Export limit exceeded: 17086 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,086

Export CSV
CVE-2018-16062

elfutils: Heap-based buffer over-read in libdw/dwarf_getaranges.c:dwarf_getaranges() via crafted file

dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Debian Elfutils Project and 2 more
Products
Ubuntu Linux Debian Linux Elfutils and 6 more
CVE-2018-16057

wireshark: Radiotap dissector crash

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in epan/dissectors/packet-ieee80211-radiotap-iter.c by validating iterator operations.

CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Debian Redhat Wireshark
Products
Debian Linux Enterprise Linux Wireshark
CVE-2018-15911

ghostscript: Uninitialized memory access in the aesdecode operator (699665)

In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter or potentially execute code.

CVSS 3.0 · 7.8 High EPSS 3.0% KEV · Not listed
Vendors
Artifex Canonical Debian and 2 more
Products
Ghostscript Gpl Ghostscript Ubuntu Linux and 9 more
CVE-2018-15910

ghostscript: LockDistillerParams type confusion (699656)

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the LockDistillerParams parameter to crash the interpreter or execute code.

CVSS 3.0 · 7.8 High EPSS 3.0% KEV · Not listed
Vendors
Artifex Canonical Debian and 2 more
Products
Ghostscript Gpl Ghostscript Ubuntu Linux and 7 more
CVE-2018-15909

ghostscript: shading_param incomplete type checking (699660)

In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code.

CVSS 3.0 · 7.8 High EPSS 3.0% KEV · Not listed
Vendors
Artifex Canonical Debian and 2 more
Products
Ghostscript Gpl Ghostscript Ubuntu Linux and 9 more
CVE-2018-15908

ghostscript: .tempfile file permission issues (699657)

In Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript files to bypass .tempfile restrictions and write files.

CVSS 3.0 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 6 more
CVE-2018-15864

libxkbcommon: NULL pointer dereference in resolve_keysym resulting in a crash

Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because a map access attempt can occur for a map that was never created.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Redhat Xkbcommon
Products
Ubuntu Linux Enterprise Linux Libxkbcommon and 1 more
CVE-2018-15863

libxkbcommon: NULL pointer dereference in ResolveStateAndPredicate resulting in a crash

Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Redhat Xkbcommon
Products
Ubuntu Linux Enterprise Linux Libxkbcommon and 1 more
CVE-2018-15862

libxkbcommon: NULL pointer dereference in LookupModMask resulting in a crash

Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with invalid virtual modifiers.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Redhat Xkbcommon
Products
Ubuntu Linux Enterprise Linux Libxkbcommon and 1 more
CVE-2018-15861

libxkbcommon: NULL pointer dereference in ExprResolveLhs resulting in a crash

Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Redhat Xkbcommon
Products
Ubuntu Linux Enterprise Linux Libxkbcommon and 1 more
CVE-2018-15859

libxkbcommon: NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash

Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Redhat Xkbcommon
Products
Ubuntu Linux Enterprise Linux Libxkbcommon and 1 more
CVE-2018-15857

libxkbcommon: Invalid free in ExprAppendMultiKeysymList resulting in a crash

An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local attackers to crash xkbcommon keymap parsers or possibly have unspecified other impact by supplying a crafted keymap file.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Redhat Xkbcommon
Products
Ubuntu Linux Enterprise Linux Libxkbcommon and 1 more
CVE-2018-15856

libxkbcommon: Infinite loop when reaching EOL unexpectedly resulting in a crash

An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Redhat Xkbcommon
Products
Ubuntu Linux Enterprise Linux Xkbcommon
CVE-2018-15855

libxkbcommon: NULL pointer dereference when handling xkb_geometry

Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because the XkbFile for an xkb_geometry section was mishandled.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Redhat Xkbcommon Project
Products
Ubuntu Linux Enterprise Linux Xkbcommon
CVE-2018-15854

libxkbcommon: NULL pointer dereference resulting in a crash

Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Redhat Xkbcommon Project
Products
Ubuntu Linux Enterprise Linux Xkbcommon
CVE-2018-15853

libxkbcommon: Endless recursion in xkbcomp/expr.c resulting in a crash

Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Redhat Xkbcommon
Products
Ubuntu Linux Enterprise Linux Libxkbcommon and 1 more
CVE-2018-15746

QEMU: seccomp: blacklist is not applied to all threads

qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main thread.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Enterprise Linux Openstack and 1 more