PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 14

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 14 / 32

  1. CVE-2019-12881kernel: NULL pointer dereference in i915_gem_userptr_get_pages allows local denial of service via crafted ioctl calls
  2. CVE-2019-12855python-twisted: XMPP support in words.protocols.jabber.xmlstream in Twisted does not verify certificates allowing for a MITM connections
  3. CVE-2019-12854squid: Denial of service in cachemgr.cgi
  4. CVE-2019-12819kernel: use-after-free in function __mdiobus_register() in drivers/net/phy/mdio_bus.c
  5. CVE-2019-12818kernel: null-pointer dereference in function nfc_llcp_build_tlv in net/nfc/llcp_commands.c
  6. CVE-2019-12817kernel: ppc: unrelated processes being able to read/write to each other's virtual memory
  7. CVE-2019-12814jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.
  8. CVE-2019-12795gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd
  9. CVE-2019-12779libqb: Insecure treatment of IPC (temporary) files
  10. CVE-2019-12761pyxdg: code injection via crafted python code
  11. CVE-2019-12749dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass
  12. CVE-2019-12735vim/neovim: ': source!' command allows arbitrary command execution via modelines
  13. CVE-2019-12615kernel: null pointer dereference in get_vdev_port_node_info in arch /sparc/kernel/mdesc.c
  14. CVE-2019-12614kernel: null pointer dereference in dlpar_parse_cc_property in arch/powerrc/platforms/pseries/dlpar.c causing denial of service
  15. CVE-2019-12529squid: Out of bounds read in Proxy-Authorization header causes DoS
  16. CVE-2019-12528squid: Information Disclosure issue in FTP Gateway
  17. CVE-2019-12527squid: heap-based buffer overflow in HttpHeader::getAuth
  18. CVE-2019-12526squid: Heap overflow issue in URN processing
  19. CVE-2019-12525squid: parsing of header Proxy-Authentication leads to memory corruption
  20. CVE-2019-12524squid: Improper access restriction in url_regex may lead to security bypass
  21. CVE-2019-12523squid: Improper input validation in URI processor
  22. CVE-2019-12522squid: lack of UID assignment in child process spawning could lead to privileges escalation
  23. CVE-2019-12521squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash
  24. CVE-2019-12520squid: Improper input validation in request allows for proxy manipulation
  25. CVE-2019-12519squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow
  26. CVE-2019-12456kernel: double fetch in the MPT3COMMAND case in _ctl_ioctl_main in drivers/scsi/mpt3sas/mpt3sas_ctl.c
  27. CVE-2019-12455kernel: null pointer dereference in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c causing denial of service
  28. CVE-2019-12454kernel: unspecified impact in function wcd9335_codec_enable_dec in sound/soc/codecs/wcd9335.c
  29. CVE-2019-12450glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress
  30. CVE-2019-12449gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges
  31. CVE-2019-12448gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write
  32. CVE-2019-12447gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c
  33. CVE-2019-12439bubblewrap: temporary directory misuse as mount point
  34. CVE-2019-12436samba: NULL pointer dereference in Samba LDAP server leading to crash and Dos
  35. CVE-2019-12435samba: AD DC Denial of Service in DNS management server
  36. CVE-2019-12420spamassassin: crafted email message can lead to DoS
  37. CVE-2019-12418tomcat: local privilege escalation
  38. CVE-2019-12402apache-commons-compress: Infinite loop in name encoding algorithm
  39. CVE-2019-12387python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods
  40. CVE-2019-12384jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution
  41. CVE-2019-12382kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service
  42. CVE-2019-12381kernel: unchecked kmalloc of new_ra in ip_ra_control leads to denial of service
  43. CVE-2019-12380kernel: memory allocation failure in the efi subsystem leads to denial of service
  44. CVE-2019-12379kernel: memory leak in con_insert_unipair in drivers/tty/vt/consolemap.c
  45. CVE-2019-12378kernel: unchecked kmalloc of new_ra in ip6_ra_control leads to denial of service
  46. CVE-2019-12360xpdf: buffer over-read via crafted PDF document leads to DoS or memory leak
  47. CVE-2019-12312libreswan: null-pointer dereference by sending two IKEv2 packets
  48. CVE-2019-12295wireshark: missing dissection recursion checks leads to denial of service
  49. CVE-2019-12293poppler: heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc
  50. CVE-2019-12247QEMU: qemu-guest-agent: integer overflow while running guest-exec command
CVE 2019 document archive — Page 14 | PulseLinux