Enterprise Linux Desktop

CVEs (1,928)

• CVE-2018-5000MedJul 9, 2018
  Adobe Inc.

  Flash Player Desktop Runtime
  risk 0.43cvss 6.5epss 0.14

  Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability. Successful exploitation could lead to information disclosure.

• CVE-2018-13785MedJul 9, 2018
  Libpng

  Libpng
  risk 0.43cvss 6.5epss 0.04

  In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

• CVE-2018-11212MedMay 16, 2018
  IJG

  libjpeg
  risk 0.43cvss 6.5epss 0.05

  An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

• CVE-2018-10373MedApr 25, 2018
  GNU

  Binutils
  risk 0.43cvss 6.5epss 0.03

  concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by nm-new.

• CVE-2018-2755HigApr 19, 2018
  MariaDB

  MariaDB
  risk 0.43cvss 7.7epss 0.01

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…

• CVE-2018-2668MedJan 18, 2018
  MariaDB

  MariaDB
  risk 0.43cvss 6.5epss 0.04

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access…

• CVE-2018-2665MedJan 18, 2018
  MariaDB

  MariaDB
  risk 0.43cvss 6.5epss 0.04

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access…

• CVE-2018-2622MedJan 18, 2018
  MariaDB

  MariaDB
  risk 0.43cvss 6.5epss 0.04

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via…

• CVE-2018-2582MedJan 18, 2018
  Sun Corporation

  Java SE
  risk 0.43cvss 6.5epss 0.05

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access…

• CVE-2017-11305MedDec 13, 2017
  Adobe Inc.

  Flash Player Desktop Runtime
  risk 0.43cvss 6.5epss 0.04

  A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended reset of the global settings preference file when a user clears browser data.

• CVE-2017-16541MedNov 4, 2017
  Torproject

  Tor
  risk 0.43cvss 6.5epss 0.04

  Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.

• CVE-2017-10378MedOct 19, 2017
  MariaDB

  MariaDB
  risk 0.43cvss 6.5epss 0.03

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.11 and earlier. Easily exploitable vulnerability allows low privileged attacker with network…

• CVE-2015-7702MedAug 7, 2017
  NTP

  NTP
  risk 0.43cvss 6.5epss 0.05

  The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash). NOTE: This vulnerability exists due to an incomplete fix for CVE-2014-9750.

• CVE-2017-9775MedJun 22, 2017
  Xorg

  Poppler
  risk 0.43cvss 6.5epss 0.04

  Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.

• CVE-2017-9461MedJun 6, 2017
  Samba (software)

  Samba
  risk 0.43cvss 6.5epss 0.04

  smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop with high CPU usage and memory consumption) due to wrongly handling dangling symlinks.

• CVE-2017-9287MedMay 29, 2017
  OpenLDAP

  Openldap
  risk 0.43cvss 6.5epss 0.07

  servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged Results control with a page size of 0.

• CVE-2017-3600MedApr 24, 2017
  MariaDB

  MariaDB
  risk 0.43cvss 6.6epss 0.03

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network…

• CVE-2017-3244MedJan 27, 2017
  MariaDB

  MariaDB
  risk 0.43cvss 6.5epss 0.04

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access…

• CVE-2017-3238MedJan 27, 2017
  MariaDB

  MariaDB
  risk 0.43cvss 6.5epss 0.05

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network…

• CVE-2016-5624MedOct 25, 2016
  MariaDB

  MariaDB
  risk 0.43cvss 6.5epss 0.05

  Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.