CVE-2018-18193
published 2018-10-09CVE-2018-18193: An issue was discovered in libgig 4.1.0. There is operator new[] failure (due to a big pWavePoolTable heap request) in DLS::File::File in DLS.cpp.
PriorityP336high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
EPSS
1.19%
64.2th percentile
An issue was discovered in libgig 4.1.0. There is operator new[] failure (due to a big pWavePoolTable heap request) in DLS::File::File in DLS.cpp.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libgig | — | — |
| linux | linux_kernel | >= 0 < 4.4.0-127.153 | 4.4.0-127.153 |
| linuxsampler | libgig | — | — |
CVSS provenance
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv8.8HIGH
vendor_debian8.8LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2018-18193: libgig - An issue was discovered in libgig 4.1.0. There is operator new[] failure (due to...
vendor_debian·2018·CVSS 8.8
CVE-2018-18193 [HIGH] CVE-2018-18193: libgig - An issue was discovered in libgig 4.1.0. There is operator new[] failure (due to...
An issue was discovered in libgig 4.1.0. There is operator new[] failure (due to a big pWavePoolTable heap request) in DLS::File::File in DLS.cpp.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
GHSA
GHSA-qc27-7gxm-6vpm: An issue was discovered in libgig 4
ghsa_unreviewed·2022-05-14
CVE-2018-18193 [HIGH] CWE-119 GHSA-qc27-7gxm-6vpm: An issue was discovered in libgig 4
An issue was discovered in libgig 4.1.0. There is operator new[] failure (due to a big pWavePoolTable heap request) in DLS::File::File in DLS.cpp.
OSV
CVE-2018-18193: An issue was discovered in libgig 4
osv·2018-10-09·CVSS 8.8
CVE-2018-18193 [HIGH] CVE-2018-18193: An issue was discovered in libgig 4
An issue was discovered in libgig 4.1.0. There is operator new[] failure (due to a big pWavePoolTable heap request) in DLS::File::File in DLS.cpp.
OSV
linux, linux-aws, linux-kvm, vulnerabilities
osv·2018-05-22·CVSS 5.5
CVE-2018-3639 linux, linux-aws, linux-kvm, vulnerabilities
linux, linux-aws, linux-kvm, vulnerabilities
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory
reads via a sidechannel attack. This flaw is known as Spectre
Variant 4. A local attacker could use this to expose sensitive
information, including kernel memory. (CVE-2018-3639)
Tuba Yavuz discovered that a double-free error existed in the USBTV007
driver of the Linux kernel. A local attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2017-17975)
It was discovered that a race condition existed in the F2FS implementation
in the Linux kernel. A local attacker could use this to cause a denial of
service (system crash). (CVE-2017-18193)
It was discovered
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-10-09
Published