PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 1 / 32

  1. CVE-2019-1010319wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS
  2. CVE-2019-1010317wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS
  3. CVE-2019-1010315wavpack: Divide by zero in ParseDsdiffHeaderConfig leads to crash
  4. CVE-2019-1010305libmspack: buffer overflow in function chmd_read_headers()
  5. CVE-2019-1010299rust: print of uninitialized memory in the debug trait implementation for std::collections::vec_deque::Iter
  6. CVE-2019-1010238pango: pango_log2vis_get_embedding_levels() heap-based buffer overflow
  7. CVE-2019-1010220tcpdump: buffer over-read in function print_prefix in print-hncp.c
  8. CVE-2019-1010204binutils: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read in gold/fileread.cc and elfcpp/elfcpp_file.h leads to denial of service
  9. CVE-2019-1010190mgetty: out-of-bounds read in function putwhitespan() in g3/pbm2g3.c causing denial of service
  10. CVE-2019-1010189mgetty: opening a specially crafted file leads to an infinite loop and DoS
  11. CVE-2019-1010180gdb: buffer overflow while opening an ELF for debugging leads to Dos, information dislosure and code execution
  12. CVE-2019-1010083python-flask: unexpected memory usage can lead to denial of service via crafted encoded JSON data
  13. CVE-2019-1010025glibc: information disclosure of heap addresses of pthread_created thread
  14. CVE-2019-1010024glibc: ASLR bypass using cache of thread stack and heap
  15. CVE-2019-1010023glibc: running ldd on malicious ELF leads to code execution because of wrong size computation
  16. CVE-2019-1010022glibc: stack guard protection bypass
  17. CVE-2019-1010006evince: buffer overflow in backend/tiff/tiff-document.c leads to DOS/possible code execution
  18. CVE-2019-1010004sox: OOB read in function read_samples in xa.c:219 causing denial of service
  19. CVE-2019-1000020libarchive: Infinite recursion in archive_read_support_format_iso9660.c resulting in denial of service
  20. CVE-2019-1000019libarchive: Out of bounds read in archive_read_support_format_7zip.c resulting in a denial of service
  21. CVE-2019-25781markdown: python-markdown: Denial of Service via inefficient inline link parsing
  22. CVE-2019-25777perl-yaml: perl-yaml: Arbitrary code execution via unrestricted package variable assignment
  23. CVE-2019-25544Pidgin: Pidgin: Denial of Service via excessively long username
  24. CVE-2019-25219asio: missing fallback error code
  25. CVE-2019-25162kernel: use after free in i2c
  26. CVE-2019-25160kernel: out-of-bounds memory accesses in netlabel
  27. CVE-2019-25136firefox: arbitrary code execution and a sandbox escape
  28. CVE-2019-25085gvdb: use after free issue was fixed in gvdb_table_write_contents_async()
  29. CVE-2019-25076openvswitch: DoS via crafted packet
  30. CVE-2019-25067podman: Privilege escalation in API component
  31. CVE-2019-25059ghostscript: Mishandling of .completefont (incomplete fix for CVE-2019-3839)
  32. CVE-2019-25058usbguard: Fix unauthorized access via D-Bus
  33. CVE-2019-25051aspell: Heap-buffer-overflow in acommon::ObjStack::dup_top
  34. CVE-2019-25045kernel: use-after-free in the XFRM subsystem related to an xfrm_state_fini() panic
  35. CVE-2019-25044kernel: use-after-free in the block subsystem related to blk_mq_free_rqs and blk_cleanup_queue
  36. CVE-2019-25042unbound: out-of-bounds write via a compressed name in rdata_copy
  37. CVE-2019-25041unbound: assertion failure via a compressed name in dname_pkt_copy
  38. CVE-2019-25040unbound: infinite loop via a compressed name in dname_pkt_copy
  39. CVE-2019-25039unbound: integer overflow in a size calculation in respip/respip.c
  40. CVE-2019-25038unbound: integer overflow in a size calculation in dnscrypt/dnscrypt.c
  41. CVE-2019-25037unbound: assertion failure and denial of service in dname_pkt_copy via an invalid packet
  42. CVE-2019-25036unbound: assertion failure and denial of service in synth_cname
  43. CVE-2019-25035unbound: out-of-bounds write in sldns_bget_token_par
  44. CVE-2019-25034unbound: integer overflow in sldns_str2wire_dname_buf_origin can lead to an out-of-bounds write
  45. CVE-2019-25033unbound: integer overflow in the regional allocator via the ALIGN_UP macro
  46. CVE-2019-25032unbound: integer overflow in the regional allocator via regional_alloc
  47. CVE-2019-25031unbound: configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session
  48. CVE-2019-25013glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding
  49. CVE-2019-20934kernel: use-after-free in show_numa_stats function
  50. CVE-2019-20919perl-dbi: NULL profile dereference in dbi_profile()
CVE 2019 document archive | PulseLinux