Redhat Enterprise Linux vulnerabilities, page 4
1,949 vulnerabilities
Known vulnerabilities in Redhat Enterprise Linux, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-14622canonicalubuntu_linux+13
EPSS score3.86%
A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an rpc-based application to crash by flooding it with new connections.CVE-2018-14462alpinetcpdump+9EPSS score3.98%
The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().CVE-2018-14648debian389-ds-base+11EPSS score6.24%
A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in the do_search() function. An unauthenticated attacker could use this flaw to provoke a denial of service.CVE-2018-14881alpinetcpdump+8EPSS score4.76%
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).CVE-2018-17456alpinegit+69EPSS score97.36%
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character.CVE-2018-25011debianlibwebp+3EPSS score2.51%
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().CVE-2018-25013debianlibwebp+3EPSS score2.05%
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().CVE-2018-25010debianlibwebp+3EPSS score2.23%
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().CVE-2018-25014debianlibwebp+3EPSS score2.23%
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().CVE-2018-25012debianlibwebp+3EPSS score2.05%
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().CVE-2018-25009debianlibwebp+3EPSS score2.10%
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().CVE-2018-18438chainguardqemu+31EPSS score0.44%
Qemu has integer overflows because IOReadHandler and its associated functions use a signed integer data type for a size value.CVE-2018-18584alpinecabextract+13EPSS score3.09%
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write.CVE-2018-18897canonicalubuntu_linux+11EPSS score1.96%
An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.CVE-2018-18314alpineperl+10EPSS score6.06%
Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations.CVE-2018-18312alpineperl+10EPSS score12.77%
Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.CVE-2018-18751alpinegettext+28EPSS score4.26%
An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.CVE-2018-18506canonicalubuntu_linux+17EPSS score2.20%
When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.CVE-2018-18311alpineperl+57EPSS score11.68%
Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.CVE-2018-18313alpineperl+11EPSS score9.52%
Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory.