Skip to contentRedhat Linux Workstation vulnerabilities
- libpng, canonical ubuntu linux, debian linux +29 more +31 morepng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...CVE-2019-7317Fix available5.3 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0...CVE-2019-1000020Fix available6.5 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2...CVE-2019-1000019Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +8 more +10 moreIn Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef:...CVE-2019-7310Fix available7.8 High
- mozilla firefox, canonical ubuntu linux, debian linux +9 more +11 moreWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...CVE-2018-18506Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...CVE-2018-18505Fix available10.0 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMozilla developers and community members reported memory safety bugs present in Firefox 64 and...CVE-2018-18501Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...CVE-2018-18500Public exploitFix availableEPSS 12.7%9.8 Critical
- red hat, inc. spice, canonical ubuntu linux, debian linux +6 more +8 moreSpice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by...CVE-2019-3813Fix available7.5 High
- debian linux, systemd, redhat enterprise linux desktop +5 more +7 moreA memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise...CVE-2019-3815Fix available3.3 Low
- elfutils project elfutils, canonical ubuntu linux, debian linux +8 more +10 moreAn issue was discovered in elfutils 0.175. A segmentation fault can occur in the function...CVE-2019-7150Fix available5.5 Medium
- rsyslog, debian linux, redhat enterprise linux desktop +10 more +12 moreA denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could...CVE-2018-16881Fix available5.3 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +8 more +10 moreIn Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system...CVE-2019-6116Public exploitFix availableEPSS 41.6%7.8 High
- oracle corporation java, netapp oncommand unified manager, oncommand workflow automation +9 more +11 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The...CVE-2019-24493.1 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2529Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +11 more +13 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....CVE-2019-2455Fix available6.5 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +16 more +18 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported...CVE-2019-2422Fix available3.1 Low
- etcd, fedoraproject fedora, redhat enterprise linux desktop +3 more +5 morego.etcd.io/etcd Authentication BypassCVE-2018-16886Fix available6.8 Medium
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreA heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux...CVE-2019-3460Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreA heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel...CVE-2019-3459Fix available6.5 Medium
- polkit project polkit, canonical ubuntu linux, debian linux +6 more +8 moreIn PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because...CVE-2019-6133Fix available6.7 Medium
- systemd, canonical ubuntu linux, debian linux +18 more +20 moreAn out of bounds read was discovered in systemd-journald in the way it parses log messages that...CVE-2018-16866Fix available4.3 Medium
- systemd, canonical ubuntu linux, debian linux +8 more +10 moreAn allocation of memory without limits, that could result in the stack clashing with another...CVE-2018-16865Fix available7.5 High
- systemd, canonical ubuntu linux, debian linux +8 more +10 moreAn allocation of memory without limits, that could result in the stack clashing with another...CVE-2018-16864Fix available7.4 High
- red hat ansible, canonical ubuntu linux, debian linux +6 more +8 moreAnsible sensitive information disclosureCVE-2018-16876Fix available3.1 Low
- freedesktop poppler, canonical ubuntu linux, debian linux +8 more +10 moreIn Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service ...CVE-2018-20662Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +7 more +9 moreA reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of...CVE-2018-20650Fix available6.5 Medium
- gnu binutils, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 morebinutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump,...CVE-2018-1000876Fix available7.8 High
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0...CVE-2018-1000878Fix available8.8 High
- libarchive, canonical ubuntu linux, debian linux +4 more +6 morelibarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0...CVE-2018-1000877Fix available8.8 High
- kaspersky libvnc, canonical ubuntu linux, debian linux +7 more +9 moreLibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write...CVE-2018-15127Fix availableEPSS 15.1%9.8 Critical
- grafana, netapp active iq performance analytics services, storagegrid webscale nas bridge +4 more +6 moreGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...CVE-2018-19039Fix available6.5 Medium
- exiv2, debian linux, fedoraproject fedora +3 more +5 moreThere is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in...CVE-2018-20097Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for...CVE-2018-18397Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potential vulnerability leading to an integer overflow can occur during buffer size...CVE-2018-18498Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA same-origin policy violation allowing the theft of cross-origin URL entries when using the...CVE-2018-18494Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...CVE-2018-18493Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur after deleting a selection element due to a weak...CVE-2018-18492Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox 63 and...CVE-2018-12405Fix available9.8 Critical
- libraw, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions...CVE-2018-5806Fix available6.5 Medium
- libraw, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA boundary error within the "quicktake_100_load_raw()" function (internal/dcraw_common.cpp) in...CVE-2018-5805Fix available8.8 High
- adobe flash player, flash player installer, redhat enterprise linux desktop +2 more +4 moreFlash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free...CVE-2018-15982In KEVPublic exploitFix availableEPSS 89.6%7.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of Reflect.construct in V8 in Google Chrome prior to 71.0.3578.80 allowed a...CVE-2018-18359Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed...CVE-2018-18358Fix available5.7 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578...CVE-2018-18357Fix available4.3 Medium
- google chrome, canonical ubuntu linux, debian linux +7 more +9 moreAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...CVE-2018-18356Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578...CVE-2018-18355Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient validate of external protocols in Shell Integration in Google Chrome on Windows...CVE-2018-18354Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreFailure to dismiss http auth dialogs on navigation in Network Authentication in Google Chrome on...CVE-2018-18353Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreService works could inappropriately gain access to cross origin audio in Media in Google Chrome...CVE-2018-18352Fix available6.5 Medium
- Show moreLoading…