fedoraproject

CVE-2018-1000879 MEDIUM

libarchive <3.3.0 - NULL Pointer Dereference

Dec 20, 2018

CVSS 6.5

EPSS 0.03

CVE-2018-1000878 HIGH

libarchive <v3.1.0 - Use After Free

Dec 20, 2018

CVSS 8.8

EPSS 0.04

CVE-2018-1000877 HIGH

libarchive 3.1.0-3.3.9 - Double Free in RAR Decoder

Dec 20, 2018

CVSS 8.8

EPSS 0.05

CVE-2018-1000852 MEDIUM

FreeRDP <2.0.0-rc3 - Memory Corruption

Dec 20, 2018

CVSS 6.5

EPSS 0.03

CVE-2018-16883 LOW

sssd 1.13.0-<2.0.0 - Unauthorized Information Exposure via Infopipe

Dec 19, 2018

CVSS 2.5

EPSS 0.00

CVE-2018-19790 MEDIUM

Symfony 2.7.0-2.7.49, 2.8.0-2.8.48, 3.0.0-3.4.19, 4.0.0-4.0.14, 4.1.0-4.1.8, 4.2.0 Open Redirect via Backslash

Dec 18, 2018

CVSS 6.1

EPSS 0.01

CVE-2018-20123 MEDIUM

QEMU < 3.1.0 - Memory Leak in pvrdma_realize

Dec 17, 2018

CVSS 5.5

EPSS 0.00

CVE-2018-16872 MEDIUM

qemu < 3.1.0 - Time-of-check Time-of-use Race Condition in MTP File Handling

Dec 13, 2018

CVSS 5.3

EPSS 0.01

CVE-2018-19489 MEDIUM

QEMU < 3.0.0 - Denial of Service via Race Condition in v9fs_wstat

Dec 13, 2018

CVSS 4.7

EPSS 0.00

CVE-2018-19364 MEDIUM

QEMU < 3.0.0 - Use-After-Free in 9pfs fid Path Handling

Dec 13, 2018

CVSS 5.5

EPSS 0.01

CVE-2018-16867 HIGH

qemu < 3.1.0 - Path Traversal and Arbitrary File Write via MTP Filename Sanitization

Dec 12, 2018

CVSS 7.8

EPSS 0.00

CVE-2018-20097 MEDIUM

Exiv2 0.27-RC3 - Denial of Service via Crafted TIFF Input

Dec 12, 2018

CVSS 6.5

EPSS 0.02

CVE-2018-20060 CRITICAL

urllib3 < 1.23 - Authorization Header Exposure via Cross-Origin Redirect

Dec 11, 2018

CVSS 9.8

EPSS 0.04

CVE-2018-20005 MEDIUM

Mini-XML 2.12 - Use-After-Free in mxmlWalkNext

Dec 10, 2018

CVSS 5.5

EPSS 0.01

CVE-2018-20004 HIGH

Mini-XML 2.12 - Stack-based Buffer Overflow in mxml_write_node via Real Order Type

Dec 10, 2018

CVSS 8.8

EPSS 0.02

CVE-2018-18311 CRITICAL

Perl < 5.26.3 and 5.28.x < 5.28.1 - Buffer Overflow via Crafted Regular Expression

Dec 07, 2018

CVSS 9.8

EPSS 0.12

CVE-2018-19591 HIGH

GNU C Library <2.29 - Info Disclosure

Dec 04, 2018

CVSS 7.5

EPSS 0.06

CVE-2018-19841 MEDIUM

WavPack < 5.1.0 - Denial of Service via Crafted WavPack Lossless Audio File

Dec 04, 2018

CVSS 5.5

EPSS 0.03

CVE-2018-19840 MEDIUM

WavPack < 5.1.0 - Denial of Service via Zero Sample Rate in WavpackSetConfiguration64

Dec 04, 2018

CVSS 5.5

EPSS 0.02

CVE-2018-19497 MEDIUM

The Sleuth Kit < 4.6.4 - Denial of Service via HFS Catalog Traversal

Nov 29, 2018

CVSS 6.5

EPSS 0.02

CVE-2018-8786 CRITICAL

FreeRDP <2.0.0-rc4 - Memory Corruption

Nov 29, 2018

CVSS 9.8

EPSS 0.08

CVE-2018-19296 HIGH

PHPMailer <5.2.27, <6.0.6 - Code Injection

Nov 16, 2018

CVSS 8.8

EPSS 0.02

CVE-2018-18409 MEDIUM

tcpflow 1.5.0 - Denial of Service via Stack-Based Buffer Over-Read in setbit()

Oct 17, 2018

CVSS 5.5

EPSS 0.01

CVE-2018-18408 CRITICAL

Tcpreplay 4.3.0 beta1 - Use-After-Free in post_args Function

Oct 17, 2018

CVSS 9.8

EPSS 0.02

CVE-2018-18407 MEDIUM

Tcpreplay 4.3.0 beta1 - Denial of Service via Heap-Based Buffer Over-Read in csum_replace4()

Oct 17, 2018

CVSS 5.5

EPSS 0.01