Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-12798 State: PUBLISHED Published: 2019-06-13T16:58:21 Last Updated: 2024-08-04T23:32:55.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Artifex MuJS 1.0.5. regcompx in regexp.c does not restrict regular expression program size, leading to an overflow of the parsed syntax list size. Additional Analyst Notes: - CVE Program Container: References: - http://git.ghostscript.com/?p=mujs.git%3Bh=7f50591861525f76e3ec7a63392656ff8c030af9 - http://www.securityfocus.com/bid/108774
CVE ID: CVE-2019-12799 State: PUBLISHED Published: 2019-06-13T19:18:41 Last Updated: 2024-08-04T23:32:55.188Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In createInstanceFromNamedArguments in Shopware through 5.6.x, a crafted web request can trigger a PHP object instantiation vulnerability, which can result in an arbitrary deserialization if the right class is instantiated. An attacker can leverage this deserialization to achieve remote code execution. NOTE: this issue is a bypass for a CVE-2017-18357 whitelist patch. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rap
CVE-2017-18357 whitelist patch. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rapid7/metasploit-framework/pull/11828
CVE ID: CVE-2019-12801 State: PUBLISHED Published: 2019-06-17T17:35:08 Last Updated: 2024-08-04T23:32:55.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: out/out.GroupMgr.php in SeedDMS 5.1.11 has Stored XSS by making a new group with a JavaScript payload as the "GROUP" Name. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/seeddms/code/ci/master/tree/CHANGELOG - http://packetstormsecurity.com/files/153384/SeedDMS-out.GroupMgr.php-Cross-Site-Scripting.html
CVE ID: CVE-2019-12802 State: PUBLISHED Published: 2019-06-13T20:58:51 Last Updated: 2024-08-04T23:32:55.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: In radare2 through 3.5.1, the rcc_context function of libr/egg/egg_lang.c mishandles changing context. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact (invalid memory access in r_egg_lang_parsechar; invalid free in rcc_pusharg). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/radare/radare2/issues/14296 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SX4TLTE75VYUGSPYEKM
6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SX4TLTE75VYUGSPYEKMYFPUZMRDIR7O2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IEXZWAMVKGZKHALV4IVWQS2ORJKRH57U/
CVE ID: CVE-2019-12803 State: PUBLISHED Published: 2019-07-10T19:34:27 Last Updated: 2024-08-04T23:32:55.314Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hunesion Products: i-oneNet Problem Types: CWE-434 Description: In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.16, the specific upload web module doesn't verify the file extension and type, and an attacker can upload a webshell. After the webshell upload, an attacker can use the webshell to perform remote code exection such as running a system command. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=3507
es: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35073
CVE ID: CVE-2019-12804 State: PUBLISHED Published: 2019-07-10T19:38:09 Last Updated: 2024-08-04T23:32:55.511Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Hunesion Products: i-oneNet Problem Types: CWE-353 Description: In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.16, due to the lack of update file integrity checking in the upgrade process, an attacker can craft malicious file and use it as an update. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35073
CVE ID: CVE-2019-12805 State: PUBLISHED Published: 2019-08-09T16:11:12.492401Z Last Updated: 2024-09-16T19:05:39.796Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NCSOFT Products: NC Launcher2 Problem Types: CWE-77 Description: NCSOFT Game Launcher, NC Launcher2 2.4.1.691 and earlier versions have a vulnerability in the custom protocol handler that could allow remote attacker to execute arbitrary command. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. This can be leveraged for code execution in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - htt
code execution in the context of the current user. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35106
CVE ID: CVE-2019-12806 State: PUBLISHED Published: 2019-08-13T19:10:06 Last Updated: 2024-08-04T23:32:55.472Z Vendors: CROSSCERT Products: UniSign Problem Types: CWE-119 Description: UniSign 2.0.4.0 and earlier version contains a stack-based buffer overflow vulnerability which can overwrite the stack with arbitrary data, due to a buffer overflow in a library. That leads remote attacker to execute arbitrary code via crafted https packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35111
CVE ID: CVE-2019-12807 State: PUBLISHED Published: 2019-08-13T19:22:35 Last Updated: 2024-08-04T23:32:55.387Z Vendors: ESTSOFT Products: ALZIP Problem Types: CWE-119 Description: Alzip 10.83 and earlier version contains a stack-based buffer overflow vulnerability, caused by improper bounds checking during the parsing of crafted ISO archive file format. By persuading a victim to open a specially-crafted ISO archive file, an attacker could execution arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35114 - https://www.altools.co.kr/Download/ALZip.aspx#n
CVE ID: CVE-2019-12808 State: PUBLISHED Published: 2019-08-13T19:35:24 Last Updated: 2024-08-04T23:32:55.207Z Vendors: ESTSOFT Products: ALTOOLS Update Service Problem Types: CWE-264 Description: ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission. An attacker can overwrite an executable that is launched as a service to exploit this vulnerability and execute arbitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35116
CVE ID: CVE-2019-12809 State: PUBLISHED Published: 2019-08-15T18:53:58 Last Updated: 2024-08-04T23:32:54.664Z Vendors: YES24 Products: YES24 PC VIEWER Problem Types: CWE-494 Description: Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attackers to download and execute arbitrary files by setting the arguments to the ActiveX method. This can be leveraged for code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35117
CVE ID: CVE-2019-12810 State: PUBLISHED Published: 2019-08-30T16:33:08 Last Updated: 2024-08-04T23:32:55.255Z Vendors: ESTSOFT Products: ALSee Problem Types: CWE-787 Description: A memory corruption vulnerability exists in the .PSD parsing functionality of ALSee v5.3 ~ v8.39. A specially crafted .PSD file can cause an out of bounds write vulnerability resulting in code execution. By persuading a victim to open a specially-crafted .PSD file, an attacker could execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35131
CVE ID: CVE-2019-12811 State: PUBLISHED Published: 2019-10-07T14:10:37 Last Updated: 2024-08-04T23:32:55.500Z Vendors: ACTIVESOFT Products: MyBuilder Problem Types: CWE-78 Description: ActiveX Control in MyBuilder before 6.2.2019.814 allow an attacker to execute arbitrary command via the ShellOpen method. This can be leveraged for code execution Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35155
CVE ID: CVE-2019-12812 State: PUBLISHED Published: 2019-10-07T14:14:10 Last Updated: 2024-08-04T23:32:55.185Z Vendors: ACTIVESOFT Products: MyBuilder Problem Types: CWE-78 Description: MyBuilder viewer before 6.2.2019.814 allow an attacker to execute arbitrary command via specifically crafted configuration file. This can be leveraged for code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35155
CVE ID: CVE-2019-12813 State: PUBLISHED Published: 2019-06-13T22:25:28 Last Updated: 2024-08-04T23:32:55.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Digital Persona U.are.U 4500 Fingerprint Reader v24. The key and salt used for obfuscating the fingerprint image exhibit cleartext when the fingerprint scanner device transfers a fingerprint image to the driver. An attacker who sniffs an encrypted fingerprint image can easily decrypt that image using the key and salt. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sungjungk/fp-scanner-hacking - https://www.youtube.com/watch?v=wEXJDyEOatM - https://www.youtube.com
https://github.com/sungjungk/fp-scanner-hacking - https://www.youtube.com/watch?v=wEXJDyEOatM - https://www.youtube.com/watch?v=Grirez2xeas
CVE ID: CVE-2019-12814 State: PUBLISHED Published: 2019-06-19T13:24:44.000Z Last Updated: 2025-08-27T20:30:34.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the classpath, an attacker can send a specifically crafted JSON message that allows them to read arbitrary local files on the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.debian.org/debian-lts-announce/2019/06
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.debian.org/debian-lts-announce/2019/06/msg00019.html - https://lists.apache.org/thread.html/1e04d9381c801b31ab28dec813c31c304b2a596b2a3707fa5462c5c0%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/a78239b1f11cddfa86e4edee19064c40b6272214630bfef070c37957%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/15a55e1d837fa686db493137cc0330c7ee1089ed9a9eea7ae7151ef1%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/129da0204c876f746636018751a086cc581e0e07bcdeb3ee22ff5731%40%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread
da0204c876f746636018751a086cc581e0e07bcdeb3ee22ff5731%40%3Cdev.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/4b832d1327703d6b287a6d223307f8f884d798821209a10647e93324%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/a62aa2706105d68f1c02023fe24aaa3c13b4d8a1826181fed07d9682%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/8fe2983f6d9fee0aa737e4bd24483f8f5cf9b938b9adad0c4e79b2a4%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/a3ae8a8c5e32c413cd27071d3a204166050bf79ce7f1299f6866338f%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/b148fa2e9ef468c4de00de255
79ce7f1299f6866338f%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/b148fa2e9ef468c4de00de255dd728b74e2a97d935f8ced31eb41ba2%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/eff7280055fc717ea8129cd28a9dd57b8446d00b36260c1caee10b87%40%3Cnotifications.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/71f9ffd92410a889e27b95a219eaa843fd820f8550898633d85d4ea3%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/28be28ffd6471d230943a255c36fe196a54ef5afc494a4781d16e37c%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/2ff264b6a94c5363a35c4c88fa93216f60ec54d1d973ed6b76a9f560%40%3Ci
per.apache.org%3E - https://lists.apache.org/thread.html/2ff264b6a94c5363a35c4c88fa93216f60ec54d1d973ed6b76a9f560%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/b0a2b2cca072650dbd5882719976c3d353972c44f6736ddf0ba95209%40%3Cissues.zookeeper.apache.org%3E - https://lists.apache.org/thread.html/bf20574dbc2db255f1fd489942b5720f675e32a2c4f44eb6a36060cd%40%3Ccommits.accumulo.apache.org%3E - https://lists.apache.org/thread.html/0d4b630d9ee724aee50703397d9d1afa2b2befc9395ba7797d0ccea9%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/56c8042873595b8c863054c7bfccab4bf2c01c6f5abedae249d914b9%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.ht
c8042873595b8c863054c7bfccab4bf2c01c6f5abedae249d914b9%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/2d2a76440becb610b9a9cb49b15eac3934b02c2dbcaacde1000353e4%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/34717424b4d08b74f65c09a083d6dd1cb0763f37a15d6de135998c1d%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/ee0a051428d2c719acfa297d0854a189ea5e284ef3ed491fa672f4be%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/5ecc333113b139429f4f05000d4aa2886974d4df3269c1dd990bb319%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/940b4c3fef002461b89a050935337056d4a036a65ef68e0bbd4621ef%40%3Cdev.struts.apac
%3E - https://lists.apache.org/thread.html/940b4c3fef002461b89a050935337056d4a036a65ef68e0bbd4621ef%40%3Cdev.struts.apache.org%3E - https://lists.apache.org/thread.html/5fc0e16b7af2590bf1e97c76c136291c4fdb244ee63c65c485c9a7a1%40%3Cdev.tomee.apache.org%3E - https://lists.apache.org/thread.html/87e46591de8925f719664a845572d184027258c5a7af0a471b53c77b%40%3Cdev.tomee.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UKUALE2TUCKEKOHE2D342PQXN4MWCSLC/ - https://lists.apache.org/thread.html/3f99ae8dcdbd69438cb733d745ee3ad5e852068490719a66509b4592%40%3Ccommits.cassandra.apache.org%3E - https://lists.fedoraproject.org/archives/list/packag
3ad5e852068490719a66509b4592%40%3Ccommits.cassandra.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OVRZDN2T6AZ6DJCZJ3VSIQIVHBVMVWBL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXRVXNRFHJSQWFHPRJQRI5UPMZ63B544/ - https://access.redhat.com/errata/RHSA-2019:2858 - https://access.redhat.com/errata/RHSA-2019:2937 - https://access.redhat.com/errata/RHSA-2019:2935 - https://access.redhat.com/errata/RHSA-2019:2936 - https://access.redhat.com/errata/RHSA-2019:2938 - https://lists.apache.org/thread.html/e0733058c0366b703e6757d8d2a7a04b943581f659e9c271f0841dfe%40%3Cnotifications.geo
8 - https://lists.apache.org/thread.html/e0733058c0366b703e6757d8d2a7a04b943581f659e9c271f0841dfe%40%3Cnotifications.geode.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3044 - https://access.redhat.com/errata/RHSA-2019:3045 - https://access.redhat.com/errata/RHSA-2019:3050 - https://access.redhat.com/errata/RHSA-2019:3046 - https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3149 - https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aa
c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E - https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E - https://access.redhat.com/errata/RHSA-2019:3200 - https://access.redhat.com/errata/RHSA-2019:3292 - https://access.redhat.com/errata/RHSA-2019:3297 - https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E - https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advis
ache.org%3E - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://github.com/FasterXML/jackson-databind/issues/2341 - https://security.netapp.com/advisory/ntap-20190625-0006/ - https://www.oracle.com/security-alerts/cpuoct2020.html
CVE ID: CVE-2019-12815 State: PUBLISHED Published: 2019-07-19T22:56:14.000Z Last Updated: 2025-11-04T16:09:12.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306. Additional Analyst Notes: - CVE Program Container: References: - https://tbspace.de/cve201912815proftpd.html - http://bugs.proftpd.org/show_bug.cgi?id=4372 - https://github.com/proftpd/proftpd/pull/816 - http://www.securityfocus.com/bid/109339 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/
securityfocus.com/bid/109339 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XM5FPBAGSIKV6YJZEPM6GPGJO5JFT7XU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OJDQ3XUYWO42TJBO53NUWDZRA35QMVEI/ - https://seclists.org/bugtraq/2019/Aug/3 - https://www.debian.org/security/2019/dsa-4491 - https://lists.debian.org/debian-lts-announce/2019/08/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00004.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00022.html - https://security.gentoo.org/glsa/201908-16 - http://lists.opensuse.org/opensuse-security-a
ounce/2019-08/msg00022.html - https://security.gentoo.org/glsa/201908-16 - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00009.html - https://cert-portal.siemens.com/productcert/pdf/ssa-940889.pdf
CVE ID: CVE-2019-12816 State: PUBLISHED Published: 2019-06-15T15:40:41 Last Updated: 2024-08-04T23:32:55.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Modules.cpp in ZNC before 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading a module with a crafted name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/znc/znc/commit/8de9e376ce531fe7f3c8b0aa4876d15b479b7311 - https://github.com/znc/znc/compare/be1b6bc...d1997d6 - https://seclists.org/bugtraq/2019/Jun/23 - https://lists.debian.org/debian-lts-announce/2019/06/msg00017.html - https://usn.ubuntu.com/4044-1/ - http://lists.opens
https://lists.debian.org/debian-lts-announce/2019/06/msg00017.html - https://usn.ubuntu.com/4044-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00037.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00018.html - https://security.gentoo.org/glsa/201908-15 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NHR6OD52FQAG5ZPZ42NJM2T765C3V2XC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEESIGRNFLZUWXZPDGXAZ7JZTHYBDJ7G/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4O24TQOB73X57GACLZVMRVUK4UKHLE5G/
CVE ID: CVE-2019-12817 State: PUBLISHED Published: 2019-06-25T11:12:22 Last Updated: 2024-08-04T23:32:55.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4031-1/ - http://www.openwall.com/lists/oss-security/2019/06/24/5 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca72d88378b2f2444d3e
curity/2019/06/24/5 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca72d88378b2f2444d3ec145dd442d449d3fefbc - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.15 - http://www.securityfocus.com/bid/108884 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WSKLL2374YGFQR6LSVCFGTTCRGBTLAWZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OTLN3KQYEEWWAJYA4BUYYDMWWXCJQNV2/ - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html - https://www.debian.org/security/2019/dsa-4495 - https://seclists.org/bugtraq/2019/Aug/13 - https://support.f
0025.html - https://www.debian.org/security/2019/dsa-4495 - https://seclists.org/bugtraq/2019/Aug/13 - https://support.f5.com/csp/article/K12876166 - https://access.redhat.com/errata/RHSA-2019:2703 - https://support.f5.com/csp/article/K12876166?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2019-12818 State: PUBLISHED Published: 2019-06-14T01:24:42 Last Updated: 2024-08-04T23:32:55.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 4.20.15. The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This affects nfc_llcp_build_gb in net/nfc/llcp_core.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/58bdd544e2933a21a51eecf17c3f5f94038261b5 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?i
mit/58bdd544e2933a21a51eecf17c3f5f94038261b5 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=58bdd544e2933a21a51eecf17c3f5f94038261b5 - https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.15 - http://www.securityfocus.com/bid/108776 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html - https://support.f5.com/csp/article/K91444306 - https://security.netapp.com/advisory/ntap-20190710-0002/ - https://usn.ubuntu.com/4094-1/ - http://packetstormsecurity.com/files/154245/Kernel-Live-Pa
visory/ntap-20190710-0002/ - https://usn.ubuntu.com/4094-1/ - http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html - https://usn.ubuntu.com/4118-1/