CVE 2018 document archive · 33
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,627 documents · Identifier year 2018 · 33 / 33
- CVE-2018-1065kernel: netfilter: xtables NULL pointer dereference in ip6_tables.c:ip6t_do_table() leading to a crash
- CVE-2018-1064libvirt: Incomplete fix for CVE-2018-5748 triggered by QEMU guest agent
- CVE-2018-1063policycoreutils: Relabelling of symbolic links in /tmp and /var/tmp change the context of their target instead
- CVE-2018-1061python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib
- CVE-2018-1060python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib
- CVE-2018-1059dpdk: Information exposure in unchecked guest physical to host virtual address translations
- CVE-2018-1058postgresql: Uncontrolled search path element in pg_dump and other client applications
- CVE-2018-1057samba: Authenticated users can change other users password in an AD DC configuration
- CVE-2018-1056advancecomp: Heap buffer overflow in zip.cc:zip_entry::load_cent() allows for denial of service or unspecified impact via crafted ZIP file
- CVE-2018-1054389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c
- CVE-2018-1053postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask
- CVE-2018-1052postgresql: Memory disclosure in table partitioning
- CVE-2018-1051resteasy: Unsafe unmarshalling in YamlProvider allows code execution
- CVE-2018-1050samba: NULL pointer dereference in printer server process
- CVE-2018-1049systemd: automount: access to automounted volumes can lock up
- CVE-2018-0739openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service
- CVE-2018-0737openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys
- CVE-2018-0735openssl: timing side channel attack in the ECDSA signature generation
- CVE-2018-0734openssl: timing side channel attack in the DSA signature algorithm
- CVE-2018-0733openssl: Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages in a reduced number of attempts
- CVE-2018-0732openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang
- CVE-2018-0618mailman: Cross-site scripting vulnerability allows malicious listowners to inject scripts into listinfo pages
- CVE-2018-0502zsh: Improper parsing of the shebang line with special chars
- CVE-2018-0500curl: Heap-based buffer overflow in Curl_smtp_escape_eob() when uploading data over SMTP
- CVE-2018-0499xapian-core: Cross-site-scripting in queryparser/termgenerator_internal.cc
- CVE-2018-0495ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries
- CVE-2018-0494wget: Cookie injection allows malicious website to write arbitrary cookie entries into cookie jar