PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 26

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 26 / 33

  1. CVE-2018-5750kernel: Kernel address information leak in drivers/acpi/sbshc.c:acpi_smbus_hc_add() function potentially allowing KASLR bypass
  2. CVE-2018-5748libvirt: Resource exhaustion via qemuMonitorIORead() method
  3. CVE-2018-5745bind: An assertion failure if a trust anchor rolls over to an unsupported key algorithm when using managed-keys
  4. CVE-2018-5744bind: A specially crafted packet can cause named to leak memory
  5. CVE-2018-5743bind: Limiting simultaneous TCP clients is ineffective
  6. CVE-2018-5742bind: Crash from assertion error when debug log level is 10 and log entries meet buffer boundary
  7. CVE-2018-5741bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies
  8. CVE-2018-5740bind: processing of certain records when "deny-answer-aliases" is in use may trigger an assert leading to a denial of service
  9. CVE-2018-5738bind: Improper handling of configuration allows all clients to perform recursive queries
  10. CVE-2018-5737bind: Interaction between NSEC aggresive negative caching and the serve-stale feature can cause a denial of service
  11. CVE-2018-5736bind: Multiple transfers of a zone in quick succession can cause an assertion failure in rbtdb.c
  12. CVE-2018-5735bind: Assertion failure in validator.c due to incorrect handling of DNSSEC validation
  13. CVE-2018-5734bind: A malformed request can trigger an assertion failure in badcache.c
  14. CVE-2018-5733dhcp: Reference count overflow in dhcpd allows denial of service
  15. CVE-2018-5732dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server
  16. CVE-2018-5730krb5: DN container check bypass by supplying special crafted data
  17. CVE-2018-5729krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data
  18. CVE-2018-5727openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c
  19. CVE-2018-5712php: Reflected XSS on PHAR 404 page
  20. CVE-2018-5711gd: Infinite loop in gdImageCreateFromGifCtx() in gd_gif_in.c
  21. CVE-2018-5710krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c
  22. CVE-2018-5709krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c
  23. CVE-2018-5703kernel: net/ipv6/tcp_ipv6.c: tcp_v6_syn_recv_sock function allows attackers to cause a denial of service
  24. CVE-2018-5683Qemu: Out-of-bounds read in vga_draw_text routine
  25. CVE-2018-5407openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)
  26. CVE-2018-5391kernel: IP fragments with random offsets allow a remote denial of service (FragmentSmack)
  27. CVE-2018-5390kernel: TCP segments with random offsets allow a remote denial of service (SegmentSmack)
  28. CVE-2018-5389IKEv1: IKEv1 protocol vulnerability in the authentication mode with pre-shared keys in the main mode of operation
  29. CVE-2018-5388strongswan: integer underflow leads to buffer overflow and denial of service in stroke_socket.c
  30. CVE-2018-5383kernel: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange
  31. CVE-2018-5381quagga: Infinite loop issue triggered by invalid OPEN message allows denial-of-service
  32. CVE-2018-5380quagga: bgpd can overrun internal BGP code-to-string conversion tables potentially allowing crash
  33. CVE-2018-5379quagga: Double free vulnerability in bgpd when processing certain forms of UPDATE message allowing to crash or potentially execute arbitrary code
  34. CVE-2018-5378quagga: bgpd does not properly bounds check the data sent with a NOTIFY allowing leak of sensitive data or crash
  35. CVE-2018-5360LibTIFF: heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c
  36. CVE-2018-5358ImageMagick: memory leak in coders/json.c:EncodeImageAttributes could cause crash
  37. CVE-2018-5357ImageMagick: memory leak in coders/dcm.c:ReadDCImage can cause denial of service
  38. CVE-2018-5345gcab: Extracting malformed .cab files causes stack smashing potentially leading to arbitrary code execution
  39. CVE-2018-5344kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service
  40. CVE-2018-5336wireshark: Missing recursion limit in epan/tvbparse.c can cause multiple dissectors to crash
  41. CVE-2018-5335wireshark: WCP dissector crash
  42. CVE-2018-5334wireshark: IxVeriWave file parser crash
  43. CVE-2018-5333kernel: Null pointer dereference in rds_atomic_free_op() allowing denial-of-service
  44. CVE-2018-5332kernel: rds_message_alloc_sgs() function doesn't validate value used during DMA page allocation causes heap out-of-bounds write
  45. CVE-2018-5269opencv: Assertion failure due to incorrect integer cast
  46. CVE-2018-5268opencv: Heap-based buffer overflow in cv::Jpeg2KDecoder::readComponent8u
  47. CVE-2018-5248ImageMagick: Heap-based buffer over-read in the ReadSIXELImage function in coders/sixel.c
  48. CVE-2018-5247ImageMagick: Memory Leak in ReadRLAImage in coders/rla.c
  49. CVE-2018-5246ImageMagick: Memory Leak in ReadPATTERNImage in coders/pattern.c
  50. CVE-2018-5208irssi: heap buffer overflow due to calculation error in the completion code
CVE 2018 document archive — Page 26 | PulseLinux