# CVEs published 2018-06-12

56 CVEs were published on June 12, 2018: 1 critical, 2 high. Days are UTC.

- [CVE-2017-15842](https://cve.now/CVE-2017-15842.md): Buffer might get used after it gets freed due to unlocking the mutex before freeing the buffer in all Android releases from CAF (Android for (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-15843](https://cve.now/CVE-2017-15843.md): Due to a race condition in a bus driver, a double free in msm\_bus\_floor\_vote\_context() can potentially occur in all Android releases from CA (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-15854](https://cve.now/CVE-2017-15854.md): The value of fix\_param-\>num\_chans is received from firmware and if it is too large, an integer overflow can occur in wma\_radio\_chan\_stats\_ev (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-15857](https://cve.now/CVE-2017-15857.md): In the camera driver, an out-of-bounds access can occur due to an error in copying region params from user space in all Android releases fro (no CVSS)
- [CVE-2017-18070](https://cve.now/CVE-2017-18070.md): In wma\_ndp\_end\_response\_event\_handler(), the variable len\_end\_rsp is a uint32 which can be overflowed if the value of variable "event-\>num\_n (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-0496](https://cve.now/CVE-2018-0496.md): Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 (as well as in RTsoft's Dink Smallwood HD / ProtonSDK version) before (no CVSS, DFArc2 before 3.14 unknown)
- [CVE-2018-3571](https://cve.now/CVE-2018-3571.md): In the KGSL driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, a Use After F (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3572](https://cve.now/CVE-2018-3572.md): While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing the buffer in all And (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3576](https://cve.now/CVE-2018-3576.md): improper validation of array index in WiFi driver function sapInterferenceRssiCount() leads to array out-of-bounds access in all Android rel (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3579](https://cve.now/CVE-2018-3579.md): In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, event-\>num\_en (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3581](https://cve.now/CVE-2018-3581.md): In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, a buffer over (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-3582](https://cve.now/CVE-2018-3582.md): Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5842](https://cve.now/CVE-2018-5842.md): An arbitrary address write can occur if a compromised WLAN firmware sends incorrect data to WLAN driver in all Android releases from CAF (An (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5843](https://cve.now/CVE-2018-5843.md): In the function wma\_pdev\_div\_info\_evt\_handler() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using th (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5844](https://cve.now/CVE-2018-5844.md): In the video driver function set\_output\_buffers(), binfo can be accessed after being freed in a failure scenario in all Android releases fro (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5847](https://cve.now/CVE-2018-5847.md): Early or late retirement of rotation requests can result in a Use After Free condition in all Android releases from CAF (Android for MSM, Fi (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5848](https://cve.now/CVE-2018-5848.md): In the function wmi\_set\_ie(), the length validation code does not handle unsigned integer overflow properly. (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5849](https://cve.now/CVE-2018-5849.md): Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2018-5851](https://cve.now/CVE-2018-5851.md): Buffer over flow can occur while processing a HTT\_T2H\_MSG\_TYPE\_TX\_COMPL\_IND message with an out-of-range num\_msdus value in all Android rele (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-18287](https://cve.now/CVE-2017-18287.md): An issue was discovered in PvPGN Stats 2.4.6. (no CVSS)
- [CVE-2017-18288](https://cve.now/CVE-2017-18288.md): An issue was discovered in PvPGN Stats 2.4.6. (no CVSS)
- [CVE-2017-18289](https://cve.now/CVE-2017-18289.md): An issue was discovered in PvPGN Stats 2.4.6. (no CVSS)
- [CVE-2017-18290](https://cve.now/CVE-2017-18290.md): An issue was discovered in PvPGN Stats 2.4.6. (no CVSS)
- [CVE-2017-18291](https://cve.now/CVE-2017-18291.md): An issue was discovered in PvPGN Stats 2.4.6. (no CVSS)
- [CVE-2018-12257](https://cve.now/CVE-2018-12257.md): An issue was discovered on Momentum Axel 720P 5.1.8 devices. (no CVSS)
- [CVE-2018-12258](https://cve.now/CVE-2018-12258.md): An issue was discovered on Momentum Axel 720P 5.1.8 devices. (no CVSS)
- [CVE-2018-12259](https://cve.now/CVE-2018-12259.md): An issue was discovered on Momentum Axel 720P 5.1.8 devices. (no CVSS)
- [CVE-2018-12260](https://cve.now/CVE-2018-12260.md): An issue was discovered on Momentum Axel 720P 5.1.8 devices. (no CVSS)
- [CVE-2018-12261](https://cve.now/CVE-2018-12261.md): An issue was discovered on Momentum Axel 720P 5.1.8 devices. (no CVSS)
- [CVE-2018-10470](https://cve.now/CVE-2018-10470.md): Little Snitch versions 4.0 to 4.0.6 use the SecStaticCodeCheckValidityWithErrors() function without the kSecCSCheckAllArchitectures flag and (no CVSS, Objective Development Software Little Snitch)
- [CVE-2018-10507](https://cve.now/CVE-2018-10507.md): A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeSca (no CVSS, Trend Micro OfficeScan)
- [CVE-2018-10508](https://cve.now/CVE-2018-10508.md): A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elevate account permissio (no CVSS, Trend Micro OfficeScan)
- [CVE-2018-10509](https://cve.now/CVE-2018-10509.md): A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it via a Browser Refresh attack on vulnerable in (no CVSS, Trend Micro OfficeScan)
- [CVE-2018-1151](https://cve.now/CVE-2018-1151.md): The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrar (no CVSS, Western Digital TV Media Player · Western Digital TV Live H…)
- [CVE-2018-12254](https://cve.now/CVE-2018-12254.md): router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL Injection via the PATH\_INFO to a home/requested\_use (no CVSS)
- [CVE-2018-5718](https://cve.now/CVE-2018-5718.md): Improper restriction of write operations within the bounds of a memory buffer in snscore.sys in SoftControl/SafenSoft SysWatch, SoftControl/ (no CVSS)
- [CVE-2018-5803](https://cve.now/CVE-2018-5803.md): In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "\_sctp\_make\_chunk()" function (net (no CVSS, Linux Foundation Linux Kernel)
- [CVE-2018-5814](https://cve.now/CVE-2018-5814.md): In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race condition errors when handling probe, disconnect, a (no CVSS, Linux Foundation Linux Kernel)
- [CVE-2011-4182](https://cve.now/CVE-2011-4182.md): shell code injection via ESSID because of missing escaping of a variable (CVSS 7.3, SUSE Linux Enterprise sysconfig)
- [CVE-2018-1103](https://cve.now/CVE-2018-1103.md): Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. (CVSS 6.1, Openshift Enterprise unsanitized paths in tar.go · github.c…)
- [CVE-2018-2424](https://cve.now/CVE-2018-2424.md): SAP UI5 did not validate user input before adding it to the DOM structure. (CVSS 9.8, SAP SE SAP HANA Database · SAP SE SAP UI5 +1)
- [CVE-2018-2425](https://cve.now/CVE-2018-2425.md): Under certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an attacker to access information which would other (CVSS 8.4, SAP SE SAP Business One)
- [CVE-2018-2428](https://cve.now/CVE-2018-2428.md): Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. (CVSS 5.3, SAP SE SAP Infrastructure · SAP SE SAP UI)
- [CVE-2017-3960](https://cve.now/CVE-2017-3960.md): McAfee Network Security Management (NSM) - Exploitation of Authorization vulnerability (CVSS 5.9, McAfee Network Security Management)
- [CVE-2017-3962](https://cve.now/CVE-2017-3962.md): McAfee Network Security Management (NSM) - Password recovery exploitation vulnerability (CVSS 5.6, McAfee Network Security Management)
- [CVE-2018-12247](https://cve.now/CVE-2018-12247.md): An issue was discovered in mruby 1.4.1. (no CVSS)
- [CVE-2018-12248](https://cve.now/CVE-2018-12248.md): An issue was discovered in mruby 1.4.1. (no CVSS)
- [CVE-2018-12249](https://cve.now/CVE-2018-12249.md): An issue was discovered in mruby 1.4.1. (no CVSS)
- [CVE-2018-0732](https://cve.now/CVE-2018-0732.md): Client DoS due to large DH parameter (no CVSS, OpenSSL)
- [CVE-2018-1070](https://cve.now/CVE-2018-1070.md): routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire s (CVSS 6.5, \[UNKNOWN\] routing)
- [CVE-2018-1075](https://cve.now/CVE-2018-1075.md): ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db provisioning. (CVSS 5.0, \[UNKNOWN\] ovirt-engine)
- [CVE-2018-12232](https://cve.now/CVE-2018-12232.md): In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same (no CVSS)
- [CVE-2018-12233](https://cve.now/CVE-2018-12233.md): In the ea\_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be triggered by calling setx (no CVSS)
- [CVE-2018-12229](https://cve.now/CVE-2018-12229.md): Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 allows remote attacker (no CVSS)
- [CVE-2018-12227](https://cve.now/CVE-2018-12227.md): An issue was discovered in Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7, and 15.x before 15.4.1 and Certified Asterisk 13.18 (no CVSS)
- [CVE-2018-12228](https://cve.now/CVE-2018-12228.md): An issue was discovered in Asterisk Open Source 15.x before 15.4.1. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-06-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.