PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 7

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 7 / 33

  1. CVE-2018-18520elfutils: eu-size cannot handle recursive ar files
  2. CVE-2018-18511mozilla: Cross-origin theft of images with ImageBitmapRenderingContext
  3. CVE-2018-18510firefox: The about:crashcontent and about:crashparent pages can be triggered by web content allowing for a non-persistent DoS attack.
  4. CVE-2018-18509thunderbird: flaw in verification of S/MIME signature resulting in signature spoofing
  5. CVE-2018-18508nss: NULL pointer dereference in several CMS functions resulting in a denial of service
  6. CVE-2018-18506Mozilla: Proxy Auto-Configuration file can define localhost access to be proxied
  7. CVE-2018-18505Mozilla: Privilege escalation through IPC channel messages
  8. CVE-2018-18501Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5
  9. CVE-2018-18500Mozilla: Use-after-free parsing HTML5 stream
  10. CVE-2018-18499Mozilla: Same-origin policy violation using meta refresh and performance.getEntries to steal cross-origin URLs
  11. CVE-2018-18498Mozilla: Integer overflow when calculating buffer sizes for images
  12. CVE-2018-18497firefox: WebExtensions can load arbitrary URLs through pipe separators
  13. CVE-2018-18495firefox: WebExtension content scripts can be loaded in about: pages
  14. CVE-2018-18494Mozilla: Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs
  15. CVE-2018-18493Mozilla: Buffer overflow in accelerated 2D canvas with Skia
  16. CVE-2018-18492Mozilla: Use-after-free with select element
  17. CVE-2018-18484binutils: Stack exhaustion in cp-demangle.c allows for denial of service
  18. CVE-2018-18483binutils: Integer overflow in cplus-dem.c:get_count() allows for denial of service
  19. CVE-2018-18445kernel: Faulty computation of numberic bounds in the BPF verifier
  20. CVE-2018-18444OpenEXR: Out-of-bounds write in makeMultiView.cpp
  21. CVE-2018-18443OpenEXR: Memory leak in ThreadPool in in IlmBase/IlmThread/IlmThreadPool.cpp
  22. CVE-2018-18438Qemu: Integer overflow in ccid_card_vscard_read() allows memory corruption
  23. CVE-2018-18405jquery: crafted onerror attribute of an IMG element could result in XSS
  24. CVE-2018-18397kernel: userfaultfd bypasses tmpfs file permissions
  25. CVE-2018-18386kernel: Type confusion in drivers/tty/n_tty.c allows for a denial of service
  26. CVE-2018-18384unzip: Buffer overflow in list.c resulting in a denial of service
  27. CVE-2018-18356mozilla: Use after free in Skia
  28. CVE-2018-18335chromium-browser: Heap buffer overflow in Skia
  29. CVE-2018-18314perl: Heap-based buffer overflow in S_regatom()
  30. CVE-2018-18313perl: Heap-based buffer read overflow in S_grok_bslash_N()
  31. CVE-2018-18312perl: Heap-based buffer overflow in S_handle_regex_sets()
  32. CVE-2018-18311perl: Integer overflow leading to buffer overflow in Perl_my_setenv()
  33. CVE-2018-18310elfutils: invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl
  34. CVE-2018-18309binutils: invalid memory address dereference in read_reloc in reloc.c
  35. CVE-2018-18284ghostscript: 1Policy operator allows a sandbox protection bypass
  36. CVE-2018-18281kernel: TLB flush happens too late on mremap
  37. CVE-2018-18227wireshark: MS-WSP dissector crash
  38. CVE-2018-18226wireshark: Steam IHS Discovery dissector memory leak
  39. CVE-2018-18225wireshark: CoAP dissector crash
  40. CVE-2018-18088openjpeg2: NULL pointer dereference in the imagetopnm function of jp2/convert.c
  41. CVE-2018-18074python-requests: Redirect from HTTPS to HTTP does not remove Authorization header
  42. CVE-2018-18073ghostscript: Saved execution stacks can leak operator arrays
  43. CVE-2018-18066net-snmp: NULL pointer exception in snmp_oid_compare in snmplib/snmp_api.c resulting in a denial of service
  44. CVE-2018-18065net-snmp: NULL pointer exception in _set_key in agent/helpers/table_container.c resulting in a denial of service
  45. CVE-2018-18064cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document
  46. CVE-2018-18025ImageMagick: heap-based buffer over-read in the EncodeImage function of coders/pict.c
  47. CVE-2018-18024ImageMagick: infinite loop in the ReadBMPImage function of the coders/bmp.c
  48. CVE-2018-18023ImageMagick: heap-based buffer over-read in the SVGStripString function of coders/svg.c
  49. CVE-2018-18021kernel: Privilege escalation on arm64 via KVM hypervisor
  50. CVE-2018-18020qpdf: recursive calls can lead to a DoS in libqpdf/QPDFWriter.cc
CVE 2018 document archive — Page 7 | PulseLinux