CVEs published January 11, 2019
58 CVEs were published on January 11, 2019: 0 critical, 3 high.
- Published
- 58
- Critical
- 0
- High
- 3
- Medium
- 5
- Low
- 0
- Unrated
- 50
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- The systemd Project systemd
- 3
- Cisco ASR 900 Series Aggregation Services Routers
- 1
- Cisco Policy Suite (CPS) Software
- 1
- Cisco TelePresence Management Suite
- 1
High 3
- CVE-2018-16865An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journaThe systemd Project systemd
- CVE-2018-16864An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journaThe systemd Project systemd
- CVE-2018-4404In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improved memory handling.
Medium, low and unrated 55
- CVE-2018-16866An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'.The systemd Project systemd
- CVE-2016-4642In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly r
- CVE-2016-4643In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a validation issue existed in the
- CVE-2016-4644In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a downgrade issue existed with HTT
- CVE-2016-7576In iOS before 9.3.3, a memory corruption issue existed in the kernel.
- CVE-2017-13886In macOS High Sierra before 10.13.2, an access issue existed with privileged WiFi system configuration.
- CVE-2017-13887In macOS High Sierra before 10.13.2, a logic issue existed in APFS when deleting keys during hibernation.
- CVE-2017-13888In iOS before 11.2, a type confusion issue was addressed with improved memory handling.
- CVE-2017-13889In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a logic error existed in the
- CVE-2017-13891In iOS before 11.2, an inconsistent user interface issue was addressed through improved state management.
- CVE-2017-2411In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS.
- CVE-2018-4147In iCloud for Windows before 7.3, Safari before 11.0.3, iTunes before 12.7.3 for Windows, and iOS before 11.2.5, multiple memory corruption
- CVE-2018-4169In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, an out-of-bounds read was add
- CVE-2018-4179In macOS High Sierra before 10.13.4, there was an issue with the handling of smartcard PINs.
- CVE-2018-4180In macOS High Sierra before 10.13.5, an issue existed in CUPS.
- CVE-2018-4181In macOS High Sierra before 10.13.5, an issue existed in CUPS.
- CVE-2018-4182In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS.
- CVE-2018-4183In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions.
- CVE-2018-4185In iOS before 11.3, tvOS before 11.3, watchOS before 4.3, and macOS before High Sierra 10.13.4, an information disclosure issue existed in t
- CVE-2018-4186In Safari before 11.1, an information leakage issue existed in the handling of downloads in Safari Private Browsing.
- CVE-2018-4189In iOS before 11.2.5, macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, watchOS be
- CVE-2018-4194In iOS before 11.4, iCloud for Windows before 7.5, watchOS before 4.3.1, iTunes before 12.7.5 for Windows, and macOS High Sierra before 10.1
- CVE-2018-4207In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window
- CVE-2018-4208In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window
- CVE-2018-4209In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window
- CVE-2018-4210In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue exis
- CVE-2018-4212In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window
- CVE-2018-4213In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window
- CVE-2018-4217In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improved indexing.
- CVE-2018-4254In macOS High Sierra before 10.13.5, an input validation issue existed in the kernel.
- CVE-2018-4255In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.
- CVE-2018-4256In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.
- CVE-2018-4257In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation.
- CVE-2018-4258In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking.
- CVE-2018-4262In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, multiple memo
- CVE-2018-4277In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6, a spoofing issue exi
- CVE-2018-4278In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched
- CVE-2018-4281In SwiftNIO before 1.8.0, a buffer overflow was addressed with improved size validation.
- CVE-2018-4298In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed i
- CVE-2018-4330In iOS before 11.4, a memory corruption issue exists and was addressed with improved memory handling.
- CVE-2019-6135An issue has been found in libIEC61850 v1.3.1.
- CVE-2019-6136An issue has been found in libIEC61850 v1.3.1.
- CVE-2019-6137An issue was discovered in lib60870 2.1.1.
- CVE-2019-6138An issue has been found in libIEC61850 v1.3.1.
- CVE-2018-15464Cisco ASR 900 Series Aggregation Services Router Software Denial of Service VulnerabilityCisco ASR 900 Series Aggregation Services Routers
- CVE-2018-15466Cisco Policy Suite Graphite Unauthenticated Read-Only Access VulnerabilityCisco Policy Suite (CPS) Software
- CVE-2018-15467Cisco TelePresence Management Suite Cross-Site Scripting VulnerabilityCisco TelePresence Management Suite
- CVE-2019-6133In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authoriza
- CVE-2019-6126The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by
- CVE-2019-6127An issue was discovered in XiaoCms 20141229.
- CVE-2019-6128The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.
- CVE-2019-6129png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp.
- CVE-2019-6130Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool.
- CVE-2019-6131svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svg_run_use_symbol, svg_run_element, and svg_run_use, as
- CVE-2019-6132An issue was discovered in Bento4 v1.5.1-627.