CVE-2017-14781

CVE-2017-14781 is rejected/not used; reference CVE-2018-7502 instead.

CVE-2017-14783

CVE-2017-14783 is a reservation duplicate of CVE-2018-7502. Connected documents provide concrete details for CVE-2018-7502: Beckhoff TwinCAT kernel drivers (TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1) fail to validate user-supplied pointer values, enabling an attacker able to...

CVE-2017-14778

CVE-2017-14778 is rejected/not used; reference CVE-2018-7502 instead.

CVE-2017-14788

CVE-2018-7502 (Beckhoff TwinCAT) involves an untrusted pointer dereference in Beckhoff TwinCAT kernel drivers. The vulnerability affects TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1, where user-supplied pointer values are not properly validated. An attacker who can execute code...

CVE-2017-14793

Beckhoff TwinCAT: CVE-2018-7502 (linked via duplicate of CVE-2017-14793) affects kernel drivers in TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1. Root cause is lack of proper validation of user-supplied pointer values in kernel drivers, enabling a code-executing attack to obtain...

CVE-2017-14776

CVE-2017-14776 is rejected/not used and does not represent an active vulnerability entry; reference CVE-2018-7502.

CVE-2017-14790

CVE-2018-7502 is described in connected documents as a vulnerability in Beckhoff TwinCAT where kernel drivers in TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker capable of code execution on the target could exploi...

CVE-2018-10991

This CVE-2018-10991 entry is rejected/not used; reference CVE-2018-10990 instead.

CVE-2018-3617

Intel Integrated Performance Primitives (IPP) Cryptography Library prior to version 2018 U3.1 is vulnerable to information disclosure due to not guaranteeing constant execution time. Exploitation could reveal sensitive data. Affected components are multiple IPP crypto implementations. Mitigation:...

CVE-2018-1119

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-10184. Reason: This candidate is a reservation duplicate of CVE-2018-10184. Notes: All CVE users should reference CVE-2018-10184 instead of this candidate. All references and descriptions in this candidate have been removed t...

UBUNTU-CVE-2018-1119

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-10184. Reason: This candidate is a reservation duplicate of CVE-2018-10184. Notes: All CVE users should reference CVE-2018-10184 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2018-9306

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17724. Reason: This candidate is a reservation duplicate of CVE-2017-17724. Notes: All CVE users should reference CVE-2017-17724 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Heap overflow

Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file because of incorrect j2kdecode, j2kreadeoc, and tcddecodetile interaction, a...

CVE-2014-0158

Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file because of incorrect j2kdecode, j2kreadeoc, and tcddecodetile interaction, a...

CVE-2018-9319

CVE-2018-9319 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-9323

CVE-2018-9323 is a reservation duplicate of CVE-2018-9322 and contains no technical details. The connected CVE-2018-9322 describes a vulnerability in BMW Head Unit HU_NBT infotainment, affecting 2012–2018 models, where local attackers abusing USB/OBD-II can bypass firmware update code signing and...

CVE-2018-9146

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17724. Reason: This candidate is a reservation duplicate of CVE-2017-17724. Notes: All CVE users should reference CVE-2017-17724 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2018-9306

CVE-2018-9306 is a rejected/reserved candidate and does not represent an active vulnerability entry.

UBUNTU-CVE-2018-9165

The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is at the top of the stack, making the library vulnerable to a util/decompile.c getName NULL pointer dereference, which may allow attackers to...

Code injection

IBM GSKit IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 duplicates the PRNG state across fork system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material. IBM X-Force ID: 139071...