Export limit exceeded: 24818 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

Export CSV
CVE-2018-19841

wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads to DoS

The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (out-of-bounds read and application crash) via a crafted WavPack Lossless Audio file, as demonstrated by wvunpack.

CVSS 3.1 · 5.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2018-19840

wawpack: Infinite loop in WavpackPackInit function lead to DoS

The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resource exhaustion caused by an infinite loop) via a crafted wav audio file because WavpackSetConfiguration64 mishandles a sample rate of zero.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Canonical Fedoraproject Opensuse and 2 more
Products
Ubuntu Linux Fedora Leap and 2 more
CVE-2018-19824

kernel: Use-after-free in sound/usb/card.c:usb_audio_probe()

In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 1 more
CVE-2018-19788

polkit: Improper handling of user with uid > INT_MAX leading to authentication bypass

A flaw was found in PolicyKit (aka polkit) 0.115 that allows a user with a uid greater than INT_MAX to successfully execute any systemctl command.

CVSS 3.0 · 8.8 High EPSS 11.6% KEV · Not listed
Vendors
Canonical Debian Polkit Project and 1 more
Products
Ubuntu Linux Debian Linux Polkit and 2 more
CVE-2018-19607

exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp

Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Exiv2 Redhat
Products
Exiv2 Enterprise Linux
CVE-2018-19535

exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp

In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer over-read) via a crafted PNG file.

CVSS 3.1 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Canonical Debian Exiv2 and 1 more
Products
Ubuntu Linux Debian Linux Exiv2 and 4 more
CVE-2018-19519

tcpdump: Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap

In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.

CVSS 3.0 · 5.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Redhat Tcpdump
Products
Enterprise Linux Tcpdump
CVE-2018-19486

git: Improper handling of PATH allows for commands to be executed from the current directory

Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the run_command() API and run-command.c, because there was a dangerous change from execvp to execv during 2017.

CVSS 3.0 · 9.8 Critical EPSS 4.2% KEV · Not listed
Vendors
Canonical Git-scm Linux and 1 more
Products
Ubuntu Linux Git Linux Kernel and 1 more
CVE-2018-19475

ghostscript: access bypass in psi/zdevice2.c (700153)

psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because available stack space is not checked when the device remains the same.

CVSS 3.0 · 7.8 High EPSS 9.5% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 8 more
CVE-2018-19409

ghostscript: Improperly implemented security check in zsetdevice function in psi/zdevice.c

An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device is used.

CVSS 3.0 · 9.8 Critical EPSS 7.8% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 6 more
CVE-2018-19215

nasm: heap-based buffer over-read in do_directive in asm/preproc.c

Netwide Assembler (NASM) 2.14rc16 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for the special cases of the % and $ and ! characters.

CVSS 3.0 · 7.8 High EPSS 1.3% KEV · Not listed
Vendors
Nasm Redhat
Products
Netwide Assembler Enterprise Linux
CVE-2018-19214

nasm: heap-based buffer over-read in expand_mmac_params in asm/preproc.c

Netwide Assembler (NASM) 2.14rc15 has a heap-based buffer over-read in expand_mmac_params in asm/preproc.c for insufficient input.

CVSS 3.0 · 7.8 High EPSS 1.3% KEV · Not listed
Vendors
Nasm Redhat
Products
Netwide Assembler Enterprise Linux
CVE-2018-19208

libwpd: NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp

In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack. This is related to WPXTable.h.

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Libwpd Project Redhat Suse
Products
Libwpd Enterprise Linux Suse Linux Enterprise Server
CVE-2018-19199

uriparser: Integer overflow via uriComposeQuery* or uriComposeQueryEx* function

An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery* or uriComposeQueryEx* function because of an unchecked multiplication.

CVSS 3.0 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Debian Redhat Uriparser Project
Products
Debian Linux Enterprise Linux Uriparser
CVE-2018-19198

uriparser: Out-of-bounds write via uriComposeQuery* or uriComposeQueryEx* function

An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an out-of-bounds write via a uriComposeQuery* or uriComposeQueryEx* function because the '&' character is mishandled in certain contexts.

CVSS 3.0 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Debian Redhat Uriparser Project
Products
Debian Linux Enterprise Linux Uriparser