Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-07-28	CVE-2018-0498	ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (for a CBC based ciphersuite) via a cache-based side-channel attack. local high complexity arm debian	4.7
2018-07-28	CVE-2018-0497	ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based ciphersuite) via a timing-based side-channel attack. network high complexity arm debian	5.9
2018-07-27	CVE-2017-2618	A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. local low complexity linux redhat debian	5.5
2018-07-27	CVE-2017-2616	Race Condition vulnerability in multiple products A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. local high complexity util-linux-project redhat debian CWE-362	4.7
2018-07-27	CVE-2018-10882	A flaw was found in the Linux kernel's ext4 filesystem. local low complexity linux debian canonical redhat	5.5
2018-07-27	CVE-2017-7519	Use of Externally-Controlled Format String vulnerability in multiple products In Ceph, a format string flaw was found in the way libradosstriper parses input from user. local low complexity ceph debian CWE-134	4.4
2018-07-27	CVE-2017-2666	HTTP Request Smuggling vulnerability in multiple products It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. network low complexity redhat debian CWE-444	6.5
2018-07-27	CVE-2018-14617	NULL Pointer Dereference vulnerability in multiple products An issue was discovered in the Linux kernel through 4.17.10. local low complexity linux debian canonical CWE-476	5.5
2018-07-27	CVE-2018-14611	Use After Free vulnerability in multiple products An issue was discovered in the Linux kernel through 4.17.10. local low complexity linux debian CWE-416	5.5
2018-07-27	CVE-2018-14609	NULL Pointer Dereference vulnerability in multiple products An issue was discovered in the Linux kernel through 4.17.10. local low complexity linux debian canonical CWE-476	5.5