PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 7

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 7 / 32

  1. CVE-2019-17569tomcat: Regression in handling of Transfer-Encoding header allows for HTTP request smuggling
  2. CVE-2019-17567httpd: mod_proxy_wstunnel tunneling of non Upgraded connection
  3. CVE-2019-17566batik: SSRF via "xlink:href"
  4. CVE-2019-17563tomcat: Session fixation when using FORM authentication
  5. CVE-2019-17547ImageMagick: use-after-free in TraceBezier function in MagickCore/draw.c
  6. CVE-2019-17546libtiff: integer overflow leading to heap-based buffer overflow in tif_getimage.c
  7. CVE-2019-17544aspell: stack-based buffer over-read in acommon::unescape in common/getdata.cpp
  8. CVE-2019-17543lz4: heap-based buffer overflow in LZ4_write32
  9. CVE-2019-17541ImageMagick: Use after free in ReadICCProfile function in coders/jpeg.c
  10. CVE-2019-17540ImageMagick: heap-based buffer overflow in ReadPSInfo in coders/ps.c
  11. CVE-2019-17531jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.*
  12. CVE-2019-17514python: potentially misleading information about whether sorting in library/glob.html
  13. CVE-2019-17498libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c
  14. CVE-2019-17455libntlm: stack-based buffer overflow in buildSmbNtlmAuthRequest in smbutil.c
  15. CVE-2019-17451binutils: integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c
  16. CVE-2019-17450binutils: denial of service via crafted ELF file
  17. CVE-2019-17402exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check
  18. CVE-2019-17400unoconv: mishandling of pathname leads to SSRF and local file inclusion
  19. CVE-2019-17267jackson-databind: Serialization gadgets in classes of the ehcache package
  20. CVE-2019-17266libsoup: heap-based over-read in soup_ntlm_parse_challenge() in soup-auth-ntlm.c
  21. CVE-2019-17195nimbus-jose-jwt: Uncaught exceptions while parsing a JWT
  22. CVE-2019-17185freeradius: eap-pwd: DoS issues due to multithreaded BN_CTX access
  23. CVE-2019-17177freerdp: supplied realloc pointer leads to memory leak
  24. CVE-2019-17133kernel: buffer overflow in cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c
  25. CVE-2019-17075kernel: denial of service in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c
  26. CVE-2019-17056kernel: unprivileged access to llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC socket type.
  27. CVE-2019-17055kernel: unprivileged users able to create RAW sockets in AF_ISDN network protocol
  28. CVE-2019-17054kernel: privilege escalation in atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module
  29. CVE-2019-17053kernel: unprivileged users able to create RAW sockets in AF_IEEE802154 network protocol
  30. CVE-2019-17052kernel: unprivileged users able to create RAW sockets in the the AF_AX25 network protocol.
  31. CVE-2019-17042rsyslog: heap-based overflow in contrib/pmcisconames/pmcisconames.c
  32. CVE-2019-17041rsyslog: heap-based overflow in contrib/pmaixforwardedfrom/pmaixforwardedfrom.c
  33. CVE-2019-17040rsyslog: out-of-bounds read in contrib/pmdb2diag/pmdb2diag.c
  34. CVE-2019-17026Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement
  35. CVE-2019-17024Mozilla: Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
  36. CVE-2019-17023nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state
  37. CVE-2019-17022Mozilla: CSS sanitization does not escape HTML tags
  38. CVE-2019-17021Mozilla: Heap address disclosure in parent process during content process initialization on Windows
  39. CVE-2019-17020Mozilla: Content Security Policy bypass for XSL stylesheet
  40. CVE-2019-17017Mozilla: Type Confusion in XPCVariant.cpp
  41. CVE-2019-17016Mozilla: Bypass of @namespace CSS sanitization during pasting
  42. CVE-2019-17015Mozilla: Memory corruption in parent process during new content process initialization on Windows
  43. CVE-2019-17014Mozilla: Dragging and dropping a cross-origin resource, incorrectly loaded as an image, could result in information disclosure
  44. CVE-2019-17013Mozilla: Memory safety bugs fixed in Firefox 71
  45. CVE-2019-17012Mozilla: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3
  46. CVE-2019-17011Mozilla: Use-after-free when retrieving a document in antitracking
  47. CVE-2019-17010Mozilla: Use-after-free when performing device orientation checks
  48. CVE-2019-17009Mozilla: Updater temporary files accessible to unprivileged processes
  49. CVE-2019-17008Mozilla: Use-after-free in worker destruction
  50. CVE-2019-17007nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS
CVE 2019 document archive — Page 7 | PulseLinux