PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 6

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 6 / 33

  1. CVE-2018-19215nasm: heap-based buffer over-read in do_directive in asm/preproc.c
  2. CVE-2018-19214nasm: heap-based buffer over-read in expand_mmac_params in asm/preproc.c
  3. CVE-2018-19213nasm: memory leaks in nasm_malloc in nasmlib/malloc.c
  4. CVE-2018-19211ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c
  5. CVE-2018-19210libtiff: NULL pointer dereference in TIFFWriteDirectorySec function in tif_dirwrite.c
  6. CVE-2018-19209nasm: NULL pointer dereference in find_label in asm/labels.c
  7. CVE-2018-19208libwpd: NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp
  8. CVE-2018-19200uriparser: NULL pointer dereference via uriResetUri* function
  9. CVE-2018-19199uriparser: Integer overflow via uriComposeQuery* or uriComposeQueryEx* function
  10. CVE-2018-19198uriparser: Out-of-bounds write via uriComposeQuery* or uriComposeQueryEx* function
  11. CVE-2018-19149poppler: NULL pointer dereference in _poppler_attachment_new
  12. CVE-2018-19139jasper: memory leak of data allocated in jpc_unk_getparms() after abort in jpc_dec_process_sot()
  13. CVE-2018-19134ghostscript: Type confusion in setpattern (700141)
  14. CVE-2018-19132squid: Memory leak in SNMP query rejection code
  15. CVE-2018-19131squid: Cross-Site Scripting when generating HTTPS response messages about TLS errors
  16. CVE-2018-19115keepalived: Heap-based buffer overflow when parsing HTTP status codes allows for denial of service or possibly arbitrary code execution
  17. CVE-2018-19108exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp
  18. CVE-2018-19107exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp
  19. CVE-2018-19060poppler: pdfdetach utility does not validate save paths
  20. CVE-2018-19059poppler: out-of-bounds read in EmbFile::save2 in FileSpec.cc
  21. CVE-2018-19058poppler: reachable abort in Object.h
  22. CVE-2018-19046keepalived: Insecure use of temporary files allows attackers read sensitive information from pre-existing files
  23. CVE-2018-19045keepalived: Insecure permissions when creating new temporary files allows for leaking of sensitive data
  24. CVE-2018-19044keepalived: Improper pathname validation allows for overwrite of arbitrary filenames via symlinks
  25. CVE-2018-18955kernel: Privilege escalation in map_write() in kernel/user_namespace.c
  26. CVE-2018-18954QEMU: ppc64: Out-of-bounds r/w stack access in pnv_lpc_do_eccb
  27. CVE-2018-18928icu: integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp
  28. CVE-2018-18915exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp
  29. CVE-2018-18897poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc
  30. CVE-2018-18873jasper: NULL pointer dereference in ras_putdatastd() in ras_enc.c
  31. CVE-2018-18849QEMU: lsi53c895a: OOB msg buffer access leads to DoS
  32. CVE-2018-18751gettext: double free in default_add_message in read-catalog.c
  33. CVE-2018-18710kernel: Information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c
  34. CVE-2018-18701binutils: infinite recursion in next_is_type_qual and cplus_demangle_type functions in cp-demangle.c
  35. CVE-2018-18700binutils: Recursive Stack Overflow within function d_name, d_encoding, and d_local_name in cp-demangle.c
  36. CVE-2018-18690kernel: filesystem corruption due to an unchecked error condition during an xfs attribute change
  37. CVE-2018-18661libtiff: tiff2bw tool failed memory allocation leads to crash
  38. CVE-2018-18625grafana: XSS vulnerability via a link on the "Dashboard > All Panels > General" screen
  39. CVE-2018-18624grafana: XSS vulnerability via a column style on the "Dashboard > Table Panel" screen
  40. CVE-2018-18623grafana: XSS vulnerability via the "Dashboard > Text Panel" screen
  41. CVE-2018-18607binutils: NULL pointer dereference in elf_link_input_bfd in elflink.c
  42. CVE-2018-18606binutils: NULL pointer dereference in _bfd_add_merge_section in merge_strings function in merge.c
  43. CVE-2018-18605binutils: heap-based buffer over-read in sec_merge_hash_lookup in merge.c
  44. CVE-2018-18586libmspack: Directory traversal in chmextract.c
  45. CVE-2018-18585libmspack: chmd_read_headers() fails to reject filenames containing NULL bytes
  46. CVE-2018-18584libmspack: Out-of-bounds write in mspack/cab.h
  47. CVE-2018-18559kernel: Use-after-free due to race condition in AF_PACKET implementation
  48. CVE-2018-18557libtiff: Out-of-bounds write in tif_jbig.c
  49. CVE-2018-18544ImageMagick: memory leak in WriteMSLImage of coders/msl.c
  50. CVE-2018-18521elfutils: Divide-by-zero in arlib_add_symbols function in arlib.c
CVE 2018 document archive — Page 6 | PulseLinux