PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 31

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 31 / 33

  1. CVE-2018-2703mysql: sha256_password authentication DoS via hash with large rounds value
  2. CVE-2018-2696mysql: sha256_password authentication DoS via long password
  3. CVE-2018-2678OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)
  4. CVE-2018-2677OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)
  5. CVE-2018-2668mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)
  6. CVE-2018-2667mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)
  7. CVE-2018-2665mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)
  8. CVE-2018-2663OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)
  9. CVE-2018-2647mysql: Server: Replication unspecified vulnerability (CPU Jan 2018)
  10. CVE-2018-2646mysql: Server: DML unspecified vulnerability (CPU Jan 2018)
  11. CVE-2018-2645mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)
  12. CVE-2018-2641OpenJDK: GTK library loading use-after-free (AWT, 8185325)
  13. CVE-2018-2640mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)
  14. CVE-2018-2637OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)
  15. CVE-2018-2634OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)
  16. CVE-2018-2633OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)
  17. CVE-2018-2629OpenJDK: GSS context use-after-free (JGSS, 8186212)
  18. CVE-2018-2622mysql: Server: DDL unspecified vulnerability (CPU Jan 2018)
  19. CVE-2018-2618OpenJDK: insufficient strength of key agreement (JCE, 8185292)
  20. CVE-2018-2612mysql: InnoDB unspecified vulnerability (CPU Jan 2018)
  21. CVE-2018-2603OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)
  22. CVE-2018-2602OpenJDK: loading of classes from untrusted locations (I18n, 8182601)
  23. CVE-2018-2600mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)
  24. CVE-2018-2599OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)
  25. CVE-2018-2591mysql: Server : Partition unspecified vulnerability (CPU Jan 2018)
  26. CVE-2018-2590mysql: Server: Performance Schema unspecified vulnerability (CPU Jan 2018)
  27. CVE-2018-2588OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)
  28. CVE-2018-2586mysql: Server: DML unspecified vulnerability (CPU Jan 2018)
  29. CVE-2018-2583mysql: Stored Procedure unspecified vulnerability (CPU Jan 2018)
  30. CVE-2018-2582OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)
  31. CVE-2018-2579OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)
  32. CVE-2018-2576mysql: Server: DML unspecified vulnerability (CPU Jan 2018)
  33. CVE-2018-2573mysql: Server: GIS unspecified vulnerability (CPU Jan 2018)
  34. CVE-2018-2565mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2018)
  35. CVE-2018-2562mysql: Server: Partition unspecified vulnerability (CPU Jan 2018)
  36. CVE-2018-1890JDK: local privilege escalation via insecure RPATHs
  37. CVE-2018-1336tomcat: A bug in the UTF-8 decoder can lead to DoS
  38. CVE-2018-1333httpd: mod_http2: Too much time allocated to workers, possibly leading to DoS
  39. CVE-2018-1327struts: Denial-of-Service attack via crafted XML request using Struts REST plugin
  40. CVE-2018-1324apache-commons-compress: Infinite loop via extra field parser in ZipFile and ZipArchiveInputStream classes
  41. CVE-2018-1312httpd: Weak Digest auth nonce generation in mod_auth_digest
  42. CVE-2018-1311xerces-c: XML parser contains a use-after-free error triggered during the scanning of external DTDs
  43. CVE-2018-1305tomcat: Late application of security constraints can lead to resource exposure for unauthorised users
  44. CVE-2018-1304tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources
  45. CVE-2018-1303httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause DoS
  46. CVE-2018-1302httpd: Use-after-free on HTTP/2 stream shutdown
  47. CVE-2018-1301httpd: Out of bounds access after failure in reading the HTTP request
  48. CVE-2018-1283httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications
  49. CVE-2018-1275spring-framework: Address partial fix for CVE-2018-1270
  50. CVE-2018-1272spring-framework: Multipart content pollution
CVE 2018 document archive — Page 31 | PulseLinux