PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 11

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 11 / 32

  1. CVE-2019-14867ipa: Denial of service in IPA server due to wrong use of ber_scanf()
  2. CVE-2019-14866cpio: improper input validation when writing tar header fields leads to unexpected tar generation
  3. CVE-2019-14865grub2: grub2-set-bootflag utility causes grubenv corruption rendering the system non-bootable
  4. CVE-2019-14861samba: An authenticated user can crash the DCE/RPC DNS management server by creating records with matching the zone name
  5. CVE-2019-14857mod_auth_openidc: Open redirect in logout url when using URLs with leading slashes
  6. CVE-2019-14855gnupg2: OpenPGP Key Certification Forgeries with SHA-1
  7. CVE-2019-14851nbdkit: assertion failure by issuing commands in the wrong order
  8. CVE-2019-14850nbdkit: denial of service due to premature opening of back-end connection
  9. CVE-2019-14847samba: samba AD DC LDAP denial of service via dirsync
  10. CVE-2019-14844krb5: reversed strlcpy() allows client to crash the KDC
  11. CVE-2019-14835kernel: vhost-net: guest to host kernel escape during migration
  12. CVE-2019-14834dnsmasq: memory leak in the create_helper() function in /src/helper.c
  13. CVE-2019-14833samba: AD DC check password script does not receive full password when non-ASCII characters are used
  14. CVE-2019-14826ipa: Session not terminated after logout
  15. CVE-2019-14824389-ds-base: Read permission check bypass via the deref plugin
  16. CVE-2019-14823JSS: OCSP policy "Leaf and Chain" implicitly trusts the root certificate
  17. CVE-2019-14822ibus: missing authorization allows local attacker to access the input bus of another user
  18. CVE-2019-14821Kernel: KVM: OOB memory access via mmio ring buffer
  19. CVE-2019-14818dpdk: possible memory leak leads to denial of service
  20. CVE-2019-14817ghostscript: Safer mode bypass by .forceput exposure in .pdfexectoken and other procedures (701450)
  21. CVE-2019-14816kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver
  22. CVE-2019-14815kernel: heap-overflow in mwifiex_set_wmm_params() function of Marvell WiFi driver leading to DoS
  23. CVE-2019-14814kernel: heap overflow in mwifiex_set_uap_rates() function of Marvell Wifi Driver leading to DoS
  24. CVE-2019-14813ghostscript: Safer mode bypass by .forceput exposure in setsystemparams (701443)
  25. CVE-2019-14812ghostscript: Safer mode bypass by .forceput exposure in setuserparams (701444)
  26. CVE-2019-14811ghostscript: Safer mode bypass by .forceput exposure in .pdf_hook_DSC_Creator (701445)
  27. CVE-2019-14809golang: malformed hosts in URLs leads to authorization bypass
  28. CVE-2019-14806python-werkzeug: insufficient debugger PIN randomness vulnerability
  29. CVE-2019-14763kernel: double-locking error in drivers/usb/dwc3/gadget.c leads to denial of service
  30. CVE-2019-14744kdelibs: malicious desktop files and configuration files lead to code execution with minimal user interaction
  31. CVE-2019-14615kernel: Intel graphics card information leak.
  32. CVE-2019-14587edk2: double-unmap issue in SdMmcCreateTrb function in MdeModulePkg/Bus/Pci/SdMmcPciHcDxe/SdMmcPciHci.c
  33. CVE-2019-14586edk2: potential use-after-free due to the original configuration runtime memory is freed but it is still exposed to the OS runtime
  34. CVE-2019-14584edk2: NULL pointer dereference in AuthenticodeVerify()
  35. CVE-2019-14576edk2: DataDirectory security table element does not get included in signature verification
  36. CVE-2019-14575edk2: DxeImageVerificationHandler() fails open in case of dbx signature check
  37. CVE-2019-14563edk2: numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib
  38. CVE-2019-14562edk2: DxeImageVerificationHandler integer overflow leads to endless loop
  39. CVE-2019-14561edk2: improper input validation leads to memory corruption when loading PE sections
  40. CVE-2019-14560edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler()
  41. CVE-2019-14559edk2: memory leak in ArpOnFrameRcvdDpc
  42. CVE-2019-14558edk2: potentially leaking of secret information due to uncleared memory
  43. CVE-2019-14553edk2: invalid server certificate accepted in HTTPS-over-IPv6 boot
  44. CVE-2019-14540jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig
  45. CVE-2019-14513dnsmasq: Improper bounds checking leads to a buffer overread
  46. CVE-2019-14494poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc
  47. CVE-2019-14493opencv: NULL pointer dereference in function cv::XMLParser::parse() in persistence_xml.cpp leading to DoS
  48. CVE-2019-14492opencv: out-of-bounds read in function HaarEvaluator::OptFeature::calc() in cascadedetect.hpp leading to DoS
  49. CVE-2019-14491opencv: out-of-bounds read in function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp leads to dos
  50. CVE-2019-14444binutils: integer overflow in function apply_relocation in readelf.c
CVE 2019 document archive — Page 11 | PulseLinux