| The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a database and tools to fix them. |
|
 |
|
|
Computer vulnerabilities of Red Hat Enterprise Linux
Linux kernel: assertion error via fs/xfs/libxfs/xfs_inode_buf.c
Synthesis of the vulnerability
An attacker can force an assertion error via fs/xfs/libxfs/xfs_inode_buf.c of the Linux kernel, in order to trigger a denial of service.
Severity: 1/4.
Creation date: 04/07/2018.
Identifiers: 1103505, CERTFR-2018-AVI-456, CERTFR-2018-AVI-466, CERTFR-2018-AVI-480, CERTFR-2019-AVI-245, CVE-2018-13095, FEDORA-2018-50075276e8, openSUSE-SU-2018:2738-1, openSUSE-SU-2018:3071-1, RHSA-2019:1350-01, RHSA-2019:2029-01, RHSA-2019:2043-01, SUSE-SU-2018:2858-1, SUSE-SU-2018:2862-1, SUSE-SU-2018:2980-1, SUSE-SU-2018:3084-1, VIGILANCE-VUL-26616.
Full Vigil@nce bulletin... (Free trial)
Description of the vulnerability
An attacker can force an assertion error via fs/xfs/libxfs/xfs_inode_buf.c of the Linux kernel, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial) |
Linux kernel: NULL pointer dereference via xfs_da_shrink_inode
Synthesis of the vulnerability
An attacker can force a NULL pointer to be dereferenced via xfs_da_shrink_inode() of the Linux kernel, in order to trigger a denial of service.
Severity: 1/4.
Creation date: 04/07/2018.
Identifiers: 1103505, CERTFR-2018-AVI-408, CERTFR-2018-AVI-413, CERTFR-2018-AVI-456, CERTFR-2018-AVI-466, CERTFR-2018-AVI-480, CERTFR-2019-AVI-183, CVE-2018-13094, DLA-1529-1, FEDORA-2018-50075276e8, openSUSE-SU-2018:2738-1, openSUSE-SU-2018:3071-1, RHSA-2019:0831-01, RHSA-2019:2029-01, RHSA-2019:2043-01, SUSE-SU-2018:2858-1, SUSE-SU-2018:2862-1, SUSE-SU-2018:2980-1, SUSE-SU-2018:3084-1, USN-3752-1, USN-3752-2, USN-3752-3, USN-3753-1, USN-3753-2, USN-3754-1, VIGILANCE-VUL-26615.
Full Vigil@nce bulletin... (Free trial)
Description of the vulnerability
An attacker can force a NULL pointer to be dereferenced via xfs_da_shrink_inode() of the Linux kernel, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial) |
Linux kernel: NULL pointer dereference via fs/xfs/xfs_icache.c
Synthesis of the vulnerability
An attacker can force a NULL pointer to be dereferenced via fs/xfs/xfs_icache.c of the Linux kernel, in order to trigger a denial of service.
Severity: 1/4.
Creation date: 04/07/2018.
Identifiers: 1103505, CERTFR-2018-AVI-456, CERTFR-2018-AVI-460, CERTFR-2018-AVI-466, CERTFR-2018-AVI-480, CERTFR-2019-AVI-188, CERTFR-2019-AVI-391, CERTFR-2019-AVI-419, CVE-2018-13093, DLA-1529-1, FEDORA-2018-50075276e8, openSUSE-SU-2018:2738-1, openSUSE-SU-2018:3071-1, RHSA-2019:2029-01, RHSA-2019:2043-01, SUSE-SU-2018:2858-1, SUSE-SU-2018:2862-1, SUSE-SU-2018:2908-1, SUSE-SU-2018:2908-2, SUSE-SU-2018:2980-1, SUSE-SU-2018:3083-1, SUSE-SU-2018:3084-1, USN-4094-1, USN-4118-1, VIGILANCE-VUL-26614.
Full Vigil@nce bulletin... (Free trial)
Description of the vulnerability
An attacker can force a NULL pointer to be dereferenced via fs/xfs/xfs_icache.c of the Linux kernel, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial) |
Libsoup: denial of service via Cookie Requests
Synthesis of the vulnerability
An attacker can generate a fatal error via Cookie Requests of Libsoup, in order to trigger a denial of service.
Severity: 2/4.
Creation date: 04/07/2018.
Identifiers: CVE-2018-12910, DLA-1416-1, DSA-4241-1, FEDORA-2018-c3838931e1, FEDORA-2018-fb2afee474, openSUSE-SU-2018:2296-1, openSUSE-SU-2019:1310-1, RHSA-2018:3140-01, SUSE-SU-2018:2204-1, SUSE-SU-2018:2204-2, USN-3701-1, VIGILANCE-VUL-26611.
Full Vigil@nce bulletin... (Free trial)
Description of the vulnerability
An attacker can generate a fatal error via Cookie Requests of Libsoup, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial) |
Linux kernel: integer overflow via alarm_timer_nsleep
Synthesis of the vulnerability
An attacker can generate an integer overflow via alarm_timer_nsleep() of the Linux kernel, in order to trigger a denial of service, and possibly to run code.
Severity: 2/4.
Creation date: 03/07/2018.
Identifiers: 1103505, CERTFR-2018-AVI-358, CERTFR-2018-AVI-365, CERTFR-2018-AVI-392, CERTFR-2018-AVI-426, CERTFR-2018-AVI-557, CERTFR-2019-AVI-183, CERTFR-2019-AVI-391, CERTFR-2019-AVI-419, CVE-2018-13053, DLA-1715-1, DLA-1731-1, DLA-1731-2, FEDORA-2018-50075276e8, openSUSE-SU-2018:2118-1, openSUSE-SU-2018:2119-1, RHSA-2019:0831-01, RHSA-2019:2029-01, RHSA-2019:2043-01, SSA:2019-030-01, SSB-439005, SUSE-SU-2018:2051-1, SUSE-SU-2018:2150-1, SUSE-SU-2018:2332-1, SUSE-SU-2018:2344-1, SUSE-SU-2018:2362-1, SUSE-SU-2018:2366-1, SUSE-SU-2018:2384-1, SUSE-SU-2018:2637-1, USN-3821-1, USN-3821-2, USN-4094-1, USN-4118-1, VIGILANCE-VUL-26605.
Full Vigil@nce bulletin... (Free trial)
Description of the vulnerability
An attacker can generate an integer overflow via alarm_timer_nsleep() of the Linux kernel, in order to trigger a denial of service, and possibly to run code.
Full Vigil@nce bulletin... (Free trial) |
Linux kernel: information disclosure via fd_locked_ioctl
Synthesis of the vulnerability
An attacker can bypass access restrictions to data via fd_locked_ioctl() of the Linux kernel, in order to obtain sensitive information.
Severity: 1/4.
Creation date: 03/07/2018.
Identifiers: 1103505, CERTFR-2018-AVI-321, CVE-2018-7755, DLA-1529-1, DLA-1531-1, DSA-4308-1, RHSA-2019:2029-01, RHSA-2019:2043-01, SSA:2019-030-01, USN-3695-1, USN-3695-2, USN-3696-1, USN-3696-2, USN-3697-1, USN-3697-2, USN-3698-1, USN-3698-2, USN-3718-1, USN-3718-2, VIGILANCE-VUL-26600.
Full Vigil@nce bulletin... (Free trial)
Description of the vulnerability
An attacker can bypass access restrictions to data via fd_locked_ioctl() of the Linux kernel, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial) |
RubyGems Sprockets: directory traversal via forbidden_request
Synthesis of the vulnerability
An attacker can traverse directories via forbidden_request() of RubyGems Sprockets, in order to read a file outside the service root path.
Severity: 2/4.
Creation date: 02/07/2018.
Identifiers: CVE-2018-3760, DSA-4242-1, FEDORA-2018-2735a12b72, FEDORA-2018-fd29597fa4, openSUSE-SU-2018:1854-1, openSUSE-SU-2018:2124-1, RHSA-2018:2244-01, RHSA-2018:2245-01, SUSE-SU-2018:1994-1, VIGILANCE-VUL-26593.
Full Vigil@nce bulletin... (Free trial)
Description of the vulnerability
An attacker can traverse directories via forbidden_request() of RubyGems Sprockets, in order to read a file outside the service root path.
Full Vigil@nce bulletin... (Free trial) |
Exiv2: out-of-bounds memory reading via LoaderExifJpeg
Synthesis of the vulnerability
An attacker can force a read at an invalid address via LoaderExifJpeg() of Exiv2, in order to trigger a denial of service, or to obtain sensitive information.
Severity: 2/4.
Creation date: 28/06/2018.
Identifiers: CVE-2018-12265, DLA-1402-1, DSA-4238-1, FEDORA-2018-871fa4d189, FEDORA-2018-8b67a5c7e2, openSUSE-SU-2018:3306-1, RHSA-2019:2101-01, USN-3700-1, VIGILANCE-VUL-26577.
Full Vigil@nce bulletin... (Free trial)
Description of the vulnerability
An attacker can force a read at an invalid address via LoaderExifJpeg() of Exiv2, in order to trigger a denial of service, or to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial) |
Exiv2: out-of-bounds memory reading via LoaderTiff-getData
Synthesis of the vulnerability
An attacker can force a read at an invalid address via LoaderTiff::getData() of Exiv2, in order to trigger a denial of service, or to obtain sensitive information.
Severity: 2/4.
Creation date: 28/06/2018.
Identifiers: CVE-2018-12264, DLA-1402-1, DSA-4238-1, FEDORA-2018-871fa4d189, FEDORA-2018-8b67a5c7e2, openSUSE-SU-2018:3306-1, RHSA-2019:2101-01, USN-3700-1, VIGILANCE-VUL-26576.
Full Vigil@nce bulletin... (Free trial)
Description of the vulnerability
An attacker can force a read at an invalid address via LoaderTiff::getData() of Exiv2, in order to trigger a denial of service, or to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial) |
Our database contains other pages. You can request a free trial to read them.
Display information about Red Hat Enterprise Linux:
|