PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 16

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 16 / 32

  1. CVE-2019-11735Mozilla: Memory safety bugs fixed in Firefox 69 and Firefox ESR 68.1
  2. CVE-2019-11734Mozilla: Memory safety bugs fixed in Firefox 69
  3. CVE-2019-11733firefox: stored passwords in 'Saved Logins' can be copied without master password entry
  4. CVE-2019-11730Mozilla: Same-origin policy treats all files in a directory as having the same-origin
  5. CVE-2019-11729nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault
  6. CVE-2019-11728Mozilla: Port scanning through Alt-Svc header
  7. CVE-2019-11727nss: PKCS#1 v1.5 signatures can be used for TLS 1.3
  8. CVE-2019-11725Mozilla: Websocket resources bypass safebrowsing protections
  9. CVE-2019-11724Mozilla: Retired site input.mozilla.org has remote troubleshooting permissions
  10. CVE-2019-11723Mozilla: Cookie leakage during add-on fetching across private browsing boundaries
  11. CVE-2019-11721Mozilla: Domain spoofing through unicode latin 'kra' character
  12. CVE-2019-11720Mozilla: Character encoding XSS vulnerability
  13. CVE-2019-11719nss: Out-of-bounds read when importing curve25519 private key
  14. CVE-2019-11718Mozilla: Activity Stream writes unsanitized content to innerHTML
  15. CVE-2019-11717Mozilla: Caret character improperly escaped in origins
  16. CVE-2019-11716Mozilla: globalThis not enumerable until accessed
  17. CVE-2019-11715Mozilla: HTML parsing error can contribute to content XSS
  18. CVE-2019-11714Mozilla: NeckoChild can trigger crash when accessed off of main thread
  19. CVE-2019-11713Mozilla: Use-after-free with HTTP/2 cached stream
  20. CVE-2019-11712Mozilla: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects
  21. CVE-2019-11711Mozilla: Script injection within domain through inner window reuse
  22. CVE-2019-11710Mozilla: Memory safety bugs fixed in Firefox 68
  23. CVE-2019-11709Mozilla: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8
  24. CVE-2019-11708Mozilla: Sandbox escape using Prompt:Open
  25. CVE-2019-11707Mozilla: Type confusion in Array.pop
  26. CVE-2019-11706libical: Type confusion in icaltimezone_get_vtimezone_properties function in icalproperty.c
  27. CVE-2019-11705libical: Stack buffer overflow in icalrecur_add_bydayrules in icalrecur.c
  28. CVE-2019-11704libical: Heap buffer overflow in icalmemory_strdup_and_dequote function in icalvalue.c
  29. CVE-2019-11703libical: Heap buffer over read in icalparser.c parser_get_next_char
  30. CVE-2019-11702Mozilla: IE protocols can be used to open known local files
  31. CVE-2019-11698Mozilla: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
  32. CVE-2019-11694Mozilla: Uninitialized memory leakage in Windows sandbox
  33. CVE-2019-11693Mozilla: Buffer overflow in WebGL bufferdata on Linux
  34. CVE-2019-11692Mozilla: Use-after-free removing listeners in the event listener manager
  35. CVE-2019-11691Mozilla: Use-after-free in XMLHttpRequest
  36. CVE-2019-11683kernel: udp_gro_receive_segment in net/ipv4/udp_offload.c allows denial of service or other unspecified impact via UDP packets with 0 payload
  37. CVE-2019-11599kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping
  38. CVE-2019-11598ImageMagick: heap-based buffer over-read in the function WritePNMImage of coders/pnm.c leading to DoS or information disclosure
  39. CVE-2019-11597ImageMagick: heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c leading to DoS or information disclosure
  40. CVE-2019-11596memcached: null-pointer dereference in "lru mode" and "lru temp_ttl" causing denial of service
  41. CVE-2019-11555wpa_supplicant: NULL pointer dereference due to improper fragmentation reassembly state validation in EAP-pwd implementation
  42. CVE-2019-11500dovecot: improper NULL byte handling in IMAP and ManageSieve protocol parsers leads to out of bounds writes
  43. CVE-2019-11499dovecot: unacceptable authentication message in AUTH PLAIN over TLS leads to crash and possible DoS
  44. CVE-2019-11498wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS
  45. CVE-2019-11494dovecot: premature disconnection from client during AUTH command leads to crash and possible DoS
  46. CVE-2019-11487kernel: Count overflow in FUSE request leading to use-after-free issues.
  47. CVE-2019-11486kernel: multiple race conditions in Siemens R3964 line discipline driver in drivers/tty/n_r3964.c leading to denial of service
  48. CVE-2019-11479kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service
  49. CVE-2019-11478Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service
  50. CVE-2019-11477Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service
CVE 2019 document archive — Page 16 | PulseLinux