PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2019 document archive · 9

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,582 documents · Identifier year 2019 · 9 / 32

  1. CVE-2019-15945opensc: Out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c
  2. CVE-2019-15939opencv: division by zero in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp
  3. CVE-2019-15927kernel: out-of-bounds in function build_audio_procunit in sound/usb/mixer.c
  4. CVE-2019-15926kernel: out of bounds access in functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl_wmi_cac_event_rx
  5. CVE-2019-15925kernel: out-of-bounds access in function hclge_tm_schd_mode_vnet_base_cfg
  6. CVE-2019-15924kernel: null pointer dereference in drivers/net/ethernet/intel/fm10k/fm10k_main.c
  7. CVE-2019-15923kernel: null pointer dereference in drivers/block/paride/pf.c
  8. CVE-2019-15922kernel: null pointer dereference in drivers/block/paride/pf.c
  9. CVE-2019-15921kernel: memory leak in genl_register_family() in net/netlink/genetlink.c
  10. CVE-2019-15920kernel: use-after-free information leak in SMB2_read
  11. CVE-2019-15919kernel: use-after-free in SMB2_write function in fs/cifs/smb2pdu.c
  12. CVE-2019-15918kernel: out-of-bounds read in fs/cifs/smb2pdu.c
  13. CVE-2019-15917kernel: use-after-free in drivers/bluetooth/hci_ldisc.c
  14. CVE-2019-15916kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service
  15. CVE-2019-15903expat: heap-based buffer over-read via crafted XML input
  16. CVE-2019-15902kernel: backporting error in ptrace_get_debugreg()
  17. CVE-2019-15892varnish: denial of service handling certain crafted HTTP/1 requests
  18. CVE-2019-15890QEMU: Slirp: use-after-free during packet reassembly
  19. CVE-2019-15847gcc: POWER9 "DARN" RNG intrinsic produces repeated output
  20. CVE-2019-15845ruby: NUL injection vulnerability of File.fnmatch and File.fnmatch?
  21. CVE-2019-15807kernel: Memory leak in drivers/scsi/libsas/sas_expander.c
  22. CVE-2019-15794kernel: Overlayfs in the Linux kernel and shiftfs not restoring original value on error leading to a refcount underflow
  23. CVE-2019-15791kernel: reference count underflow was discovered in shiftfs implementation causing dos
  24. CVE-2019-15785fontforge: buffer overflow in PrefsUI_LoadPrefs in prefs.c
  25. CVE-2019-15718systemd: systemd-resolved allows unprivileged users to configure DNS
  26. CVE-2019-15717Irssi: use-after-free if the IRC server sends double CAP
  27. CVE-2019-15695tigervnc: Stack buffer overflow in CMsgReader::readSetCursor
  28. CVE-2019-15694tigervnc: Heap buffer overflow in DecodeManager::decodeRect
  29. CVE-2019-15693tigervnc: Heap buffer overflow in TightDecoder::FilterGradient
  30. CVE-2019-15692tigervnc: Heap buffer overflow triggered from CopyRectDecoder due to incorrect value checks
  31. CVE-2019-15691tigervnc: Stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
  32. CVE-2019-15690libvncserver: HandleCursorShape() integer overflow resulting in heap-based buffer overflow
  33. CVE-2019-15681libvncserver: information disclosure and ASLR bypass
  34. CVE-2019-15666kernel: out-of-bounds array access in __xfrm_policy_unlink
  35. CVE-2019-15635grafana: passwords for data sources are not encrypted
  36. CVE-2019-15606nodejs: HTTP header values do not have trailing optional whitespace trimmed
  37. CVE-2019-15605nodejs: HTTP request smuggling using malformed Transfer-Encoding header
  38. CVE-2019-15604nodejs: Remotely trigger an assertion on a TLS server with a malformed certificate string
  39. CVE-2019-15601curl: improper input validation allows users to create a 'FILE:' URL that can make the client access a remote file using SMB
  40. CVE-2019-15538kernel: denial of service in in xfs_setattr_nonsize in fs/xfs/xfs_iops.c
  41. CVE-2019-15505kernel: out of bounds read in drivers/media/usb/dvb-usb/technisat-usb2.c
  42. CVE-2019-15504kernel: double free in drivers/net/wireless/rsi/rsi_91x_usb.c via crafted USB device
  43. CVE-2019-15292kernel: Use-after-free in atalk_proc_exit function in net/appletalk
  44. CVE-2019-15291kernel: Null pointer dereference in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c
  45. CVE-2019-15290kernel: Null pointer dereference in the ath6kl_usb_alloc_urb_from_pipe function in the drivers/net/wireless/ath/ath6kl/usb.c
  46. CVE-2019-15239kernel: local attacker can trigger multiple use-after-free conditions results in privilege escalation
  47. CVE-2019-15223kernel: Null pointer dereference in the sound/usb/line6/driver.c
  48. CVE-2019-15222kernel: Null pointer dereference in the sound/usb/helper.c
  49. CVE-2019-15221kernel: Null pointer dereference in the sound/usb/line6/pcm.c
  50. CVE-2019-15220kernel: Use-after-free in drivers/net/wireless/intersil/p54/p54usb.c