Out-of-bounds Read — CVEs by weakness type

Xpdf MEDIUM 5.5

CVE-2018-18454

CCITTFaxStream::readRow() in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted …

Mitigation only

Fix from $1,600 2018-10-18

Xpdf MEDIUM 5.5

CVE-2018-18455

The GfxImageColorMap class in GfxState.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a craft…

Mitigation only

Fix from $1,600 2018-10-18

Xpdf MEDIUM 5.5

CVE-2018-18456

The function Object::isName() in Object.h (called from Gfx::opSetFillColorN) in Xpdf 4.00 allows remote attackers to cause a denial of service (stack…

Mitigation only

Fix from $1,600 2018-10-18

Linux Kernel HIGH 7.8

CVE-2018-18445

In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-o…

Fix: 4.14.75 / 4.18.13+

Fix from $1,950 2018-10-17

Digital Editions HIGH 7.5

CVE-2018-12816

Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosur…

Fix: after 4.5.8

Fix from $1,950 2018-10-17

Digital Editions HIGH 7.5

CVE-2018-12818

Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosur…

Fix: after 4.5.8

Fix from $1,950 2018-10-17

Digital Editions HIGH 7.5

CVE-2018-12819

Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosur…

Fix: after 4.5.8

Fix from $1,950 2018-10-17

Digital Editions HIGH 7.5

CVE-2018-12820

Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosur…

Fix: after 4.5.8

Fix from $1,950 2018-10-17

Digital Editions HIGH 7.5

CVE-2018-12821

Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosur…

Fix: after 4.5.8

Fix from $1,950 2018-10-17

Fedora MEDIUM 5.5

CVE-2018-18407

A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operation. The is…

Patch available

Fix from $1,600 2018-10-17

Fedora MEDIUM 5.5

CVE-2018-18409

A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leadi…

Patch available

Fix from $1,600 2018-10-17

Laquis Scada CRITICAL 9.8

CVE-2018-17895

LAquis SCADA Versions 4.1.0.3870 and prior has several out-of-bounds read vulnerabilities, which may allow remote code execution.

Fix: after 4.1.0.3870

Fix from $2,300 2018-10-17

Workstation HIGH 8.8

CVE-2018-6974

VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3)…

Fix: 10.1.3 / 14.1.3+

Fix from $1,950 2018-10-16

Debian Linux MEDIUM 5.5

CVE-2018-15378

A vulnerability in ClamAV versions prior to 0.100.2 could allow an attacker to cause a denial of service (DoS) condition. The vulnerability is due to…

Fix: 0.100.2+

Fix from $1,600 2018-10-15

Acrobat Dc MEDIUM 5.5

CVE-2018-15953EPSS 20%