PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 5

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 5 / 33

  1. CVE-2018-19665Qemu: bt: Integer overflow in Bluetooth routines allows memory corruption
  2. CVE-2018-19664libjpeg-turbo: heap-based buffer over-read in the put_pixel_rows function in wrbmp.c
  3. CVE-2018-19662libsndfile: buffer over-read in the function i2alaw_array in alaw.c
  4. CVE-2018-19661libsndfile: buffer over-read in the function i2ulaw_array in ulaw.c
  5. CVE-2018-19655dcraw: Stack-based buffer overflow in the find_green() function
  6. CVE-2018-19628wireshark: ZigBee ZCL dissector crash
  7. CVE-2018-19627wireshark: IxVeriWave parser crash
  8. CVE-2018-19626wireshark: DCOM dissector crash resulting in information leak
  9. CVE-2018-19625wireshark: Heap-based buffer over-read in the dissection engine
  10. CVE-2018-19624wireshark: NULL pointer dereference resulting in a PVFS dissector crash
  11. CVE-2018-19623wireshark: Heap buffer overflow in packet-lbmpdm.c:dissect_segment_ofstable() allows denial of service or possibly arbitrary code execution
  12. CVE-2018-19622wireshark: Infinite loop in the MMSE dissector
  13. CVE-2018-19607exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp
  14. CVE-2018-19591glibc: file descriptor leak in if_nametoindex() in sysdeps/unix/sysv/linux/if_index.c
  15. CVE-2018-19568dcraw: A floating point exception in kodak_radc_load_raw resulting in a denial of service
  16. CVE-2018-19567dcraw: A floating point exception in parse_tiff_ifd resulting in a denial of service
  17. CVE-2018-19566dcraw: Heap buffer over-read in parse_tiff_ifd resulting in a denial of service or information leak
  18. CVE-2018-19565dcraw: Buffer over-read in crop_masked_pixels resulting in denial of service or information leak
  19. CVE-2018-19543jasper: heap-based buffer over-read in jp2_decode() in jp2_dec.c
  20. CVE-2018-19542jasper: invalid access in jp2_decode in libjasper/jp2/jp2_dec.c
  21. CVE-2018-19541jasper: heap-based buffer over-read of size 8 in jas_image_depalettize in libjasper/base/jas_image.c
  22. CVE-2018-19540jasper: heap-based buffer overflow of size 1 in jas_icctxtdesc_input in libjasper/base/jas_icc.c
  23. CVE-2018-19539jasper: access violation in jas_image_readcmpt() in jas_image.c
  24. CVE-2018-19535exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp
  25. CVE-2018-19519tcpdump: Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap
  26. CVE-2018-19518php: imap_open() allows running arbitrary shell commands via mailbox parameter
  27. CVE-2018-19517sysstat: Out of bounds read in remap_struct function in sa_common.c
  28. CVE-2018-19492gnuplot: buffer overflow in cairotrm_options function
  29. CVE-2018-19491gnuplot: buffer overflow with an arbitrary amount of data in the PS_options
  30. CVE-2018-19490gnuplot: heap-based buffer overflow in df_generate_ascii_array_entry
  31. CVE-2018-19489QEMU: 9pfs: crash due to race condition in renaming files
  32. CVE-2018-19486git: Improper handling of PATH allows for commands to be executed from the current directory
  33. CVE-2018-19478ghostscript: Attempting to open a carefully crafted PDF file results in long-running computation (699856)
  34. CVE-2018-19477ghostscript: access bypass in psi/zfjbig2.c (700168)
  35. CVE-2018-19476ghostscript: access bypass in psi/zicc.c (700169)
  36. CVE-2018-19475ghostscript: access bypass in psi/zdevice2.c (700153)
  37. CVE-2018-19432libsndfile: OOB read in sf_write_int in sndfile.c
  38. CVE-2018-19416sysstat: Out-of-bounds read in remap_struct function in sa_common.c
  39. CVE-2018-19409ghostscript: Improperly implemented security check in zsetdevice function in psi/zdevice.c
  40. CVE-2018-19407kernel: kvm: NULL pointer dereference in vcpu_scan_ioapic in arch/x86/kvm/x86.c
  41. CVE-2018-19406kernel: kvm: NULL pointer dereference in kvm_pv_send_ipi in arch/x86/kvm/lapic.c
  42. CVE-2018-19396php: Serializing or unserializing COM objects crashes
  43. CVE-2018-19364Qemu: 9pfs: Use-after-free due to race condition while updating fid path
  44. CVE-2018-19362jackson-databind: improper polymorphic deserialization in jboss-common-core class
  45. CVE-2018-19361jackson-databind: improper polymorphic deserialization in openjpa class
  46. CVE-2018-19360jackson-databind: improper polymorphic deserialization in axis2-transport-jms class
  47. CVE-2018-19358gnome-keyring: login credentials retrieval via a Secret Service API call
  48. CVE-2018-19218libsass: illegal address access at Sass::Parser::parse_css_variable_value_token
  49. CVE-2018-19217ncurses: Null pointer dereference at function _nc_name_match
  50. CVE-2018-19216nasm: use-after-free in detoken at asm/preproc.c
CVE 2018 document archive — Page 5 | PulseLinux