Skip to contentRedhat Linux vulnerabilities
- [unknown] libssh, canonical ubuntu linux, debian linux +6 more +8 moreA vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4....CVE-2018-10933Public exploitFix availableEPSS 91.8%9.1 Critical
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreArtifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging...CVE-2018-18073Fix available6.3 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreArtifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism...CVE-2018-17961Public exploitFix available8.6 High
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moreAn invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl...CVE-2018-18310Fix available5.5 Medium
- redhat ceph storage, [unknown] ceph-iscsi-cli, redhat enterprise linux desktop +2 more +4 moreIt was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using...CVE-2018-14649Fix availableEPSS 12.0%9.8 Critical
- python requests, canonical ubuntu linux, opensuse leap +3 more +5 moreInsufficiently Protected Credentials in RequestsCVE-2018-18074Public exploitFix available7.5 High
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data...CVE-2018-17962Fix available7.5 High
- pyopenssl project pyopenssl, canonical ubuntu linux, redhat enterprise linux desktop +4 more +6 morePyopenssl Incorrect Memory ManagementCVE-2018-1000808Fix available5.9 Medium
- pyopenssl, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 morePyOpenSSL Use-After-Free vulnerabilityCVE-2018-1000807Fix available8.1 High
- paramiko, canonical ubuntu linux, debian linux +8 more +10 moreParamiko Authentication Bypass vulnerabilityCVE-2018-1000805Fix available8.8 High
- git-scm git, canonical ubuntu linux, debian linux +8 more +10 moreGit before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x...CVE-2018-17456Public exploitFix availableEPSS 97.4%9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreApache Tomcat Open Redirect vulnerabilityCVE-2018-11784Public exploitFix availableEPSS 97.7%4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel...CVE-2018-17972Fix available5.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple...CVE-2018-12387Fix available9.1 Critical
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an...CVE-2018-12386Public exploitFix availableEPSS 13.5%8.1 High
- fedoraproject 389 directory server, [unknown] 389-ds-base:, debian linux +1 more +3 moreA flaw was found in 389 Directory Server. A specially crafted search query could lead to...CVE-2018-14648Fix available7.5 High
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreCiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption...CVE-2018-17581Fix available6.5 Medium
- [unknown] sos-collector, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreIt was discovered that sos-collector does not properly set the default permissions of newly...CVE-2018-14650Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreWhen the Mozilla Updater opens a MAR format file which contains a very long item filename, an out...CVE-2018-12379Fix available7.8 High
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +25 more +27 moreAn integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An...CVE-2018-14634In KEVPublic exploitFix availableEPSS 14.7%7.8 High
- apache http server, canonical ubuntu linux, netapp storage automation store +6 more +8 moreIn Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can...CVE-2018-11763Fix availableEPSS 51.0%5.9 Medium
- python, canonical ubuntu linux, debian linux +5 more +7 morePython's elementtree C accelerator failed to initialise Expat's hash salt during initialization....CVE-2018-14647Fix availableEPSS 10.9%5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreA security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in...CVE-2018-14633Fix available7.0 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data...CVE-2018-12385Fix available7.0 High
- [unknown] haproxy, canonical ubuntu linux, redhat enterprise linux +2 more +4 moreA flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An...CVE-2018-14645Fix available7.5 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreIncorrect handling of clicks in the omnibox in Navigation in Google Chrome prior to 69.0.3497.92...CVE-2018-17459Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn improper update of the WebAssembly dispatch table in WebAssembly in Google Chrome prior to 69...CVE-2018-17458Fix available8.8 High
- apache spamassassin, canonical ubuntu linux, debian linux +4 more +6 moreApache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.CVE-2018-11781Fix available7.8 High
- apache spamassassin, canonical ubuntu linux, debian linux +4 more +6 moreA denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2....CVE-2017-15705Fix available5.3 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreArtifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be...CVE-2018-17183Fix available7.8 High
- fedora project 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux aus +5 more +7 moreA flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in...CVE-2018-14638Fix available7.5 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability....CVE-2018-15967Fix available7.5 High
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege"...CVE-2018-16802Fix available7.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81...CVE-2018-16088Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe default selected dialog button in CustomHandlers in Google Chrome prior to 69.0.3497.81...CVE-2018-16084Fix available6.1 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0...CVE-2018-16083Public exploitFix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote...CVE-2018-16082Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAllowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69...CVE-2018-16081Fix available7.4 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA race condition between permission prompts and navigations in Prompts in Google Chrome prior to...CVE-2018-16079Fix available5.3 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreUnsafe handling of credit card details in Autofill in Google Chrome prior to 69.0.3497.81 allowed...CVE-2018-16078Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreMissing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker...CVE-2018-16076Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to...CVE-2018-16071Public exploitFix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreMissing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to...CVE-2018-16068Fix available9.6 Critical
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to...CVE-2018-16067Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to...CVE-2018-16066Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0...CVE-2018-16065Fix available8.8 High
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +6 more +8 moreA vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16....CVE-2018-14624Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...CVE-2018-12383Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...CVE-2018-12378Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...CVE-2018-12377Fix available9.8 Critical
- Show moreLoading…