Export limit exceeded: 17086 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,086

Export CSV
CVE-2018-16542

ghostscript: .definemodifiedfont memory corruption if /typecheck is handled (699668)

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handling to crash the interpreter.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 5 more
CVE-2018-16541

ghostscript: Incorrect free logic in pagedevice replacement (699664)

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the interpreter.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 7 more
CVE-2018-16540

ghostscript: use-after-free in copydevice handling (699661)

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter could use a use-after-free in copydevice handling to crash the interpreter or possibly have unspecified other impact.

CVSS 3.0 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 8 more
CVE-2018-16539

ghostscript: incorrect access checking in temp file handling to disclose contents of files (699658)

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 7 more
CVE-2018-16511

ghostscript: missing type check in type checker (699659)

An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be used by remote attackers able to supply crafted PostScript to crash the interpreter or possibly have unspecified other impact.

CVSS 3.0 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 7 more
CVE-2018-16509

ghostscript: /invalidaccess bypass after failed restore (699654)

An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction.

CVSS 3.0 · 7.8 High EPSS 92.3% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Gpl Ghostscript Ubuntu Linux and 6 more
CVE-2018-16435

lcms2: Integer overflow in AllocateDataSet() in cmscgats.c leading to heap-based buffer overflow

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Debian Littlecms and 1 more
Products
Ubuntu Linux Debian Linux Little Cms Color Engine and 4 more
CVE-2018-16427

opensc: Out of bounds reads handling responses from smartcards

Various out of bounds reads when handling responses in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to potentially crash the opensc library using programs.

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Opensc Project Redhat
Products
Opensc Enterprise Linux
CVE-2018-16426

opensc: Infinite recusrion handling responses from IAS-ECC cards in card-iasecc.c:iasecc_select_file()

Endless recursion when handling responses from an IAS-ECC card in iasecc_select_file in libopensc/card-iasecc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to hang or crash the opensc library using programs.

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Opensc Project Redhat
Products
Opensc Enterprise Linux
CVE-2018-16423

opensc: Double free handling responses from smartcards in libopensc/sc.c:sc_file_set_sec_attr()

A double free when handling responses from a smartcard in sc_file_set_sec_attr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS 3.0 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Opensc Project Redhat
Products
Opensc Enterprise Linux
CVE-2018-16422

opensc: Buffer overflow handling responses from esteid cards in pkcs15-esteid.c:sc_pkcs15emu_esteid_init()

A single byte buffer overflow when handling responses from an esteid Card in sc_pkcs15emu_esteid_init in libopensc/pkcs15-esteid.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS 3.0 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Opensc Project Redhat
Products
Opensc Enterprise Linux
CVE-2018-16421

opensc: Buffer overflows handling responses from CAC Cards in card-cac.c:cac_get_serial_nr_from_CUID()

Several buffer overflows when handling responses from a CAC Card in cac_get_serial_nr_from_CUID in libopensc/card-cac.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS 3.0 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Opensc Project Redhat
Products
Opensc Enterprise Linux
CVE-2018-16420

opensc: Buffer overflows handling responses from ePass 2003 Cards in card-epass2003.c:decrypt_response()

Several buffer overflows when handling responses from an ePass 2003 Card in decrypt_response in libopensc/card-epass2003.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS 3.0 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Opensc Project Redhat
Products
Opensc Enterprise Linux
CVE-2018-16419

opensc: Buffer overflow handling responses from Cryptoflex cards in cryptoflex-tool.c:read_public_key()

Several buffer overflows when handling responses from a Cryptoflex card in read_public_key in tools/cryptoflex-tool.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS 3.0 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Opensc Project Redhat
Products
Opensc Enterprise Linux
CVE-2018-16418

opensc: Buffer overflow handling string concatention in tools/util.c:util_acl_to_str()

A buffer overflow when handling string concatenation in util_acl_to_str in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS 3.0 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Opensc Project Redhat
Products
Opensc Enterprise Linux
CVE-2018-16403

elfutils: Heap-based buffer over-read in libdw/dwarf_getabbrev.c and libwd/dwarf_hasattr.c causes crash

libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and dwarf_hasattr in dwarf_hasattr.c, leading to a heap-based buffer over-read and an application crash.

CVSS 3.0 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Elfutils Project Redhat
Products
Elfutils Ansible Tower Enterprise Linux
CVE-2018-16402

elfutils: Double-free due to double decompression of sections in crafted ELF causes crash

libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it tries to decompress twice.

CVSS 3.1 · 9.8 Critical EPSS 3.7% KEV · Not listed
Vendors
Canonical Debian Elfutils Project and 2 more
Products
Ubuntu Linux Debian Linux Elfutils and 7 more
CVE-2018-16396

ruby: Tainted flags are not propagated in Array#pack and String#unpack with some directives

An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats.

CVSS 3.0 · 8.1 High EPSS 8.0% KEV · Not listed
Vendors
Canonical Debian Redhat and 1 more
Products
Ubuntu Linux Debian Linux Enterprise Linux and 6 more