PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 26

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 26 / 32

  1. CVE-2019-6286libsass: heap-based buffer over-read in Sass::Prelexer::skip_over_scopes in prelexer.hpp
  2. CVE-2019-6284libsass: heap-based buffer over-read in Sass::Prelexer::alternatives in prelexer.hpp
  3. CVE-2019-6251webkitgtk: processing maliciously crafted web content lead to URI spoofing
  4. CVE-2019-6237webkitgtk: Multiple memory corruption issues leading to arbitrary code execution
  5. CVE-2019-6133polkit: Temporary auth hijacking via PID reuse and non-atomic fork
  6. CVE-2019-6129libpng: memory leak of png_info struct in pngcp.c
  7. CVE-2019-6128libtiff: memory leak in TIFFFdOpen function in tif_unix.c when using pal2rgb
  8. CVE-2019-6116ghostscript: subroutines within pseudo-operators must themselves be pseudo-operators (700317)
  9. CVE-2019-6111openssh: Improper validation of object names allows malicious server to overwrite files via scp client
  10. CVE-2019-6110openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output
  11. CVE-2019-6109openssh: Missing character encoding in progress display allows for spoofing of scp client output
  12. CVE-2019-5953wget: do_conversion() heap-based buffer overflow vulnerability
  13. CVE-2019-5882irssi: Use-after-free when hidden lines were expired from the scroll buffer
  14. CVE-2019-5849Mozilla: Out-of-bounds read in Skia
  15. CVE-2019-5827sqlite: out-of-bounds access due to the use of 32-bit memory allocator interfaces
  16. CVE-2019-5798chromium-browser: Out of bounds read in Skia
  17. CVE-2019-5785mozilla: Integer overflow in Skia
  18. CVE-2019-5739nodejs: DoS with keep-alive HTTP connection
  19. CVE-2019-5737nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass
  20. CVE-2019-5736runc: Execution of malicious containers allows for container escape and access to host filesystem
  21. CVE-2019-5721wireshark: use-after-free in ENIP dissector results in denial of service
  22. CVE-2019-5719wireshark: ISAKMP dissector crash in epan/dissectors/packet-isakmp.c
  23. CVE-2019-5718wireshark: out-of-bounds read in get_t61_string() in epan/charsets.c
  24. CVE-2019-5717wireshark: P_MUL dissector crash in epan/dissectors/packet-p_mul.c
  25. CVE-2019-5716wireshark: reachable assertion in fast_ensure_contiguous() from 6LoWPAN dissector
  26. CVE-2019-5544openslp: Heap-based buffer overflow in ProcessSrvRqst() in slpd_process.c leading to remote code execution
  27. CVE-2019-5489Kernel: page cache side channel attacks
  28. CVE-2019-5443curl: Windows OpenSSL engine code injection
  29. CVE-2019-5436curl: TFTP receive heap buffer overflow in tftp_receive_packet() function
  30. CVE-2019-5435curl: Integer overflows in curl_url_set() function
  31. CVE-2019-5188e2fsprogs: Out-of-bounds write in e2fsck/rehash.c
  32. CVE-2019-5108kernel: triggering AP to send IAPP location updates for stations before the required authentication process has completed can lead to DoS
  33. CVE-2019-5094e2fsprogs: Crafted ext4 partition leads to out-of-bounds write
  34. CVE-2019-5068mesa: security bypass in 3D library graphics
  35. CVE-2019-5064opencv: Heap buffer overflow in persistence_json.cpp while parsing crafted JSON file
  36. CVE-2019-5063opencv: Heap buffer overflow in persistence_xml.cpp while parsing crafted XML file
  37. CVE-2019-5018sqlite: Use-after-free in window function leading to remote code execution
  38. CVE-2019-5010python: NULL pointer dereference using a specially crafted X509 certificate
  39. CVE-2019-5008QEMU: NULL pointer dereference in hw/sparc64/sun4u.c leading to DoS
  40. CVE-2019-4732JDK: untrusted DLL search path vulnerability
  41. CVE-2019-4473JDK: Insecure RPATH in multiple binaries on AIX
  42. CVE-2019-3902mercurial: Path-checking logic bypass via symlinks and subrepositories
  43. CVE-2019-3901kernel: perf_event_open() and execve() race in setuid programs allows a data leak
  44. CVE-2019-3900Kernel: vhost_net: infinite loop while receiving packets leads to DoS
  45. CVE-2019-3896kernel: Double free in lib/idr.c
  46. CVE-2019-3892kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping
  47. CVE-2019-3890evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-online-accounts
  48. CVE-2019-3888undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed
  49. CVE-2019-3887Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS
  50. CVE-2019-3886libvirt: virsh domhostname command discloses guest hostname in readonly mode
CVE 2019 document archive — Page 26 | PulseLinux