PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 20

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 20 / 32

  1. CVE-2019-9819Mozilla: Compartment mismatch with fetch API
  2. CVE-2019-9818Mozilla: Use-after-free in crash generation server
  3. CVE-2019-9817Mozilla: Stealing of cross-domain images using canvas
  4. CVE-2019-9816Mozilla: Type confusion with object groups and UnboxedObjects
  5. CVE-2019-9815Mozilla: Disable hyperthreading on content JavaScript threads on macOS
  6. CVE-2019-9813Mozilla: Ionmonkey type confusion with __proto__ mutations
  7. CVE-2019-9812Mozilla: Sandbox escape through Firefox Sync
  8. CVE-2019-9811Mozilla: Sandbox escape via installation of malicious language pack
  9. CVE-2019-9810Mozilla: IonMonkey MArraySlice has incorrect alias information
  10. CVE-2019-9801Mozilla: Windows programs that are not 'URL Handlers' are exposed to web content
  11. CVE-2019-9800Mozilla: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  12. CVE-2019-9797Mozilla: Cross-origin theft of images with createImageBitmap
  13. CVE-2019-9796Mozilla: Use-after-free with SMIL animation controller
  14. CVE-2019-9795Mozilla: Type-confusion in IonMonkey JIT compiler
  15. CVE-2019-9794Mozilla: Command line arguments not discarded during execution
  16. CVE-2019-9793Mozilla: Improper bounds checks when Spectre mitigations are disabled
  17. CVE-2019-9792Mozilla: IonMonkey leaks JS_OPTIMIZED_OUT magic value to script
  18. CVE-2019-9791Mozilla: Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey
  19. CVE-2019-9790Mozilla: Use-after-free when removing in-use DOM elements
  20. CVE-2019-9788Mozilla: Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6
  21. CVE-2019-9755ntfs-3g: heap-based buffer overflow leads to local root privilege escalation
  22. CVE-2019-9741golang: CRLF injection in net/http
  23. CVE-2019-9740python: CRLF injection via the query part of the url passed to urlopen()
  24. CVE-2019-9706vixie-cron: use-after-free resulting in dos
  25. CVE-2019-9705vixie-cron: memory consumption DoS via a large crontab file
  26. CVE-2019-9704vixie-cron: calloc return value resulting in remote dos
  27. CVE-2019-9675php: buffer overflow in ext/phar/tar.c
  28. CVE-2019-9674python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.py
  29. CVE-2019-9641php: Uninitialized read in exif_process_IFD_in_TIFF
  30. CVE-2019-9640php: Invalid read in exif_process_SOFn()
  31. CVE-2019-9639php: Uninitialized read in exif_process_IFD_in_MAKERNOTE
  32. CVE-2019-9638php: Uninitialized read in exif_process_IFD_in_MAKERNOTE
  33. CVE-2019-9637php: File rename across filesystems may allow unwanted access during processing
  34. CVE-2019-9636python: Information Disclosure due to urlsplit improper NFKC normalization
  35. CVE-2019-9633glib: g_socket_client_connected_callback in gio/gsocketclient.c allows to cause denial of service
  36. CVE-2019-9631poppler: heap-based buffer over-read in function downsample_row_box_filter in CairoRescaleBox.cc
  37. CVE-2019-9545poppler: recursive function call in JBIG2Stream::readTextRegion() in JBIG2Stream.cc causing denial of service
  38. CVE-2019-9543poppler: recursive function call in JBIG2Stream::readGenericBitmap() in JBIG2Stream.cc causing denial of service
  39. CVE-2019-9518HTTP/2: flood using empty frames results in excessive resource consumption
  40. CVE-2019-9517HTTP/2: request for large response leads to denial of service
  41. CVE-2019-9516HTTP/2: 0-length headers lead to denial of service
  42. CVE-2019-9515HTTP/2: flood using SETTINGS frames results in unbounded memory growth
  43. CVE-2019-9514HTTP/2: flood using HEADERS frames results in unbounded memory growth
  44. CVE-2019-9513HTTP/2: flood using PRIORITY frames results in excessive resource consumption
  45. CVE-2019-9512HTTP/2: flood using PING frames results in unbounded memory growth
  46. CVE-2019-9511HTTP/2: large amount of data requests leads to denial of service
  47. CVE-2019-9506hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB)
  48. CVE-2019-9503kernel: brcmfmac frame validation bypass
  49. CVE-2019-9500kernel: brcmfmac heap buffer overflow in brcmf_wowl_nd_results
  50. CVE-2019-9499wpa_supplicant: EAP-pwd peer missing commit validation for scalar/element
CVE 2019 document archive — Page 20 | PulseLinux