Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
er (VCS) 6.2.1 and earlier on Linux/UNIX, Veritas Cluster Server (VCS) 6.1 and earlier on Windows, Storage Foundation HA (SFHA) 6.2.1 and earlier on Linux/UNIX, and Storage Foundation HA (SFHA) 6.1 and earlier on Windows. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS19-003 - https://www.veritas.com/content/support/en_US/security/VTS19-004 - https://www.veritas.com/content/support/en_US/security/VTS19-005 - https://www.veritas.com/content/support/en_US/security/VTS19-006
CVE ID: CVE-2019-18781 State: PUBLISHED Published: 2019-12-18T21:02:47 Last Updated: 2024-08-05T02:02:38.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: An open redirect vulnerability was discovered in Zoho ManageEngine ADSelfService Plus 5.x before 5809 that allows attackers to force users who click on a crafted link to be sent to a specified external site. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/self-service-password/release-notes.html - https://pitstop.manageengine.com/portal/community/topic/adselfservice-plus-5809-release
CVE ID: CVE-2019-18782 State: PUBLISHED Published: 2020-03-20T00:30:55 Last Updated: 2024-08-05T02:02:38.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 does not correctly implement the .htaccess protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_9 - https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_21
CVE ID: CVE-2019-18784 State: PUBLISHED Published: 2019-11-06T02:13:46 Last Updated: 2024-08-05T02:02:38.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9 allow SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://docs.suitecrm.com/admin/releases/7.10.x/ - https://docs.suitecrm.com/admin/releases/7.11.x/
CVE ID: CVE-2019-18785 State: PUBLISHED Published: 2020-03-20T00:31:02 Last Updated: 2024-08-05T02:02:38.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 mishandles API access tokens and credentials. Additional Analyst Notes: - CVE Program Container: References: - https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_9 - https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_21
CVE ID: CVE-2019-18786 State: PUBLISHED Published: 2019-11-06T02:29:34 Last Updated: 2024-08-05T02:02:38.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel through 5.3.8, f->fmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem. Additional Analyst Notes: - CVE Program Container: References: - https://patchwork.linuxtv.org/patch/59542/ - https://usn.ubuntu.com/4285-1/ - https://usn.ubuntu.com/4287-1/ - https://usn.ubuntu.com/4287-2/ - https://usn.ubuntu.com/4284-1/
CVE ID: CVE-2019-18790 State: PUBLISHED Published: 2019-11-22T16:22:55 Last Updated: 2024-08-05T02:02:38.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in channels/chan_sip.c in Sangoma Asterisk 13.x before 13.29.2, 16.x before 16.6.2, and 17.x before 17.0.1, and Certified Asterisk 13.21 before cert5. A SIP request can be sent to Asterisk that can change a SIP peer's IP address. A REGISTER does not need to occur, and calls can be hijacked as a result. The only thing that needs to be known is the peer's name; authentication details such as passwords do not need to be known. This vulnerability is only exploitable when the nat option is set to the defaul
ch as passwords do not need to be known. This vulnerability is only exploitable when the nat option is set to the default, or auto_force_rport. Additional Analyst Notes: - CVE Program Container: References: - https://www.asterisk.org/downloads/security-advisories - http://downloads.asterisk.org/pub/security/AST-2019-006.html - https://lists.debian.org/debian-lts-announce/2019/11/msg00038.html - https://lists.debian.org/debian-lts-announce/2022/04/msg00001.html
CVE ID: CVE-2019-18791 State: PUBLISHED Published: 2020-02-13T15:01:54 Last Updated: 2024-08-05T02:02:38.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser. Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/alerts/ - http://support.lexmark.com/index?page=content&id=TE933&modifiedDate=02/04/20&actp=LIST_RECENT&userlocale=EN_US&locale=en
CVE ID: CVE-2019-18792 State: PUBLISHED Published: 2020-01-06T17:52:54 Last Updated: 2024-08-05T02:02:39.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature by overlapping a TCP segment with a fake FIN packet. The fake FIN packet is injected just before the PUSH ACK packet we want to bypass. The PUSH ACK packet (containing the data) will be ignored by Suricata because it overlaps the FIN packet (the sequence and ack number are identical in the two packets). The client will ignore the fake FIN packet because the ACK flag is not set. Both linux and windows clients are ignoring the inje
nt will ignore the fake FIN packet because the ACK flag is not set. Both linux and windows clients are ignoring the injected packet. Additional Analyst Notes: - CVE Program Container: References: - https://redmine.openinfosecfoundation.org/issues/3324 - https://github.com/OISF/suricata/commit/fa692df37a796c3330c81988d15ef1a219afc006 - https://redmine.openinfosecfoundation.org/issues/3394 - https://github.com/OISF/suricata/commit/1c63d3905852f746ccde7e2585600b2199cefb4b - https://lists.debian.org/debian-lts-announce/2020/01/msg00032.html
CVE ID: CVE-2019-18793 State: PUBLISHED Published: 2019-11-13T19:23:06 Last Updated: 2024-08-05T02:02:39.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR/help/index.htm? via the "fileName" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/155175/Parallels-Plesk-Panel-9.5-Cross-Site-Scripting.html
CVE ID: CVE-2019-18794 State: PUBLISHED Published: 2020-10-16T12:50:47 Last Updated: 2024-08-05T02:02:39.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Use after Free vulnerability via a crafted .ogg file. An attacker can exploit this to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.un4seen.com/ - https://github.com/staufnic/CVE/tree/master/CVE-2019-18794
CVE ID: CVE-2019-18795 State: PUBLISHED Published: 2020-10-16T12:51:22 Last Updated: 2024-08-05T02:02:39.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile out of bounds read vulnerability via a crafted .wav file. An attacker can exploit this issues to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.un4seen.com/ - https://github.com/staufnic/CVE/tree/master/CVE-2019-18795
CVE ID: CVE-2019-18796 State: PUBLISHED Published: 2020-10-16T12:51:42 Last Updated: 2024-08-05T02:02:38.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BASS Audio Library 2.4.14 under Windows is prone to a BASS_StreamCreateFile Denial of Service vulnerability (infinite loop) via a crafted .mp3 file. This weakness could allow attackers to consume excessive CPU and the application becomes unresponsive. Additional Analyst Notes: - CVE Program Container: References: - http://www.un4seen.com/ - https://github.com/staufnic/CVE/tree/master/CVE-2019-18796
CVE ID: CVE-2019-18797 State: PUBLISHED Published: 2019-11-06T15:07:28 Last Updated: 2024-08-05T02:02:39.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator()(Sass::Binary_Expression*) in eval.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sass/libsass/issues/3000
CVE ID: CVE-2019-18798 State: PUBLISHED Published: 2019-11-06T15:07:20 Last Updated: 2024-08-05T02:02:39.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibSass before 3.6.3 allows a heap-based buffer over-read in Sass::weaveParents in ast_sel_weave.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sass/libsass/issues/2999
CVE ID: CVE-2019-18799 State: PUBLISHED Published: 2019-11-06T15:07:09 Last Updated: 2024-08-05T02:02:39.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parser_selectors.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sass/libsass/issues/3001
CVE ID: CVE-2019-18800 State: PUBLISHED Published: 2019-11-06T15:34:07 Last Updated: 2024-08-05T02:02:39.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Viber through 11.7.0.5 allows a remote attacker who can capture a victim's internet traffic to steal their Viber account, because not all Viber protocol traffic is encrypted. TCP data packet 9 on port 4244 from the victim's device contains cleartext information such as the device model and OS version, IMSI, and 20 bytes of udid in a binary format, which is located at offset 0x14 of this packet. Then, the attacker installs Viber on his device, initiates the registration process for any phone number, but doesn't enter a pin fro
acker installs Viber on his device, initiates the registration process for any phone number, but doesn't enter a pin from SMS. Instead, he closes Viber. Next, the attacker rewrites his udid with the victim's udid, modifying the viber_udid file, which is located in the Viber preferences folder. (The udid is stored in a hexadecimal format.) Finally, the attacker starts Viber again and enters the pin from SMS. Additional Analyst Notes: - CVE Program Container: References: - https://thesamarkand.tumblr.com/post/188785277609/viber-messenger-remote-account-reset-0day
CVE ID: CVE-2019-18801 State: PUBLISHED Published: 2019-12-13T12:20:00 Last Updated: 2024-08-05T02:02:39.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1. This may be used to corrupt nearby heap contents (leading to a query-of-death scenario) or may be used to bypass Envoy's access control mechanisms such as path based routing. An attacker can also modify requests from other users that happen to be proximal temporally and spatially. Additional Analyst Notes: - CVE Program Container: References: - https://
appen to be proximal temporally and spatially. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/envoyproxy/envoy/commits/master - https://groups.google.com/forum/#%21forum/envoy-users - https://blog.envoyproxy.io - https://github.com/envoyproxy/envoy/security/advisories/GHSA-gxvv-x4p2-rppp - https://access.redhat.com/errata/RHSA-2019:4222
CVE ID: CVE-2019-18802 State: PUBLISHED Published: 2019-12-13T12:21:26 Last Updated: 2024-08-05T02:02:39.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such as Host) with whitespace after the header content. Envoy will treat "header-value " as a different string from "header-value" so for example with the Host header "example.com " one could bypass "example.com" matchers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/envoyproxy/envoy/commits/master - https://groups.google.com/forum/#%21forum/envoy-users - https://blog.envoyproxy.io - https://gith
envoy/commits/master - https://groups.google.com/forum/#%21forum/envoy-users - https://blog.envoyproxy.io - https://github.com/envoyproxy/envoy/security/advisories/GHSA-356m-vhw2-wcm4 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00034.html
CVE ID: CVE-2019-18804 State: PUBLISHED Published: 2019-11-07T05:25:46 Last Updated: 2024-08-05T02:02:39.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/djvu/bugs/309/ - https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md - https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html - https://usn.ubuntu.com/4198-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messag
usn.ubuntu.com/4198-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/ - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTP
tps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/ - https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html - https://www.debian.org/security/2021/dsa-5032
CVE ID: CVE-2019-18805 State: PUBLISHED Published: 2019-11-07T13:08:05 Last Updated: 2024-08-05T02:02:39.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/li
ps://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19fad20d15a6494f47f85d869f00b11343ee5c78 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://access.redhat.com/errata/RHSA-2020:0740
CVE ID: CVE-2019-18806 State: PUBLISHED Published: 2019-11-07T15:30:08 Last Updated: 2024-08-05T02:02:39.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service (memory consumption) by triggering pci_dma_mapping_error() failures, aka CID-1acb8f2a7a9f. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1acb8f2a7a9f10543868ddd737e37424d5c36cf4 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.5
CVE ID: CVE-2019-18807 State: PUBLISHED Published: 2019-11-07T15:29:59 Last Updated: 2024-08-05T02:02:39.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c in the Linux kernel before 5.3.5 allow attackers to cause a denial of service (memory consumption) by triggering static_config_buf_prepare_for_upload() or sja1105_inhibit_tx() failures, aka CID-68501df92d11. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.5 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=68501df92d116b7
kernel/v5.x/ChangeLog-5.3.5 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=68501df92d116b760777a2cfda314789f926476f - https://security.netapp.com/advisory/ntap-20191205-0001/
CVE ID: CVE-2019-18808 State: PUBLISHED Published: 2019-11-07T15:29:46 Last Updated: 2024-08-05T02:02:39.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/128c66429247add5128c03dc1e144ca56f05a4e2 - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQR
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html - https://usn.ubuntu.com/4526-1/ - https://usn.ubuntu.com/4525-1/ - http://www.openwall.com/lists/oss-security/2021/09/14/1
CVE ID: CVE-2019-18809 State: PUBLISHED Published: 2019-11-07T15:29:36 Last Updated: 2024-08-05T02:02:39.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-2289adbfa559. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/2289adbfa559050d2a38bcd9caac1c18b800e928 - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQX
1205-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/ - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - https://usn.ubuntu.com/4285-1/ - https://usn.ubuntu.com/4287-1/ - https://usn.ubuntu.com/4287-2/ - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - https://usn.ubuntu.com/4300-1/
CVE ID: CVE-2019-18810 State: PUBLISHED Published: 2019-11-07T15:29:27 Last Updated: 2024-08-05T02:02:39.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the komeda_wb_connector_add() function in drivers/gpu/drm/arm/display/komeda/komeda_wb_connector.c in the Linux kernel before 5.3.8 allows attackers to cause a denial of service (memory consumption) by triggering drm_writeback_connector_init() failures, aka CID-a0ecd6fdbf5d. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.8 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ecd6fdbf5d648123a7315c695fb6850d7
g-5.3.8 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a0ecd6fdbf5d648123a7315c695fb6850d702835 - https://usn.ubuntu.com/4208-1/ - https://security.netapp.com/advisory/ntap-20191205-0001/
CVE ID: CVE-2019-18811 State: PUBLISHED Published: 2019-11-07T15:29:19 Last Updated: 2024-08-05T02:02:39.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering sof_get_ctrl_copy_params() failures, aka CID-45c1380358b1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/45c1380358b12bf2d1db20a5874e9544f56b34ab - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40l
://security.netapp.com/advisory/ntap-20191205-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/ - https://usn.ubuntu.com/4284-1/
CVE ID: CVE-2019-18812 State: PUBLISHED Published: 2019-11-07T15:29:08 Last Updated: 2024-08-05T02:02:39.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-c0a333d842ef. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/c0a333d842ef67ac04adc72ff79dc1ccc3dca4ed - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PX
ps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/
CVE ID: CVE-2019-18813 State: PUBLISHED Published: 2019-11-07T15:28:59 Last Updated: 2024-08-05T02:02:39.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering platform_device_add_properties() failures, aka CID-9bbfceea12a8. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9bbfceea12a8f145097a27d7c7267af25893c060 - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://usn.ubuntu.com/4226-1/
145097a27d7c7267af25893c060 - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://usn.ubuntu.com/4226-1/ - https://usn.ubuntu.com/4225-1/ - https://usn.ubuntu.com/4225-2/
CVE ID: CVE-2019-18814 State: PUBLISHED Published: 2019-11-07T15:28:46 Last Updated: 2024-08-05T02:02:39.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/patchwork/patch/1142523/ - https://support.f5.com/csp/article/K21561554?utm_source=f5support&amp%3Butm_medium=RSS - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://lists.debian.org/debian-lts-announce/2020/08/msg00019.html