PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 19

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 19 / 32

  1. CVE-2019-10156ansible: unsafe template evaluation of returned module data can lead to information disclosure
  2. CVE-2019-10155libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check
  3. CVE-2019-10153fence-agents: mis-handling of non-ASCII characters in guest comment fields
  4. CVE-2019-10152podman: Improper symlink resolution allows access to host files when executing `podman cp` on running containers
  5. CVE-2019-10146pki-core: Reflected XSS in 'path length' constraint field in CA's Agent page
  6. CVE-2019-10143freeradius: privilege escalation due to insecure logrotate configuration
  7. CVE-2019-10142kernel: integer overflow in ioctl handling of fsl hypervisor
  8. CVE-2019-10140kernel: overlayfs: NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c
  9. CVE-2019-10139cockpit-ovirt: admin and appliance passwords saved in plain text variable file during HE deployment
  10. CVE-2019-10132libvirt: wrong permissions in systemd admin-sock due to missing SocketMode parameter
  11. CVE-2019-10131ImageMagick: off-by-one read in formatIPTCfromBuffer function in coders/meta.c
  12. CVE-2019-10130postgresql: Selectivity estimators bypass row security policies
  13. CVE-2019-10129postgresql: Memory disclosure in partition routing
  14. CVE-2019-10128postgresql: EnterpriseDB installer does not clear permissive ACL entries
  15. CVE-2019-10127postgresql: BigSQL installer does not clear permissive ACL entries
  16. CVE-2019-10126kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c
  17. CVE-2019-10125kernel: use-after-free in aio_poll() in fs/aio.c
  18. CVE-2019-10124kernel: hwpoison implementation in mm/memory-failure.c leads to denial of service
  19. CVE-2019-10098httpd: mod_rewrite potential open redirect
  20. CVE-2019-10097httpd: null-pointer dereference in mod_remoteip
  21. CVE-2019-10092httpd: limited cross-site scripting in mod_proxy error page
  22. CVE-2019-10086apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default
  23. CVE-2019-10082httpd: read-after-free in h2 connection shutdown
  24. CVE-2019-10081httpd: memory corruption on early pushes
  25. CVE-2019-10072tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199
  26. CVE-2019-10063flatpak: Sandbox bypass via IOCSTI (incomplete fix for CVE-2017-5226)
  27. CVE-2019-9959poppler: integer overflow in JPXStream::init function leading to memory consumption
  28. CVE-2019-9956imagemagick: stack-based buffer overflow in function PopHexPixel in coders/ps.c
  29. CVE-2019-9948python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms
  30. CVE-2019-9947python: CRLF injection via the path part of the url passed to urlopen()
  31. CVE-2019-9946kubernetes: Incorrect rule injection in CNI portmap plugin
  32. CVE-2019-9937sqlite: null-pointer dereference in function fts5ChunkIterate in sqlite3.c
  33. CVE-2019-9936sqlite: heap-based buffer over-read in function fts5HashEntrySort in sqlite3.c
  34. CVE-2019-9928GStreamer: heap-based buffer overflow in the RTSP connection parser via crafted server response leading to remote code execution
  35. CVE-2019-9924bash: BASH_CMD is writable in restricted bash shells
  36. CVE-2019-9923tar: null-pointer dereference in pax_decode_header in sparse.c
  37. CVE-2019-9904graphviz: recursive function call in agclose in lib\cgraph\graph.c causing stack consumption
  38. CVE-2019-9903poppler: stack consumption in function Dict::find() in Dict.cc
  39. CVE-2019-9893libseccomp: incorrect generation of syscall filters in libseccomp
  40. CVE-2019-9857kernel: memory leak in inotify_update_existing_watch() leads to denial of service
  41. CVE-2019-9854libreoffice: Unsafe URL assembly flaw in allowed script location check
  42. CVE-2019-9853libreoffice: Insufficient URL decoding flaw in categorizing macro location
  43. CVE-2019-9852libreoffice: Insufficient URL encoding flaw in allowed script location check
  44. CVE-2019-9851libreoffice: LibreLogo global-event script execution
  45. CVE-2019-9850libreoffice: Insufficient URL validation allowing LibreLogo script execution
  46. CVE-2019-9849libreoffice: Remote resources protection module not applied to bullet graphics
  47. CVE-2019-9848libreoffice: LibreLogo script can be manipulated into executing arbitrary python commands
  48. CVE-2019-9824QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables
  49. CVE-2019-9821firefox: use-after-free in AssertWorkerThread leading to crash
  50. CVE-2019-9820Mozilla: Use-after-free of ChromeEventHandler by DocShell
CVE 2019 document archive — Page 19 | PulseLinux