PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 27

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 27 / 32

  1. CVE-2019-3885pacemaker: Information disclosure through use-after-free
  2. CVE-2019-3883389-ds-base: DoS via hanging secured connections
  3. CVE-2019-3882kernel: denial of service vector through vfio DMA mappings
  4. CVE-2019-3881rubygem-bundler: Insecure permissions on directory in /tmp/ allows for execution of malicious code
  5. CVE-2019-3880samba: save registry file outside share as unprivileged user
  6. CVE-2019-3878mod_auth_mellon: authentication bypass in ECP flow
  7. CVE-2019-3877mod_auth_mellon: open redirect in logout url when using URLs with backslashes
  8. CVE-2019-3874kernel: SCTP socket buffer memory leak leading to denial of service
  9. CVE-2019-3870samba: World writable files in Samba AD DC private/ dir
  10. CVE-2019-3863libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes
  11. CVE-2019-3862libssh2: Out-of-bounds memory comparison with specially crafted message channel request
  12. CVE-2019-3861libssh2: Out-of-bounds reads with specially crafted SSH packets
  13. CVE-2019-3860libssh2: Out-of-bounds reads with specially crafted SFTP packets
  14. CVE-2019-3859libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read
  15. CVE-2019-3858libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read
  16. CVE-2019-3857libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write
  17. CVE-2019-3856libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write
  18. CVE-2019-3855libssh2: Integer overflow in transport read resulting in out of bounds write
  19. CVE-2019-3846kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c
  20. CVE-2019-3844systemd: services with DynamicUser can get new privileges and create SGID binaries
  21. CVE-2019-3843systemd: services with DynamicUser can create SUID/SGID binaries
  22. CVE-2019-3842systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any"
  23. CVE-2019-3840libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function
  24. CVE-2019-3839ghostscript: missing attack vector protections for CVE-2019-6116
  25. CVE-2019-3838ghostscript: forceput in DefineResource is still accessible (700576)
  26. CVE-2019-3837kernel: memory leak in tcp_recvmsg() with NET_DMA
  27. CVE-2019-3836gnutls: invalid pointer access upon receiving async handshake messages
  28. CVE-2019-3835ghostscript: superexec operator is available (700585)
  29. CVE-2019-3833openwsman: Infinite loop in process_connection() allows denial of service
  30. CVE-2019-3832libsndfile: incomplete fix for CVE-2018-19758 still allow to read beyond buffer limits
  31. CVE-2019-3831vdsm: privilege escalation to root via systemd_run
  32. CVE-2019-3829gnutls: use-after-free/double-free in certificate verification
  33. CVE-2019-3827gvfs: Incorrect authorization in admin backend allows privileged users to read and modify arbitrary files without prompting for password
  34. CVE-2019-3825gdm: lock screen bypass when timed login is enabled
  35. CVE-2019-3824samba: Out of bound read in ldb_wildcard_compare in Samba AD DC
  36. CVE-2019-3823curl: SMTP end-of-response out-of-bounds read
  37. CVE-2019-3822curl: NTLMv2 type-3 header stack buffer overflow
  38. CVE-2019-3821ceph: radosgw: Resource exhaustion via TCP connection to port serving the SSL endpoint
  39. CVE-2019-3820gnome-shell: partial lock screen bypass
  40. CVE-2019-3819kernel: infinite loop in drivers/hid/hid-debug.c:hid_debug_events_read()
  41. CVE-2019-3817libcomps: use after free when merging two objmrtrees
  42. CVE-2019-3816openwsman: Disclosure of arbitrary files outside of the registered URIs
  43. CVE-2019-3815systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864
  44. CVE-2019-3814dovecot: Improper certificate validation
  45. CVE-2019-3813spice: Off-by-one error in array access in spice/server/memslot.c
  46. CVE-2019-3812qemu: Out-of-bounds read in hw/i2c/i2c-ddc.c allows for memory disclosure
  47. CVE-2019-3811sssd: fallback_homedir returns '/' for empty home directories in passwd file
  48. CVE-2019-3804cockpit: Crash when parsing invalid base64 headers
  49. CVE-2019-3701kernel: Missing check in net/can/gw.c:can_can_gw_rcv() allows for crash by users with CAP_NET_ADMIN
  50. CVE-2019-3696pcp: Local privilege escalation in pcp spec file through migrate_tempdirs
CVE 2019 document archive — Page 27 | PulseLinux