PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 17

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 17 / 32

  1. CVE-2019-11472ImageMagick: denial of service in ReadXWDImage in coders/xwd.c in the XWD image parsing component
  2. CVE-2019-11470ImageMagick: denial of service in cineon parsing component
  3. CVE-2019-11463libarchive: memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c causing denial of service via crafted zip file
  4. CVE-2019-11461nautilus: sandbox security bypass
  5. CVE-2019-11460gnome-desktop: thumbnailer security bypass
  6. CVE-2019-11459evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()
  7. CVE-2019-11360iptables: buffer overflow in iptables-restore
  8. CVE-2019-11358jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection
  9. CVE-2019-11356cyrus-imapd: buffer overflow in CalDAV request handling triggered by a long iCalendar property name
  10. CVE-2019-11331ntp: Using port 123 for modes where a fixed port number is not required facilitates off-path attacks.
  11. CVE-2019-11324python-urllib3: Certification mishandle when error should be thrown
  12. CVE-2019-11323haproxy: weak HMAC keys used to TLS session resumption after reload with rotated keys
  13. CVE-2019-11236python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on internal service
  14. CVE-2019-11235freeradius: eap-pwd: authentication bypass via an invalid curve attack
  15. CVE-2019-11234freeradius: eap-pwd: fake authentication using reflection
  16. CVE-2019-11191kernel: race condition in load_aout_binary() allows local users to bypass ASLR on setuid a.out programs
  17. CVE-2019-11190kernel: ASLR bypass for setuid binaries due to late install_exec_creds()
  18. CVE-2019-11184hardware: Side-channel cache attack against DDIO with RDMA
  19. CVE-2019-11139hw: voltage modulation technical advisory
  20. CVE-2019-11135hw: TSX Transaction Asynchronous Abort (TAA)
  21. CVE-2019-11098edk2: Insufficient input validation in MdeModulePkg may lead to privilege escalation
  22. CVE-2019-11091hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)
  23. CVE-2019-11090hw: ECDSA signature timing vulnerabilities in TPM module
  24. CVE-2019-11085kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation
  25. CVE-2019-11070webkitgtk: HTTP proxy setting deanonymization information disclosure
  26. CVE-2019-11068libxslt: xsltCheckRead and xsltCheckWrite routines security bypass by crafted URL
  27. CVE-2019-11050php: Out of bounds read when parsing EXIF information
  28. CVE-2019-11049php: double free when supplying custom headers to mail function
  29. CVE-2019-11048php: Integer wraparounds when receiving multipart forms
  30. CVE-2019-11047php: Information disclosure in exif_read_data()
  31. CVE-2019-11046php: OOB read in bc_shift_addsub
  32. CVE-2019-11045php: DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte
  33. CVE-2019-11044php: link function accepts filenames with embedded null byte and treats them as terminating at that byte on Windows
  34. CVE-2019-11043php: underflow in env_path_info in fpm_main.c
  35. CVE-2019-11042php: Heap buffer over-read in exif_process_user_comment()
  36. CVE-2019-11041php: Heap buffer over-read in exif_scan_thumbnail()
  37. CVE-2019-11040php: Buffer over-read in exif_read_data()
  38. CVE-2019-11039php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers()
  39. CVE-2019-11038gd: Information disclosure in gdImageCreateFromXbm()
  40. CVE-2019-11036php: Buffer over-read in exif_process_IFD_TAG() leading to information disclosure
  41. CVE-2019-11035php: Heap buffer overflow in function exif_iif_add_value()
  42. CVE-2019-11034php: Heap buffer overflow in function exif_process_IFD_TAG()
  43. CVE-2019-11026poppler: infinite recursion in function FontInfoScanner::scanFonts in FontInfo.cc
  44. CVE-2019-11023graphviz: null pointer dereference in function agroot() in cgraph\obj.c
  45. CVE-2019-10906python-jinja2: str.format_map allows sandbox escape
  46. CVE-2019-10903wireshark: DCERPC SPOOLSS dissector crash (wnpa-sec-2019-18)
  47. CVE-2019-10902wireshark: TSDNS dissector crash (wnpa-sec-2019-16)
  48. CVE-2019-10901wireshark: LDSS dissector crash (wnpa-sec-2019-17)
  49. CVE-2019-10900wireshark: Rbm dissector infinite loop (wnpa-sec-2019-13)
  50. CVE-2019-10899wireshark: SRVLOC dissector crash (wnpa-sec-2019-10)
CVE 2019 document archive — Page 17 | PulseLinux