PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 8

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 8 / 33

  1. CVE-2018-18016ImageMagick: memory leak in WritePCXImage in coders/pcx.c
  2. CVE-2018-17985binutils: Stack consumption problem caused by the cplus_demangle_type
  3. CVE-2018-17983mercurial: Out-of-bounds read in cext/manifest.c
  4. CVE-2018-17977kernel: Mishandled interactions among XFRM Netlink messages, IPPROTO_AH packets, and IPPROTO_IP packets resulting in a denial of service
  5. CVE-2018-17972kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks
  6. CVE-2018-17967ImageMagick: memory leak in ReadBGRImage in coders/bgr.c.
  7. CVE-2018-17966ImageMagick: memory leak in WritePDBImage in coders/pdb.c
  8. CVE-2018-17965ImageMagick: memory leak in WriteSGIImage in coders/sgi.c
  9. CVE-2018-17963QEMU: net: ignore packets with large size
  10. CVE-2018-17962QEMU: pcnet: integer overflow leads to buffer overflow
  11. CVE-2018-17961ghostscript: Saved execution stacks can leak operator arrays (incomplete fix for CVE-2018-17183)
  12. CVE-2018-17958QEMU: rtl8139: integer overflow leads to buffer overflow
  13. CVE-2018-17953pam: pam_access.so doesn't properly handle ip addresses and subnets filtering
  14. CVE-2018-17942gnulib: heap-based buffer overflow in convert_to_decimal function in vasnprintf.c
  15. CVE-2018-17848golang-org-x-net-html: index out of range in (*insertionModeStack).pop in node.go causes runtime panic during html.Parse() call
  16. CVE-2018-17847golang-org-x-net-html: index out of range in (*nodeStack).pop in node.go causes runtime panic during html.Parse() call
  17. CVE-2018-17846golang-org-x-net-html: infinite loop during html.Parse() via inSelectIM and inSelectInTableIM
  18. CVE-2018-17828zziplib: ZZIPlib: Arbitrary file overwrite via directory traversal
  19. CVE-2018-17795libtiff: Heap-based buffer overflow in tiff2pdf.c:t2p_write_pdf()
  20. CVE-2018-17794binutils: NULL pointer dereference in libiberty/cplus-dem.c:work_stuff_copy_to_from() via crafted input
  21. CVE-2018-17581exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service
  22. CVE-2018-17540strongswan: heap buffer overflow using crafted certificates
  23. CVE-2018-17466firefox: Memory corruption in Angle
  24. CVE-2018-17456git: arbitrary code execution via .gitmodules
  25. CVE-2018-17419dns: Denial of Service (DoS)
  26. CVE-2018-17407texlive: Buffer overflow in t1_check_unusual_charstring function in writet1.c
  27. CVE-2018-17360binutils: heap-based buffer over-read in bfd_getl32 in libbfd.c
  28. CVE-2018-17359binutils: invalid memory access in bfd_zalloc in opncls.c
  29. CVE-2018-17358binutils: invalid memory access in _bfd_stab_section_find_nearest_line in syms.c
  30. CVE-2018-17336udisks: Format string vulnerability in udisks_log in udiskslogging.c
  31. CVE-2018-17294liblouis: Stack-based buffer over-read in matchCurrentInput function lou_translateString.c
  32. CVE-2018-17282exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash
  33. CVE-2018-17230exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp
  34. CVE-2018-17229exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp
  35. CVE-2018-17206openvswitch: Buffer over-read in lib/ofp-actions.c:decode_bundle()
  36. CVE-2018-17205openvswitch: Error during bundle commit in ofproto/ofproto.c:ofproto_rule_insert__() allows for crash
  37. CVE-2018-17204openvswitch: Mishandle of group mods in lib/ofp-util.c:parse_group_prop_ntr_selection_method() allows for assertion failure
  38. CVE-2018-17199httpd: mod_session_cookie does not respect expiry time
  39. CVE-2018-17189httpd: mod_http2: DoS via slow, unneeded request bodies
  40. CVE-2018-17183ghostscript: User-writable error exception table
  41. CVE-2018-17182kernel: Use-after-free in the vmacache_flush_all function resulting in a possible privilege escalation
  42. CVE-2018-17143golang-org-x-net-html: Runtime panic in html.Parse() via crafted html
  43. CVE-2018-17142golang-org-x-net-html: Runtime panic in html.Parse() via crafted html
  44. CVE-2018-17101libtiff: Two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c
  45. CVE-2018-17100libtiff: Integer overflow in multiply_ms in tools/ppm2tiff.c
  46. CVE-2018-17098soundtouch: Heap corruption in WavFileBase class in WavFile.cpp
  47. CVE-2018-17097soundtouch: Out-of-bounds heap write in WavOutFile::write()
  48. CVE-2018-17096soundtouch: Assertion failure in BPMDetect class in BPMDetect.cpp
  49. CVE-2018-17095audiofile: Heap-based buffer overflow in Expand3To4Module::run() when running sfconvert
  50. CVE-2018-17082php: Cross-site scripting (XSS) flaw in Apache2 component via body of 'Transfer-Encoding: chunked' request
CVE 2018 document archive — Page 8 | PulseLinux