Skip to contentRedhat Linux vulnerabilities
- ruby-lang ruby, canonical ubuntu linux, debian linux +1 more +3 moreDirectory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before...CVE-2018-6914Fix availableEPSS 10.2%7.5 High
- apple icloud, itunes, safari +8 more +10 moreAn issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11...CVE-2018-4117Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreThe ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not...CVE-2018-1094Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write...CVE-2018-7566Fix available7.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +5 more +7 moreA use-after-free vulnerability can occur in the compositor during certain graphics operations...CVE-2018-5148Fix available9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...CVE-2018-1312Fix availableEPSS 15.8%9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreA specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,...CVE-2018-1301Fix availableEPSS 14.5%5.9 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to...CVE-2018-1283Fix available5.3 Medium
- zsh, canonical ubuntu linux, debian linux +3 more +5 moreZsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete...CVE-2018-1083Fix available7.8 High
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...CVE-2017-15715Public exploitFix availableEPSS 86.2%8.1 High
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...CVE-2017-15710Fix availableEPSS 17.5%7.5 High
- exiv2, debian linux, redhat enterprise linux desktop +2 more +4 moreIn Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2...CVE-2018-8976Fix available6.5 Medium
- rsyslog librelp, canonical ubuntu linux, debian linux +6 more +8 morersyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the...CVE-2018-1000140Public exploitFix available9.8 Critical
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka...CVE-2018-8945Fix available5.5 Medium
- libtiff, canonical ubuntu linux, debian linux +3 more +5 moreIn LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw...CVE-2018-8905Fix available8.8 High
- qos slf4j, oracle goldengate application adapters, goldengate stream analytics +10 more +12 moreImproper Access Control in SLF4JCVE-2018-8088Fix availableEPSS 14.7%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...CVE-2018-5146Public exploitFix availableEPSS 11.9%8.8 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for...CVE-2018-1068Fix available6.7 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory...CVE-2018-5145Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn integer overflow can occur during conversion of text to some Unicode character sets due to an...CVE-2018-5144Fix available7.3 High
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreUnder certain circumstances the "fetch()" API can return transient local copies of resources that...CVE-2018-5131Fix available5.9 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen packets with a mismatched RTP payload type are sent in WebRTC connections, in some...CVE-2018-5130Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...CVE-2018-5129Fix available8.6 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...CVE-2018-5127Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +5 more +7 moreMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...CVE-2018-5125Fix available8.8 High
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 moreA buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling...CVE-2018-1000122Fix available9.1 Critical
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 moreA NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code...CVE-2018-1000121Fix available7.5 High
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 morecurl FTP path confusion leads to NIL byte out of bounds writeCVE-2018-1000120Fix availableEPSS 11.6%9.8 Critical
- paramiko, debian linux, redhat ansible engine +8 more +10 moreParamiko not properly checking authentication before processing other requestsCVE-2018-7750Public exploitFix availableEPSS 27.1%9.8 Critical
- samba, canonical ubuntu linux, debian linux +3 more +5 moreAll versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the...CVE-2018-1050Fix available4.3 Medium
- qemu, canonical ubuntu linux, opensuse leap +6 more +8 moreQuick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows...CVE-2018-7858Fix available5.5 Medium
- libraw, canonical ubuntu linux, debian linux +3 more +5 moreAn error within the "kodak_radc_load_raw()" function (internal/dcraw_common.cpp) related to the ...CVE-2018-5802Fix available8.8 High
- libraw, canonical ubuntu linux, debian linux +3 more +5 moreAn error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to...CVE-2018-5801Fix available6.5 Medium
- libraw, canonical ubuntu linux, debian linux +3 more +5 moreAn off-by-one error within the "LibRaw::kodak_ycbcr_load_raw()" function (internal/dcraw_common...CVE-2018-5800Fix available6.5 Medium
- apache http server, netapp storage automation store, red hat, inc. mod cluster +1 more +3 moreApache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input...CVE-2016-86124.3 Medium
- zsh, canonical ubuntu linux, debian linux +3 more +5 morezsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the exec.c:hashcmd()...CVE-2018-1071Fix available5.5 Medium
- red hat, inc. 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux desktop +2 more +4 moreAn out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search...CVE-2018-1054Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe resv_map_release function in mm/hugetlb.c in the Linux kernel through 4.15.7 allows local...CVE-2018-7740Fix available5.5 Medium
- gdraheim zziplib, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function...CVE-2018-7727Fix available6.5 Medium
- gdraheim zziplib, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreAn issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the...CVE-2018-7726Fix available6.5 Medium
- gdraheim zziplib, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreAn issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered...CVE-2018-7725Fix available6.5 Medium
- debian linux, linux kernel, redhat enterprise linux desktop +3 more +5 moreIn the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an...CVE-2018-5803Public exploitFix available5.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to...CVE-2018-7643Fix available7.8 High
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd...CVE-2018-7642Fix available5.5 Medium
- selinux project policycoreutils, selinux, redhat enterprise linux +2 moreContext relabeling of filesystems is vulnerable to symbolic link attack, allowing a local,...CVE-2018-1063Fix available4.4 Medium
- debian linux, fedoraproject fedora, mit kerberos 5 +3 more +5 moreMIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP...CVE-2018-5730Fix available3.8 Low
- debian linux, fedoraproject fedora, mit kerberos 5 +3 more +5 moreMIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP...CVE-2018-5729Fix available4.7 Medium
- qemu, canonical ubuntu linux, debian linux +6 more +8 moreThe load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local...CVE-2018-7550Fix available8.8 High
- isc dhcp, canonical ubuntu linux, debian linux +5 more +7 moreA malicious client can overflow a reference counter in ISC dhcpdCVE-2018-5733Fix availableEPSS 20.2%5.9 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moredwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils...CVE-2018-7569Fix available5.5 Medium
- Show moreLoading…