Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Analyst Notes: - CVE Program Container: References: - https://www.ckn.io/blog/2019/08/27/exploiting-the-eques-elf-smart-plug-part-one/ - https://www.ckn.io/blog/2019/08/27/exploiting-the-eques-elf-smart-plug-part-two/ - https://www.ckn.io/blog/2019/08/27/exploiting-the-eques-elf-smart-plug-part-three/ - https://www.ckn.io/blog/2019/08/27/exploiting-the-eques-elf-smart-plug-part-four/ - https://github.com/iamckn/eques
CVE ID: CVE-2019-15746 State: PUBLISHED Published: 2019-10-07T11:29:30 Last Updated: 2024-08-05T00:56:22.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: SITOS six Build v6.2.1 allows an attacker to inject arbitrary PHP commands. As a result, an attacker can compromise the running server and execute system commands in the context of the web user. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com/en/resources/advisories/cve-2019-15746
CVE ID: CVE-2019-15747 State: PUBLISHED Published: 2019-10-07T11:39:13 Last Updated: 2024-08-05T00:56:22.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: SITOS six Build v6.2.1 allows a user with the user role of Seminar Coordinator to escalate their permission to the Systemadministrator role due to insufficient checks on the server side. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com/en/resources/advisories/cve-2019-15747
CVE ID: CVE-2019-15748 State: PUBLISHED Published: 2019-10-07T11:40:15 Last Updated: 2024-08-05T00:56:22.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: SITOS six Build v6.2.1 permits unauthorised users to upload and import a SCORM 2004 package by browsing directly to affected pages. An unauthenticated attacker could use the upload and import functionality to import a malicious SCORM package that includes a PHP file, which could execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com/en/resources/advisories/cve-2019-15748
CVE ID: CVE-2019-15749 State: PUBLISHED Published: 2019-10-07T11:41:21 Last Updated: 2024-08-05T00:56:22.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: SITOS six Build v6.2.1 allows a user to change their password and recovery email address without requiring them to confirm the change with their old password. This would allow an attacker with access to the victim's account (e.g., via XSS or an unattended workstation) to change that password and address. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com/en/resources/advisories/cve-2019-15749
CVE ID: CVE-2019-15750 State: PUBLISHED Published: 2019-10-07T11:42:19 Last Updated: 2024-08-05T00:56:22.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) vulnerability in the blog function in SITOS six Build v6.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com/en/resources/advisories/cve-2019-15750
CVE ID: CVE-2019-15751 State: PUBLISHED Published: 2019-10-07T11:45:48 Last Updated: 2024-08-05T00:56:22.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unrestricted file upload vulnerability in SITOS six Build v6.2.1 allows remote attackers to execute arbitrary code by uploading a SCORM file with an executable extension. This allows an unauthenticated attacker to upload a malicious file (containing PHP code to execute operating system commands) to the web root of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.contextis.com/en/resources/advisories/cve-2019-15751
CVE ID: CVE-2019-15752 State: PUBLISHED Published: 2019-08-28T20:24:33.000Z Last Updated: 2025-10-21T23:45:31.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an admin or service user to authenticate with Docker, restart Docker, or run 'docker login' to force the command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40morgan.henry.roman/elevation-of-privilege-in-docker-for-windows
SA ADP Vulnrichment: References: - https://medium.com/%40morgan.henry.roman/elevation-of-privilege-in-docker-for-windows-2fd8450b478e - http://packetstormsecurity.com/files/157404/Docker-Credential-Wincred.exe-Privilege-Escalation.html - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E
CVE ID: CVE-2019-15753 State: PUBLISHED Published: 2019-08-28T20:33:39 Last Updated: 2024-08-05T00:56:22.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of packets for instances belonging to other tenants sharing the same network. Only deployments using the linuxbridge backend are affected. This occurs in PyRoute2.add() in internal/command/ip/linux/impl_pyroute2.py. Additional Analyst Notes: - CVE Program C
. This occurs in PyRoute2.add() in internal/command/ip/linux/impl_pyroute2.py. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/bugs/1837252 - https://review.opendev.org/672834 - https://review.opendev.org/678098 - https://security.openstack.org/ossa/OSSA-2019-004.html - http://www.openwall.com/lists/oss-security/2019/08/29/2
CVE ID: CVE-2019-15757 State: PUBLISHED Published: 2019-08-29T00:29:40 Last Updated: 2024-08-05T00:56:22.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/andreafioraldi/343d9ba64060b548c02362a5e61ec932 - https://sourceforge.net/p/cdemu/bugs/118/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00037.html
CVE ID: CVE-2019-15758 State: PUBLISHED Published: 2019-08-29T01:02:01 Last Updated: 2024-08-05T00:56:22.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Binaryen 1.38.32. Missing validation rules in asmjs/asmangle.cpp can lead to an Assertion Failure at wasm/wasm.cpp in wasm::asmangle. A crafted input can cause denial-of-service, as demonstrated by wasm2js. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WebAssembly/binaryen/issues/2288 - https://github.com/WebAssembly/binaryen/pull/2290
CVE ID: CVE-2019-15759 State: PUBLISHED Published: 2019-08-29T01:01:51 Last Updated: 2024-08-05T00:56:22.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WebAssembly/binaryen/issues/2288 - https://github.com/WebAssembly/binaryen/pull/2289
CVE ID: CVE-2019-15766 State: PUBLISHED Published: 2019-10-03T20:02:13 Last Updated: 2024-08-05T00:56:22.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KSLABS KSWEB (aka ru.kslabs.ksweb) application 3.93 for Android allows authenticated remote code execution via a POST request to the AJAX handler with the configFile parameter set to the arbitrary file to be written to (and the config_text parameter set to the content of the file to be created). This can be a PHP file that is written to in the public web directory and subsequently executed. The attacker must have network connectivity to the PHP server that is running on the Android device. Additional Analyst Notes: - CVE
must have network connectivity to the PHP server that is running on the Android device. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=ru.kslabs.ksweb&gl=GB - https://rastating.github.io/ksweb-android-remote-code-execution/
CVE ID: CVE-2019-15767 State: PUBLISHED Published: 2019-08-29T02:05:12 Last Updated: 2024-08-05T00:56:22.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/bug-gnu-chess/2019-08/msg00004.html - https://lists.gnu.org/archive/html/bug-gnu-chess/2019-08/msg00005.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TB4FURVE4C35UDXGAAHJL5NIHJQ3WDZT/ - https://lists.fedoraproject.org/archive
e-announce%40lists.fedoraproject.org/message/TB4FURVE4C35UDXGAAHJL5NIHJQ3WDZT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZA4UCVURQXNLUNFAMRLZBAFRHSEVC6Q/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGIICRUZRFAK5M7SNHZKR7SKE77SFKWE/
CVE ID: CVE-2019-15769 State: PUBLISHED Published: 2019-08-29T11:21:33 Last Updated: 2024-08-05T00:56:22.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: The handl-utm-grabber plugin before 2.6.5 for WordPress has CSRF via add_option and update_option. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/handl-utm-grabber/#developers - https://wpvulndb.com/vulnerabilities/9848 - https://www.pluginvulnerabilities.com/2019/08/26/our-proactive-monitoring-caught-an-authenticated-option-update-vulnerability-in-handl-utm-grabber/
CVE ID: CVE-2019-15770 State: PUBLISHED Published: 2019-08-29T11:22:39 Last Updated: 2024-08-05T00:56:22.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/woo-address-book/#developers - https://wpvulndb.com/vulnerabilities/9849
CVE ID: CVE-2019-15771 State: PUBLISHED Published: 2019-08-29T12:37:31 Last Updated: 2024-08-05T00:56:22.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nd-shortcodes plugin before 6.0 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9485 - https://wordpress.org/plugins/nd-shortcodes/#developers - https://threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/
CVE ID: CVE-2019-15772 State: PUBLISHED Published: 2019-08-29T11:25:59 Last Updated: 2024-08-05T00:56:22.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9493 - https://threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/ - https://wordpress.org/plugins/nd-donations/#developers
CVE ID: CVE-2019-15773 State: PUBLISHED Published: 2019-08-29T11:30:08 Last Updated: 2024-08-05T00:56:22.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nd-travel plugin before 1.7 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9491 - https://threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/ - https://wordpress.org/plugins/nd-travel/#developers
CVE ID: CVE-2019-15774 State: PUBLISHED Published: 2019-08-29T11:42:07 Last Updated: 2024-08-05T00:56:22.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9494 - https://threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/ - https://wordpress.org/plugins/nd-booking/#developers
CVE ID: CVE-2019-15775 State: PUBLISHED Published: 2019-08-29T11:40:21 Last Updated: 2024-08-05T00:56:22.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nd-learning plugin before 4.8 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9496 - https://threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/ - https://wordpress.org/plugins/nd-learning/#developers
CVE ID: CVE-2019-15776 State: PUBLISHED Published: 2019-08-29T11:45:31 Last Updated: 2024-08-05T00:56:22.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9503 - https://threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/ - https://wordpress.org/plugins/simple-301-redirects-addon-bulk-uploader/#developers
CVE ID: CVE-2019-15777 State: PUBLISHED Published: 2019-08-29T11:49:04 Last Updated: 2024-08-05T00:56:22.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shapepress-dsgvo plugin before 2.2.19 for WordPress has wp-admin/admin-ajax.php?action=admin-common-settings&admin_email= XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/shapepress-dsgvo/#developers - https://www.pluginvulnerabilities.com/2019/08/22/gdpr-plugins-for-wordpress-continue-to-be-insecure/ - https://wpvulndb.com/vulnerabilities/9850
CVE ID: CVE-2019-15778 State: PUBLISHED Published: 2019-08-29T12:35:56 Last Updated: 2024-08-05T00:56:22.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: The woo-variation-gallery plugin before 1.1.29 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/woo-variation-gallery/#developers - https://www.pluginvulnerabilities.com/2019/08/20/vulnerablity-details-authenticated-persistent-cross-site-scripting-xss-in-additional-variation-images-for-woocommerce/ - https://wpvulndb.com/vulnerabilities/9852
CVE ID: CVE-2019-15779 State: PUBLISHED Published: 2019-08-29T12:34:11 Last Updated: 2024-08-05T00:56:22.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/insta-gallery/#developers - https://wpvulndb.com/vulnerabilities/9853
CVE ID: CVE-2019-15780 State: PUBLISHED Published: 2019-08-29T11:55:16 Last Updated: 2024-08-05T00:56:22.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: The formidable plugin before 4.02.01 for WordPress has unsafe deserialization. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/formidable/#developers - https://pentest.co.uk/labs/advisory/cve-2019-15780/ - https://raw.githubusercontent.com/Strategy11/formidable-forms/master/changelog.txt - https://wpvulndb.com/vulnerabilities/9935
CVE ID: CVE-2019-15781 State: PUBLISHED Published: 2019-08-29T12:33:32 Last Updated: 2024-08-05T00:56:22.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/facebook-by-weblizar/#developers - https://wpvulndb.com/vulnerabilities/9851
CVE ID: CVE-2019-15782 State: PUBLISHED Published: 2019-08-29T11:07:38 Last Updated: 2024-08-05T00:56:22.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebTorrent before 0.107.6 allows XSS in the HTTP server via a title or file name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/webtorrent/webtorrent/compare/v0.107.5...v0.107.6 - https://github.com/webtorrent/webtorrent/pull/1714 - https://hackerone.com/reports/681617
CVE ID: CVE-2019-15783 State: PUBLISHED Published: 2019-08-29T11:09:13 Last Updated: 2024-08-05T00:56:22.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lute-Tab before 2019-08-23 has a buffer overflow in pdf_print.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mandovinnie/Lute-Tab/pull/2
CVE ID: CVE-2019-15784 State: PUBLISHED Published: 2019-08-29T12:09:05 Last Updated: 2024-08-05T00:56:22.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Haivision/srt/pull/811 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00020.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00036.html
CVE ID: CVE-2019-15785 State: PUBLISHED Published: 2019-08-29T12:39:08 Last Updated: 2024-08-05T00:56:22.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fontforge/fontforge/pull/3886 - https://github.com/fontforge/fontforge/commit/626f751752875a0ddd74b9e217b6f4828713573c - https://security.gentoo.org/glsa/202004-14
CVE ID: CVE-2019-15786 State: PUBLISHED Published: 2019-08-29T12:38:27 Last Updated: 2024-08-05T00:56:22.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: ROBOTIS Dynamixel SDK through 3.7.11 has a buffer overflow via a large rxpacket. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ROBOTIS-GIT/DynamixelSDK/pull/339
CVE ID: CVE-2019-15787 State: PUBLISHED Published: 2019-08-29T11:18:26 Last Updated: 2024-08-05T00:56:22.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: libZetta.rs through 0.1.2 has an integer overflow in the zpool parser (for error stats) that leads to a panic. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Inner-Heaven/libzetta-rs/pull/89
CVE ID: CVE-2019-15788 State: PUBLISHED Published: 2019-08-29T12:04:22 Last Updated: 2024-08-05T00:56:22.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in allocate_block.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/clara-genomics/ClaraGenomicsAnalysis/compare/6dc3061...416af9f - https://github.com/clara-genomics/ClaraGenomicsAnalysis/pull/70
CVE ID: CVE-2019-15789 State: PUBLISHED Published: 2020-04-08T01:00:26.136140Z Last Updated: 2024-09-16T21:07:28.961Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Canonical Products: MicroK8s Problem Types: CWE-269 Description: Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to the host by provisioning a privileged container. Fixed in MicroK8s 1.15.3. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ubuntu/microk8s/pull/590 - https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-15789.html - https://pulsesecurity.co.nz/advisories/microk8s-privileg
e.canonical.com/~ubuntu-security/cve/2019/CVE-2019-15789.html - https://pulsesecurity.co.nz/advisories/microk8s-privilege-escalation - https://discuss.kubernetes.io/t/explicit-use-of-sudo-in-microk8s-cli/7605
CVE ID: CVE-2019-15790 State: PUBLISHED Published: 2020-04-27T23:25:19.961Z Last Updated: 2025-11-03T19:25:26.757Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Canonical Products: Apport Problem Types: CWE-250 Description: Apport reads and writes information on a crashed process to /proc/pid with elevated privileges. Apport then determines which user the crashed process belongs to by reading /proc/pid through get_pid_info() in data/apport. An unprivileged user could exploit this to read information about a privileged running process by exploiting PID recycling. This information could then be used to obtain ASLR offsets for a process with an existing memory c
oiting PID recycling. This information could then be used to obtain ASLR offsets for a process with an existing memory corruption vulnerability. The initial fix introduced regressions in the Python Apport library due to a missing argument in Report.add_proc_environ in apport/report.py. It also caused an autopkgtest failure when reading /proc/pid and with Python 2 compatibility by reading /proc maps. The initial and subsequent regression fixes are in 2.20.11-0ubuntu16, 2.20.11-0ubuntu8.6, 2.20.9-0ubuntu7.12, 2.20.1-0ubuntu2.22 and 2.14.1-0ubuntu3.29+esm3. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1839795 - https://us
Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1839795 - https://usn.ubuntu.com/4171-1/ - https://usn.ubuntu.com/4171-2/ - https://usn.ubuntu.com/4171-3/ - https://usn.ubuntu.com/4171-4/ - https://usn.ubuntu.com/4171-5/ - https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1850929 - https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1851806 - https://bugs.launchpad.net/apport/+bug/1854237 - http://packetstormsecurity.com/files/172858/Ubuntu-Apport-Whoopsie-DoS-Integer-Overflow.html
CVE ID: CVE-2019-15791 State: PUBLISHED Published: 2020-04-23T23:55:23.619482Z Last Updated: 2024-09-17T00:11:12.912Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Ubuntu Products: Shiftfs in the Linux kernel Problem Types: CWE-672 Description: In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() installs an fd referencing a file from the lower filesystem without taking an additional reference to that file. After the btrfs ioctl completes this fd is closed, which then puts a reference to that file, leading to a refcount underflow. Additional Analyst Notes: - CVE Program Contai
hich then puts a reference to that file, leading to a refcount underflow. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/usn/usn-4183-1 - https://usn.ubuntu.com/usn/usn-4184-1 - https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/eoan/commit/?id=601a64857b3d7040ca15c39c929e6b9db3373ec1
CVE ID: CVE-2019-15792 State: PUBLISHED Published: 2020-04-23T23:55:24.126556Z Last Updated: 2024-09-16T23:41:36.466Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Ubuntu Products: Shiftfs in the Linux kernel Problem Types: CWE-843 Description: In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resulting file* into shiftfs_real_fdget(), which casts file->private_data, a void* that points to a filesystem-dependent type, to a "struct shiftfs_file_info *". As the private_data is not required to be a pointer, an attacker