Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,219

Export CSV
CVE-2018-1000199

kernel: ptrace() incorrect error handling leads to corruption and DoS

The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 13 more
CVE-2018-1000140

librelp: Stack-based buffer overflow in relpTcpChkPeerName function in src/tcp.c

rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution. This attack appear to be exploitable a remote attacker that can connect to rsyslog and trigger a stack buffer overflow by sending a specially crafted x509 certificate.

CVSS 3.0 · 9.8 Critical EPSS 9.3% KEV · Not listed
Vendors
Canonical Debian Redhat and 1 more
Products
Ubuntu Linux Debian Linux Enterprise Linux and 11 more
CVE-2018-1000122

curl: RTSP RTP buffer over-read

A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage

CVSS 3.0 · 9.1 Critical EPSS 9.0% KEV · Not listed
Vendors
Canonical Debian Haxx and 2 more
Products
Ubuntu Linux Debian Linux Curl and 13 more
CVE-2018-1000121

curl: LDAP NULL pointer dereference

A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service

CVSS 3.0 · 7.5 High EPSS 9.2% KEV · Not listed
Vendors
Canonical Debian Haxx and 2 more
Products
Ubuntu Linux Debian Linux Curl and 13 more
CVE-2018-1000120

curl: FTP path trickery leads to NIL byte out of bounds write

A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.

CVSS 3.0 · 9.8 Critical EPSS 11.6% KEV · Not listed
Vendors
Canonical Debian Haxx and 2 more
Products
Ubuntu Linux Debian Linux Curl and 13 more
CVE-2018-1000026

kernel: Improper validation in bnx2x network card driver can allow for denial of service attacks via crafted packet

Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..

CVSS 3.1 · 7.7 High EPSS 4.1% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 5 more
CVE-2018-1000007

curl: HTTP authentication leak in redirects

libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request.

CVSS 3.1 · 9.8 Critical EPSS 9.9% KEV · Not listed
Vendors
Canonical Debian Fujitsu and 2 more
Products
Ubuntu Linux Debian Linux M10-1 and 24 more
CVE-2018-1000001

glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation

In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution.

CVSS 3.0 · 7.8 High EPSS 13.4% KEV · Not listed
Vendors
Canonical Gnu Redhat
Products
Ubuntu Linux Glibc Enterprise Linux and 7 more
CVE-2018-0494

wget: Cookie injection allows malicious website to write arbitrary cookie entries into cookie jar

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.

CVSS 3.0 · 6.5 Medium EPSS 16.5% KEV · Not listed
Vendors
Canonical Debian Gnu and 1 more
Products
Ubuntu Linux Debian Linux Wget and 4 more
CVE-2017-7846

Mozilla: JavaScript Execution via RSS in mailbox:// origin

It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. via "View -> Feed article -> Website" or in the standard format of "View -> Feed article -> default format". This vulnerability affects Thunderbird < 52.5.2.

CVSS 3.0 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Debian Mozilla Redhat
Products
Debian Linux Thunderbird Enterprise Linux and 5 more
CVE-2017-7829

Mozilla: From address with encoded null character is cut off in message header display

It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed if preceded by a null character in the display string. This vulnerability affects Thunderbird < 52.5.2.

CVSS 3.0 · 5.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Debian Mozilla and 1 more
Products
Ubuntu Linux Debian Linux Thunderbird and 6 more
CVE-2017-7787

Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)

Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

CVSS 3.0 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Debian Mozilla Redhat
Products
Debian Linux Firefox Firefox Esr and 7 more
CVE-2017-7786

Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)

A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

CVSS 3.0 · 9.8 Critical EPSS 4.1% KEV · Not listed
Vendors
Debian Mozilla Redhat
Products
Debian Linux Firefox Firefox Esr and 7 more
CVE-2017-7784

Mozilla: Use-after-free with image observers (MFSA 2017-19)

A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.

CVSS 3.0 · 9.8 Critical EPSS 3.5% KEV · Not listed
Vendors
Debian Mozilla Redhat
Products
Debian Linux Firefox Firefox Esr and 7 more
CVE-2017-7762

Mozilla: address bar username and password spoofing in reader mode

When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox < 54.

CVSS 3.0 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Mozilla Redhat
Products
Firefox Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2017-7562

krb5: Authentication bypass by improper validation of certificate EKU and SAN

An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arbitrary principals under rare and erroneous circumstances.

CVSS 3.1 · 6.5 Medium EPSS 3.2% KEV · Not listed
Vendors
Mit Redhat
Products
Kerberos 5 Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2017-7537

pki-core: mock CMC authentication plugin with hardcoded secret enabled by default

It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates.

CVSS 3.0 · 5.9 Medium EPSS 1.5% KEV · Not listed
Vendors
Dogtagpki Redhat
Products
Dogtagpki Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2017-7518

Kernel: KVM: debug exception via syscall emulation

A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exception(#DB) being raised in the guest stack. A user/process inside a guest could use this flaw to potentially escalate their privileges inside the guest. Linux guests are not affected by this.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 7 more