PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 4

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 4 / 33

  1. CVE-2018-20364libraw: NULL pointer dereference in LibRaw::copy_bayer resulting in a denial of service
  2. CVE-2018-20363libraw: NULL pointer dereference in LibRaw::raw2image resulting in a denial of service
  3. CVE-2018-20346sqlite: Multiple flaws in sqlite which can be triggered via corrupted internal databases (Magellan)
  4. CVE-2018-20337LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp
  5. CVE-2018-20330libjpeg-turbo: heap-based buffer overflow in tjLoadImage
  6. CVE-2018-20225python-pip: when --extra-index-url option is used and package does not already exist in the public index, the installation of malicious package with arbitrary version number is possible.
  7. CVE-2018-20217krb5: Reachable assertion in the KDC using S4U2Self requests
  8. CVE-2018-20216QEMU: pvrdma: infinite loop in pvrdma_qp_send/recv
  9. CVE-2018-20191QEMU: pvrdma: uar_read leads to NULL dereference
  10. CVE-2018-20169kernel: usb: missing size check in the __usb_get_extra_descriptor() leading to DoS
  11. CVE-2018-20126QEMU: pvrdma: memory leakage when creating cq/qp
  12. CVE-2018-20125QEMU: pvrdma: null dereference or excessive memory allocation when creating QP/CQ
  13. CVE-2018-20124QEMU: rdma: OOB access when building scatter-gather array
  14. CVE-2018-20123QEMU: pvrdma: memory leakage in device hotplug
  15. CVE-2018-20103haproxy: Infinite recursion via crafted packet allows stack exhaustion and denial of service
  16. CVE-2018-20102haproxy: Out-of-bounds read in dns.c:dns_validate_dns_response() allows for memory disclosure
  17. CVE-2018-20099exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service
  18. CVE-2018-20098exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service
  19. CVE-2018-20097exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function
  20. CVE-2018-20096exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service
  21. CVE-2018-20060python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure
  22. CVE-2018-20030libexif: Input validation issue resulting in a denial of service
  23. CVE-2018-20024libvncserver: NULL pointer dereference in VNC client code allows for denial of service
  24. CVE-2018-20023libvncserver: Improper initialization in VNC Repeater client code allows for information disclosure
  25. CVE-2018-20022libvncserver: Improper initialization in VNC client code allows for information disclosure
  26. CVE-2018-20021libvncserver: Infinite loop in VNC client code allows for denial of service
  27. CVE-2018-20020libvncserver: Heap out-of-bound write inside structure in VNC client code allows for potential code execution
  28. CVE-2018-20019libvncserver: Multiple heap out-of-bound writes in VNC client code
  29. CVE-2018-20002binutils: memory leak in _bfd_generic_read_minisymbols function in syms.c
  30. CVE-2018-19985kernel: oob memory read in hso_probe in drivers/net/usb/hso.c
  31. CVE-2018-19935php: NULL pointer dereference in ext/imap/php_imap.c resulting in a denial of service
  32. CVE-2018-19932binutils: Integer overflow due to the IS_CONTAINED_BY_LMA macro resulting in a denial of service
  33. CVE-2018-19931binutils: Heap-based buffer overflow in bfd_elf32_swap_phdr_in function resulting in a denial of service
  34. CVE-2018-19876cairo: Invalid free in cairo_ft_apply_variations() resulting in a denial of service
  35. CVE-2018-19873qt5-qtbase: QBmpHandler segmentation fault on malformed BMP file
  36. CVE-2018-19872qt: Malformed PPM image causing division by zero and crash in qppmhandler.cpp
  37. CVE-2018-19871qt5-qtimageformats: QTgaFile CPU exhaustion
  38. CVE-2018-19870qt5-qtbase: QImage allocation failure in qgifhandler
  39. CVE-2018-19869qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service
  40. CVE-2018-19854kernel: Information Disclosure in crypto_report_one in crypto/crypto_user.c
  41. CVE-2018-19841wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads to DoS
  42. CVE-2018-19840wawpack: Infinite loop in WavpackPackInit function lead to DoS
  43. CVE-2018-19839libsass: Heap-based buffer over-read in the handle_error function resulting in a denial of service
  44. CVE-2018-19827libsass: Use-after-free in SharedPtr class resulting in a denial of service
  45. CVE-2018-19826libsass: Infinite loop in Sass::Inspect::operator() function resulting in a denial of service
  46. CVE-2018-19824kernel: Use-after-free in sound/usb/card.c:usb_audio_probe()
  47. CVE-2018-19788polkit: Improper handling of user with uid > INT_MAX leading to authentication bypass
  48. CVE-2018-19787python-lxml: XSS in lxml.html.clean module in lxml/html/clean.py
  49. CVE-2018-19758libsndfile: heap-based buffer over-read at wav.c in wav_write_header
  50. CVE-2018-19755nasm: out-of-bounds array access in is_mmacro in asm/preproc.c
CVE 2018 document archive — Page 4 | PulseLinux