CVE 2019 document archive · 25
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,582 documents · Identifier year 2019 · 25 / 32
- CVE-2019-7572SDL: buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c
- CVE-2019-7548python-sqlalchemy: SQL Injection when the group_by parameter can be controlled
- CVE-2019-7524dovecot: Buffer overflow in indexer-worker process results in privilege escalation
- CVE-2019-7398ImageMagick: Memory leak in the WriteDIBImage function in coders/dib.c
- CVE-2019-7397ImageMagick: Memory leak in the WritePDFImage function in coders/pdf.c
- CVE-2019-7396ImageMagick: Memory leak in the ReadSIXELImage function in coders/sixel.c
- CVE-2019-7395ImageMagick: Memory leak in the WritePSDChannel function in coders/psd.c
- CVE-2019-7317libpng: use-after-free in png_image_free in png.c
- CVE-2019-7310poppler: heap-based buffer over-read in XRef::getEntry in XRef.cc
- CVE-2019-7309glibc: memcmp function incorrectly returns zero
- CVE-2019-7308kernel: eBPF: Spectre v1 mitigation bypass
- CVE-2019-7292webkitgtk: arbitrary code execution via malicious web content
- CVE-2019-7285webkitgtk: crafted web content leads to arbitrary code execution
- CVE-2019-7283netkit-rsh: possible overwrite of arbitrary files by a malicious rsh server
- CVE-2019-7282netkit-rsh: rcp access restriction bypass
- CVE-2019-7222Kernel: KVM: leak of uninitialized stack contents to guest
- CVE-2019-7221Kernel: KVM: nVMX: use-after-free of the hrtimer for emulation of the preemption timer
- CVE-2019-7175imagemagick: memory leak in function DecodeImage in coders/pcd.c
- CVE-2019-7164python-sqlalchemy: SQL Injection when the order_by parameter can be controlled
- CVE-2019-7150elfutils: segmentation fault in elf64_xlatetom in libelf/elf32_xlatetom.c
- CVE-2019-7149elfutils: heap-based buffer over-read in read_srclines in dwarf_getsrclines.c in libdw
- CVE-2019-7148elfutils: excessive memory allocation in read_long_names in elf_begin.c in libelf
- CVE-2019-7147nasm: Buffer over-read in function crc64ib in crc64.c resulting in denial of service
- CVE-2019-7146elfutils: buffer over-read in the ebl_object_note function in eblobjnote.c in libebl
- CVE-2019-6988openjpeg: DoS via memory exhaustion in opj_decompress
- CVE-2019-6978gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c
- CVE-2019-6977gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c
- CVE-2019-6974Kernel: KVM: potential use-after-free via kvm_ioctl_create_device()
- CVE-2019-6778QEMU: slirp: heap buffer overflow in tcp_emu()
- CVE-2019-6706lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service
- CVE-2019-6502opensc: memory leak in sc_context_create in ctx.c in libopensc
- CVE-2019-6501QEMU: scsi-generic: possible OOB access while handling inquiry request
- CVE-2019-6488glibc: Incorrect attempt to use a 64-bit register for size_t in assembly codes results in segmentation fault
- CVE-2019-6486golang: crypto/elliptic implementations of P-521 and P-384 elliptic curves allow for denial of service
- CVE-2019-6477bind: TCP Pipelining doesn't limit TCP clients on a single connection
- CVE-2019-6476bind: An error in QNAME minimization code can cause BIND to exit with an assertion failure
- CVE-2019-6475bind: A flaw in mirror zone validity checking can allow zone data to be spoofed
- CVE-2019-6471bind: Race condition when discarding malformed packets can cause bind to exit with assertion failure
- CVE-2019-6470dhcp: double-deletion of the released addresses in the dhcpv6 code leading to crash and possible DoS
- CVE-2019-6469bind: an error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failure leading to DoS
- CVE-2019-6468bind: named can exit with an assertion failure if nxdomain-redirect is used.
- CVE-2019-6467bind: flaw in nxredirect can cause assertion failure
- CVE-2019-6465bind: Controls for zone transfers may not be properly applied to DLZs if the zones are writable
- CVE-2019-6462cairo: infinite loop in the function _arc_error_normalized in the file cairo-arc.c
- CVE-2019-6461cairo: assertion problem in _cairo_arc_in_direction in cairo-arc.c
- CVE-2019-6454systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash
- CVE-2019-6446numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution
- CVE-2019-6293flex: Recursive calls in the function mark_beginning_as_normal resulting in a denial of service
- CVE-2019-6291nasm: Recursive calls in the function expr resulting in a denial of service
- CVE-2019-6290nasm: Infinite recursion in eval.c causing stack exhaustion problem resulting in a denial of service