Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,139

Export CSV
CVE-2018-1999043

jenkins: Ephemeral user record was created on some invalid authentication attempts

A denial of service vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in BasicAuthenticationFilter.java, BasicHeaderApiTokenAuthenticator.java that allows attackers to create ephemeral in-memory user records by attempting to log in using invalid credentials.

CVSS 3.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2018-18624

grafana: XSS vulnerability via a column style on the "Dashboard > Table Panel" screen

Grafana 5.3.1 has XSS via a column style on the "Dashboard > Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Grafana Redhat
Products
Grafana Enterprise Linux Openshift
CVE-2018-18559

kernel: Use-after-free due to race condition in AF_PACKET implementation

In the Linux kernel through 4.19, a use-after-free can occur due to a race condition between fanout_add from setsockopt and bind on an AF_PACKET socket. This issue exists because of the 15fe076edea787807a7cdc168df832544b58eba6 incomplete fix for a race condition. The code mishandles a certain multithreaded case involving a packet_do_bind unregister action followed by a packet_notifier register action. Later, packet_release operates on only one of the two applicable linked lists. The attacker can achieve Program Counter control.

CVSS 3.1 · 8.1 High EPSS 2.6% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Linux Desktop and 13 more
CVE-2018-18397

kernel: userfaultfd bypasses tmpfs file permissions

The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file (if the user has read-only access to that file, and that file contains holes), related to fs/userfaultfd.c and mm/userfaultfd.c.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Linux and 9 more
CVE-2018-18311

perl: Integer overflow leading to buffer overflow in Perl_my_setenv()

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

CVSS 3.0 · 9.8 Critical EPSS 11.7% KEV · Not listed
Vendors
Apple Canonical Debian and 5 more
Products
Mac Os X Ubuntu Linux Debian Linux and 20 more
CVE-2018-17419

dns: Denial of Service (DoS)

An issue was discovered in setTA in scan_rr.go in the Miek Gieben DNS library before 1.0.10 for Go. A dns.ParseZone() parsing error causes a segmentation violation, leading to denial of service.

CVSS 3.1 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Dns Library Project Redhat
Products
Dns Library Openshift
CVE-2018-17246

kibana: Arbitrary file inclusion vulnerability in the Console plugin

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

CVSS 3.0 · 9.8 Critical EPSS 84.3% KEV · Not listed
Vendors
Elastic Redhat
Products
Kibana Openshift Openshift Container Platform
CVE-2018-16540

ghostscript: use-after-free in copydevice handling (699661)

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter could use a use-after-free in copydevice handling to crash the interpreter or possibly have unspecified other impact.

CVSS 3.0 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 8 more
CVE-2018-14645

haproxy: Out-of-bounds read in HPACK decoder

A flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An out-of-bounds read access in hpack_valid_idx() resulted in a remote crash and denial of service.

CVSS 3.0 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Canonical Haproxy Redhat
Products
Ubuntu Linux Haproxy Enterprise Linux and 3 more
CVE-2018-14632

atomic-openshift: oc patch with json causes masterapi service crash

An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management.

CVSS 3.1 · 7.7 High EPSS 2.2% KEV · Not listed
Vendors
Redhat Starcounter-jack
Products
Openshift Openshift Container Platform Json-patch
CVE-2018-13988

poppler: out of bounds read in pdfunite

Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.

CVSS 3.0 · 6.5 Medium EPSS 3.1% KEV · Not listed
Vendors
Canonical Debian Freedesktop and 1 more
Products
Ubuntu Linux Debian Linux Poppler and 6 more
CVE-2018-13033

binutils: Uncontrolled Resource Consumption in execution of nm

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.

CVSS 3.0 · 5.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Gnu Redhat
Products
Binutils Enterprise Linux Enterprise Linux Desktop and 3 more
CVE-2018-12910

libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

CVSS 3.0 · 9.8 Critical EPSS 4.1% KEV · Not listed
Vendors
Canonical Debian Gnome and 2 more
Products
Ubuntu Linux Debian Linux Libsoup and 7 more
CVE-2018-12544

vertx: API Validation XML Schemas do not forbid file system access

In version from 3.5.Beta1 to 3.5.3 of Eclipse Vert.x, the OpenAPI XML type validator creates XML parsers without taking appropriate defense against XML attacks. This mechanism is exclusively when the developer uses the Eclipse Vert.x OpenAPI XML type validator to validate a provided schema.

CVSS 3.0 · 9.8 Critical EPSS 2.2% KEV · Not listed
Vendors
Eclipse Redhat
Products
Vert.x Openshift Application Runtimes
CVE-2018-12541

vertx: WebSocket HTTP upgrade implementation holds the entire http request in memory before the handshake

In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the handshake, holding the entire request body in memory. There should be a reasonnable limit (8192 bytes) above which the WebSocket gets an HTTP response with the 413 status code and the connection gets closed.

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Eclipse Redhat
Products
Vert.x Jboss Fuse Openshift Application Runtimes
CVE-2018-12540

vertx-web: Incomplete CSRF validation by CSRFHandler

In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allows replay attacks with previously issued tokens which are not expired yet.

CVSS 3.0 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Eclipse Redhat
Products
Vert.x Openshift Application Runtimes
CVE-2018-12537

vertx: Improper neutralization of CRLF sequences allows remote attackers to inject arbitrary HTTP response headers

In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or server response.

CVSS 3.0 · 5.3 Medium EPSS 2.5% KEV · Not listed
Vendors
Eclipse Redhat
Products
Vert.x Jboss Fuse Openshift Application Runtimes
CVE-2018-12207

hw: Machine Check Error on Page Size Change (IFU)

Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian F5 and 5 more
Products
Ubuntu Linux Debian Linux Big-ip Access Policy Manager and 1538 more
CVE-2018-10937

tectonic-console: XSS Vulnerability in K8s API proxy

A cross site scripting flaw exists in the tetonic-console component of Openshift Container Platform 3.11. An attacker with the ability to create pods can use this flaw to perform actions on the K8s API as the victim.

CVSS 3.0 · 4.6 Medium EPSS 1.1% KEV · Not listed
Vendors
Redhat
Products
Openshift Container Platform
CVE-2018-10912

keycloak: infinite loop in session replacement leading to denial of service

keycloak before version 4.0.0.final is vulnerable to a infinite loop in session replacement. A Keycloak cluster with multiple nodes could mishandle an expired session replacement and lead to an infinite loop. A malicious authenticated user could use this flaw to achieve Denial of Service on the server.

CVSS 3.1 · 4.9 Medium EPSS 1.3% KEV · Not listed
Vendors
Redhat
Products
Jboss Single Sign On Keycloak Openshift Application Runtimes and 1 more