Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,086

Export CSV
CVE-2018-14464

tcpdump: Buffer over-read in lmp_print_data_link_subobjs() function in print-lmp.c

The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 3 more
Products
Mac Os X Debian Linux Fedora and 3 more
CVE-2018-14368

wireshark: Bazaar dissector infinite loop (wnpa-sec-2018-40)

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long.

CVSS 3.0 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Debian Redhat Wireshark
Products
Debian Linux Enterprise Linux Wireshark
CVE-2018-14362

mutt: POP body caching path traversal vulnerability

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.

CVSS 3.1 · 9.8 Critical EPSS 3.7% KEV · Not listed
Vendors
Canonical Debian Mutt and 2 more
Products
Ubuntu Linux Debian Linux Mutt and 8 more
CVE-2018-14357

mutt: Remote Code Execution via backquote characters

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.

CVSS 3.1 · 9.8 Critical EPSS 5.0% KEV · Not listed
Vendors
Canonical Debian Mutt and 2 more
Products
Ubuntu Linux Debian Linux Mutt and 8 more
CVE-2018-14355

mutt: IMAP header caching path traversal vulnerability

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name.

CVSS 3.1 · 5.3 Medium EPSS 3.2% KEV · Not listed
Vendors
Canonical Debian Mutt and 2 more
Products
Ubuntu Linux Debian Linux Mutt and 2 more
CVE-2018-14354

mutt: Remote code injection vulnerability to an IMAP mailbox

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.

CVSS 3.1 · 9.8 Critical EPSS 6.2% KEV · Not listed
Vendors
Canonical Debian Mutt and 2 more
Products
Ubuntu Linux Debian Linux Mutt and 8 more
CVE-2018-14341

wireshark: DICOM dissector infinite loop (wnpa-sec-2018-39)

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by preventing an offset overflow.

CVSS 3.0 · 7.5 High EPSS 3.6% KEV · Not listed
Vendors
Debian Redhat Wireshark
Products
Debian Linux Enterprise Linux Wireshark
CVE-2018-14340

wireshark: Multiple dissectors could crash (wnpa-sec-2018-36)

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, dissectors that support zlib decompression could crash. This was addressed in epan/tvbuff_zlib.c by rejecting negative lengths to avoid a buffer over-read.

CVSS 3.0 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Debian Redhat Wireshark
Products
Debian Linux Enterprise Linux Wireshark
CVE-2018-14338

exiv2: buffer overflow in samples/geotag.cpp

samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow.

CVSS 3.0 · 8.1 High EPSS 1.4% KEV · Not listed
Vendors
Exiv2 Redhat
Products
Exiv2 Enterprise Linux
CVE-2018-14046

exiv2: heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.

CVSS 3.0 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
Exiv2 Redhat
Products
Exiv2 Enterprise Linux
CVE-2018-14036

accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.

CVSS 3.0 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Freedesktop Redhat
Products
Accountsservice Enterprise Linux