# CVEs published 2019-01-11

58 CVEs were published on January 11, 2019: 0 critical, 3 high. Days are UTC.

- [CVE-2018-16865](https://cve.now/CVE-2018-16865.md): An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journa (CVSS 7.5, The systemd Project systemd)
- [CVE-2018-16864](https://cve.now/CVE-2018-16864.md): An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journa (CVSS 7.4, The systemd Project systemd)
- [CVE-2018-16866](https://cve.now/CVE-2018-16866.md): An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. (CVSS 4.3, The systemd Project systemd)
- [CVE-2016-4642](https://cve.now/CVE-2016-4642.md): In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly r (no CVSS)
- [CVE-2016-4643](https://cve.now/CVE-2016-4643.md): In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a validation issue existed in the (no CVSS)
- [CVE-2016-4644](https://cve.now/CVE-2016-4644.md): In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a downgrade issue existed with HTT (no CVSS)
- [CVE-2016-7576](https://cve.now/CVE-2016-7576.md): In iOS before 9.3.3, a memory corruption issue existed in the kernel. (no CVSS)
- [CVE-2017-13886](https://cve.now/CVE-2017-13886.md): In macOS High Sierra before 10.13.2, an access issue existed with privileged WiFi system configuration. (no CVSS)
- [CVE-2017-13887](https://cve.now/CVE-2017-13887.md): In macOS High Sierra before 10.13.2, a logic issue existed in APFS when deleting keys during hibernation. (no CVSS)
- [CVE-2017-13888](https://cve.now/CVE-2017-13888.md): In iOS before 11.2, a type confusion issue was addressed with improved memory handling. (no CVSS)
- [CVE-2017-13889](https://cve.now/CVE-2017-13889.md): In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a logic error existed in the (no CVSS)
- [CVE-2017-13891](https://cve.now/CVE-2017-13891.md): In iOS before 11.2, an inconsistent user interface issue was addressed through improved state management. (no CVSS)
- [CVE-2017-2411](https://cve.now/CVE-2017-2411.md): In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS. (no CVSS)
- [CVE-2018-4147](https://cve.now/CVE-2018-4147.md): In iCloud for Windows before 7.3, Safari before 11.0.3, iTunes before 12.7.3 for Windows, and iOS before 11.2.5, multiple memory corruption (no CVSS)
- [CVE-2018-4169](https://cve.now/CVE-2018-4169.md): In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, an out-of-bounds read was add (no CVSS)
- [CVE-2018-4179](https://cve.now/CVE-2018-4179.md): In macOS High Sierra before 10.13.4, there was an issue with the handling of smartcard PINs. (no CVSS)
- [CVE-2018-4180](https://cve.now/CVE-2018-4180.md): In macOS High Sierra before 10.13.5, an issue existed in CUPS. (no CVSS)
- [CVE-2018-4181](https://cve.now/CVE-2018-4181.md): In macOS High Sierra before 10.13.5, an issue existed in CUPS. (no CVSS)
- [CVE-2018-4182](https://cve.now/CVE-2018-4182.md): In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS. (no CVSS)
- [CVE-2018-4183](https://cve.now/CVE-2018-4183.md): In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions. (no CVSS)
- [CVE-2018-4185](https://cve.now/CVE-2018-4185.md): In iOS before 11.3, tvOS before 11.3, watchOS before 4.3, and macOS before High Sierra 10.13.4, an information disclosure issue existed in t (no CVSS)
- [CVE-2018-4186](https://cve.now/CVE-2018-4186.md): In Safari before 11.1, an information leakage issue existed in the handling of downloads in Safari Private Browsing. (no CVSS)
- [CVE-2018-4189](https://cve.now/CVE-2018-4189.md): In iOS before 11.2.5, macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, watchOS be (no CVSS)
- [CVE-2018-4194](https://cve.now/CVE-2018-4194.md): In iOS before 11.4, iCloud for Windows before 7.5, watchOS before 4.3.1, iTunes before 12.7.5 for Windows, and macOS High Sierra before 10.1 (no CVSS)
- [CVE-2018-4207](https://cve.now/CVE-2018-4207.md): In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window (no CVSS)
- [CVE-2018-4208](https://cve.now/CVE-2018-4208.md): In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window (no CVSS)
- [CVE-2018-4209](https://cve.now/CVE-2018-4209.md): In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window (no CVSS)
- [CVE-2018-4210](https://cve.now/CVE-2018-4210.md): In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue exis (no CVSS)
- [CVE-2018-4212](https://cve.now/CVE-2018-4212.md): In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window (no CVSS)
- [CVE-2018-4213](https://cve.now/CVE-2018-4213.md): In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Window (no CVSS)
- [CVE-2018-4217](https://cve.now/CVE-2018-4217.md): In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improved indexing. (no CVSS)
- [CVE-2018-4254](https://cve.now/CVE-2018-4254.md): In macOS High Sierra before 10.13.5, an input validation issue existed in the kernel. (no CVSS)
- [CVE-2018-4255](https://cve.now/CVE-2018-4255.md): In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation. (no CVSS)
- [CVE-2018-4256](https://cve.now/CVE-2018-4256.md): In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation. (no CVSS)
- [CVE-2018-4257](https://cve.now/CVE-2018-4257.md): In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation. (no CVSS)
- [CVE-2018-4258](https://cve.now/CVE-2018-4258.md): In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking. (no CVSS)
- [CVE-2018-4262](https://cve.now/CVE-2018-4262.md): In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, multiple memo (no CVSS)
- [CVE-2018-4277](https://cve.now/CVE-2018-4277.md): In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6, a spoofing issue exi (no CVSS)
- [CVE-2018-4278](https://cve.now/CVE-2018-4278.md): In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched (no CVSS)
- [CVE-2018-4281](https://cve.now/CVE-2018-4281.md): In SwiftNIO before 1.8.0, a buffer overflow was addressed with improved size validation. (no CVSS)
- [CVE-2018-4298](https://cve.now/CVE-2018-4298.md): In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a permissions issue existed i (no CVSS)
- [CVE-2018-4330](https://cve.now/CVE-2018-4330.md): In iOS before 11.4, a memory corruption issue exists and was addressed with improved memory handling. (no CVSS)
- [CVE-2018-4404](https://cve.now/CVE-2018-4404.md): In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improved memory handling. (CVSS 8.8)
- [CVE-2019-6135](https://cve.now/CVE-2019-6135.md): An issue has been found in libIEC61850 v1.3.1. (no CVSS)
- [CVE-2019-6136](https://cve.now/CVE-2019-6136.md): An issue has been found in libIEC61850 v1.3.1. (no CVSS)
- [CVE-2019-6137](https://cve.now/CVE-2019-6137.md): An issue was discovered in lib60870 2.1.1. (no CVSS)
- [CVE-2019-6138](https://cve.now/CVE-2019-6138.md): An issue has been found in libIEC61850 v1.3.1. (no CVSS)
- [CVE-2018-15464](https://cve.now/CVE-2018-15464.md): Cisco ASR 900 Series Aggregation Services Router Software Denial of Service Vulnerability (CVSS 5.8, Cisco ASR 900 Series Aggregation Services Routers)
- [CVE-2018-15466](https://cve.now/CVE-2018-15466.md): Cisco Policy Suite Graphite Unauthenticated Read-Only Access Vulnerability (CVSS 5.3, Cisco Policy Suite (CPS) Software)
- [CVE-2018-15467](https://cve.now/CVE-2018-15467.md): Cisco TelePresence Management Suite Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco TelePresence Management Suite)
- [CVE-2019-6133](https://cve.now/CVE-2019-6133.md): In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authoriza (no CVSS)
- [CVE-2019-6126](https://cve.now/CVE-2019-6126.md): The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by (no CVSS)
- [CVE-2019-6127](https://cve.now/CVE-2019-6127.md): An issue was discovered in XiaoCms 20141229. (no CVSS)
- [CVE-2019-6128](https://cve.now/CVE-2019-6128.md): The TIFFFdOpen function in tif\_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb. (no CVSS)
- [CVE-2019-6129](https://cve.now/CVE-2019-6129.md): png\_create\_info\_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. (CVSS 6.5)
- [CVE-2019-6130](https://cve.now/CVE-2019-6130.md): Artifex MuPDF 1.14.0 has a SEGV in the function fz\_load\_page of the fitz/document.c file, as demonstrated by mutool. (no CVSS)
- [CVE-2019-6131](https://cve.now/CVE-2019-6131.md): svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svg\_run\_use\_symbol, svg\_run\_element, and svg\_run\_use, as (no CVSS)
- [CVE-2019-6132](https://cve.now/CVE-2019-6132.md): An issue was discovered in Bento4 v1.5.1-627. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-01-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.