PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 3

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 3 / 32

  1. CVE-2019-20054kernel: Null pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c
  2. CVE-2019-20044zsh: insecure dropping of privileges when unsetting PRIVILEGED option
  3. CVE-2019-19977libesmtp: Stack-based buffer over-read in ntlm_build_type_2() in ntlm/ntlmstruct.c
  4. CVE-2019-19966kernel: use-after-free in cpia2_exit in drivers/media/usb/cpia2/cpia2_v4l.c
  5. CVE-2019-19965kernel: NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery
  6. CVE-2019-19959sqlite: mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames
  7. CVE-2019-19956libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c
  8. CVE-2019-19952ImageMagick: use-after-free in MngInfoDiscardObject in coders/png.c
  9. CVE-2019-19949ImageMagick: heap-based buffer over-read in WritePNGImage in coders/png.c
  10. CVE-2019-19948ImageMagick: heap-based buffer overflow in WriteSGIImage in coders/sgi.c
  11. CVE-2019-19947kernel: uninitialized memory allocation in drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c leading to information leak
  12. CVE-2019-19927kernel: Out-of-bounds read in ttm_put_pages in gpu/drm/ttm/ttm_page_alloc.c
  13. CVE-2019-19926sqlite: error mishandling because of incomplete fix of CVE-2019-19880
  14. CVE-2019-19925sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive
  15. CVE-2019-19924sqlite: incorrect sqlite3WindowRewrite() error handling leads to mishandling certain parser-tree rewriting
  16. CVE-2019-19923sqlite: mishandling of certain uses of SELECT DISTINCT involving a LEFT JOIN in flattenSubquery in select.c leads to a NULL pointer dereference
  17. CVE-2019-19922kernel: when cpu.cfs_quota_us is used allows attackers to cause a denial of service against non-cpu-bound applications
  18. CVE-2019-19921runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation
  19. CVE-2019-19911python-pillow: uncontrolled resource consumption in FpxImagePlugin.py
  20. CVE-2019-19906cyrus-sasl: denial of service in _sasl_add_string function
  21. CVE-2019-19882shadow-utils: local users can obtain root access because setuid programs are misconfigured
  22. CVE-2019-19880sqlite: invalid pointer dereference in exprListAppendList in window.c
  23. CVE-2019-19847libspiro: stack-based off-by-one buffer overflow in spiro_to_bpath0() in spiro.c
  24. CVE-2019-19816kernel: out-of-bounds write in __btrfs_map_block in fs/btrfs/volumes.c
  25. CVE-2019-19815kernel: NULL pointer dereference in f2fs_recover_fsync_data in fs/f2fs/recovery.c
  26. CVE-2019-19814kernel: out-of-bounds write in __remove_dirty_segment in fs/f2fs/segment.c
  27. CVE-2019-19813kernel: use-after-free in __mutex_lock in kernel/locking/mutex.c
  28. CVE-2019-19807kernel: use-after-free in sound/core/timer.c
  29. CVE-2019-19797transfig: out-of-bounds write in read_colordef in read.c
  30. CVE-2019-19783cyrus-imapd: lmtpd component created mailboxes with administrator privileges if the "fileinto" was used, bypassing ACL checks
  31. CVE-2019-19770kernel: use-after-free in debugfs_remove in fs/debugfs/inode.c
  32. CVE-2019-19769kernel: use-after-free in perf_trace_lock_acquire related to include/trace/events/lock.h
  33. CVE-2019-19768kernel: use-after-free in __blk_add_trace in kernel/trace/blktrace.c
  34. CVE-2019-19767kernel: use-after-free in __ext4_expand_extra_isize and ext4_xattr_set_entry related to fs/ext4/inode.c and fs/ext4/super.c
  35. CVE-2019-19746transfig: integer overflow leads to out-of-bounds write in make_arrow in arrow.c
  36. CVE-2019-19725sysstat: double free in check_file_actlst() in sa_common.c may lead to arbitrary code execution
  37. CVE-2019-19722dovecot: null pointer dereference in push notification driver
  38. CVE-2019-19646sqlite: pragma.c mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns
  39. CVE-2019-19645sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements
  40. CVE-2019-19624opencv: out-of-bounds read in DIS optflow algorithm when dealing with small images
  41. CVE-2019-19604git: Recursive clone followed by a submodule update could execute code contained within repository without the user explicitly consent
  42. CVE-2019-19603sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS
  43. CVE-2019-19602kernel: cached use of fpu_fpregs_owner_ctx in arch/x86/include/asm/fpu/internal.h can lead to DoS
  44. CVE-2019-19601texlive: buffer overflow in the TexOpen() function in detex.l
  45. CVE-2019-19555transfig: stack-based buffer overflow in read_textobject in read.c
  46. CVE-2019-19553wireshark: CMS dissector crash (wnpa-sec-2019-22)
  47. CVE-2019-19543kernel: use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c
  48. CVE-2019-19537kernel: race condition caused by a malicious USB device in the USB character device driver layer
  49. CVE-2019-19536kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver
  50. CVE-2019-19535kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.cdriver
CVE 2019 document archive — Page 3 | PulseLinux