CVE Report for 6 packages

CVE Package Version Description CVSS (Score) Access Vector Status
CVE-2018-7999 graphite2 1.3.11 In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference vulnerability was found in Segment.cpp during a dumbRendering operation, which may allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .ttf file. 6.8 Remote (Network) Check
CVE-2017-14502 libarchive 3.3.2 read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_read_header. 5.0 Remote (Network) Check
CVE-2017-14166 libarchive 3.3.2 libarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer over-read and application crash) via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archive_read_support_format_xar.c. 4.3 Remote (Network) Check
CVE-2017-14501 libarchive 3.3.2 An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_iso9660_read_header. 4.3 Remote (Network) Check
CVE-2017-14503 libarchive 3.3.2 libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16. 4.3 Remote (Network) Check
CVE-2017-18269 glibc 2.27 An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution. 7.5 Remote (Network) Check
CVE-2018-11236 glibc 2.27 stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution. 6.8 Remote (Network) Check
CVE-2018-11237 glibc 2.27 An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper. 4.6 Local Check
CVE-2018-1000156 patch 2.7.6 GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution. This attack appear to be exploitable via a patch file processed via the patch utility. This is similar to FreeBSD's CVE-2015-1418 however although they share a common ancestry the code bases have diverged over time. 6.8 Remote (Network) Check
CVE-2018-6951 patch 2.7.6 An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a "mangled rename" issue. 5.0 Remote (Network) Check
CVE-2018-6952 patch 2.7.6 A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6. 5.0 Remote (Network) Check
CVE-2016-3189 bzip2 1.0.6 Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block. 4.3 Remote (Network) Check
CVE-2018-10360 file 5.33 The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF file. 4.3 Remote (Network) Check