Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,351

Export CSV
CVE-2018-11683

liblouis: Stack-based buffer overflow in function parseChars in compileTranslationTable.c

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440.

CVSS 3.0 · 8.8 High EPSS 2.1% KEV · Not listed
Vendors
Canonical Liblouis Opensuse
Products
Ubuntu Linux Liblouis Leap
CVE-2018-11656

ImageMagick: memory leak in ReadDCMImage function in coders/dcm.c

In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denial of service via a crafted DCM image file.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Imagemagick Redhat
Products
Ubuntu Linux Imagemagick Enterprise Linux
CVE-2018-11655

ImageMagick: memory leak in GetImagePixelCache function in MagickCore/cache.c

In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function GetImagePixelCache in MagickCore/cache.c, which allows attackers to cause a denial of service via a crafted CALS image file.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2018-11625

ImageMagick: heap-based buffer over-read in SetGrayscaleImage in the quantize.c

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file.

CVSS 3.0 · 8.8 High EPSS 2.2% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2018-11508

kernel: Missing initialization in kernel/compat.c:compat_get_timex() allows local attacker to obtain possibly sensitive information via adjtimex

The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitive information from kernel memory via adjtimex.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Linux
Products
Ubuntu Linux Linux Kernel
CVE-2018-11506

kernel: Stack-based buffer overflow in drivers/scsi/sr_ioctl.c allows denial of service or other unspecified impact

The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact because sense buffers have different sizes at the CDROM layer and the SCSI layer, as demonstrated by a CDROMREADMODE2 ioctl call.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 1 more
CVE-2018-11490

giflib: heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c

The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain "Private->RunningCode - 2" array index is not checked. This will lead to a denial of service or possibly unspecified other impact.

CVSS 3.1 · 8.8 High EPSS 2.4% KEV · Not listed
Vendors
Canonical Debian Giflib Project and 1 more
Products
Ubuntu Linux Debian Linux Giflib and 1 more
CVE-2018-11469

haproxy: Information disclosure in check_request_for_cacheability function in proto_http.c

Incorrect caching of responses to requests including an Authorization header in HAProxy 1.8.0 through 1.8.9 (if cache enabled) allows attackers to achieve information disclosure via an unauthenticated remote request, related to the proto_http.c check_request_for_cacheability function.

CVSS 3.0 · 5.9 Medium EPSS 2.9% KEV · Not listed
Vendors
Canonical Haproxy Redhat
Products
Ubuntu Linux Haproxy Rhel Software Collections
CVE-2018-11412

kernel: out-of-bounds memcpy in fs/ext4/inline.c:ext4_read_inline_data() with crafted ext4 image

In the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a memcpy with an untrusted length value in certain circumstances involving a crafted filesystem that stores the system.data extended attribute value in a dedicated inode.

CVSS 3.0 · 5.9 Medium EPSS 15.6% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Linux
CVE-2018-11410

liblouis: invalid free in compileRule function in compileTranslationTable.c

An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS 3.0 · 9.8 Critical EPSS 4.8% KEV · Not listed
Vendors
Canonical Liblouis
Products
Ubuntu Linux Liblouis
CVE-2018-11237

glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper

An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Gnu Netapp and 2 more
Products
Ubuntu Linux Glibc Data Ontap Edge and 8 more
CVE-2018-11235

git: arbitrary code execution when recursively cloning a malicious repository

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because submodule "names" are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with "../" in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in which hooks are not obtained from a remote server.

CVSS 3.0 · 7.8 High EPSS 47.4% KEV · Not listed
Vendors
Canonical Debian Git-scm and 2 more
Products
Ubuntu Linux Debian Linux Git and 7 more
CVE-2018-11233

git: path sanity check in is_ntfs_dotgit() can read arbitrary memory

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory.

CVSS 3.0 · 7.5 High EPSS 4.3% KEV · Not listed
Vendors
Canonical Git-scm Redhat
Products
Ubuntu Linux Git Rhel Software Collections
CVE-2018-11214

libjpeg: Segmentation fault in get_text_rgb_row function in rdppm.c

An issue was discovered in libjpeg 9a. The get_text_rgb_row function in rdppm.c allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Canonical Debian Ijg and 1 more
Products
Ubuntu Linux Debian Linux Libjpeg and 1 more
CVE-2018-11213

libjpeg: Segmentation fault in get_text_gray_row function in rdppm.c

An issue was discovered in libjpeg 9a. The get_text_gray_row function in rdppm.c allows remote attackers to cause a denial of service (Segmentation fault) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Canonical Debian Ijg and 1 more
Products
Ubuntu Linux Debian Linux Libjpeg and 1 more
CVE-2018-10999

exiv2: heap-based buffer over-read in parseTXTChunk function

An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read.

CVSS 3.0 · 6.5 Medium EPSS 2.4% KEV · Not listed
Vendors
Canonical Debian Exiv2 and 1 more
Products
Ubuntu Linux Debian Linux Exiv2 and 1 more
CVE-2018-10998

exiv2: SIGABRT by triggering an incorrect Safe::add call

An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service (SIGABRT) by triggering an incorrect Safe::add call.

CVSS 3.1 · 6.5 Medium EPSS 2.4% KEV · Not listed
Vendors
Canonical Debian Exiv2 and 1 more
Products
Ubuntu Linux Debian Linux Exiv2 and 4 more