gnome-boxes vulnerabilities (Red Hat)

23 vulnerabilities.

• gnome-boxes Red Hat FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because... CVE-2015-9382 Fix available 6.5 MediumSeptember 3, 2019
• gnome-boxes Red Hat FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. CVE-2015-9381 Fix available 8.8 HighSeptember 3, 2019
• gnome-boxes Red Hat libosinfo 1.5.0 allows local users to discover credentials by listing a process, because... CVE-2019-13313 Fix available 7.8 HighJuly 5, 2019
• gnome-boxes Red Hat An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles... CVE-2019-12449 Fix available 5.7 MediumMay 29, 2019
• gnome-boxes Red Hat An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race... CVE-2019-12448 Fix available 8.1 HighMay 29, 2019
• gnome-boxes Red Hat An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles... CVE-2019-12447 Fix available 7.3 HighMay 29, 2019
• gnome-boxes Red Hat A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration... CVE-2019-3825 Fix available 6.3 MediumFebruary 6, 2019
• gnome-boxes Red Hat An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw... CVE-2018-5819 Fix available 7.5 HighJanuary 18, 2019
• gnome-boxes Red Hat An error within the "parse_rollei()" function (internal/dcraw_common.cpp) within LibRaw versions... CVE-2018-5818 Fix available 7.5 HighJanuary 18, 2019
• gnome-boxes Red Hat There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in... CVE-2018-20337 Fix available 8.8 HighDecember 21, 2018
• gnome-boxes Red Hat Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory... CVE-2018-13988 Fix available 6.5 MediumJuly 25, 2018
• gnome-boxes Red Hat Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an... CVE-2018-14036 Fix available 6.5 MediumJuly 13, 2018
• gnome-boxes Red Hat The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have... CVE-2018-12910 Fix available 9.8 CriticalJune 29, 2018
• gnome-boxes Red Hat An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS before 11.3.1... CVE-2018-4204 Fix available 8.8 HighJune 8, 2018
• gnome-boxes Red Hat WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of... CVE-2018-11713 Fix available 6.5 MediumJune 4, 2018
• gnome-boxes Red Hat WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of... CVE-2018-11712 Fix available 7.5 HighJune 4, 2018
• gnome-boxes Red Hat The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote... CVE-2017-18267 Fix available 5.5 MediumMay 10, 2018
• gnome-boxes Red Hat An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before... CVE-2018-4200 Public exploitFix available EPSS 10.0% 8.8 HighMay 7, 2018
• gnome-boxes Red Hat There is a stack-based buffer over-read in calling GLib in the function... CVE-2018-10767 Fix available 6.5 MediumMay 6, 2018
• gnome-boxes Red Hat There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an... CVE-2018-10768 Fix available 6.5 MediumMay 6, 2018
• gnome-boxes Red Hat There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in... CVE-2018-10733 Fix available 6.5 MediumMay 4, 2018
• gnome-boxes Red Hat An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11... CVE-2018-4121 Public exploitFix available EPSS 13.1% 8.8 HighApril 3, 2018
• gnome-boxes Red Hat An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment... CVE-2017-2862 Fix available 8.8 HighSeptember 5, 2017