Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
t/package-announce%40lists.fedoraproject.org/message/SVMJOFEYBGXZLFF5IOLW67SSOPKFEJP3/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:03.wpa.asc - https://seclists.org/bugtraq/2019/May/40 - http://packetstormsecurity.com/files/152914/FreeBSD-Security-Advisory-FreeBSD-SA-19-03.wpa.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html
CVE ID: CVE-2019-9497 State: PUBLISHED Published: 2019-04-17T13:31:08 Last Updated: 2024-08-04T21:54:44.151Z Vendors: Wi-Fi Alliance Products: hostapd with EAP-pwd support, wpa_supplicant with EAP-pwd support, hostapd with SAE support, wpa_supplicant with SAE support Problem Types: CWE-301 Description: The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session ke
to library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://w1.fi/security/2019-4/ - https://www.synology.com/security/advisory/Synology_SA_19_16 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56OBBOJJSKRTDGEXZOVFSTP4HDSDBLAE/ - https://lists.fe
rg/archives/list/package-announce%40lists.fedoraproject.org/message/56OBBOJJSKRTDGEXZOVFSTP4HDSDBLAE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDOZGR3T7FVO5JSZWK2QPR7AOFIEJTIZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVMJOFEYBGXZLFF5IOLW67SSOPKFEJP3/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:03.wpa.asc - https://seclists.org/bugtraq/2019/May/40 - http://packetstormsecurity.com/files/152914/FreeBSD-Security-Advisory-FreeBSD-SA-19-03.wpa.html - https://lists.debian.org/debian-lts-announce/2019/07/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/
tps://lists.debian.org/debian-lts-announce/2019/07/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html
CVE ID: CVE-2019-9498 State: PUBLISHED Published: 2019-04-17T13:31:08 Last Updated: 2024-08-04T21:54:44.081Z Vendors: Wi-Fi Alliance Products: hostapd with EAP-pwd support, wpa_supplicant with EAP-pwd support, hostapd with SAE support, wpa_supplicant with SAE support Problem Types: CWE-346 Description: The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element values to complete authentication, gaining session key and network access without needing or learning the password. Both hostapd with SAE
e authentication, gaining session key and network access without needing or learning the password. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://w1.fi/security/2019-4/ - https://www.synology.com/security/advisory/Synology_SA_19_16 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56OBBOJJSKRTDGEXZOVFSTP4HDSDBLAE/ - https://lists.fedoraproject.org/archives/list/package-announce%40list
ct.org/message/56OBBOJJSKRTDGEXZOVFSTP4HDSDBLAE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDOZGR3T7FVO5JSZWK2QPR7AOFIEJTIZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVMJOFEYBGXZLFF5IOLW67SSOPKFEJP3/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:03.wpa.asc - https://seclists.org/bugtraq/2019/May/40 - https://lists.debian.org/debian-lts-announce/2019/07/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html
CVE ID: CVE-2019-9499 State: PUBLISHED Published: 2019-04-17T13:31:08 Last Updated: 2024-08-04T21:54:44.100Z Vendors: Wi-Fi Alliance Products: hostapd with EAP-pwd support, wpa_supplicant with EAP-pwd support, hostapd with SAE support, wpa_supplicant with SAE support Problem Types: CWE-346 Description: The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session key and control of the data connection with a client. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and incl
f the data connection with a client. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://w1.fi/security/2019-4/ - https://www.synology.com/security/advisory/Synology_SA_19_16 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56OBBOJJSKRTDGEXZOVFSTP4HDSDBLAE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDOZGR3T7FVO5JSZWK2QPR7AOFIEJTIZ/
ts.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDOZGR3T7FVO5JSZWK2QPR7AOFIEJTIZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVMJOFEYBGXZLFF5IOLW67SSOPKFEJP3/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:03.wpa.asc - https://seclists.org/bugtraq/2019/May/40 - https://lists.debian.org/debian-lts-announce/2019/07/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html
CVE ID: CVE-2019-9500 State: PUBLISHED Published: 2020-01-16T20:35:18 Last Updated: 2024-08-04T21:54:44.139Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Broadcom Products: brcmfmac WiFi driver Problem Types: CWE-122 Description: The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brcmf_wowl_nd_results function. This vulnerability can be exploited with compromised chipsets to compromise the host, or when used in combination with CVE-201
ulnerability can be exploited with compromised chipsets to compromise the host, or when used in combination with CVE-2019-9503, can be used remotely. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions. Additional Analyst Notes: - CVE Program Container: References: - https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html - https://kb.cert.org/vuls/id/166939/ - https://git.kernel.org/linus/1b5e2423164b3670e8bc9174e4762d297990deff
CVE ID: CVE-2019-9501 State: PUBLISHED Published: 2020-02-03T21:00:19 Last Updated: 2024-08-04T21:54:44.121Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Broadcom Products: WiFi drivers Problem Types: CWE-122 Description: The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. By supplying a vendor information element with a data length larger than 32 bytes, a heap buffer overflow is triggered in wlc_wpa_sup_eapol. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-servi
able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions. Additional Analyst Notes: - CVE Program Container: References: - https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html - https://kb.cert.org/vuls/id/166939/
CVE ID: CVE-2019-9502 State: PUBLISHED Published: 2020-02-03T21:00:20 Last Updated: 2024-08-04T21:54:44.149Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Broadcom Products: WiFi drivers Problem Types: CWE-122 Description: The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditio
cute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions. Additional Analyst Notes: - CVE Program Container: References: - https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html - https://kb.cert.org/vuls/id/166939/
CVE ID: CVE-2019-9503 State: PUBLISHED Published: 2020-01-16T20:35:18 Last Updated: 2024-08-04T21:54:44.111Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Broadcom Products: brcmfmac WiFi driver Problem Types: CWE-20 Description: The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the is_wlc_event_frame function will cause this frame to be discarded and unprocessed. If the driver receives the firmware event frame from the host, the appropriate handler is called. This frame validation can be bypassed i
eives the firmware event frame from the host, the appropriate handler is called. This frame validation can be bypassed if the bus used is USB (for instance by a wifi dongle). This can allow firmware event frames from a remote source to be processed. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions. Additional Analyst Notes: - CVE Program Container: References: - https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html - https://kb.cert.org/vuls/id/166939/ - https://git.kernel
kslab.com/reverse-engineering-broadcom-wireless-chipsets.html - https://kb.cert.org/vuls/id/166939/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a4176ec356c73a46c07c181c6d04039fafa34a9f - https://bugzilla.redhat.com/show_bug.cgi?id=1701842 - https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-9503.html - https://bugzilla.suse.com/show_bug.cgi?id=1132828 - https://security-tracker.debian.org/tracker/CVE-2019-9503
CVE ID: CVE-2019-9505 State: PUBLISHED Published: 2019-05-08T14:48:20 Last Updated: 2024-08-04T21:54:44.054Z Vendors: PrinterLogic Products: Management Software Problem Types: CWE-159 Description: The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized changes to configuration files. An unauthenticated attacker may be able to remotely execute arbitrary code with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cert.org/vuls/id/169249/ - http://www.securityfocus.com/bid/108285
CVE ID: CVE-2019-9506 State: PUBLISHED Published: 2019-08-14T16:27:45.059869Z Last Updated: 2024-09-16T19:14:13.573Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: Bluetooth Products: BR/EDR Problem Types: CWE-310 Description: The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/918987/ -
im noticing. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/918987/ - http://www.cs.ox.ac.uk/publications/publication12404-abstract.html - https://www.usenix.org/conference/usenixsecurity19/presentation/antonioli - https://www.bluetooth.com/security/statement-key-negotiation-of-bluetooth/ - http://seclists.org/fulldisclosure/2019/Aug/14 - http://seclists.org/fulldisclosure/2019/Aug/11 - http://seclists.org/fulldisclosure/2019/Aug/13 - http://seclists.org/fulldisclosure/2019/Aug/15 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190828-01-knob-en - https://usn.ubuntu.com/4115-1/ - https://usn.ubuntu.com/4118-1/ - https://lists
visories/huawei-sa-20190828-01-knob-en - https://usn.ubuntu.com/4115-1/ - https://usn.ubuntu.com/4118-1/ - https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html - https://usn.ubuntu.com/4147-1/ - https://access.redhat.com/errata/RHSA-2019:2975 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html - https://access.redhat.com/errata/RHSA-2019:3076 - https://access.redhat.com/errata/RHSA-2019:3055 - https://access.redhat.com/errata/RHSA-2019:3089 -
ata/RHSA-2019:3076 - https://access.redhat.com/errata/RHSA-2019:3055 - https://access.redhat.com/errata/RHSA-2019:3089 - https://access.redhat.com/errata/RHSA-2019:3187 - https://access.redhat.com/errata/RHSA-2019:3165 - https://access.redhat.com/errata/RHSA-2019:3217 - https://access.redhat.com/errata/RHSA-2019:3220 - https://access.redhat.com/errata/RHSA-2019:3231 - https://access.redhat.com/errata/RHSA-2019:3218 - https://access.redhat.com/errata/RHSA-2019:3309 - https://access.redhat.com/errata/RHSA-2019:3517 - https://access.redhat.com/errata/RHSA-2020:0204
CVE ID: CVE-2019-9507 State: PUBLISHED Published: 2020-03-30T20:50:25.642972Z Last Updated: 2024-09-17T02:56:53.082Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: Vertiv Products: Avocent UMG-4000 Problem Types: CWE-95 Description: The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to command injection because the application incorrectly neutralizes code syntax before executing. Since all commands within the web application are executed as root, this could allow a remote attacker authenticated with an administrator account to execute arbitrary commands as root. Additional Analyst Notes: - CVE Program Container: References: - http
tor account to execute arbitrary commands as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.vertiv.com/en-us/support/software-download/it-management/avocent-universal-management-gateway-appliance--software-downloads/ - https://www.vertiv.com/en-us/support/software-download/software/trellis-enterprise-and-quick-start-solutions-software-downloads/
CVE ID: CVE-2019-9508 State: PUBLISHED Published: 2020-03-30T20:50:26.182059Z Last Updated: 2024-09-17T01:41:38.736Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Vertiv Products: Avocent UMG-4000 Problem Types: CWE-79 Description: The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to stored XSS. A remote attacker authenticated with an administrator account could store a maliciously named file within the web application that would execute each time a user browsed to the page. Additional Analyst Notes: - CVE Program Container: References: - https://www.vertiv.com/en-us/support/software-download/it-management/avocent-universal-ma
ogram Container: References: - https://www.vertiv.com/en-us/support/software-download/it-management/avocent-universal-management-gateway-appliance--software-downloads/ - https://www.vertiv.com/en-us/support/software-download/software/trellis-enterprise-and-quick-start-solutions-software-downloads/
CVE ID: CVE-2019-9509 State: PUBLISHED Published: 2020-03-30T20:50:26.611183Z Last Updated: 2024-09-16T20:01:41.057Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Vertiv Products: Avocent UMG-4000 Problem Types: CWE-79 Description: The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected XSS in an HTTP POST parameter. The web application does not neutralize user-controllable input before displaying to users in a web page, which could allow a remote attacker authenticated with a user account to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.vertiv.com/en-us/support/sof
rbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.vertiv.com/en-us/support/software-download/it-management/avocent-universal-management-gateway-appliance--software-downloads/ - https://www.vertiv.com/en-us/support/software-download/software/trellis-enterprise-and-quick-start-solutions-software-downloads/
CVE ID: CVE-2019-9510 State: PUBLISHED Published: 2020-01-15T17:05:27.546064Z Last Updated: 2024-09-17T04:00:12.025Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Microsoft Products: Windows 10 or newer system using RDP, Windows Server Problem Types: CWE-288 Description: A vulnerability in Microsoft Windows 10 1803 and Windows Server 2019 and later systems can allow authenticated RDP-connected clients to gain access to user sessions without needing to interact with the Windows lock screen. Should a network anomaly trigger a temporary RDP disconnect, Automatic Reconnection of the RDP session will be restored to an unlocked state, regardless of how the remot
disconnect, Automatic Reconnection of the RDP session will be restored to an unlocked state, regardless of how the remote system was left. By interrupting network connectivity of a system, an attacker with access to a system being used as a Windows RDP client can gain access to a connected remote system, regardless of whether or not the remote system was locked. This issue affects Microsoft Windows 10, version 1803 and later, and Microsoft Windows Server 2019, version 2019 and later. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/576688/ - https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc7327
ls/id/576688/ - https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc732713%28v=ws.11%29 - https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-rdpbcgr/e729948a-3f4e-4568-9aef-d355e30b5389 - https://social.technet.microsoft.com/Forums/windowsserver/en-US/1fd171de-a1b5-4721-86bf-082e4a375049/rds-2019-but-probably-other-versions-as-well-locked-rdp-session-logs-in-after-session-reconnect
CVE ID: CVE-2019-9511 State: PUBLISHED Published: 2019-08-13T20:50:59 Last Updated: 2024-08-04T21:54:44.157Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-400 Description: Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both. Addition
1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cert.org/vuls/id/605641/ - https://usn.ubuntu.com/4099-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/ - https://seclists.org/bugtraq/2019/Aug/40 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZLUYPYY3RX4ZJDWZRJIKSULYRJ4PXW7/ - https://www.debian.org/security/2019/dsa-4505 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messag
security/2019/dsa-4505 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUBYAF6ED3O4XCHQ5C2HYENJLXYXZC4M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BP556LEG3WENHZI5TAQ6ZEBFTJB4E2IS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XHTKU7YQ5EEP2XNSAV4M4VJ7QCBOJMOD/ - https://seclists.org/bugtraq/2019/Sep/1 - https://www.debian.org/security/2019/dsa-4511 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/ - https://access.redhat.com/errata/RHSA-2019:2692 - htt
ists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/ - https://access.redhat.com/errata/RHSA-2019:2692 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html - https://access.redhat.com/errata/RHSA-2019:2745 - https://access.redhat.com/errata/RHSA-2019:2746 - https://access.redhat.com/errata/RHSA-2019:2775 - https://access.redhat.com/errata/RHSA-2019:2799 - https://access.redhat.com/errata/RHSA-2019:2925 - https://access.redhat.com/errata/RHSA-2019:2939 - https://access.redhat.com/errata/RHSA-2019:2949 - ht
/RHSA-2019:2925 - https://access.redhat.com/errata/RHSA-2019:2939 - https://access.redhat.com/errata/RHSA-2019:2949 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00003.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00005.html - https://access.redhat.com/errata/RHSA-2019:2955 - https://access.redhat.com/errata/RHSA-2019:2966 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html - https://access.redhat.com/errata/RHSA-2019:3041 - https://access.redhat.com/errata/RHSA-2019:3933 - https://access.redhat.com/errata/RHSA-2019:3935 - https://access.redhat.com/errata/RHSA-2019:3932 - https://access.redhat.com/errata/RHSA-2019:4018 - h
a/RHSA-2019:3935 - https://access.redhat.com/errata/RHSA-2019:3932 - https://access.redhat.com/errata/RHSA-2019:4018 - https://access.redhat.com/errata/RHSA-2019:4019 - https://access.redhat.com/errata/RHSA-2019:4021 - https://access.redhat.com/errata/RHSA-2019:4020 - https://www.debian.org/security/2020/dsa-4669 - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md - https://www.synology.com/security/advisory/Synology_SA_19_33 - https://support.f5.com/csp/article/K02591030 - https://security.netapp.com/advisory/ntap-