PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 4

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 4 / 32

  1. CVE-2019-19534kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver
  2. CVE-2019-19533kernel: information leak bug caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c
  3. CVE-2019-19532kernel: malicious USB devices can lead to multiple out-of-bounds write
  4. CVE-2019-19531kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/yurex.c driver leads to denial of service
  5. CVE-2019-19530kernel: use-after-free caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver
  6. CVE-2019-19529kernel: use-after-free bug caused by a malicious USB device in the drivers/net/can/usb/mcba_usb.c
  7. CVE-2019-19528kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver
  8. CVE-2019-19527kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver
  9. CVE-2019-19526kernel: use-after-free bug caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver
  10. CVE-2019-19525kernel: malicious USB device leads to use-after-free in the drivers/net/ieee802154/atusb.c driver
  11. CVE-2019-19524kernel: a malicious USB device in the drivers/input/ff-memless.c leads to use-after-free
  12. CVE-2019-19523kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver
  13. CVE-2019-19499grafana: arbitrary file read via MySQL data source
  14. CVE-2019-19481opensc: Improper handling of buffer limits for CAC certificates
  15. CVE-2019-19480opensc: incorrect free operation in sc_pkcs15_decode_prkdf_entry in libopensc/pkcs15-prkey.c
  16. CVE-2019-19479opensc: Incorrect read operation during parsing of a SETCOS file attribute
  17. CVE-2019-19462kernel: NULL pointer dereference in relay_open in kernel/relay.c
  18. CVE-2019-19450python-reportlab: code injection in paraparser.py allows code execution
  19. CVE-2019-19449kernel: mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c
  20. CVE-2019-19448kernel: mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c
  21. CVE-2019-19447kernel: mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c
  22. CVE-2019-19378kernel: out-of-bounds write in index_rbio_pages in fs/btrfs/raid56.c
  23. CVE-2019-19377kernel: use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c
  24. CVE-2019-19344samba: Use after free during DNS zone scavenging in Samba AD DC
  25. CVE-2019-19339kpatch: hw: incomplete fix for CVE-2018-12207
  26. CVE-2019-19338Kernel: KVM: export MSR_IA32_TSX_CTRL to guest - incomplete fix for TAA (CVE-2019-11135)
  27. CVE-2019-19337ceph: denial of service in RGW daemon
  28. CVE-2019-19334libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used
  29. CVE-2019-19333libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
  30. CVE-2019-19332Kernel: kvm: OOB memory write via kvm_dev_ioctl_get_cpuid
  31. CVE-2019-19330haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks
  32. CVE-2019-19319kernel: out-of-bounds write in ext4_xattr_set_entry in fs/ext4/xattr.c
  33. CVE-2019-19318kernel: use-after-free in rwsem_down_write_slowpath in kernel/locking/rwsem.c
  34. CVE-2019-19317sqlite: omits bits from the colUsed bitmask in the case of a generated column
  35. CVE-2019-19308gnome-font-viewer: NULL pointer dereference in text_to_glyphs in sushi-font-widget.c
  36. CVE-2019-19252kernel: vcs_write in drivers/tty/vt/vc_screen.c does not prevent write access to vcsu devices
  37. CVE-2019-19246oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c
  38. CVE-2019-19244sqlite: allows a crash if a sub-select uses both DISTINCT and window functions and also has certain ORDER BY usage
  39. CVE-2019-19242sqlite: SQL injection in sqlite3ExprCodeTarget in expr.c
  40. CVE-2019-19241kernel: privilege escalation via io_uring offload of sendmsg() onto kernel thread with kernel creds
  41. CVE-2019-19234sudo: by using ! character in the shadow file instead of a password hash can access to a run as all sudoer account
  42. CVE-2019-19232sudo: attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user
  43. CVE-2019-19227kernel: potential NULL pointer dereference leads to DoS
  44. CVE-2019-19221libarchive: out-of-bounds read in archive_wstring_append_from_mbs in archive_string.c
  45. CVE-2019-19204oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c
  46. CVE-2019-19203oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c
  47. CVE-2019-19126glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries
  48. CVE-2019-19083kernel: memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc leads to DoS
  49. CVE-2019-19082kernel: memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc leads to DoS
  50. CVE-2019-19081kernel: memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c leads to DoS
CVE 2019 document archive — Page 4 | PulseLinux