Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
, drivers/hid/hid-logitech-hidpp.c, drivers/hid/hid-microsoft.c, drivers/hid/hid-sony.c, drivers/hid/hid-tmff.c, and drivers/hid/hid-zpff.c. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d9d4b1e46d9543a82c23f6df03f4ad697dab361b - http://www.openwall.com/lists/oss-security/2019/12/03/4 - https://usn.ubuntu.com/4226-1/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2019-19533 State: PUBLISHED Published: 2019-12-03T15:39:15 Last Updated: 2024-08-05T02:16:48.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a10feaf8c464c3f9cfdd3a8a7ce17e1c0d498da1 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - https://lists.debian.org/debian-lts-announ
a7ce17e1c0d498da1 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2019-19534 State: PUBLISHED Published: 2019-12-03T15:38:58 Last Updated: 2024-08-05T02:16:48.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver, aka CID-f7a1337f0d29. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f7a1337f0d29b98733c8824e165fca3371d7d4fd - http://www.openwall.com/lists/oss-security/2019/12/03/4 - http://lists.opensuse.org/opensuse-
33c8824e165fca3371d7d4fd - http://www.openwall.com/lists/oss-security/2019/12/03/4 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - https://usn.ubuntu.com/4228-1/ - https://usn.ubuntu.com/4227-1/ - https://usn.ubuntu.com/4226-1/ - https://usn.ubuntu.com/4225-1/ - https://usn.ubuntu.com/4228-2/ - https://usn.ubuntu.com/4227-2/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://usn.ubuntu.com/4225-2/ - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-19535 State: PUBLISHED Published: 2019-12-03T15:38:45 Last Updated: 2024-08-05T02:16:48.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/12/03/4 - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://cdn.kernel.o
-security-announce/2020-03/msg00021.html - https://www.oracle.com/security-alerts/cpuApr2021.html - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.9 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=30a8beeb3042f49d0537b7050fd21b490166a3d9
CVE ID: CVE-2019-19536 State: PUBLISHED Published: 2019-12-03T15:38:32 Last Updated: 2024-08-05T02:16:48.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver, aka CID-ead16e53c2f0. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.9 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ead16e53c2f0ed946d82d4037c630e2f60f4ab69 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - http://lists.opensuse.org/opensuse-sec
2d4037c630e2f60f4ab69 - http://www.openwall.com/lists/oss-security/2019/12/03/4 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-19537 State: PUBLISHED Published: 2019-12-03T15:38:08 Last Updated: 2024-08-05T02:16:48.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.10 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=303911cfc5b95d33687d9046133ff184cf5043ff - http://www.openwall.com/lists/oss-security/2019/12/03/4 - https://lis
mit/?id=303911cfc5b95d33687d9046133ff184cf5043ff - http://www.openwall.com/lists/oss-security/2019/12/03/4 - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2019-19538 State: PUBLISHED Published: 2020-03-16T20:08:15 Last Updated: 2024-08-05T02:16:48.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Sangoma FreePBX 13 through 15 and sysadmin (aka System Admin) 13.0.92 through 15.0.13.6 modules have a Remote Command Execution vulnerability that results in Privilege Escalation. Additional Analyst Notes: - CVE Program Container: References: - https://community.freepbx.org/t/freepbx-security-vulnerability-sec-2019-00 - https://wiki.freepbx.org/display/FOP/2019-12-03+Remote+Command+Execution
CVE ID: CVE-2019-19539 State: PUBLISHED Published: 2020-01-27T18:06:39 Last Updated: 2024-08-05T02:16:48.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Idelji Web ViewPoint H01ABO-H01BY and L01ABP-L01ABZ, Web ViewPoint Plus H01AAG-H01AAQ and L01AAH-L01AAR, and Web ViewPoint Enterprise H01-H01AAE and L01-L01AAF. By reading ADB or AADB file content within the Installation subvolume, a Guardian user can discover the password of the group.user or alias who acknowledges events from the WVP Events screen. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03
Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03981en_us
CVE ID: CVE-2019-19540 State: PUBLISHED Published: 2019-12-26T14:33:17 Last Updated: 2024-08-05T02:16:48.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ListingPro theme before v2.0.14.2 for WordPress has Reflected XSS via the What field on the homepage. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9974
CVE ID: CVE-2019-19541 State: PUBLISHED Published: 2019-12-26T14:33:11 Last Updated: 2024-08-05T02:16:48.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Best Day/Night field on the new listing submit page. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9974
CVE ID: CVE-2019-19542 State: PUBLISHED Published: 2019-12-26T14:33:04 Last Updated: 2024-08-05T02:16:48.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ListingPro theme before v2.0.14.2 for WordPress has Persistent XSS via the Good For field on the new listing submit page. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/9974
CVE ID: CVE-2019-19543 State: PUBLISHED Published: 2019-12-03T20:03:15 Last Updated: 2024-08-05T02:16:47.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.1.6, there is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=56cd26b618855c9af48c8301aa6754ced8dd0beb - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.6 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - https://security.netapp.com/advisory/ntap-20200924-0005/
CVE ID: CVE-2019-19544 State: PUBLISHED Published: 2020-01-08T16:03:13 Last Updated: 2024-08-05T02:16:48.330Z Vendors: n/a Products: CA Automic Dollar Universe Problem Types: Local Privilege Elevation Description: CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to elevate privileges. This vulnerability was reported to CA several years after CA Automic Dollar Universe 5.3.3 reached End of Life (EOL) status on April 1, 2015. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/itm4n/CVEs/tree/master/ca-dollaru-uxdqmsrv-privesc
CVE ID: CVE-2019-19545 State: PUBLISHED Published: 2019-12-05T17:18:00 Last Updated: 2024-08-05T02:16:48.327Z Vendors: n/a Products: Norton Password Manager Problem Types: CORS Description: Norton Password Manager, prior to 6.6.2.5, may be susceptible to a cross origin resource sharing (CORS) vulnerability, which is a type of issue that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1499.html
CVE ID: CVE-2019-19546 State: PUBLISHED Published: 2019-12-05T17:18:27 Last Updated: 2024-08-05T02:16:47.979Z Vendors: n/a Products: Norton Password Manager Problem Types: Information Disclosure Description: Norton Password Manager, prior to 6.6.2.5, may be susceptible to an information disclosure issue, which is a type of vulnerability whereby there is an unintentional disclosure of information to an actor that is not explicitly authorized to have access to that information. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1499.html
CVE ID: CVE-2019-19547 State: PUBLISHED Published: 2020-01-13T15:10:46 Last Updated: 2024-08-05T02:16:48.469Z Vendors: Symantec Products: Endpoint Detection and Response (SEDR) Problem Types: Cross-site scripting Description: Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) issue. XSS is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. An XSS vulnerability may be used by attackers to potentially bypass access controls such as the same-origin policy. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1502.
. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1502.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQTOWEDFXDTGTD6D4NHRB4FUURQSTTEN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WRQXCOVFWZIIMAZIAAFAVQGZOS7LGHXP/
CVE ID: CVE-2019-19548 State: PUBLISHED Published: 2020-01-14T18:00:22 Last Updated: 2024-08-05T02:16:48.565Z Vendors: Symantec Products: Norton Power Eraser Problem Types: Privilege Escalation Description: Norton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/us/en/article.SYMSA1503.html
CVE ID: CVE-2019-19550 State: PUBLISHED Published: 2020-01-31T13:53:23 Last Updated: 2024-08-05T02:16:48.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/underprotection/CVE-2019-19550/
CVE ID: CVE-2019-19551 State: PUBLISHED Published: 2019-12-06T15:04:14 Last Updated: 2024-08-05T02:16:47.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: In userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the User Management screen of the Administrator web site. An attacker with access to the User Control Panel application can submit malicious values in some of the time/date formatting and time-zone fields. These fields are not being properly sanitized. If this is done and a user (such as an admin) visits the User Management screen and views that user's profile, the XSS payload will render and execute in the context of the victim user's account. Additional
ews that user's profile, the XSS payload will render and execute in the context of the victim user's account. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.freepbx.org/display/FOP/2019-12-03+Multiple+XSS+Vulnerabilities
CVE ID: CVE-2019-19552 State: PUBLISHED Published: 2019-12-06T15:02:45 Last Updated: 2024-08-05T02:16:48.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: In userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the user management screen of the Administrator web site, i.e., the/admin/config.php?display=userman URI. An attacker with sufficient privileges can edit the Display Name of a user and embed malicious XSS code. When another user (such as an admin) visits the main User Management screen, the XSS payload will render and execute in the context of the victim user's account. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.freepbx.
ext of the victim user's account. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.freepbx.org/display/FOP/2019-12-03+Multiple+XSS+Vulnerabilities
CVE ID: CVE-2019-19553 State: PUBLISHED Published: 2019-12-05T00:58:37 Last Updated: 2024-08-05T02:16:48.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was addressed in epan/dissectors/asn1/cms/packet-cms-template.c by ensuring that an object identifier is set to NULL after a ContentInfo dissection. Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2019-22.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15961 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=34d2e0d5318d0a7e9889498c721639e5cbf4ce45
5961 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=34d2e0d5318d0a7e9889498c721639e5cbf4ce45 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html - https://www.oracle.com/security-alerts/cpuapr2020.html - https://lists.debian.org/debian-lts-announce/2021/02/msg00008.html
CVE ID: CVE-2019-19555 State: PUBLISHED Published: 2019-12-04T16:19:22 Last Updated: 2024-08-05T02:16:48.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: read_textobject in read.c in Xfig fig2dev 3.2.7b has a stack-based buffer overflow because of an incorrect sscanf. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/55/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00018.html
CVE ID: CVE-2019-19556 State: PUBLISHED Published: 2020-11-15T23:37:20 Last Updated: 2024-08-05T02:16:48.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to device hardware to obtain system information. Additional Analyst Notes: - CVE Program Container: References: - https://skygo.360.cn/archive/Security-Research-Report-on-Mercedes-Benz-Cars-en.pdf - https://media.daimler.com/marsMediaSite/en/instance/ko/Mercedes-Benz-and-360-Group-to-join-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-industry.xhtml
Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-industry.xhtml?oid=45208829
CVE ID: CVE-2019-19557 State: PUBLISHED Published: 2020-11-15T23:49:36 Last Updated: 2024-08-05T02:16:48.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obtain cellular modem information. Additional Analyst Notes: - CVE Program Container: References: - https://skygo.360.cn/archive/Security-Research-Report-on-Mercedes-Benz-Cars-en.pdf - https://media.daimler.com/marsMediaSite/en/instance/ko/Mercedes-Benz-and-360-Group-to-join-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-indus
n-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-industry.xhtml?oid=45208829
CVE ID: CVE-2019-19560 State: PUBLISHED Published: 2020-11-15T23:41:34 Last Updated: 2024-08-05T02:16:48.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with physical access to device hardware to obtain system information. Additional Analyst Notes: - CVE Program Container: References: - https://skygo.360.cn/archive/Security-Research-Report-on-Mercedes-Benz-Cars-en.pdf - https://media.daimler.com/marsMediaSite/en/instance/ko/Mercedes-Benz-and-360-Group-to-join-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-industry.xht
s-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-industry.xhtml?oid=45208829
CVE ID: CVE-2019-19561 State: PUBLISHED Published: 2020-11-15T23:51:58 Last Updated: 2024-08-05T02:16:48.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to obtain cellular modem information. Additional Analyst Notes: - CVE Program Container: References: - https://skygo.360.cn/archive/Security-Research-Report-on-Mercedes-Benz-Cars-en.pdf - https://media.daimler.com/marsMediaSite/en/instance/ko/Mercedes-Benz-and-360-Group-to-join-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-ind
oin-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-industry.xhtml?oid=45208829
CVE ID: CVE-2019-19562 State: PUBLISHED Published: 2020-11-15T23:30:38 Last Updated: 2024-08-05T02:16:48.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to device hardware to obtain system information. Additional Analyst Notes: - CVE Program Container: References: - https://skygo.360.cn/archive/Security-Research-Report-on-Mercedes-Benz-Cars-en.pdf - https://media.daimler.com/marsMediaSite/en/instance/ko/Mercedes-Benz-and-360-Group-to-join-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-industry.xht
CVE ID: CVE-2019-19563 State: PUBLISHED Published: 2020-11-15T23:44:05 Last Updated: 2024-08-05T02:16:48.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to obtain cellular modem information. Additional Analyst Notes: - CVE Program Container: References: - https://skygo.360.cn/archive/Security-Research-Report-on-Mercedes-Benz-Cars-en.pdf - https://media.daimler.com/marsMediaSite/en/instance/ko/Mercedes-Benz-and-360-Group-to-join-forces-Mercedes-Benz-and-360-Group-with-its-Cyber-Security-Brain-work-together-to-strengthen-car-IT-security-for-ind
CVE ID: CVE-2019-19576 State: PUBLISHED Published: 2019-12-04T17:33:34 Last Updated: 2024-08-05T02:16:48.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions. Additional Analyst Notes: - CVE Program Container: References: - https://www.verot.net/php_class_upload.htm - https://www.verot.net - https://github.com/verot/class.upload.php/compare/2.0.3...2.0.4 - https://github.com/verot/class.upload.php/commit/5a7505ddec956fdc9e9c071ae5089865559174f1 - https://github.com/verot/class.upload.php/comp
/verot/class.upload.php/commit/5a7505ddec956fdc9e9c071ae5089865559174f1 - https://github.com/verot/class.upload.php/compare/1.0.2...1.0.3 - https://github.com/verot/class.upload.php/commit/db1b4fe50c1754696970d8b437f07e7b94a7ebf2 - https://github.com/getk2/k2/commit/d1344706c4b74c2ae7659b286b5a066117155124 - https://github.com/jra89/CVE-2019-19576 - https://medium.com/%40jra8908/cve-2019-19576-e9da712b779 - http://packetstormsecurity.com/files/155577/Verot-2.0.3-Remote-Code-Execution.html
CVE ID: CVE-2019-19577 State: PUBLISHED Published: 2019-12-11T16:55:00 Last Updated: 2024-08-05T02:16:48.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges by triggering data-structure access during pagetable-height updates. When running on AMD systems with an IOMMU, Xen attempted to dynamically adapt the number of levels of pagetables (the pagetable height) in the IOMMU according to the guest's address space size. The code to select and update the height had several bugs. Notably, the update was done without taking a lock which is necessary
to select and update the height had several bugs. Notably, the update was done without taking a lock which is necessary for safe operation. A malicious guest administrator can cause Xen to access data structures while they are being modified, causing Xen to crash. Privilege escalation is thought to be very difficult but cannot be ruled out. Additionally, there is a potential memory leak of 4kb per guest boot, under memory pressure. Only Xen on AMD CPUs is vulnerable. Xen running on Intel CPUs is not vulnerable. ARM systems are not vulnerable. Only systems where guests are given direct access to physical devices are vulnerable. Systems which do not use PCI pass-through are not vulnerable. Onl