PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 9

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 9 / 33

  1. CVE-2018-17075golang-org-x-net-html: Mishandle of "in frameset" causes runtime panic in html.Parse() via crafted html
  2. CVE-2018-17000libtiff: NULL pointer dereference in function _TIFFmemcmp at tif_unix.c
  3. CVE-2018-16999nasm: Invalid memory write (segmentation fault) in expand_smacro in preproc.c
  4. CVE-2018-16982opencc: out-of-bounds keyOffset and valueOffset values in BinaryDict::NewFromFile in BinaryDict.cpp
  5. CVE-2018-16981stbi: Heap-based buffer overflow in stb_image.h:stbi__out_gif_code() function
  6. CVE-2018-16890curl: NTLM type-2 heap out-of-bounds buffer read
  7. CVE-2018-16889ceph: debug logging for v4 auth does not sanitize encryption keys
  8. CVE-2018-16888systemd: kills privileged process if unprivileged PIDFile was tampered
  9. CVE-2018-16886etcd: Improper Authentication in auth/store.go:AuthInfoFromTLS() via gRPC-gateway
  10. CVE-2018-16885kernel: out-of-bound read in memcpy_fromiovecend()
  11. CVE-2018-16884kernel: nfs: use-after-free in svc_process_common()
  12. CVE-2018-16883sssd: Information leak in infopipe due to an improper uid restriction
  13. CVE-2018-16882Kernel: KVM: nVMX: use after free in posted interrupt processing
  14. CVE-2018-16881rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled
  15. CVE-2018-16880kernel: Out of bounds write in get_rx_bufs() function in drivers/vhost/net.c
  16. CVE-2018-16878pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS
  17. CVE-2018-16877pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc
  18. CVE-2018-16875golang: crypto/x509 allows for denial of service via crafted TLS client certificate
  19. CVE-2018-16874golang: "go get" vulnerable to directory traversal via malicious package
  20. CVE-2018-16873golang: "go get" command vulnerable to RCE via import of malicious package
  21. CVE-2018-16872QEMU: usb-mtp: path traversal by host filesystem manipulation in Media Transfer Protocol (MTP)
  22. CVE-2018-16871kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence
  23. CVE-2018-16869nettle: Leaky data conversion exposing a manager oracle
  24. CVE-2018-16868gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification
  25. CVE-2018-16867QEMU: dev-mtp: path traversal in usb_mtp_write_data of the Media Transfer Protocol (MTP)
  26. CVE-2018-16866systemd: out-of-bounds read when parsing a crafted syslog message
  27. CVE-2018-16865systemd: stack overflow when receiving many journald entries
  28. CVE-2018-16864systemd: stack overflow when calling syslog from a command with long cmdline
  29. CVE-2018-16863ghostscript: incomplete fix for CVE-2018-16509
  30. CVE-2018-16862kernel: cleancache: Infoleak of deleted files after reuse of old inodes
  31. CVE-2018-16860samba: S4U2Self with unkeyed checksum
  32. CVE-2018-16858libreoffice: Arbitrary python functions in arbitrary modules on the filesystem can be executed without warning
  33. CVE-2018-16857samba: Bad password count in AD DC not always effective
  34. CVE-2018-16853samba: S4U2Self crash with MIT KDC build
  35. CVE-2018-16852samba: NULL pointer de-reference in Samba AD DC DNS management server
  36. CVE-2018-16851samba: NULL pointer de-reference in Samba AD DC LDAP server
  37. CVE-2018-16850postgresql: SQL injection in pg_upgrade and pg_dump, via CREATE TRIGGER ... REFERENCING
  38. CVE-2018-16847QEMU: nvme: Out-of-bounds r/w buffer access in cmb operations
  39. CVE-2018-16846ceph: ListBucket max-keys has no defined limit in the RGW codebase
  40. CVE-2018-16845nginx: Denial of service and memory disclosure via mp4 module
  41. CVE-2018-16844nginx: Excessive CPU usage via flaw in HTTP/2 implementation
  42. CVE-2018-16843nginx: Excessive memory consumption via flaw in HTTP/2 implementation
  43. CVE-2018-16842curl: Heap-based buffer over-read in the curl tool warning formatting
  44. CVE-2018-16841samba: Double-free in Samba AD DC KDC with PKINIT
  45. CVE-2018-16840curl: Use-after-free when closing "easy" handle in Curl_close()
  46. CVE-2018-16839curl: Integer overflow leading to heap-based buffer overflow in Curl_sasl_create_plain_message()
  47. CVE-2018-16838sssd: improper implementation of GPOs due to too restrictive permissions
  48. CVE-2018-16802ghostscript: Incorrect "restoration of privilege" checking when running out of stack during exception handling
  49. CVE-2018-16750ImageMagick: Memory leak in the formatIPTCfromBuffer function in coders/meta.c
  50. CVE-2018-16749ImageMagick: reachable assertion in ReadOneJNGImage in coders/png.c
CVE 2018 document archive — Page 9 | PulseLinux