Redhat : Security Vulnerabilities (CVSS score between 7 and 7.99)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2018-1002105	388		2018-12-05	2018-12-25	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.
2	CVE-2018-19409	254		2018-11-21	2018-12-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device is used.
3	CVE-2018-19115	119	Overflow	2018-11-08	2019-01-08	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impact, because extract_status_code in lib/html.c has no validation of the status code and instead writes an unlimited amount of data to the heap.
4	CVE-2018-18751	415		2018-10-29	2018-12-07	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related to an invalid free in po_gram_parse in po-gram-gen.y, as demonstrated by lt-msgfmt.
5	CVE-2018-17456	20	Exec Code	2018-10-06	2019-01-08	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character.
6	CVE-2018-16879	417	DoS +Info	2019-01-03	2019-01-14	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging celery workers from RabbitMQ. This could lead in data leak of sensitive information such as passwords as well as denial of service attacks by deleting projects or inventory files.
7	CVE-2018-16850	89	Sql	2018-11-13	2018-12-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.
8	CVE-2018-15688	119	Overflow	2018-10-26	2019-01-15	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.
9	CVE-2018-14665	264		2018-10-25	2019-01-24	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges.
10	CVE-2018-14648	399	DoS	2018-09-28	2018-11-28	7.8	None	Remote	Low	Not required	None	None	Complete
A flaw was found in 389 Directory Server. A specially crafted search query could lead to excessive CPU consumption in the do_search() function. An unauthenticated attacker could use this flaw to provoke a denial of service.
11	CVE-2018-14634	190	Overflow	2018-09-25	2018-11-27	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
12	CVE-2018-14620	20		2018-09-10	2018-11-16	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially allow an attacker to serve malicious code to the image builder and install in the resultant container image. Version of openstack-rabbitmq-container and openstack-containers as shipped with Red Hat Openstack 12, 13, 14 are believed to be vulnerable.
13	CVE-2018-14362	119	Overflow	2018-07-17	2018-10-31	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.
14	CVE-2018-14357	77	Exec Code	2018-07-17	2018-10-31	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.
15	CVE-2018-14354	77	Exec Code	2018-07-17	2018-10-31	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.
16	CVE-2018-12828	264		2018-08-29	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability. Successful exploitation could lead to privilege escalation.
17	CVE-2018-12825	254	Bypass	2018-08-29	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Adobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability. Successful exploitation could lead to security mitigation bypass.
18	CVE-2018-12533	94	Exec Code	2018-06-18	2018-10-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, aka RF-14310.
19	CVE-2018-12532	94	Exec Code	2018-06-18	2018-08-23	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309.
20	CVE-2018-12378	416		2018-10-18	2018-12-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to be stored. This results in a potentially exploitable crash. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.
21	CVE-2018-12377	416		2018-10-18	2018-12-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exploitable crash. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.
22	CVE-2018-12376	119	Overflow Mem. Corr.	2018-10-18	2018-12-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.
23	CVE-2018-10931	749	+Priv	2018-08-09	2018-10-16	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler, upload files to arbitrary location in the context of the daemon.
24	CVE-2018-10908	399	DoS	2018-08-09	2018-10-10	7.1	None	Remote	Medium	Not required	None	None	Complete
It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources. By uploading a specially crafted image, an attacker could cause the qemu-img process to consume unbounded amounts of memory of CPU time, causing a denial of service condition that could potentially impact other users of the host.
25	CVE-2018-10905	264	Exec Code	2018-07-24	2018-09-27	7.2	None	Local	Low	Not required	Complete	Complete	Complete
CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an unprivileged local shell could use this flaw to execute commands as a high privileged user.
26	CVE-2018-10901	264		2018-07-26	2018-11-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to 64KB. With a corrupted GDT limit a host's userspace code has an ability to place malicious entries in the GDT, particularly to the per-cpu variables. An attacker can use this to escalate their privileges.
27	CVE-2018-10875	426	Exec Code	2018-07-13	2019-01-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing the attacker to execute arbitrary code.
28	CVE-2018-10870	20	Exec Code	2018-07-19	2018-09-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use this flaw to overwrite any file, potentially gaining remote code execution.
29	CVE-2018-10850	362	DoS	2018-06-13	2018-09-26	7.1	None	Remote	Medium	Not required	None	None	Complete
389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds-base handles persistent search, resulting in a crash if the server is under load. An anonymous attacker could use this flaw to trigger a denial of service.
30	CVE-2018-8897	264		2018-05-08	2019-01-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Linux kernel crash. The MOV to SS and POP SS instructions inhibit interrupts (including NMIs), data breakpoints, and single step trap exceptions until the instruction boundary following the next instruction (SDM Vol. 3A; section 6.8.3). (The inhibited data breakpoints are those on memory accessed by the MOV to SS or POP to SS instruction itself.) Note that debug exceptions are not inhibited by the interrupt enable (EFLAGS.IF) system flag (SDM Vol. 3A; section 2.3). If the instruction following the MOV to SS or POP to SS instruction is an instruction like SYSCALL, SYSENTER, INT 3, etc. that transfers control to the operating system at CPL < 3, the debug exception is delivered after the transfer to CPL < 3 is complete. OS kernels may not expect this order of events and may therefore experience unexpected behavior when it occurs.
31	CVE-2018-8088	502	Bypass	2018-03-20	2019-01-10	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data.
32	CVE-2018-6797	119	Overflow	2018-04-17	2018-10-31	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over the bytes written.
33	CVE-2018-5391	20	DoS	2018-09-06	2018-11-16	7.8	None	Remote	Low	Not required	None	None	Complete
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.
34	CVE-2018-5390	20	DoS	2018-08-06	2019-01-16	7.8	None	Remote	Low	Not required	None	None	Complete
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
35	CVE-2018-5188	119	Overflow Mem. Corr.	2018-10-18	2018-12-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
36	CVE-2018-5183	119	Overflow Mem. Corr.	2018-06-11	2018-11-25	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.
37	CVE-2018-5159	787	Overflow	2018-06-11	2018-11-25	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes. This could lead to a potentially exploitable crash triggerable by web content. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.
38	CVE-2018-5156	20		2018-10-18	2018-12-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
39	CVE-2018-5155	416		2018-06-11	2018-11-25	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.
40	CVE-2018-5154	416		2018-06-11	2018-11-25	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.
41	CVE-2018-5150	119	Overflow Mem. Corr.	2018-06-11	2018-11-25	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.
42	CVE-2018-5148	416		2018-06-11	2018-08-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.7.3 and Firefox < 59.0.2.
43	CVE-2018-5145	119	Overflow Mem. Corr.	2018-06-11	2018-11-25	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.
44	CVE-2018-5144	190	Overflow	2018-06-11	2018-11-25	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.
45	CVE-2018-5104	416		2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.
46	CVE-2018-5103	416		2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.
47	CVE-2018-5102	416		2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.
48	CVE-2018-5099	416		2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, resulting in a potentially exploitable crash when these references are used. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.
49	CVE-2018-5098	416		2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.
50	CVE-2018-5097	416		2018-06-11	2018-08-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the transformation. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.

Total number of vulnerabilities : 473 Page : 1 (This Page)2 3 4 5 6 7 8 9 10