PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 12

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 12 / 32

  1. CVE-2019-14439jackson-databind: Polymorphic typing issue related to logback/JNDI
  2. CVE-2019-14379jackson-databind: default typing mishandling leading to remote code execution
  3. CVE-2019-14378QEMU: slirp: heap buffer overflow during packet reassembly
  4. CVE-2019-14370exiv2: Out-of-bounds read in Exiv2::MrwImage::readMetadata() in mrwimage.cpp
  5. CVE-2019-14369exiv2: Heap-based buffer over-read in Exiv2::PngImage::readMetadata() in pngimage.cpp
  6. CVE-2019-14368exiv2: Heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp
  7. CVE-2019-14287sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword
  8. CVE-2019-14284kernel: denial of service in drivers/block/floppy.c by setup_format_params division-by-zero
  9. CVE-2019-14283kernel: integer overflow and OOB read in drivers/block/floppy.c
  10. CVE-2019-14275transfig: stack-based buffer overflow in calc_arrow in bound.c
  11. CVE-2019-14274mcpp: heap based buffer overflow in function do_msg() in support.c
  12. CVE-2019-14271docker: nsswitch based config loaded inside chroot under Glibc
  13. CVE-2019-14250binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow
  14. CVE-2019-14249libdwarf: division by zero in dwarf_elf_load_headers.c leading to DoS
  15. CVE-2019-14248nasm: NULL pointer dereference in asm/pragma.c leading to Segmentation fault
  16. CVE-2019-14247mpg321: out-of-bounds write via a zero bitrate in an MP3 file
  17. CVE-2019-14241haproxy: DoS via vectors realted to htx_manage_client_side_cookies in proto_htx.c
  18. CVE-2019-13960libjpeg-turbo: denial of service due to incorrect width and height value of JPEG image
  19. CVE-2019-13753sqlite: fts3: incorrectly removed corruption check
  20. CVE-2019-13752sqlite: fts3: improve shadow table corruption detection
  21. CVE-2019-13751sqlite: fts3: improve detection of corrupted records
  22. CVE-2019-13750sqlite: dropping of shadow tables not restricted in defensive mode
  23. CVE-2019-13734sqlite: fts3: improve shadow table corruption detection
  24. CVE-2019-13722Mozilla: Stack corruption due to incorrect number of arguments in WebRTC code
  25. CVE-2019-13648kernel: denial of service in arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c via sigreturn() system call
  26. CVE-2019-13638patch: OS shell command injection when processing crafted patch files
  27. CVE-2019-13636patch: the following of symlinks in inp.c and util.c is mishandled in cases other than input files
  28. CVE-2019-13631kernel: OOB writes in parse_hid_report_descriptor in drivers/input/tablet/gtco.c
  29. CVE-2019-13627libgcrypt: ECDSA timing attack allowing private key leak
  30. CVE-2019-13626SDL: integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c leads to heap-based buffer over-read in Fill_IMA_ADPCM_block
  31. CVE-2019-13619wireshark: ASN.1 BER dissector crash (wnpa-sec-2019-20)
  32. CVE-2019-13616SDL: heap-based buffer overflow in SDL blit functions in video/SDL_blit*.c
  33. CVE-2019-13590sox: integer overflow in libsox.a leading to a NULL pointer dereference
  34. CVE-2019-13565openldap: ACL restrictions bypass due to sasl_ssf value being set permanently
  35. CVE-2019-13509docker: Docker Engine in debug mode may sometimes add secrets to the debug log leading to information disclosure
  36. CVE-2019-13504exiv2: out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp
  37. CVE-2019-13456freeradius: eap-pwd: Information leak due to aborting when needing more than 10 iterations
  38. CVE-2019-13454ImageMagick: division by zero in RemoveDuplicateLayers in MagickCore/layer.c
  39. CVE-2019-13391ImageMagick: heap-based buffer over-read in MagickCore/fourier.c
  40. CVE-2019-13377wpa_supplicant: Timing-based side-channel attack against WPA3's Dragonfly handshake when using Brainpool curves
  41. CVE-2019-13345squid: XSS via user_name or auth parameter in cachemgr.cgi
  42. CVE-2019-13313Libosinfo: osinfo-install-script option leaks password via command line argument
  43. CVE-2019-13311ImageMagick: memory leaks at AcquireMagickMemory because of a wand/mogrify.c error
  44. CVE-2019-13310ImageMagick: memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c
  45. CVE-2019-13309ImageMagick: memory leaks at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages
  46. CVE-2019-13308ImageMagick: heap-based buffer overflow in MagickCore/fourier.c in ComplexImage
  47. CVE-2019-13307ImageMagick: heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows
  48. CVE-2019-13306ImageMagick: stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors
  49. CVE-2019-13305ImageMagick: stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error
  50. CVE-2019-13304ImageMagick: stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment
CVE 2019 document archive — Page 12 | PulseLinux