PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 10

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 10 / 32

  1. CVE-2019-15219kernel: null pointer dereference in drivers/usb/misc/sisusbvga/sisusb.c driver
  2. CVE-2019-15218kernel: null pointer dereference in the drivers/media/usb/siano/smsusb.c driver
  3. CVE-2019-15217kernel: null pointer dereference in drivers/media/usb/zr364xx/zr364xx.c driver
  4. CVE-2019-15216kernel: null-pointer dereference in drivers/usb/misc/yurex.c driver
  5. CVE-2019-15215kernel: use after free in drivers/media/usb/cpia2/cpia2_usb.c driver
  6. CVE-2019-15214kernel: use-after-free in sound/core/init.c and sound/core/info.c
  7. CVE-2019-15213kernel: use-after-free caused by malicious USB device in drivers/media/usb/dvb-usb/dvb-usb-init.c
  8. CVE-2019-15212kernel: double-free caused by malicious USB device in drivers/usb/misc/rio500.c
  9. CVE-2019-15211kernel: use-after-free in drivers/media/v4l2-core/v4l2-dev.c
  10. CVE-2019-15167tcpdump: Buffer over-read in vrrp_print() function in print-vrrp.c
  11. CVE-2019-15166tcpdump: Buffer overflow in lmp_print_data_link_subobjs() in print-lmp.c
  12. CVE-2019-15165libpcap: Resource exhaustion during PHB header length validation
  13. CVE-2019-15164libpcap: Server side request forgery in rpcapd/daemon.c
  14. CVE-2019-15163libpcap: Null pointer dereference in rpcapd/daemon.c
  15. CVE-2019-15162libpcap: Information disclosure in rpcapd/daemon.c
  16. CVE-2019-15161libpcap: Mishandled length values in reused variables
  17. CVE-2019-15141ImageMagick: heap-based buffer overflow in WriteTIFFImage in coders/tiff.c
  18. CVE-2019-15140ImageMagick: Use after free in ReadMATImage in coders/mat.c
  19. CVE-2019-15139ImageMagick: out-of-bounds read in ReadXWDImage in coders/xwd.c
  20. CVE-2019-15133giflib: divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c
  21. CVE-2019-15126linux-firmware: Transmission of data encrypted with an all-zero session key after disassociation
  22. CVE-2019-15118kernel: mishandling recursion in sound/usb/mixer.c leading to kernel stack exhaustion and crash
  23. CVE-2019-15117kernel: out of bounds memory access in parse_audio_mixer_unit in sound/usb/mixer.c
  24. CVE-2019-15099kernel: a NULL pointer dereference in drivers/net/wireless/ath/ath10k/usb.c leads to a crash
  25. CVE-2019-15098kernel: a NULL pointer dereference in drivers/net/wireless/ath/ath6kl/usb.c leads to a crash
  26. CVE-2019-15090kernel: An out-of-bounds read in drivers/scsi/qedi/qedi_dbg.c leading to crash or information disclosure
  27. CVE-2019-15058stbi: heap-based buffer overflow in stbi__tga_load function in stb_image.h
  28. CVE-2019-15043grafana: incorrect access control in snapshot HTTP API leads to denial of service
  29. CVE-2019-15034qemu: hw/display/bochs-display.c does not ensure a sufficient PCI config space allocation leading to a buffer overflow involving the PCIe extended config space
  30. CVE-2019-15031kernel: powerpc: local user can read vector registers of other users' processes via an interrupt
  31. CVE-2019-15030kernel: powerpc: local user can read vector registers of other users' processes via a Facility Unavailable exception
  32. CVE-2019-15026memcached: stack-based buffer over-read in conn_to_str in memcached.c
  33. CVE-2019-14982exiv2: integer overflow in the WebPImage::getHeaderOffset can lead to a out of bounds read
  34. CVE-2019-14981ImageMagick: division by zero in MeanShiftImage in MagickCore/feature.c
  35. CVE-2019-14980ImageMagick: use-after-free in magick/blob.c resulting in a denial of service
  36. CVE-2019-14973libtiff: integer overflow in _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c
  37. CVE-2019-14907samba: Crash after failed character conversion at log level 3 or above
  38. CVE-2019-14906SDL: not fixed in Red Hat Enterprise Linux 7 erratum RHSA-2019:3950
  39. CVE-2019-14902samba: Replication of ACLs set to inherit down a subtree on AD Directory not automatic
  40. CVE-2019-14901kernel: heap overflow in marvell/mwifiex/tdls.c
  41. CVE-2019-14898kernel: incomplete fix for race condition between mmget_not_zero()/get_task_mm() and core dumping in CVE-2019-11599
  42. CVE-2019-14897kernel: stack-based buffer overflow in add_ie_rates function in drivers/net/wireless/marvell/libertas/cfg.c
  43. CVE-2019-14896kernel: heap-based buffer overflow in lbs_ibss_join_existing function in drivers/net/wireless/marvell/libertas/cfg.c
  44. CVE-2019-14895kernel: heap-based buffer overflow in mwifiex_process_country_ie() function in drivers/net/wireless/marvell/mwifiex/sta_ioctl.c
  45. CVE-2019-14893jackson-databind: Serialization gadgets in classes of the xalan package
  46. CVE-2019-14892jackson-databind: Serialization gadgets in classes of the commons-configuration package
  47. CVE-2019-14889libssh: unsanitized location in scp could lead to unwanted command execution
  48. CVE-2019-14870samba: The DelegationNotAllowed Kerberos feature restriction was not being applied when processing protocol transition requests (S4U2Self), in the AD DC KDC
  49. CVE-2019-14869ghostscript: -dSAFER escape in .charkeys (701841)
  50. CVE-2019-14868ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code injection
CVE 2019 document archive — Page 10 | PulseLinux