PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 2

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 2 / 32

  1. CVE-2019-20916python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py
  2. CVE-2019-20908kernel: lockdown: bypass through ACPI write via efivar_ssdt
  3. CVE-2019-20907python: infinite loop in the tarfile module via crafted TAR archive
  4. CVE-2019-20892net-snmp: double free in usm_free_usmStateReference function in snmplib/snmpusm.c via an SNMPv3 GetBulk request
  5. CVE-2019-20840libvncserver: unaligned accesses in hybiReadAndDecode can lead to a crash
  6. CVE-2019-20839libvncserver: buffer overflow in ConnectClientToUnixSock()
  7. CVE-2019-20838pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1
  8. CVE-2019-20812kernel: af_packet: TPACKET_V3: invalid timer timeout on error
  9. CVE-2019-20811kernel: net-sysfs: *_queue_add_kobject refcount issue
  10. CVE-2019-20810kernel: go7007_snd_init in drivers/media/usb/go7007/snd-go7007.c in the Linux kernel before 5.6 does not call snd_card_free for a failure path, which causes a memory leak
  11. CVE-2019-20808QEMU: out-of-bounds read in ati_cursor_define() function in hw/display/ati.c leads to DoS
  12. CVE-2019-20807vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode
  13. CVE-2019-20806kernel: NULL pointer dereference in tw5864_handle_frame function in drivers/media/pci/tw5864/tw5864-video.c
  14. CVE-2019-20795iproute: use-after-free in get_netnsid_from_name in ip/ipnetns.c
  15. CVE-2019-20794kernel: task processes not being properly ended could lead to resource exhaustion
  16. CVE-2019-20792opensc: Double free in coolkey_free_private_data in libopensc/card-coolkey.c
  17. CVE-2019-20788libvncserver: integer overflow and heap-based buffer overflow in libvncclient/cursor.c in HandleCursorShape function
  18. CVE-2019-20637varnish: not clearing pointer between two client requests leads to information disclosure
  19. CVE-2019-20636kernel: out-of-bounds write via crafted keycode table
  20. CVE-2019-20633patch: double free in another_hunk function in pch.c
  21. CVE-2019-20509libarchive: heap-based buffer overflow in archive_read_support_format_lha.c due to insufficient validation of UTF-16 input
  22. CVE-2019-20503usrsctp: Out of bounds reads in sctp_load_addresses_from_init()
  23. CVE-2019-20485libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent
  24. CVE-2019-20479mod_auth_openidc: Open redirect issue exists in URLs with slash and backslash
  25. CVE-2019-20477PyYAML: command execution through python/object/apply constructor in FullLoader
  26. CVE-2019-20454pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode
  27. CVE-2019-20446librsvg: Resource exhaustion via crafted SVG file with nested patterns
  28. CVE-2019-20433aspell: UCS-2 and UCS-4 null-terminated string handling OOB read
  29. CVE-2019-20422kernel: mishandling the RT6_LOOKUP_F_DST_NOREF flag in fib6_rule_lookup in net/ipv6/ip6_fib.c
  30. CVE-2019-20421exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS
  31. CVE-2019-20398libyang: NULL pointer dereference in function lys_extension_instances_free()
  32. CVE-2019-20397libyang: double-free in yyparse() when organization field is not terminated
  33. CVE-2019-20396libyang: heap-based buffer over-read in function lys_type_free() due to malformed pattern
  34. CVE-2019-20395libyang: stack-overflow when parsing yang files with self-referential union types
  35. CVE-2019-20394libyang: double-free in yyparse() when a type statement is used in a notification statement
  36. CVE-2019-20393libyang: double-free in function yyparse() when empty description is used
  37. CVE-2019-20392libyang: invalid memory access when if-feature statement is used inside a list key node
  38. CVE-2019-20391libyang: invalid memory access in resolve_feature_value() when a if-feature is used inside a bit
  39. CVE-2019-20388libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c
  40. CVE-2019-20387libsolv: out-of-bounds read in repodata_schema2id in repodata.c
  41. CVE-2019-20386systemd: memory leak in button_open() in login/logind-button.c when udev events are received
  42. CVE-2019-20382QEMU: vnc: memory leakage upon disconnect
  43. CVE-2019-20372nginx: HTTP request smuggling in configurations with URL redirect used as error_page
  44. CVE-2019-20352nasm: heap-based buffer over-read in set_text_free when called from expand_one_smacro in asm/preproc.c
  45. CVE-2019-20334nasm: stack consumption occurs in expr# functions in asm/eval.c
  46. CVE-2019-20330jackson-databind: lacks certain net.sf.ehcache blocking
  47. CVE-2019-20218sqlite: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error
  48. CVE-2019-20149nodejs-kind-of: ctorName in index.js allows external user input to overwrite certain internal attributes
  49. CVE-2019-20096kernel: memory leak in __feat_register_sp() in net/dccp/feat.c
  50. CVE-2019-20095kernel: memory leak in mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c
CVE 2019 document archive — Page 2 | PulseLinux