Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
the site has another web services module enabled, like JSON:API in Drupal 8, or Services or RESTful Web Services in Drupal 7. (Note: The Drupal 7 Services module itself does not require an update at this time, but you should apply other contributed updates associated with this advisory if Services is in use.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.synology.com/security/advisory/Synology_SA_19_09 - https://www.exploit-db.com/exploits/46452/ - https://www.drupal.org/sa-core-2019-003 - https://www.exploit-db.com/exploits/46510/ - http://www.securityfocus.com/bid/107106 - https://www.exploit-db.com/exploits/46459/
CVE ID: CVE-2019-6341 State: PUBLISHED Published: 2019-03-26T18:04:37 Last Updated: 2024-08-04T20:23:20.919Z Vendors: Drupal Products: Drupal core Problem Types: Cross Site Scripting Description: In Drupal 7 versions prior to 7.65; Drupal 8.6 versions prior to 8.6.13;Drupal 8.5 versions prior to 8.5.14. Under certain circumstances the File module/subsystem allows a malicious user to upload a file that can trigger a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/sa-core-2019-004 - https://lists.debian.org/debian-lts-announce/2019/04/msg00003.html - https://www.synology.com/security/advisory/Synology_SA_19_13 -
s.debian.org/debian-lts-announce/2019/04/msg00003.html - https://www.synology.com/security/advisory/Synology_SA_19_13 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QNTLCBAN6T7WYR5C4TNEYQD65IIR3V4P/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4SVTVIJ33XCFQ6X6XTVMQM3NPLP2WFS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P4KTET2PTSIS3ZZ4SGBRQEN6CCLV5SYX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWHF4LALNBZCXMITWWVWKY3PNVYTM3N7/
CVE ID: CVE-2019-6342 State: PUBLISHED Published: 2020-05-28T20:59:46 Last Updated: 2024-08-04T20:23:20.932Z Vendors: Drupal Products: Drupal Core Problem Types: Access Bypasss Description: An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled. This can be mitigated by disabling the Workspaces module. It does not affect any release other than Drupal 8.7.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/sa-core-2019-008
CVE ID: CVE-2019-6438 State: PUBLISHED Published: 2019-01-31T08:00:00 Last Updated: 2024-08-04T20:23:20.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems. Additional Analyst Notes: - CVE Program Container: References: - https://lists.schedmd.com/pipermail/slurm-announce/2019/000018.html - https://www.schedmd.com/news.php?id=213 - http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00090.html - https://lists.debian.org/debian-lts-announce/2020/03/msg00016.html
CVE ID: CVE-2019-6439 State: PUBLISHED Published: 2019-01-16T03:00:00 Last Updated: 2024-08-04T20:23:20.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: examples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106640 - https://github.com/wolfSSL/wolfssl/issues/2032
CVE ID: CVE-2019-6440 State: PUBLISHED Published: 2019-01-16T04:00:00Z Last Updated: 2024-09-17T01:51:48.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zemana AntiMalware before 3.0.658 Beta mishandles update logic. Additional Analyst Notes: - CVE Program Container: References: - https://www.zemana.com/whats-new?ProductID=2
CVE ID: CVE-2019-6441 State: PUBLISHED Published: 2019-03-19T20:08:16 Last Updated: 2024-08-04T20:23:20.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Shenzhen Coship RT3050 4.0.0.40, RT3052 4.0.0.48, RT7620 10.0.0.49, WM3300 5.0.0.54, and WM3300 5.0.0.55 devices. The password reset functionality of the router doesn't have backend validation for the current password and doesn't require any type of authentication. By making a POST request to the apply.cgi file of the router, the attacker can change the admin username and password of the router. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/1512
f the router. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151202/Coship-Wireless-Router-Unauthenticated-Admin-Password-Reset.html - https://www.exploit-db.com/exploits/46180/ - https://www.exploit-db.com/exploits/46180 - https://packetstormsecurity.com/files/151202/Coship-Wireless-Router-Unauthenticated-Admin-Password-Reset.html - https://vulmon.com/exploitdetails?qidtp=EDB&qid=46180 - https://www.anquanke.com/vul/id/1451446
CVE ID: CVE-2019-6442 State: PUBLISHED Published: 2019-01-16T05:00:00 Last Updated: 2024-08-04T20:23:20.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can write one byte out of bounds in ntpd via a malformed config request, related to config_remotely in ntp_config.c, yyparse in ntp_parser.tab.c, and yyerror in ntp_parser.y. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46178/ - https://dumpco.re/bugs/ntpsec-authed-oobwrite - https://dumpco.re/blog/ntpsec-bugs - https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS
CVE ID: CVE-2019-6443 State: PUBLISHED Published: 2019-01-16T05:00:00 Last Updated: 2024-08-04T20:23:21.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem, there is a stack-based buffer over-read in read_sysvars in ntp_control.c in ntpd. Additional Analyst Notes: - CVE Program Container: References: - https://dumpco.re/blog/ntpsec-bugs - https://dumpco.re/bugs/ntpsec-oobread1 - https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS - https://www.exploit-db.com/exploits/46175/
CVE ID: CVE-2019-6444 State: PUBLISHED Published: 2019-01-16T05:00:00 Last Updated: 2024-08-04T20:23:20.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NTPsec before 1.1.3. process_control() in ntp_control.c has a stack-based buffer over-read because attacker-controlled data is dereferenced by ntohl() in ntpd. Additional Analyst Notes: - CVE Program Container: References: - https://dumpco.re/bugs/ntpsec-oobread2 - https://dumpco.re/blog/ntpsec-bugs - https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS - https://www.exploit-db.com/exploits/46176/
CVE ID: CVE-2019-6445 State: PUBLISHED Published: 2019-01-16T05:00:00 Last Updated: 2024-08-04T20:23:20.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd crash in ntp_control.c, related to ctl_getitem. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46177/ - https://dumpco.re/blog/ntpsec-bugs - https://github.com/ntpsec/ntpsec/blob/NTPsec_1_1_3/NEWS - https://dumpco.re/bugs/ntpsec-authed-npe
CVE ID: CVE-2019-6446 State: PUBLISHED Published: 2019-01-16T05:00:00.000Z Last Updated: 2025-07-21T22:10:51.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have legitimate applications in (for example) loading serialized Python object arrays from trusted and authenticated sources. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1
ed sources. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1122208 - http://www.securityfocus.com/bid/106670 - https://github.com/numpy/numpy/issues/12759 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZZAYIQNUUYXGMKHSPEEXS4TRYFOUYE4/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00091.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00092.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00015.html - https://access.redhat.com/errata/RHSA-2019:3335 - https://access.redhat.com/errata/RHSA-2019:3704 - https://github.com/nu
ttps://access.redhat.com/errata/RHSA-2019:3335 - https://access.redhat.com/errata/RHSA-2019:3704 - https://github.com/numpy/numpy/pull/13359 - https://github.com/numpy/numpy/pull/12889 - https://github.com/numpy/numpy/commit/89b688732b37616c9d26623f81aaee1703c30ffb
CVE ID: CVE-2019-6447 State: PUBLISHED Published: 2019-01-16T14:00:00 Last Updated: 2024-08-04T20:23:20.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after the ES application has been launched once, and responds to unauthenticated application/json data over HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fs0c131y/ESFileExplorerOpenPortVuln - https://twitter.com/fs0c131y/status/1085460755313508352 - http://
tps://github.com/fs0c131y/ESFileExplorerOpenPortVuln - https://twitter.com/fs0c131y/status/1085460755313508352 - http://packetstormsecurity.com/files/163303/ES-File-Explorer-4.1.9.7.4-Arbitrary-File-Read.html
CVE ID: CVE-2019-6451 State: PUBLISHED Published: 2019-06-06T18:08:24 Last Updated: 2024-08-04T20:23:20.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access. Additional Analyst Notes: - CVE Program Container: References: - http://www.nccst.nat.gov.tw - https://github.com/cvereveal/CVEs/tree/master/CVE-2019-6451 - http://www.soyal.com/epaper/e-paper-en-117.html - https://www.soyal.com/exhibition/cve-2019-6451/ - https://www.soyal.com.tw/cve-2019-6451/
CVE ID: CVE-2019-6452 State: PUBLISHED Published: 2019-06-06T18:06:26 Last Updated: 2024-08-04T20:23:20.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kyocera Command Center RX TASKalfa4501i and TASKalfa5052ci allows remote attackers to abuse the Test button in the machine address book to obtain a cleartext FTP or SMB password. Additional Analyst Notes: - CVE Program Container: References: - http://www.nccst.nat.gov.tw - https://github.com/cvereveal/CVEs/tree/master/CVE-2019-6452
CVE ID: CVE-2019-6453 State: PUBLISHED Published: 2019-02-18T15:00:00 Last Updated: 2024-08-04T20:23:20.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: mIRC before 7.55 allows remote command execution by using argument injection through custom URI protocol handlers. The attacker can specify an irc:// URI that loads an arbitrary .ini file from a UNC share pathname. Exploitation depends on browser-specific URI handling (Chrome is not exploitable). Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46392/ - https://proofofcalc.com/advisories/20190218.txt - https://github.com/proofofcalc/cve-2019-6453-poc - https://www.mirc.com/ne
s://proofofcalc.com/advisories/20190218.txt - https://github.com/proofofcalc/cve-2019-6453-poc - https://www.mirc.com/news.html - https://proofofcalc.com/cve-2019-6453-mIRC/ - https://twitter.com/proofofcalc/status/1097518413143003136
CVE ID: CVE-2019-6454 State: PUBLISHED Published: 2019-03-17T16:38:57 Last Updated: 2024-08-04T20:23:21.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic). Additional Analyst Notes: - CVE Program Container: References:
denial of service (systemd PID1 crash and kernel panic). Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N67IOBOTDOMVNQJ5QRU2MXLEECXPGNVJ/ - http://www.openwall.com/lists/oss-security/2019/02/18/3 - http://www.securityfocus.com/bid/107081 - https://usn.ubuntu.com/3891-1/ - https://access.redhat.com/errata/RHSA-2019:0368 - https://github.com/systemd/systemd/commits/master/src/libsystemd/sd-bus/bus-objects.c - http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00070.html - http://www.openwall.com/lists/oss-security/2019/02/19/1 - https://lists.debian.org/debian-lts-an
2019-02/msg00070.html - http://www.openwall.com/lists/oss-security/2019/02/19/1 - https://lists.debian.org/debian-lts-announce/2019/02/msg00031.html - https://www.debian.org/security/2019/dsa-4393 - https://security.netapp.com/advisory/ntap-20190327-0004/ - https://kc.mcafee.com/corporate/index?page=content&id=SB10278 - https://access.redhat.com/errata/RHSA-2019:0990 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html - https://access.redhat.com/errata/RHSA-2019:1322 - https://access.redhat.com/errata/RHSA-2019:1502 - https://access.redhat.com/errata/RHSA-2019:2805 - http://www.openwall.com/lists/oss-security/2021/07/20/2
CVE ID: CVE-2019-6455 State: PUBLISHED Published: 2019-01-16T18:00:00 Last Updated: 2024-08-04T20:23:20.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU Recutils 1.8. There is a double-free problem in the function rec_mset_elem_destroy() in the file rec-mset.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/recutils
CVE ID: CVE-2019-6456 State: PUBLISHED Published: 2019-01-16T18:00:00 Last Updated: 2024-08-04T20:23:20.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_fex_size() in the file rec-fex.c of librec.a. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/recutils
CVE ID: CVE-2019-6457 State: PUBLISHED Published: 2019-01-16T18:00:00 Last Updated: 2024-08-04T20:23:20.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_aggregate_reg_new in rec-aggregate.c in librec.a. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/recutils
CVE ID: CVE-2019-6458 State: PUBLISHED Published: 2019-01-16T18:00:00 Last Updated: 2024-08-04T20:23:20.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_buf_new in rec-buf.c when called from rec_parse_rset in rec-parser.c in librec.a. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/recutils
CVE ID: CVE-2019-6459 State: PUBLISHED Published: 2019-01-16T18:00:00 Last Updated: 2024-08-04T20:23:20.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU Recutils 1.8. There is a memory leak in rec_extract_type in rec-utils.c in librec.a. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/recutils
CVE ID: CVE-2019-6460 State: PUBLISHED Published: 2019-01-16T18:00:00 Last Updated: 2024-08-04T20:23:21.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function rec_field_set_name() in the file rec-field.c in librec.a. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TeamSeri0us/pocs/tree/master/recutils
CVE ID: CVE-2019-6461 State: PUBLISHED Published: 2019-01-16T18:00:00 Last Updated: 2024-08-04T20:23:20.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in cairo 1.16.0. There is an assertion problem in the function _cairo_arc_in_direction in the file cairo-arc.c. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/cairo/cairo/issues/352 - https://github.com/TeamSeri0us/pocs/tree/master/gerbv - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2019-6462 State: PUBLISHED Published: 2019-01-16T18:00:00 Last Updated: 2024-08-04T20:23:20.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c, related to _arc_max_angle_for_tolerance_normalized. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/cairo/cairo/issues/353 - https://github.com/TeamSeri0us/pocs/tree/master/gerbv - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE ID: CVE-2019-6465 State: PUBLISHED Published: 2019-10-09T14:17:14.410560Z Last Updated: 2024-09-16T20:37:52.694Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ISC Products: BIND 9 Problem Types: A client exercising this defect can request and receive a zone transfer of a DLZ even when not permitted to do so by the allow-transfer ACL. Description: Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9
-> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2019-6465. Additional Analyst Notes: - CVE Program Container: References: - https://kb.isc.org/docs/cve-2019-6465 - https://access.redhat.com/errata/RHSA-2019:3552
CVE ID: CVE-2019-6466 State: REJECTED Published: 2020-02-07T16:25:18 Last Updated: 2020-02-07T16:25:18 Description: No description available.
CVE ID: CVE-2019-6467 State: PUBLISHED Published: 2019-10-09T14:17:14.449734Z Last Updated: 2024-09-17T00:11:15.675Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ISC Products: BIND 9 Problem Types: An attacker who can deliberately trigger the condition on a server with a vulnerable configuration can cause BIND to exit, denying service to other clients. Description: A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOM
hat is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAIN redirection for recursive clients, is also serving a local copy of the root zone or using mirroring to provide the root zone, although other configurations are also possible. Versions affected: BIND 9.12.0-> 9.12.4, 9.14.0. Also affects all releases in the 9.13 development branch. Additional Analyst Notes: - CVE Program Container: References: - https://kb.isc.org/docs/cve-2019-6467 - https://www.synology.com/security/advisory/Synology_SA_19_20
CVE ID: CVE-2019-6468 State: PUBLISHED Published: 2019-10-09T14:17:14.488494Z Last Updated: 2024-09-16T18:44:17.039Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: ISC Products: BIND 9 Supported Preview Edition Problem Types: If nxdomain-redirect is enabled (via configuration) in a vulnerable BIND release, a malicious party can cause BIND to exit by deliberately triggering the bug. Description: In BIND Supported Preview Edition, an error in the nxdomain-redirect feature can occur in versions which support EDNS Client Subnet (ECS) features. In those versions which have ECS support, enabling nxdomain-redirect is likely to lead to BIND exiting due to assertion
In those versions which have ECS support, enabling nxdomain-redirect is likely to lead to BIND exiting due to assertion failure. Versions affected: BIND Supported Preview Edition version 9.10.5-S1 -> 9.11.5-S5. ONLY BIND Supported Preview Edition releases are affected. Additional Analyst Notes: - CVE Program Container: References: - https://kb.isc.org/docs/cve-2019-6468 - https://www.synology.com/security/advisory/Synology_SA_19_20
CVE ID: CVE-2019-6469 State: PUBLISHED Published: 2019-10-09T14:17:14.528095Z Last Updated: 2024-09-17T01:30:59.645Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: ISC Products: BIND 9 Supported Preview Edition Problem Types: An attacker who is able to cause a server to perform a query whose answer will be accompanied by malformed RRSIGs can deliberately cause a server to exit if it is using the recursive ECS feature. Description: An error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failure when processing a response that has malformed RRSIGs. Versions affected: BIND 9.10.5-S1 -> 9.11.6-S1 of BIND
ion failure when processing a response that has malformed RRSIGs. Versions affected: BIND 9.10.5-S1 -> 9.11.6-S1 of BIND 9 Supported Preview Edition. Additional Analyst Notes: - CVE Program Container: References: - https://kb.isc.org/docs/cve-2019-6469 - https://support.f5.com/csp/article/K39751401?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2019-6470 State: PUBLISHED Published: 2019-11-01T22:15:33.599863Z Last Updated: 2024-09-17T01:25:37.218Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Multiple, non-ISC Products: dhcpd Problem Types: A use-after-free error in DHCPv6 processing when interfacing with newer BIND libraries leads to frequent crashes Description: There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its documentation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contai
ntation, but the bug in the library function prevented this from causing any harm. All releases of dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested prior to release and are known to not present issues like this. Some third-party packagers of ISC software have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential. Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions wit