PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 8

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 8 / 32

  1. CVE-2019-17006nss: Check length of inputs for cryptographic primitives
  2. CVE-2019-17005Mozilla: Buffer overflow in plain text serializer
  3. CVE-2019-16995kernel: Memory leak in hsr_dev_finalize() in net/hsr/hsr_device.c
  4. CVE-2019-16994kernel: Memory leak in sit_init_net() in net/ipv6/sit.c
  5. CVE-2019-16943jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource
  6. CVE-2019-16942jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*
  7. CVE-2019-16935python: XSS vulnerability in the documentation XML-RPC server in server_title field
  8. CVE-2019-16921kernel: information disclosure in hns_roce_alloc_ucontext in drivers/infiniband/hw/hns/hns_roce_main.c
  9. CVE-2019-16905openssh: an integer overflow in the private key parsing code for the XMSS key type
  10. CVE-2019-16884runc: AppArmor/SELinux bypass with malicious image that specifies a volume at /proc
  11. CVE-2019-16866unbound: uninitialized memory accesses leads to crash via a crafted NOTIFY query
  12. CVE-2019-16865python-pillow: reading specially crafted image files leads to allocation of large amounts of memory and denial of service
  13. CVE-2019-16863hw: ECDSA signature timing vulnerabilities in TPM module
  14. CVE-2019-16777npm: Global node_modules Binary Overwrite
  15. CVE-2019-16776npm: Arbitrary file write via constructed entry in the package.json bin field
  16. CVE-2019-16775npm: Symlink reference outside of node_modules folder through the bin field upon installation
  17. CVE-2019-16760rust: privilege escaltion in cargo
  18. CVE-2019-16746kernel: buffer-overflow hardening in WiFi beacon validation code.
  19. CVE-2019-16714kernel: vulnerability in rds6_inc_info_copy in net/rds/recv.c allows attackers to obtain sensitive information
  20. CVE-2019-16713ImageMagick: memory leak in coders/dot.c
  21. CVE-2019-16712ImageMagick: memory leak in Huffman2DEncodeImage in coders/ps3.c
  22. CVE-2019-16711ImageMagick: memory leak in Huffman2DEncodeImage in coders/ps2.c
  23. CVE-2019-16710ImageMagick: memory leak in coders/dot.c
  24. CVE-2019-16709ImageMagick: memory leak in coders/dps.c
  25. CVE-2019-16708ImageMagick: memory leak in magick/xwindow.c
  26. CVE-2019-16707hunspell: out-of-bounds read in SuggestMgr::leftcommonsubstring in suggestmgr.cxx
  27. CVE-2019-16680file-roller: path traversal vulnerability via a specially crafted filename contained in malicious archive
  28. CVE-2019-16413kernel: i_size_read() infinite loop leads to denial of service
  29. CVE-2019-16335jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource
  30. CVE-2019-16319wireshark: gryphon dissector infinite loop (wnpa-sec-2019-21)
  31. CVE-2019-16276golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling
  32. CVE-2019-16275wpa_supplicant: AP mode PMF disconnection protection bypass
  33. CVE-2019-16255ruby: Code injection via command argument of Shell#test / Shell#[]
  34. CVE-2019-16254ruby: HTTP response splitting in WEBrick
  35. CVE-2019-16249opencv: Out-of-bounds read in hal_baseline::v_load in core/hal/intrin_sse.hpp
  36. CVE-2019-16234kernel: null pointer dereference in drivers/net/wireless/intel/iwlwifi/pcie/trans.c
  37. CVE-2019-16233kernel: null pointer dereference in drivers/scsi/qla2xxx/qla_os.c
  38. CVE-2019-16232kernel: null-pointer dereference in drivers/net/wireless/marvell/libertas/if_sdio.c
  39. CVE-2019-16231kernel: null-pointer dereference in drivers/net/fjes/fjes_main.c
  40. CVE-2019-16230kernel: null pointer dereference in drivers/gpu/drm/radeon/radeon_display.c
  41. CVE-2019-16229kernel: null pointer dereference in drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c
  42. CVE-2019-16201ruby: Regular expression denial of service vulnerability of WEBrick's Digest authentication
  43. CVE-2019-16168sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c
  44. CVE-2019-16167sysstat: memory corruption due to an integer overflow in remap_struct in sa_common.c
  45. CVE-2019-16163oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c
  46. CVE-2019-16162onigmo: out-of-bounds read in next_state_val() in regparse.c
  47. CVE-2019-16161onigmo: NULL pointer dereference in onig_error_code_to_str because of fetch_token in regparse.c
  48. CVE-2019-16089kernel: Improper return check in nbd_genl_status function in drivers/block/nbd.c
  49. CVE-2019-16056python: email.utils.parseaddr wrongly parses email addresses
  50. CVE-2019-15946opensc: Out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c
CVE 2019 document archive — Page 8 | PulseLinux