PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 6

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 6 / 32

  1. CVE-2019-18853ImageMagick: XML_PARSE_HUGE not properly restricted in coders/svg.c
  2. CVE-2019-18814kernel: use-after-free in aa_audit_rule_init() in security/apparmor/audit.c
  3. CVE-2019-18813kernel: memory leak in dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c
  4. CVE-2019-18812kernel: memory leak in sof_dfsentry_write() function in sound/soc/sof/debug.c
  5. CVE-2019-18811kernel: memory leak in sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c
  6. CVE-2019-18810kernel: memory leak in komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c
  7. CVE-2019-18809kernel: memory leak in af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c
  8. CVE-2019-18808kernel: memory leak in ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c
  9. CVE-2019-18807kernel: memory leak in sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c
  10. CVE-2019-18806kernel: memory leak in ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c
  11. CVE-2019-18805kernel: integer overflow in tcp_ack_update_rtt in net/ipv4/tcp_input.c
  12. CVE-2019-18799libsass: NULL pointer dereference in Sass:Parser:parseCompoundSelector in parser_selectors.cpp
  13. CVE-2019-18798libsass: heap-based buffer overflow in Sass:weaveParents in ast_sel_weave.cpp
  14. CVE-2019-18797libsass: uncontrolled recursion in Sass:Eval:operator()(Sass:Binary_Expression*) in eval.cpp
  15. CVE-2019-18786kernel: memory disclosure in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c
  16. CVE-2019-18684sudo: privilege escalation via write access to file descriptor 3 of the sudo process
  17. CVE-2019-18683kernel: race condition in vivid_stop_generating_vid_cap(),vivid_stop_generating_vid_out(), sdr_cap_stop_streaming()
  18. CVE-2019-18680kernel: NULL pointer dereference in rds_tcp_kill_sock() in net/rds/tcp.c
  19. CVE-2019-18679squid: Information Disclosure issue in HTTP Digest Authentication
  20. CVE-2019-18678squid: HTTP Request Splitting issue in HTTP message processing
  21. CVE-2019-18677squid: Cross-Site Request Forgery issue in HTTP Request processing
  22. CVE-2019-18676squid: Buffer overflow in URI processor
  23. CVE-2019-18675kernel: integer overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c
  24. CVE-2019-18660kernel: powerpc: incomplete Spectre-RSB mitigation leads to information exposure
  25. CVE-2019-18634sudo: Stack based buffer overflow when pwfeedback is enabled
  26. CVE-2019-18609librabbitmq: integer overflow in amqp_handle_input in amqp_connection.c leads to heap-based buffer overflow
  27. CVE-2019-18466podman: resolving symlink in host filesystem leads to unexpected results of copy operation
  28. CVE-2019-18408libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry
  29. CVE-2019-18397fribidi: buffer overflow in fribidi_get_par_embedding_levels_ex() in lib/fribidi-bidi.c leading to denial of service and possible code execution
  30. CVE-2019-18348python: CRLF injection via the host part of the url passed to urlopen()
  31. CVE-2019-18282kernel: The flow_dissector feature allows device tracking
  32. CVE-2019-18281qt5-qtbase: Out-of-bounds access in generateDirectionalRuns() function in qtextengine.cpp
  33. CVE-2019-18277haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated "chunked" value
  34. CVE-2019-18276bash: when effective UID is not equal to its real UID the saved UID is not dropped
  35. CVE-2019-18224libidn2: heap-based buffer overflow in idn2_to_ascii_4i in lib/lookup.c
  36. CVE-2019-18218file: heap-based buffer overflow in cdf_read_property_info in cdf.c
  37. CVE-2019-18198kernel: reference count usage error in fib6_rule_suppress function in net/ipv6/fib6_rules.c
  38. CVE-2019-18197libxslt: use after free in xsltCopyText in transform.c could lead to information disclosure
  39. CVE-2019-17666kernel: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel lacks a certain upper-bound check, leading to a buffer overflow
  40. CVE-2019-17639JDK: Information disclosure via calls to System.arraycopy() with invalid length
  41. CVE-2019-17638jetty: double release of resource can lead to information disclosure
  42. CVE-2019-17632jetty: generation of default unhandled error response content does not escape exception messages in stacktraces included in error output
  43. CVE-2019-17631JDK: Unrestricted access to diagnostic operations
  44. CVE-2019-17626python-reportlab: code injection in colors.py allows attacker to execute code
  45. CVE-2019-17596golang: invalid public key causes panic in dsa.Verify
  46. CVE-2019-17595ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c
  47. CVE-2019-17594ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c
  48. CVE-2019-17582libzip: use-after-free in the _zip_dirent_read function of zip_dirent.c
  49. CVE-2019-17571log4j: deserialization of untrusted data in SocketServer
  50. CVE-2019-17570xmlrpc: Deserialization of server-side exception from faultCause in XMLRPC error response
CVE 2019 document archive — Page 6 | PulseLinux