CVE-2018-18013: * Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input. If this service is supplied with…

CVE-2018-18013 [HIGH] CWE-502 GHSA-cwh4-297m-xrfv: ** DISPUTED *** Xen Mobile through 10 ** DISPUTED *** Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated input. If this service is supplied with raw serialised Java objects, it deserialises them back into Java objects in memory, giving rise to a remote code execution vulnerability. NOTE: the vendor disputes that this is a vulnerability, stating it is "already mitigated by the internal firewall that limits access to configuration services to localhost."

CVE-2018-7456 [MEDIUM] CWE-476 libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes a denial of service libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes a denial of service A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.) Package: libtiff (Red Hat Enterprise Linux 5) - Will not fix Package: libtiff (Red Hat Enterprise Linux 6) - Will not fix Package: libtiff (Red Hat Enterprise Linux 8) - Not affected

CVE-2018-7456 [MEDIUM] CVE-2018-7456 libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes a denial of service CVE-2018-7456 libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes a denial of service LibTIFF through version 4.0.9 is vulnerable to a NULL pointer dereference in tif_print.c:TIFFPrintDirectory(). An attacker exploit this to cause a denial of service using the tiffinfo command with a crafted TIFF image. This is a different issue to CVE-2017-18013. Upstream Bug: http://bugzilla.maptools.org/show_bug.cgi?id=2778 Discussion: Created libtiff tracking bugs for this issue: Affects: fedora-all [bug 1556709] --- Analysis: Essentially a null pointer deref in the way tags are handled when printing them from a specially crafted TIFF file. --- This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2019:2051 https://access.re