CVE-2018-2603

OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

CVSS 3.1 · 5.3 Medium EPSS 6.9% KEV · Not listed

Vendors

Canonical Debian Hp and 3 more

Products

Ubuntu Linux Debian Linux Xp7 Command View and 17 more

CVE-2018-2602

OpenJDK: loading of classes from untrusted locations (I18n, 8182601)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded executes to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L).

CVSS 3.1 · 4.5 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Hp and 3 more

Products

Ubuntu Linux Debian Linux Xp7 Command View and 16 more

CVE-2018-2599

OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L).

CVSS 3.1 · 4.8 Medium EPSS 4.2% KEV · Not listed

Vendors

Canonical Debian Hp and 3 more

Products

Ubuntu Linux Debian Linux Xp7 Command View and 17 more

CVE-2018-2588

OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

CVSS 3.1 · 4.3 Medium EPSS 3.4% KEV · Not listed

Vendors

Canonical Debian Hp and 3 more

Products

Ubuntu Linux Debian Linux Xp7 Command View and 17 more

CVE-2018-2582

OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N).

CVSS 3.1 · 6.5 Medium EPSS 4.7% KEV · Not listed

Vendors

Canonical Debian Hp and 3 more

Products

Ubuntu Linux Debian Linux Xp7 Command View and 14 more

CVE-2018-2579

OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

CVSS 3.1 · 3.7 Low EPSS 4.1% KEV · Not listed

Vendors

Canonical Debian Hp and 3 more

Products

Ubuntu Linux Debian Linux Xp7 Command View and 17 more

CVE-2018-2562

mysql: Server: Partition unspecified vulnerability (CPU Jan 2018)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.19 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).

CVSS 3.1 · 7.1 High EPSS 3.4% KEV · Not listed

Vendors

Canonical Debian Mariadb and 3 more

Products

Ubuntu Linux Debian Linux Mariadb and 14 more

CVE-2018-25091

urllib3: urllib3 does not remove the authorization HTTP header when following a cross-origin redirect

urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the authorization header to be exposed to unintended hosts or transmitted in cleartext. NOTE: this issue exists because of an incomplete fix for CVE-2018-20060 (which was case-sensitive).

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Python Redhat

Products

Urllib3 Enterprise Linux

CVE-2018-25014

libwebp: use of uninitialized value in ReadSymbol()

A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().

CVSS 3.1 · 9.8 Critical EPSS 2.2% KEV · Not listed

Vendors

Redhat Webmproject

Products

Enterprise Linux Libwebp

CVE-2018-25013

libwebp: out-of-bounds read in ShiftBytes()

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().

CVSS 3.1 · 9.1 Critical EPSS 2.1% KEV · Not listed

Vendors

Redhat Webmproject

Products

Enterprise Linux Libwebp

CVE-2018-25012

libwebp: out-of-bounds read in WebPMuxCreateInternal()

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().

CVSS 3.1 · 9.1 Critical EPSS 2.1% KEV · Not listed

Vendors

Redhat Webmproject

Products

Enterprise Linux Libwebp

CVE-2018-25011

libwebp: heap-based buffer overflow in PutLE16()

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().

CVSS 3.1 · 9.8 Critical EPSS 2.5% KEV · Not listed

Vendors

Redhat Webmproject

Products

Enterprise Linux Rhel Eus Rhmt and 1 more

CVE-2018-25010

libwebp: out-of-bounds read in ApplyFilter()

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().

CVSS 3.1 · 9.1 Critical EPSS 2.2% KEV · Not listed

Vendors

Redhat Webmproject

Products

Enterprise Linux Libwebp

CVE-2018-25009

libwebp: out-of-bounds read in WebPMuxCreateInternal

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().

CVSS 3.1 · 9.1 Critical EPSS 2.1% KEV · Not listed

Vendors

Redhat Webmproject

Products

Enterprise Linux Libwebp

CVE-2018-21247

libvncserver: uninitialized memory contents are vulnerable to Information Leak

An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function.

CVSS 3.1 · 7.5 High EPSS 2.4% KEV · Not listed

Vendors

Canonical Debian Libvnc Project and 3 more

Products

Ubuntu Linux Debian Linux Libvncserver and 14 more

CVE-2018-21035

qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages therefore attacker can cause DOS

In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed

Vendors

Qt Redhat

Products

Qt Enterprise Linux

CVE-2018-21009

poppler: integer overflow in Parser::makeStream in Parser.cc

Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.

CVSS 3.0 · 8.8 High EPSS 1.9% KEV · Not listed

Vendors

Freedesktop Redhat

Products

Poppler Enterprise Linux

CVE-2018-20969

patch: do_ed_script in pch.c does not block strings beginning with a ! character

do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter.

CVSS 3.0 · 7.8 High EPSS 2.7% KEV · Not listed

Vendors

Gnu Redhat

Products

Patch Enterprise Linux Rhel Aus and 3 more

CVE-2018-20856

kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c

An issue was discovered in the Linux kernel before 4.18.7. In block/blk-core.c, there is an __blk_drain_queue() use-after-free because a certain error case is mishandled.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Mrg and 5 more

CVE-2018-20847

openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c

An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow.

CVSS 3.1 · 8.8 High EPSS 2.2% KEV · Not listed

Vendors

Debian Redhat Uclouvain

Products

Debian Linux Enterprise Linux Openjpeg