enterprise_linux_workstation Archives - CVE Vulnerability

CVE-2018-9568

Sun, 26 Feb 2023 06:51:51 +0000

In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References: Upstream kernel.

The post CVE-2018-9568 appeared first on CVE Vulnerability.

CVE-2018-8905

Sun, 26 Feb 2023 06:51:39 +0000

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps.

The post CVE-2018-8905 appeared first on CVE Vulnerability.

CVE-2018-8781

Sun, 26 Feb 2023 06:51:35 +0000

The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space.

The post CVE-2018-8781 appeared first on CVE Vulnerability.

CVE-2018-20662

Sun, 26 Feb 2023 06:48:40 +0000

In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.

The post CVE-2018-20662 appeared first on CVE Vulnerability.

CVE-2018-19107

Sun, 26 Feb 2023 06:48:02 +0000

In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service (heap-based buffer over-read) caused by an integer overflow via a crafted PSD image file.

The post CVE-2018-19107 appeared first on CVE Vulnerability.

CVE-2018-18897

Sun, 26 Feb 2023 06:47:58 +0000

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.

The post CVE-2018-18897 appeared first on CVE Vulnerability.

CVE-2018-18506

Sun, 26 Feb 2023 06:47:48 +0000

When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to be sent through the proxy to another server. This behavior is disallowed by default when a proxy is manually configured, but when enabled could allow for attacks on services and tools that bind to the localhost for networked behavior if they are accessed through browsing. This vulnerability affects Firefox < 65.

The post CVE-2018-18506 appeared first on CVE Vulnerability.

CVE-2018-14599

Sun, 26 Feb 2023 06:46:23 +0000

An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.

The post CVE-2018-14599 appeared first on CVE Vulnerability.

CVE-2018-10998

Sun, 26 Feb 2023 06:45:04 +0000

An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service (SIGABRT) by triggering an incorrect Safe::add call.

The post CVE-2018-10998 appeared first on CVE Vulnerability.

CVE-2018-10901

Sun, 26 Feb 2023 06:45:02 +0000

A flaw was found in Linux kernel’s KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host’s userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.

The post CVE-2018-10901 appeared first on CVE Vulnerability.