PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 3

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 3 / 33

  1. CVE-2018-20845openjpeg: division-by-zero in functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c
  2. CVE-2018-20843expat: large number of colons in input makes parser consume high amount of resources, leading to DoS
  3. CVE-2018-20839systemd: mishandling of the current keyboard mode check leading to passwords being disclosed in cleartext to attacker
  4. CVE-2018-20836kernel: race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c leads to use-after-free
  5. CVE-2018-20834nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link
  6. CVE-2018-20822libsass: DoS in Sass::Complex_Selector::perform in ast.hpp and Sass::Inspect::operator in inspect.cpp
  7. CVE-2018-20821libsass: parsing component allows attackers to cause denial-of-service
  8. CVE-2018-20815QEMU: device_tree: heap buffer overflow while loading device tree blob
  9. CVE-2018-20796glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c
  10. CVE-2018-20786libvterm: NULL pointer dereference in vterm_screen_set_callbacks
  11. CVE-2018-20784kernel: infinite loop in update_blocked_averages() in kernel/sched/fair.c leading to denial of service
  12. CVE-2018-20783php: Buffer over-read in PHAR reading functions
  13. CVE-2018-20781gnome-keyring: user's login credentials is kept in a session-child process resulting in exposed plaintext password
  14. CVE-2018-20750libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution (Incomplete fix for CVE-2018-15127)
  15. CVE-2018-20749libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution (Incomplete fix for CVE-2018-15127)
  16. CVE-2018-20748libvncserver: Multiple heap out-of-bound writes in VNC client code (Incomplete fix for CVE-2018-20019)
  17. CVE-2018-20721uriparser: Out-of-bounds read in uriParse*Ex*
  18. CVE-2018-20712libiberty: heap-based buffer over-read in d_expression_1
  19. CVE-2018-20685openssh: scp client improper directory name validation
  20. CVE-2018-20677bootstrap: XSS in the affix configuration target property
  21. CVE-2018-20676bootstrap: XSS in the tooltip data-viewport attribute
  22. CVE-2018-20673libiberty: Integer overflow in demangle_template() function
  23. CVE-2018-20671binutils: Integer overflow in load_specific_debug_section function
  24. CVE-2018-20669kernel: missing access_ok() checks in i915_gem_execbuffer2_ioctl() results in priviledge escalation
  25. CVE-2018-20662poppler: SIGABRT PDFDoc::setup class in PDFDoc.cc
  26. CVE-2018-20657libiberty: Memory leak in demangle_template function resulting in a denial of service
  27. CVE-2018-20651binutils: NULL pointer dereference in elf_link_add_object_symbols function resulting in a denial of service
  28. CVE-2018-20650poppler: reachable Object::dictLookup assertion in FileSpec class in FileSpec.cc
  29. CVE-2018-20623binutils: Use-after-free in the error function
  30. CVE-2018-20622jasper: memory leak in jpc_dec_decodepkt()
  31. CVE-2018-20615haproxy: Mishandling of priority flag in short HEADERS frame by HTTP/2 decoder allows for crash
  32. CVE-2018-20584jasper: DoS / hang when converting to jp2 format
  33. CVE-2018-20570jasper: heap-based buffer over-read in jp2_encode()
  34. CVE-2018-20551poppler: reachable Object::getString assertion in AnnotRichMedia class in Annot.c
  35. CVE-2018-20538nasm: Use-after-free at asm/preproc.c resulting in a denial of service
  36. CVE-2018-20535nasm: Use-after-free at asm/preproc.c resulting in a denial of service
  37. CVE-2018-20534libsolv: illegal address access in pool_whatprovides in src/pool.h
  38. CVE-2018-20533libsolv: NULL pointer dereference in function testcase_str2dep_complex
  39. CVE-2018-20532libsolv: NULL pointer dereference in function testcase_read
  40. CVE-2018-20511kernel: Memory address exposure in drivers/net/appletalk/ipddp.c:ipddp_ioctl() by users with CAP_NET_ADMIN
  41. CVE-2018-20510kernel: print_binder_transaction_ilocked() in drivers/android/binder.c leads to information disclosure
  42. CVE-2018-20509kernel: print_binder_ref_olocked function in drivers/android/binder.c leads to information disclosure
  43. CVE-2018-20506sqlite: Multiple flaws in sqlite which can be triggered via corrupted internal databases (Magellan)
  44. CVE-2018-20505sqlite: Multiple flaws in sqlite which can be triggered via corrupted internal databases (Magellan)
  45. CVE-2018-20483wget: Information exposure in set_file_metadata function in xattr.c
  46. CVE-2018-20482tar: Infinite read loop in sparse_dump_region function in sparse.c
  47. CVE-2018-20481poppler: NULL pointer dereference in the XRef::getEntry in XRef.cc
  48. CVE-2018-20467ImageMagick: infinite loop in coders/bmp.c
  49. CVE-2018-20449kernel: reading "callback=" lines in a debugfs file in drivers/dma/qcom/hidma_dbg.c results in information disclosure
  50. CVE-2018-20406python: Integer overflow in Modules/_pickle.c allows for memory exhaustion if serializing gigabytes of data
CVE 2018 document archive — Page 3 | PulseLinux