PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 18

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 18 / 32

  1. CVE-2019-10898wireshark: GSUP dissector infinite loop (wnpa-sec-2019-18)
  2. CVE-2019-10897wireshark: IEEE 802.11 dissector infinite loop (wnpa-sec-2019-11 )
  3. CVE-2019-10896wireshark: DOF dissector crash (wnpa-sec-2019-15)
  4. CVE-2019-10895wireshark: NetScaler file parser crash (wnpa-sec-2019-09)
  5. CVE-2019-10894wireshark: GSS-API dissector crash (wnpa-sec-2019-14)
  6. CVE-2019-10873poppler: null-pointer dereference in function SplashClip::clipAALine in splash/SplashClip.cc
  7. CVE-2019-10872poppler: heap-based buffer over-read in function Splash::blitTransparent in splash/Splash.cc
  8. CVE-2019-10871poppler: heap-based buffer over-read in function PSOutputDev::checkPageSlice in PSOutputDev.cc
  9. CVE-2019-10785dojo: cross-site scripting via dojox.xmpp.util.xmlEncode
  10. CVE-2019-10747nodejs-set-value: prototype pollution in function set-value
  11. CVE-2019-10746nodejs-mixin-deep: prototype pollution in function mixin-deep
  12. CVE-2019-10714ImageMagick: out-of-bounds access in function LocaleLowercase in MagickCore/locale.c leads to SIGSEGV
  13. CVE-2019-10691dovecot: Mishandling invalid UTF-8 characters by JSON encoder leading to possible DoS attack.
  14. CVE-2019-10650ImageMagick: heap-based buffer over-read in WriteTIFFImage of coders/tiff.c leads to denial of service or information disclosure via crafted image file
  15. CVE-2019-10649ImageMagick: memory leak in SVGKeyValuePairs of coders/svg.c that leads to denial of service via crafted image file
  16. CVE-2019-10639Kernel: net: using kernel space address bits to derive IP ID may potentially break KASLR
  17. CVE-2019-10638Kernel: net: weak IP ID generation leads to remote device tracking
  18. CVE-2019-10247jetty: error path information disclosure
  19. CVE-2019-10246jetty: Directory Listing on Windows reveals Resource Base path
  20. CVE-2019-10245JDK: Read beyond the end of bytecode array causing JVM crash
  21. CVE-2019-10241jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions
  22. CVE-2019-10224389-ds-base: using dscreate in verbose mode results in information disclosure
  23. CVE-2019-10222ceph: Unauthenticated clients can crash ceph RGW configured with beast as frontend
  24. CVE-2019-10221pki-core: Reflected XSS in getcookies?url= endpoint in CA
  25. CVE-2019-10220kernel: CIFS: Relative paths injection in directory entry lists
  26. CVE-2019-10218samba: smb client vulnerable to filenames containing path separators
  27. CVE-2019-10216ghostscript: -dSAFER escape via .buildfont1 (701394)
  28. CVE-2019-10214containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure
  29. CVE-2019-10211postgresql: Windows installer bundled OpenSSL executes code from unprotected directory
  30. CVE-2019-10210postgresql: Windows installer writes superuser password to unprotected temporary file
  31. CVE-2019-10209postgresql: Memory disclosure in cross-type comparison for hashed subplan
  32. CVE-2019-10208postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution
  33. CVE-2019-10207kernel: null-pointer dereference in hci_uart_set_flow_control
  34. CVE-2019-10197samba: Combination of parameters and permissions can allow user to escape from the share path definition
  35. CVE-2019-10196nodejs-http-proxy-agent: Denial of Service and data leak due to improper buffer sanitization
  36. CVE-2019-10195ipa: Batch API logging user passwords to /var/log/httpd/error_log
  37. CVE-2019-10193redis: Stack buffer overflow in HyperLogLog triggered by malicious client
  38. CVE-2019-10192redis: Heap buffer overflow in HyperLogLog triggered by malicious client
  39. CVE-2019-10185icedtea-web: directory traversal in the nested jar auto-extraction leading to arbitrary file overwrite
  40. CVE-2019-10183virt-install: unattended option leaks password via command line argument
  41. CVE-2019-10182icedtea-web: path traversal while processing elements of JNLP files results in arbitrary file overwrite
  42. CVE-2019-10181icedtea-web: unsigned code injection in a signed JAR file
  43. CVE-2019-10179pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab
  44. CVE-2019-10171389-ds-base: Insufficient fix for CVE-2018-14648 denial of service in RHEL-7.5
  45. CVE-2019-10168libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs
  46. CVE-2019-10167libvirt: arbitrary command execution via virConnectGetDomainCapabilities API
  47. CVE-2019-10166libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients
  48. CVE-2019-10164postgresql: Stack-based buffer overflow via setting a password
  49. CVE-2019-10161libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API
  50. CVE-2019-10160python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc
CVE 2019 document archive — Page 18 | PulseLinux