Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,935

Export CSV
CVE-2018-8787

freerdp: Integer overflow leading to heap-based buffer overflow in gdi_Bitmap_Decompress() function

FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption and probably even a remote code execution.

CVSS 3.1 · 9.8 Critical EPSS 8.4% KEV · Not listed
Vendors
Canonical Debian Freerdp and 1 more
Products
Ubuntu Linux Debian Linux Freerdp and 7 more
CVE-2018-8786

freerdp: Integer truncation leading to heap-based buffer overflow in update_read_bitmap_update() function

FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory corruption and probably even a remote code execution.

CVSS 3.1 · 9.8 Critical EPSS 8.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 8 more
CVE-2018-8781

kernel: Integer overflow in drivers/gpu/drm/udl/udl_fb.c:udl_fb_mmap() can allow attackers to execute code in kernel space

The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 5 more
CVE-2018-8088

slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.

CVSS 3.1 · 9.8 Critical EPSS 14.7% KEV · Not listed
Vendors
Oracle Qos Redhat
Products
Goldengate Application Adapters Goldengate Stream Analytics Utilities Framework and 20 more
CVE-2018-7858

QEMU: cirrus: OOB access when updating VGA display

Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds access and QEMU process crash) by leveraging incorrect region calculation when updating VGA display.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Opensuse Qemu and 1 more
Products
Ubuntu Linux Leap Qemu and 8 more
CVE-2018-7750

python-paramiko: Authentication bypass in transport.py

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

CVSS 3.1 · 9.8 Critical EPSS 27.1% KEV · Not listed
Vendors
Debian Paramiko Redhat
Products
Debian Linux Paramiko Ansible Engine and 15 more
CVE-2018-7740

kernel: Denial of service in resv_map_release function in mm/hugetlb.c

The resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local users to cause a denial of service (BUG) via a crafted application that makes mmap system calls and has a large pgoff argument to the remap_file_pages system call.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 6 more
CVE-2018-7643

binutils: Integer overflow in the display_debug_ranges function resulting in crash

The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, as demonstrated by objdump.

CVSS 3.0 · 7.8 High EPSS 2.3% KEV · Not listed
Vendors
Gnu Redhat
Products
Binutils Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2018-7642

binutils: NULL pointer dereference in swap_std_reloc_in function in aoutx.h resulting in crash

The swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (aout_32_swap_std_reloc_out NULL pointer dereference and application crash) via a crafted ELF file, as demonstrated by objcopy.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Gnu Redhat
Products
Binutils Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2018-7569

binutils: integer underflow or overflow via an ELF file with a corrupt DWARF FORM block in libbfd library

dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer underflow or overflow, and application crash) via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Gnu Redhat
Products
Binutils Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2018-7568

binutils: integer overflow via an ELF file with corrupt dwarf1 debug information in libbfd library

The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer overflow and application crash) via an ELF file with corrupt dwarf1 debug information, as demonstrated by nm.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Gnu Redhat
Products
Binutils Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2018-7566

kernel: race condition in snd_seq_write() may lead to UAF or OOB-access

The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 3 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 13 more
CVE-2018-7550

QEMU: i386: multiboot OOB access while loading kernel image

The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value greater than mh_bss_end_addr, which triggers an out-of-bounds read or write memory access.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Qemu and 1 more
Products
Ubuntu Linux Debian Linux Qemu and 8 more
CVE-2018-7225

libvncserver: Improper input sanitization in rfbProcessClientNormalMessage in rfbserver.c

An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact (e.g., an integer overflow) via specially crafted VNC packets.

CVSS 3.0 · 9.8 Critical EPSS 6.1% KEV · Not listed
Vendors
Canonical Debian Libvncserver Project and 1 more
Products
Ubuntu Linux Debian Linux Libvncserver and 7 more
CVE-2018-7208

binutils: Improper bounds check in coffgen.c:coff_pointerize_aux() allows for denial of service when parsing a crafted COFF file

In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted file, as demonstrated by objcopy of a COFF object.

CVSS 3.0 · 7.8 High EPSS 2.2% KEV · Not listed
Vendors
Gnu Redhat
Products
Binutils Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2018-6927

kernel: Integer overflow in futex.c:futux_requeue can lead to denial of service or unspecified impact

The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact by triggering a negative wake or requeue value.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 9 more
CVE-2018-6871

libreoffice: Remote arbitrary file disclosure vulnerability via WEBSERVICE formula

LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.

CVSS 3.0 · 9.8 Critical EPSS 22.8% KEV · Not listed
Vendors
Canonical Debian Libreoffice and 1 more
Products
Ubuntu Linux Debian Linux Libreoffice and 7 more
CVE-2018-6798

perl: heap read overflow in regexec.c

An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.

CVSS 3.0 · 7.5 High EPSS 3.9% KEV · Not listed
Vendors
Canonical Debian Perl and 1 more
Products
Ubuntu Linux Debian Linux Perl and 3 more
CVE-2018-6797

perl: heap write overflow in regcomp.c

An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over the bytes written.

CVSS 3.0 · 9.8 Critical EPSS 6.5% KEV · Not listed
Vendors
Canonical Debian Perl and 1 more
Products
Ubuntu Linux Debian Linux Perl and 3 more