Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-14873 State: PUBLISHED Published: 2020-03-19T15:04:12 Last Updated: 2024-08-05T00:26:39.109Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: newlib Problem Types: CWE-476 Description: In the __multadd function of the newlib libc library, prior to versions 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. This will trigger a null pointer dereference bug in case of a memory allocation failure. Additional Analyst Notes: - CVE Program Container: References: - https://census-labs.com/news/2020/01/31/multiple-null-pointer-d
al Analyst Notes: - CVE Program Container: References: - https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
CVE ID: CVE-2019-14874 State: PUBLISHED Published: 2020-03-19T15:07:52 Last Updated: 2024-08-05T00:26:39.142Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: newlib Problem Types: CWE-476 Description: In the __i2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access of _ x[0] will trigger a null pointer dereference bug in case of a memory allocation failure. Additional Analyst Notes: - CVE Program Container: References: - https://census-labs.com/news/2020/01/31/multipl
ailure. Additional Analyst Notes: - CVE Program Container: References: - https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
CVE ID: CVE-2019-14875 State: PUBLISHED Published: 2020-03-19T15:08:12 Last Updated: 2024-08-05T00:26:39.202Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: newlib Problem Types: CWE-476 Description: In the __multiply function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access of _x[0] will trigger a null pointer dereference bug in case of a memory allocation failure. Additional Analyst Notes: - CVE Program Container: References: - https://census-labs.com/news/2020/01/31/mul
on failure. Additional Analyst Notes: - CVE Program Container: References: - https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
CVE ID: CVE-2019-14876 State: PUBLISHED Published: 2020-03-19T15:08:25 Last Updated: 2024-08-05T00:26:39.129Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: newlib Problem Types: CWE-476 Description: In the __lshift function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. The access to b1 will trigger a null pointer dereference bug in case of a memory allocation failure. Additional Analyst Notes: - CVE Program Container: References: - https://census-labs.com/news/2020/01/31/multiple
ilure. Additional Analyst Notes: - CVE Program Container: References: - https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
CVE ID: CVE-2019-14877 State: PUBLISHED Published: 2020-03-19T15:04:15 Last Updated: 2024-08-05T00:26:39.121Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: newlib Problem Types: CWE-476 Description: In the __mdiff function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate big integers, however no check is performed to verify if the allocation succeeded or not. The access to _wds and _sign will trigger a null pointer dereference bug in case of a memory allocation failure. Additional Analyst Notes: - CVE Program Container: References: - https://census-labs.com/news/2020/01/3
ocation failure. Additional Analyst Notes: - CVE Program Container: References: - https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
CVE ID: CVE-2019-14878 State: PUBLISHED Published: 2020-03-19T15:04:19 Last Updated: 2024-08-05T00:26:39.162Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: newlib Problem Types: CWE-476 Description: In the __d2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a big integer, however no check is performed to verify if the allocation succeeded or not. Accessing _x will trigger a null pointer dereference bug in case of a memory allocation failure. Additional Analyst Notes: - CVE Program Container: References: - https://census-labs.com/news/2020/01/31/multiple-null-p
Additional Analyst Notes: - CVE Program Container: References: - https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
CVE ID: CVE-2019-14879 State: PUBLISHED Published: 2020-01-07T16:23:01 Last Updated: 2024-08-05T00:26:39.133Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: [UNKNOWN] Products: moodle Problem Types: CWE-264 Description: A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed, the associated capabilities were not being revoked (where applicable). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14879
CVE ID: CVE-2019-14880 State: PUBLISHED Published: 2020-03-31T15:11:30 Last Updated: 2024-08-05T00:26:39.160Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: [UNKNOWN] Products: moodle Problem Types: CWE-287 Description: A vulnerability was found in Moodle versions 3.7 before 3.7.3, 3.6 before 3.6.7, 3.5 before 3.5.9 and earlier. OAuth 2 providers who do not verify users' email address changes require additional verification during sign-up to reduce the risk of account compromise. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/security/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14880
CVE ID: CVE-2019-14881 State: PUBLISHED Published: 2020-03-18T12:19:40 Last Updated: 2024-08-05T00:26:39.145Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: [UNKNOWN] Products: moodle Problem Types: CWE-79 Description: A vulnerability was found in moodle 3.7 before 3.7.3, where there is blind XSS reflected in some locations where user email is displayed. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14881 - https://moodle.org/mod/forum/discuss.php?d=393584#p1586746
CVE ID: CVE-2019-14882 State: PUBLISHED Published: 2020-03-18T12:14:28 Last Updated: 2024-08-05T00:26:39.160Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: [UNKNOWN] Products: moodle Problem Types: CWE-601 Description: A vulnerability was found in Moodle 3.7 to 3.7.3, 3.6 to 3.6.7, 3.5 to 3.5.9 and earlier where an open redirect existed in the Lesson edit page. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14882 - https://moodle.org/mod/forum/discuss.php?d=393585#p1586747
CVE ID: CVE-2019-14883 State: PUBLISHED Published: 2020-03-18T12:16:16 Last Updated: 2024-08-05T00:26:39.123Z Severity: LOW (CVSS 3.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: [UNKNOWN] Products: moodle Problem Types: CWE-285 Description: A vulnerability was found in Moodle 3.6 before 3.6.7 and 3.7 before 3.7.3, where tokens used to fetch inline atachments in email notifications were not disabled when a user's account was no longer active. Note: to access files, a user would need to know the file path, and their token. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14883 - https://moodle.org/mod/forum/discuss
ntainer: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14883 - https://moodle.org/mod/forum/discuss.php?d=393586#p1586750
CVE ID: CVE-2019-14884 State: PUBLISHED Published: 2020-03-18T12:17:36 Last Updated: 2024-08-05T00:26:39.172Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: [UNKNOWN] Products: moodle Problem Types: CWE-79 Description: A vulnerability was found in Moodle 3.7 before 3.73, 3.6 before 3.6.7 and 3.5 before 3.5.9, where a reflected XSS possible from some fatal error messages. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14884 - https://moodle.org/mod/forum/discuss.php?d=393587#p1586751
CVE ID: CVE-2019-14885 State: PUBLISHED Published: 2020-01-23T00:00:00 Last Updated: 2024-08-05T00:26:39.249Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: JBoss EAP Problem Types: CWE-532 Description: A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential information of the system property's security attribute value is revealed in the JBoss EAP log file when executing a JBoss CLI 'reload' command. This flaw can lead to the exposure of confidential information. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14885
CVE ID: CVE-2019-14886 State: PUBLISHED Published: 2020-03-05T00:00:00 Last Updated: 2024-08-05T00:26:39.178Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: Business-central Problem Types: CWE-312 Description: A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are stored in errai_security_context. The encoding used for storing the passwords is Base64, not an encryption algorithm, and any recovery of these passwords could lead to user passwords being exposed. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-1488
ditional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14886 - https://groups.google.com/forum/?utm_medium=email&utm_source=footer#%21msg/jbpm-usage/74pSuwfGKRU/0oXpmRScBQAJ
CVE ID: CVE-2019-14887 State: PUBLISHED Published: 2020-03-16T14:48:09 Last Updated: 2024-08-05T00:26:39.145Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: wildfly Problem Types: CWE-757 Description: A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the traffic sent from Wildfly and downgrade the connection to a weaker version of TLS, potentially breaking the encryption. This could lead to a leak of the data being passed over the network. Wildfly version 7.2.0.GA, 7.2.3.GA and 7.2.5.CR2 are believed to be vulnerable. Add
data being passed over the network. Wildfly version 7.2.0.GA, 7.2.3.GA and 7.2.5.CR2 are believed to be vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14887 - https://issues.redhat.com/browse/JBEAP-17965 - https://security.netapp.com/advisory/ntap-20200327-0007/
CVE ID: CVE-2019-14888 State: PUBLISHED Published: 2020-01-23T16:25:11 Last Updated: 2024-08-05T00:26:39.131Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: undertow Problem Types: CWE-400 Description: A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14888 - https://access.redhat.com/errata/RHSA-2020:0729 - https://security.netapp.com/advisory/ntap-202
.cgi?id=CVE-2019-14888 - https://access.redhat.com/errata/RHSA-2020:0729 - https://security.netapp.com/advisory/ntap-20220211-0001/
CVE ID: CVE-2019-14889 State: PUBLISHED Published: 2019-12-10T00:00:00 Last Updated: 2024-08-05T00:26:39.148Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: libssh Problem Types: CWE-78 Description: A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence the third parameter of the function, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote tar
nction, it would become possible for an attacker to inject arbitrary commands, leading to a compromise of the remote target. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4219-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00033.html - https://lists.debian.org/debian-lts-announce/2019/12/msg00020.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7JJWJTXVWLLJTVHBPGWL7472S5FWXYQR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EV2ONSPDJCTDVORCB4UGRQUZQQ46JHRN/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg0
roject.org/message/EV2ONSPDJCTDVORCB4UGRQUZQQ46JHRN/ - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00047.html - https://security.gentoo.org/glsa/202003-27 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14889 - https://www.libssh.org/security/advisories/CVE-2019-14889.txt - https://lists.debian.org/debian-lts-announce/2023/05/msg00029.html
CVE ID: CVE-2019-14890 State: PUBLISHED Published: 2019-11-26T06:46:17 Last Updated: 2024-08-05T00:26:39.098Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: [UNKNOWN] Products: Tower Problem Types: CWE-312 Description: A vulnerability was found in Ansible Tower before 3.6.1 where an attacker with low privilege could retrieve usernames and passwords credentials from the new RHSM saved in plain text into the database at '/api/v2/config' when applying the Ansible Tower license. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14890
CVE ID: CVE-2019-14891 State: PUBLISHED Published: 2019-11-25T10:31:17 Last Updated: 2024-08-05T00:26:39.148Z Severity: MEDIUM (CVSS 5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: cri-o Problem Types: CWE-460 Description: A flaw was found in cri-o, as a result of all pod-related processes being placed in the same memory cgroup. This can result in container management (conmon) processes being killed if a workload process triggers an out-of-memory (OOM) condition for the cgroup. An attacker could abuse this flaw to get host network access on an cri-o host. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-20
ost. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14891
CVE ID: CVE-2019-14892 State: PUBLISHED Published: 2020-03-02T16:28:40 Last Updated: 2024-08-05T00:26:39.136Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: jackson-databind Problem Types: CWE-502, CWE-200 Description: A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14892 - https://github.com/FasterXML/jac
m Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14892 - https://github.com/FasterXML/jackson-databind/issues/2462 - https://access.redhat.com/errata/RHSA-2020:0729 - https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E - https://security.netapp.com/advisory/ntap-20200904-0005/
CVE ID: CVE-2019-14893 State: PUBLISHED Published: 2020-03-02T20:11:32 Last Updated: 2024-08-05T00:26:39.152Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: jackson-databind Problem Types: CWE-502, CWE-200 Description: A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects fr
is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2020:0729 - https://www.oracle.com/security-alerts/cpujul2020.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14893 - https://github.com/FasterXML/jackson-databind/issues/2469 - https://security.netapp.com/advisory/ntap-20200327-0006/ - https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E - https://lists.ap
d.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E - https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2020.html
CVE ID: CVE-2019-14894 State: PUBLISHED Published: 2020-06-22T17:53:52 Last Updated: 2024-08-05T00:26:39.132Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: [UNKNOWN] Products: CloudForms Problem Types: CWE-20, CWE-78 Description: A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution through NFS schedule backup. An attacker logged into the management console could use this flaw to execute arbitrary shell commands on the CloudForms server as root. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14894
CVE ID: CVE-2019-14895 State: PUBLISHED Published: 2019-11-29T13:50:14 Last Updated: 2024-08-05T00:26:39.153Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: kernel Problem Types: CWE-122 Description: A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - h
ce (system crash) or possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2019/11/22/2 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14895 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MN6MLCN7G7VFTSXSZYXKXEFCUMFBUAXQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4ISVNIC44SOGXTUBCIZFSUNQJ5LRKNZ/ - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - https://usn.ubuntu.com/4228-1/ - https://usn.ubuntu.com/4227-1/ - https://usn.ubuntu.com/4226-1/ - https://usn.ubuntu.
- https://usn.ubuntu.com/4228-1/ - https://usn.ubuntu.com/4227-1/ - https://usn.ubuntu.com/4226-1/ - https://usn.ubuntu.com/4225-1/ - https://usn.ubuntu.com/4228-2/ - https://usn.ubuntu.com/4227-2/ - http://packetstormsecurity.com/files/155879/Kernel-Live-Patch-Security-Notice-LSN-0061-1.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://usn.ubuntu.com/4225-2/ - http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html - https://access.redhat.com/errata/RHSA-2020:0328 - https://access.redhat.com/errata/RHSA-2020:0339 - https://access.redhat.com/errata/RHSA-2020:0374 - https://access.redhat.com/errata/RHSA-2020:0375 - https:
A-2020:0339 - https://access.redhat.com/errata/RHSA-2020:0374 - https://access.redhat.com/errata/RHSA-2020:0375 - https://access.redhat.com/errata/RHSA-2020:0543 - https://access.redhat.com/errata/RHSA-2020:0592 - https://access.redhat.com/errata/RHSA-2020:0609 - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - https://access.redhat.com/errata/RHSA-2020:0653 - https://access.redhat.com/errata/RHSA-2020:0661 - https://access.redhat.com/errata/RHSA-2020:0664
CVE ID: CVE-2019-14896 State: PUBLISHED Published: 2019-11-27T08:05:17 Last Updated: 2024-08-05T00:26:39.112Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: kernel Problem Types: CWE-122 Description: A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14896 - https://lists
Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14896 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MN6MLCN7G7VFTSXSZYXKXEFCUMFBUAXQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4ISVNIC44SOGXTUBCIZFSUNQJ5LRKNZ/ - https://security.netapp.com/advisory/ntap-20200103-0001/ - https://usn.ubuntu.com/4228-1/ - https://usn.ubuntu.com/4227-1/ - https://usn.ubuntu.com/4226-1/ - https://usn.ubuntu.com/4225-1/ - https://usn.ubuntu.com/4228-2/ - https://usn.ubuntu.com/4227-2/ - http://packetstormsecurity.com/files/155879/Kernel-Live-Patch-Security
tu.com/4228-2/ - https://usn.ubuntu.com/4227-2/ - http://packetstormsecurity.com/files/155879/Kernel-Live-Patch-Security-Notice-LSN-0061-1.html - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://usn.ubuntu.com/4225-2/ - http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html