalign in memalign functions
  6. CVE-2018-6484zziplib: Loading of misaligned memory address in zip.c:__zzip_fetch_disk_trailer can lead to a denial of service via crafted zip file
  7. CVE-2018-6459strongswan: Insufficient Input Validation in RSASSA-PSS Signature Parser
  8. CVE-2018-6412kernel: Incorrect integer signedness in sbuslibc:sbusfb_ioctl_helper() allows for information leakage
  9. CVE-2018-6405ImageMagick: Memory leak in coders/dcm.c:ReadDCMImage can allow for denial of service
  10. CVE-2018-6381zziplib: Invalid memory access in the zzip_disk_fread function in zzip/mmapped.c
  11. CVE-2018-6323binutils: Integer overflow in elf_object_p function in elfcode.h
  12. CVE-2018-6307libvncserver: Use-after-free in file transfer extension server code allows for potential code execution
  13. CVE-2018-6198w3m: insecure temporary files creation when ~/.w3m is unwritable
  14. CVE-2018-6197w3m: Null pointer dereference in formUpdateBuffer in form.c
  15. CVE-2018-6196w3m: Infinite recursion in HTMLlineproc0
  16. CVE-2018-6188django: Information leakage in AuthenticationForm
  17. CVE-2018-6126Skia: Heap buffer overflow rasterizing paths in SVG
  18. CVE-2018-6003libtasn1: Stack exhaustion due to indefinite recursion during BER decoding
  19. CVE-2018-5996p7zip: memory corruption in RAR decompression
  20. CVE-2018-5995kernel: Information Exposure through dmesg data from a "pages/cpu" printk call
  21. CVE-2018-5968jackson-databind: unsafe deserialization due to incomplete blacklist (incomplete fix for CVE-2017-7525 and CVE-2017-17485)
  22. CVE-2018-5953kernel: Information Exposure through dmesg data from a "software IO TLB" printk call
  23. CVE-2018-5950mailman: Cross-site scripting (XSS) vulnerability in web UI
  24. CVE-2018-5873kernel: use-after-free in __ns_get_path()
  25. CVE-2018-5856kernel: Use-after-free in sound/soc/qcom/qdsp6/q6asm.c allows for kernel panic
  26. CVE-2018-5848kernel: buffer overflow in drivers/net/wireless/ath/wil6210/wmi.c:wmi_set_ie() may lead to memory corruption
  27. CVE-2018-5819LibRaw: DoS in parse_sinar_ia function in internal/dcraw_common.cpp
  28. CVE-2018-5818LibRaw: DoS in parse_rollei function in internal/dcraw_common.cpp
  29. CVE-2018-5817LibRaw: DoS in unpacked_load_raw function in internal/dcraw_common.cpp
  30. CVE-2018-5816LibRaw: Integer overflow in internal/dcraw_common.cpp:identify() allows for denial of service
  31. CVE-2018-5815LibRaw: Integer overflow in internal/dcraw_common.cpp:parse_qt() allows for denial of service
  32. CVE-2018-5814kernel: Race condition errors in USB over IP functionality can cause denial of service
  33. CVE-2018-5813libRaw: infinite loop in the parse_minolta function in dcraw/dcraw.c
  34. CVE-2018-5812libRaw: NULL pointer dereference in nikon_coolscan_load_raw in internal/dcraw_common.cpp
  35. CVE-2018-5811LibRaw: out-of-bounds read in nikon_coolscan_load_raw in internal/dcraw_common.cpp
  36. CVE-2018-5810libRaw: heap-based buffer overflow in rollei_load_raw in internal/dcraw_common.cpp
  37. CVE-2018-5809LibRaw: stack-based buffer overflow in LibRaw::parse_exif() and subsequently execute arbitrary code
  38. CVE-2018-5808LibRaw: stack-based buffer overflow in find_green() leads to arbitrary code execution
  39. CVE-2018-5807LibRaw: out-of-bounds read in samsung_load_raw in internal/dcraw_common.cpp
  40. CVE-2018-5806LibRaw: NULL pointer dereference in leaf_hdr_load_raw() function in internal/dcraw_common.cpp
  41. CVE-2018-5805LibRaw: Stack-based buffer overflow in quicktake_100_load_raw() function in internal/dcraw_common.cpp
  42. CVE-2018-5804LibRaw: type confusion error in identify() function in internal/dcraw_common.cpp
  43. CVE-2018-5803kernel: Missing length check of payload in net/sctp/sm_make_chunk.c:_sctp_make_chunk() function allows denial of service
  44. CVE-2018-5802LibRaw: Out-of-bounds read in kodak_radc_load_raw function internal/dcraw_common.cpp
  45. CVE-2018-5801LibRaw: NULL pointer dereference in LibRaw::unpack function src/libraw_cxx.cpp
  46. CVE-2018-5800LibRaw: Heap-based buffer overflow in LibRaw::kodak_ycbcr_load_raw function in internal/dcraw_common.cpp
  47. CVE-2018-5785openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c
  48. CVE-2018-5784libtiff: uncontrolled resource consumption in TIFFSetDirectory function in tif_dir.c
  49. CVE-2018-5772exiv2: Uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() can allow a remote attacker to cause a denial of service via a crafted tif file
  50. CVE-2018-5764rsync: sanitization bypass in parse_argument in options.c
CVE 2018 document archive — Page 25 | PulseLinux