Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,086

Export CSV
CVE-2018-15607

ImageMagick: CPU Exhaustion via crafted input file

In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 5.1% KEV · Not listed
Vendors
Imagemagick Redhat
Products
Imagemagick Enterprise Linux
CVE-2018-15594

kernel: Mishandling of indirect calls weakens Spectre mitigation for paravirtual guests

arch/x86/kernel/paravirt.c in the Linux kernel before 4.18.1 mishandles certain indirect calls, which makes it easier for attackers to conduct Spectre-v2 attacks against paravirtual guests.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 2 more
CVE-2018-15587

evolution: specially crafted email leading to OpenPGP signatures being spoofed for arbitrary messages

GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.

CVSS 3.0 · 6.5 Medium EPSS 2.4% KEV · Not listed
Vendors
Debian Gnome Redhat
Products
Debian Linux Evolution Enterprise Linux
CVE-2018-15518

qt5-qtbase: Double free in QXmlStreamReader

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.

CVSS 3.0 · 8.8 High EPSS 2.5% KEV · Not listed
Vendors
Debian Opensuse Qt and 1 more
Products
Debian Linux Leap Qt and 1 more
CVE-2018-15209

libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c

ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, as demonstrated by tiff2pdf.

CVSS 3.0 · 8.8 High EPSS 3.9% KEV · Not listed
Vendors
Debian Libtiff Redhat
Products
Debian Linux Libtiff Enterprise Linux
CVE-2018-15127

libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution

LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code execution

CVSS 3.0 · 9.8 Critical EPSS 15.1% KEV · Not listed
Vendors
Canonical Debian Libvnc Project and 1 more
Products
Ubuntu Linux Debian Linux Libvncserver and 7 more
CVE-2018-14734

kernel: use-after-free in ucma_leave_multicast in drivers/infiniband/core/ucma.c

drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial of service (use-after-free).

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 2 more
CVE-2018-14679

libmspack: off-by-one error in the CHM PMGI/PMGL chunk number validity checks

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).

CVSS 3.0 · 6.5 Medium EPSS 3.3% KEV · Not listed
Vendors
Cabextract Cabextract Project Canonical and 2 more
Products
Libmspack Cabextract Ubuntu Linux and 6 more
CVE-2018-14662

ceph: authenticated user with read only permissions can steal dm-crypt / LUKS key

It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Opensuse and 1 more
Products
Ubuntu Linux Debian Linux Leap and 3 more
CVE-2018-14661

glusterfs: features/locks translator passes an user-controlled string to snprintf without a proper format string resulting in a denial of service

It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Debian Gluster Redhat
Products
Debian Linux Glusterfs Enterprise Linux and 4 more
CVE-2018-14660

glusterfs: Repeat use of "GF_META_LOCK_KEY" xattr allows for memory exhaustion

A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY xattr. A remote, authenticated attacker could use this flaw to create multiple locks for single inode by using setxattr repetitively resulting in memory exhaustion of glusterfs server node.

CVSS 3.1 · 6.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Debian Gluster Redhat
Products
Debian Linux Glusterfs Enterprise Linux and 4 more
CVE-2018-14659

glusterfs: Unlimited file creation via "GF_XATTR_IOSTATS_DUMP_KEY" xattr allows for denial of service

The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.

CVSS 3.1 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Debian Redhat
Products
Debian Linux Enterprise Linux Enterprise Linux Server and 4 more
CVE-2018-14654

glusterfs: "features/index" translator can create arbitrary, empty files

The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could exploit this via the 'GF_XATTROP_ENTRY_IN_KEY' xattrop to create arbitrary, empty files on the target server.

CVSS 3.1 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Debian Redhat
Products
Debian Linux Enterprise Linux Enterprise Linux Server and 5 more
CVE-2018-14653

glusterfs: Heap-based buffer overflow via "gf_getspec_req" RPC message

The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact.

CVSS 3.1 · 8.8 High EPSS 2.8% KEV · Not listed
Vendors
Debian Redhat
Products
Debian Linux Enterprise Linux Enterprise Linux Server and 3 more
CVE-2018-14652

glusterfs: Buffer overflow in "features/locks" translator allows for denial of service

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Debian Redhat
Products
Debian Linux Enterprise Linux Enterprise Linux Server and 4 more
CVE-2018-14651

glusterfs: glusterfs server exploitable via symlinks to relative paths

It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was incomplete. A remote, authenticated attacker could use one of these flaws to execute arbitrary code, create arbitrary files, or cause denial of service on glusterfs server nodes via symlinks to relative paths.

CVSS 3.0 · 8.8 High EPSS 3.2% KEV · Not listed
Vendors
Debian Gluster Redhat
Products
Debian Linux Glusterfs Enterprise Linux and 1 more