PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 15

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 15 / 32

  1. CVE-2019-12222SDL: out-of-bounds read in function SDL_InvalidateMap in video/SDL_pixels.c
  2. CVE-2019-12221SDL: null-pointer dereference in function SDL_free_REAL in stdlib/SDL_malloc.c
  3. CVE-2019-12220SDL: out-of-bounds read in function SDL_FreePalette_REAL in video/SDL_pixels.c
  4. CVE-2019-12219SDL: invalid free error in function SDL_SetError_REAL
  5. CVE-2019-12218SDL: null-pointer dereference in function IMG_LoadPCX_RW in IMG_pcx.c
  6. CVE-2019-12217SDL: null-pointer dereference in function stdio_read in file/SDL_rwops.c
  7. CVE-2019-12216SDL: heap-based buffer overflow in function SDL2_image function IMG_LoadPCX_RW in IMG_pcx.c
  8. CVE-2019-12155QEMU: qxl: null pointer dereference while releasing spice resources
  9. CVE-2019-12086jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server.
  10. CVE-2019-12068qemu: scsi: lsi: potential infinite loop when executing script in lsi_execute_script
  11. CVE-2019-12067QEMU: NULL dereference in ahci_commit_buf() leading to DoS
  12. CVE-2019-11922zstd: race condition in one-pass compression functions that could allow out of bounds write
  13. CVE-2019-11884kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command
  14. CVE-2019-11840golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter
  15. CVE-2019-11833kernel: fs/ext4/extents.c leads to information disclosure
  16. CVE-2019-11815kernel: race condition in rds_tcp_kill_sock in net/rds/tcp.c leading to use-after-free
  17. CVE-2019-11811kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c
  18. CVE-2019-11810kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS
  19. CVE-2019-11775JDK: Failure to privatize a value pulled out of the loop by versioning
  20. CVE-2019-11772JDK: Out-of-bounds access in the String.getBytes method
  21. CVE-2019-11771JDK: Insecure RPATH in OpenJ9 on AIX
  22. CVE-2019-11764Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2
  23. CVE-2019-11763Mozilla: Incorrect HTML parsing results in XSS bypass technique
  24. CVE-2019-11762Mozilla: document.domain-based origin isolation has same-origin-property violation
  25. CVE-2019-11761Mozilla: Unintended access to a privileged JSONView object
  26. CVE-2019-11760Mozilla: Stack buffer overflow in WebRTC networking
  27. CVE-2019-11759Mozilla: Stack buffer overflow in HKDF output
  28. CVE-2019-11758Mozilla: Potentially exploitable crash due to 360 Total Security
  29. CVE-2019-11757Mozilla: Use-after-free when creating index updates in IndexedDB
  30. CVE-2019-11756nss: Use-after-free in sftk_FreeSession due to improper refcounting
  31. CVE-2019-11755thunderbird: spoofing a message author via a crafted S/MIME
  32. CVE-2019-11754Mozilla: Pointer Lock is enabled with no user notification
  33. CVE-2019-11753Mozilla: Privilege escalation with Mozilla Maintenance Service in custom Firefox installation location
  34. CVE-2019-11752Mozilla: Use-after-free while extracting a key value in IndexedDB
  35. CVE-2019-11751Mozilla: Malicious code execution through command line parameters
  36. CVE-2019-11750Mozilla: Type confusion in Spidermonkey
  37. CVE-2019-11749Mozilla: Camera information available without prompting using getUserMedia
  38. CVE-2019-11748Mozilla: Persistence of WebRTC permissions in a third party context
  39. CVE-2019-11747Mozilla: 'Forget about this site' removes sites from pre-loaded HSTS list
  40. CVE-2019-11746Mozilla: Use-after-free while manipulating video
  41. CVE-2019-11745nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate
  42. CVE-2019-11744Mozilla: XSS by breaking out of title and textarea elements using innerHTML
  43. CVE-2019-11743Mozilla: Cross-origin access to unload event attributes
  44. CVE-2019-11742Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images
  45. CVE-2019-11741Mozilla: Isolate addons.mozilla.org and accounts.firefox.com
  46. CVE-2019-11740Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
  47. CVE-2019-11739Mozilla: Covert Content Attack on S/MIME encryption using a crafted multipart/alternative message
  48. CVE-2019-11738Mozilla: Content security policy bypass through hash-based sources in directives
  49. CVE-2019-11737Mozilla: Content security policy directives ignore port and path if host is a wildcard
  50. CVE-2019-11736Mozilla: File manipulation and privilege escalation in Mozilla Maintenance Service
CVE 2019 document archive — Page 15 | PulseLinux