Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

Export CSV
CVE-2018-20784

kernel: infinite loop in update_blocked_averages() in kernel/sched/fair.c leading to denial of service

In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load.

CVSS 3.1 · 9.8 Critical EPSS 4.2% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Linux and 1 more
CVE-2018-20783

php: Buffer over-read in PHAR reading functions

In PHP before 5.6.39, 7.x before 7.0.33, 7.1.x before 7.1.25, and 7.2.x before 7.2.13, a buffer over-read in PHAR reading functions may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse a .phar file. This is related to phar_parse_pharfile in ext/phar/phar.c.

CVSS 3.0 · 7.5 High EPSS 5.7% KEV · Not listed
Vendors
Opensuse Php Redhat
Products
Leap Php Enterprise Linux and 1 more
CVE-2018-20699

docker: Memory exhaustion via large integer used with --cpuset-mems or --cpuset-cpus

Docker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory consumption) via a large integer in a --cpuset-mems or --cpuset-cpus value, related to daemon/daemon_unix.go, pkg/parsers/parsers.go, and pkg/sysinfo/sysinfo.go.

CVSS 3.0 · 4.9 Medium EPSS 2.2% KEV · Not listed
Vendors
Docker Redhat
Products
Engine Enterprise Linux Server Rhel Extras Other
CVE-2018-20673

libiberty: Integer overflow in demangle_template() function

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Gnu Redhat
Products
Binutils Enterprise Linux
CVE-2018-20662

poppler: SIGABRT PDFDoc::setup class in PDFDoc.cc

In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.

CVSS 3.1 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 8 more
CVE-2018-20657

libiberty: Memory leak in demangle_template function resulting in a denial of service

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.

CVSS 3.0 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
F5 Gnu Redhat
Products
Traffix Signaling Delivery Controller Binutils Enterprise Linux
CVE-2018-20650

poppler: reachable Object::dictLookup assertion in FileSpec class in FileSpec.cc

A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetach.

CVSS 3.1 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Canonical Debian Freedesktop and 1 more
Products
Ubuntu Linux Debian Linux Poppler and 7 more
CVE-2018-20615

haproxy: Mishandling of priority flag in short HEADERS frame by HTTP/2 decoder allows for crash

An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash. The processing of the PRIORITY flag in a HEADERS frame requires 5 extra bytes, and while these bytes are skipped, the total frame length was not re-checked to make sure they were present in the frame.

CVSS 3.0 · 7.5 High EPSS 4.5% KEV · Not listed
Vendors
Canonical Haproxy Opensuse and 1 more
Products
Ubuntu Linux Haproxy Leap and 4 more
CVE-2018-20551

poppler: reachable Object::getString assertion in AnnotRichMedia class in Annot.c

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Freedesktop Redhat
Products
Ubuntu Linux Poppler Enterprise Linux
CVE-2018-20534

libsolv: illegal address access in pool_whatprovides in src/pool.h

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application

CVSS 3.0 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Canonical Opensuse Redhat
Products
Ubuntu Linux Libsolv Enterprise Linux
CVE-2018-20533

libsolv: NULL pointer dereference in function testcase_str2dep_complex

There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Opensuse Redhat
Products
Ubuntu Linux Libsolv Enterprise Linux
CVE-2018-20483

wget: Information exposure in set_file_metadata function in xattr.c

set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Gnu Redhat
Products
Wget Enterprise Linux
CVE-2018-20481

poppler: NULL pointer dereference in the XRef::getEntry in XRef.cc

XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.

CVSS 3.0 · 6.5 Medium EPSS 3.3% KEV · Not listed
Vendors
Canonical Debian Freedesktop and 1 more
Products
Ubuntu Linux Debian Linux Poppler and 1 more
CVE-2018-20467

ImageMagick: infinite loop in coders/bmp.c

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 3.1% KEV · Not listed
Vendors
Canonical Debian Imagemagick and 2 more
Products
Ubuntu Linux Debian Linux Imagemagick and 2 more
CVE-2018-20346

sqlite: Multiple flaws in sqlite which can be triggered via corrupted internal databases (Magellan)

SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan.

CVSS 3.0 · 8.1 High EPSS 10.3% KEV · Not listed
Vendors
Debian Google Opensuse and 2 more
Products
Debian Linux Chrome Leap and 2 more
CVE-2018-20337

LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp

There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw 0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.

CVSS 3.0 · 8.8 High EPSS 2.1% KEV · Not listed
Vendors
Libraw Redhat
Products
Libraw Enterprise Linux
CVE-2018-20217

krb5: Reachable assertion in the KDC using S4U2Self requests

A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type (single-DES, triple-DES, or RC4), the attacker can crash the KDC by making an S4U2Self request.

CVSS 3.1 · 5.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Debian Mit Redhat
Products
Debian Linux Kerberos Ansible Tower and 1 more