PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 13

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 13 / 32

  1. CVE-2019-13303ImageMagick: heap-based buffer over-read in MagickCore/composite.c in CompositeImage
  2. CVE-2019-13302ImageMagick: heap-based buffer over-read in MagickCore/fourier.c in ComplexImages
  3. CVE-2019-13301ImageMagick: memory leaks in AcquireMagickMemory
  4. CVE-2019-13300ImageMagick: heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns
  5. CVE-2019-13299ImageMagick: heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel
  6. CVE-2019-13298ImageMagick: heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because of a MagickCore/enhance.c error
  7. CVE-2019-13297ImageMagick: heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled
  8. CVE-2019-13296ImageMagick: direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value
  9. CVE-2019-13295ImageMagick: heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled
  10. CVE-2019-13272kernel: broken permission and object lifetime handling for PTRACE_TRACEME
  11. CVE-2019-13233kernel: use-after-free in arch/x86/lib/insn-eval.c
  12. CVE-2019-13232unzip: overlapping of files in ZIP container leads to denial of service
  13. CVE-2019-13225oniguruma: NULL pointer dereference in match_at() in regexec.c
  14. CVE-2019-13224oniguruma: Use-after-free in onig_new_deluxe() in regext.c
  15. CVE-2019-13173nodejs-fstream: File overwrite in fstream.DirWriter() function
  16. CVE-2019-13164Qemu: qemu-bridge-helper ACL can be bypassed when names are too long
  17. CVE-2019-13147audiofile: a NULL pointer dereference in ulaw2linear_buf in G711.cpp in libmodules.a leading to DoS
  18. CVE-2019-13137ImageMagick: a memory leak vulnerability in the function ReadPSImage in coders/ps.c
  19. CVE-2019-13136ImageMagick: an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c
  20. CVE-2019-13135ImageMagick: a "use of uninitialized value" vulnerability in the function ReadCUTImage leading to a crash and DoS
  21. CVE-2019-13134ImageMagick: a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c
  22. CVE-2019-13133ImageMagick: a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c
  23. CVE-2019-13118libxslt: read of uninitialized stack data due to too narrow xsl:number instruction and an invalid character
  24. CVE-2019-13117libxslt: an xsl number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers
  25. CVE-2019-13115libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write
  26. CVE-2019-13114exiv2: null-pointer dereference in http.c causing denial of service
  27. CVE-2019-13113exiv2: invalid data location in CRW image file causing denial of service
  28. CVE-2019-13112exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service
  29. CVE-2019-13111exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service
  30. CVE-2019-13110exiv2: integer-overflow and out-of-bounds read in CiffDirectory::readDirectory leads to denail of service
  31. CVE-2019-13109exiv2: denial of service in PngImage::readMetadata
  32. CVE-2019-13108exiv2: integer overflow PngImage::readMetadata leads to denial of service
  33. CVE-2019-13057openldap: Information disclosure issue in slapd component
  34. CVE-2019-13050GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS
  35. CVE-2019-13045irssi: use after free when sending SASL login to server
  36. CVE-2019-13038mod_auth_mellon: Open Redirect via the login?ReturnTo= substring which could facilitate information theft
  37. CVE-2019-13012glib2: insecure permissions for files and directories
  38. CVE-2019-12984kernel: null pointer dereference in function nfc_genl_deactivate_target() in net/nfc/netlink.c
  39. CVE-2019-12979imagemagick: use of uninitialized value in functionSyncImageSettings in MagickCore/image.c
  40. CVE-2019-12978imagemagick: use of uninitialized value in function ReadPANGOImage in coders/pango.c
  41. CVE-2019-12977imagemagick: use of uninitialised value in function WriteJP2Image in coders/jp2.c
  42. CVE-2019-12976imagemagick: memory leak vulnerability in function ReadPCLImage in coders/pcl.c
  43. CVE-2019-12975imagemagick: memory leak vulnerability in function WriteDPXImage in coders/dpx.c
  44. CVE-2019-12974imagemagick: null-pointer dereference in function ReadPANGOImage in coders/pango.c and ReadVIDImage in coders/vid.c causing denial of service
  45. CVE-2019-12973openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c
  46. CVE-2019-12972binutils: out-of-bounds read in setup_group in bfd/elf.c
  47. CVE-2019-12929QEMU: guest agent guest_exec command execution
  48. CVE-2019-12928QEMU: QMP migrate command execution issue
  49. CVE-2019-12904Libgcrypt: physical addresses being available to other processes leads to a flush-and-reload side-channel attack
  50. CVE-2019-12900bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).