Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-19017 State: PUBLISHED Published: 2019-12-02T16:49:57 Last Updated: 2024-08-05T02:02:39.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TitanHQ WebTitan before 5.18. The appliance has a hard-coded root password set during installation. An attacker could utilize this to gain root privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://write-up.github.io/webtitan/ - https://www.webtitan.com/resources/product-updates/
CVE ID: CVE-2019-19018 State: PUBLISHED Published: 2019-12-02T16:52:47 Last Updated: 2024-08-05T02:02:40.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TitanHQ WebTitan before 5.18. It exposes a database configuration file under /include/dbconfig.ini in the web administration interface, revealing what database the web application is using. Additional Analyst Notes: - CVE Program Container: References: - https://write-up.github.io/webtitan/ - https://www.webtitan.com/resources/product-updates/
CVE ID: CVE-2019-19019 State: PUBLISHED Published: 2019-12-02T16:53:18 Last Updated: 2024-08-05T02:02:40.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TitanHQ WebTitan before 5.18. It contains a Remote Code Execution issue through which an attacker can execute arbitrary code as root. The issue stems from the hotfix download mechanism, which downloads a shell script via HTTP, and then executes it as root. This is analogous to CVE-2019-6800 but for a different product. Additional Analyst Notes: - CVE Program Container: References: - https://write-up.github.io/webtitan/ - https://www.webtitan.com/resources/product-updates/
CVE ID: CVE-2019-19020 State: PUBLISHED Published: 2019-12-02T16:54:40 Last Updated: 2024-08-05T02:02:39.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TitanHQ WebTitan before 5.18. In the administration web interface it is possible to upload a crafted backup file that enables an attacker to execute arbitrary code by overwriting existing files or adding new PHP files under the web root. This requires the attacker to have access to a valid web interface account. Additional Analyst Notes: - CVE Program Container: References: - https://write-up.github.io/webtitan/ - https://www.webtitan.com/resources/product-updates/
CVE ID: CVE-2019-19021 State: PUBLISHED Published: 2019-12-02T16:55:35 Last Updated: 2024-08-05T02:02:39.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in TitanHQ WebTitan before 5.18. It has a hidden support account (with a hard-coded password) in the web administration interface, with administrator privileges. Anybody can log in with this account. Additional Analyst Notes: - CVE Program Container: References: - https://write-up.github.io/webtitan/ - https://www.webtitan.com/resources/product-updates/
CVE ID: CVE-2019-19022 State: PUBLISHED Published: 2019-11-17T10:59:09 Last Updated: 2024-08-05T02:02:39.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which might allow remote attackers to obtain sensitive information, as demonstrated by searching for the NoSyncSearchHistory string in .plist files within public Git repositories. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gnachman/iterm2/issues/8491
CVE ID: CVE-2019-19023 State: PUBLISHED Published: 2020-03-20T02:22:41 Last Updated: 2024-08-05T02:02:39.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/goharbor/harbor/security/advisories - https://tanzu.vmware.com/security/cve-2019-19023
CVE ID: CVE-2019-19025 State: PUBLISHED Published: 2020-03-20T02:01:41 Last Updated: 2024-08-05T02:02:39.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/goharbor/harbor/security/advisories - https://tanzu.vmware.com/security/cve-2019-19025 - https://github.com/goharbor/harbor/security/advisories/GHSA-gcqm-v682-ccw6
CVE ID: CVE-2019-19026 State: PUBLISHED Published: 2020-03-20T02:01:55 Last Updated: 2024-08-05T02:02:40.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via project quotas in the VMware Harbor Container Registry for the Pivotal Platform. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/goharbor/harbor/security/advisories - https://tanzu.vmware.com/security/cve-2019-19026 - https://github.com/goharbor/harbor/security/advisories/GHSA-rh89-vvrg-fg64
CVE ID: CVE-2019-19029 State: PUBLISHED Published: 2020-03-20T02:02:28 Last Updated: 2024-08-05T02:09:37.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/goharbor/harbor/security/advisories - https://tanzu.vmware.com/security/cve-2019-19029 - https://github.com/goharbor/harbor/security/advisories/GHSA-qcfv-8v29-469w
CVE ID: CVE-2019-19030 State: PUBLISHED Published: 2022-12-26T00:00:00.000Z Last Updated: 2025-04-14T17:08:14.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloud Native Computing Foundation Harbor before 1.10.3 and 2.x before 2.0.1 allows resource enumeration because unauthenticated API calls reveal (via the HTTP status code) whether a resource exists. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/goharbor/harbor/security/advisories/GHSA-q9x4-q76f-5h5j
CVE ID: CVE-2019-19031 State: PUBLISHED Published: 2019-12-30T19:12:24 Last Updated: 2024-08-05T02:09:37.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy XML Editor through v1.7.8 is affected by: XML External Entity Injection. The impact is: Arbitrary File Read and DoS by consuming resources. The component is: XML Parsing. The attack vector is: Specially crafted XML payload. Additional Analyst Notes: - CVE Program Container: References: - https://hackpuntes.com/cve-2019-19031-easy-xml-editor-1-7-8-inyeccion-xml/ - http://packetstormsecurity.com/files/155996/Easy-XML-Editor-1.7.8-XML-Injection.html
CVE ID: CVE-2019-19032 State: PUBLISHED Published: 2019-12-30T19:15:30 Last Updated: 2024-08-05T02:09:37.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: XMLBlueprint through 16.191112 is affected by XML External Entity Injection. The impact is: Arbitrary File Read when an XML File is validated. The component is: XML Validate function. The attack vector is: Specially crafted XML payload. Additional Analyst Notes: - CVE Program Container: References: - https://hackpuntes.com/cve-2019-19032-xmlblueprint-16-191112-inyeccion-xml/ - http://packetstormsecurity.com/files/156139/XMLBlueprint-16.191112-XML-Injection.html
CVE ID: CVE-2019-19033 State: PUBLISHED Published: 2019-11-21T17:53:02 Last Updated: 2024-08-05T02:09:37.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password. Additional Analyst Notes: - CVE Program Container: References: - https://community.jalios.com/jcms/frt_74021/en/blog-jalios-community - http://packetstormsecurity.com/files/155419/Jalios-JCMS-10-Backdoor-Account-Authentication-Bypass.html - https://github.com/ricardojoserf/CVE-2019-19033
CVE ID: CVE-2019-19034 State: PUBLISHED Published: 2020-03-23T16:09:54 Last Updated: 2024-08-05T02:09:37.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Asset Explorer 6.5 does not validate the System Center Configuration Manager (SCCM) database username when dynamically generating a command to schedule scans for SCCM. This allows an attacker to execute arbitrary commands on the AssetExplorer Server with NT AUTHORITY/SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/asset-explorer/sp-readme.html - http://seclists.org/fulldisclosure/2020/May/36 - http://packetstormsecurity.com/files/15773
et-explorer/sp-readme.html - http://seclists.org/fulldisclosure/2020/May/36 - http://packetstormsecurity.com/files/157731/ManageEngine-AssetExplorer-Authenticated-Command-Execution.html
CVE ID: CVE-2019-19035 State: PUBLISHED Published: 2019-11-17T15:52:09 Last Updated: 2024-08-05T02:09:38.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and process_SOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1765647 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UOL6LCMEVOOB342EJ4TKWTPJAJPJSVWH/ - https://lists.fedoraproject.org/archives/list/package-announce%40
roject.org/message/UOL6LCMEVOOB342EJ4TKWTPJAJPJSVWH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GPNV43VBUCMUBRBKPJBY4DDSYLHQ2GFR/ - https://security.gentoo.org/glsa/202007-17
CVE ID: CVE-2019-19036 State: PUBLISHED Published: 2019-11-21T02:00:18 Last Updated: 2024-08-05T02:09:37.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036 - https://security.netapp.com/advisory/ntap-20191205-0001/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html - https://usn.ubuntu.com/4414-1/ - https://usn.ubuntu.com/4439-1/
CVE ID: CVE-2019-19037 State: PUBLISHED Published: 2019-11-21T02:11:59 Last Updated: 2024-08-05T02:09:37.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext4_empty_dir in fs/ext4/namei.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because ext4_read_dirblock(inode,0,DIRENT_HTREE) can be zero. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19037 - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE ID: CVE-2019-19039 State: PUBLISHED Published: 2019-11-21T01:40:53 Last Updated: 2024-08-05T02:09:38.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: __btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because “1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or n
ct=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19039 - https://usn.ubuntu.com/4414-1/ - https://lists.debian.org/debian-lts-announce/2020/12/msg00015.html
CVE ID: CVE-2019-19040 State: PUBLISHED Published: 2019-11-17T20:20:50 Last Updated: 2024-08-05T02:09:38.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":{"value":"<script>' substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kairosdb/kairosdb/issues/569
CVE ID: CVE-2019-19041 State: PUBLISHED Published: 2019-11-17T20:52:34 Last Updated: 2024-08-05T02:09:37.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41. They do not correctly verify the integrity of an upgrade package before processing it. As a result, official upgrade packages can be modified to inject an arbitrary Bash script that will be executed by the underlying system. It is possible to achieve this by modifying the values in the files.SUM file (which are used for integrity control) and injecting malicious code into the upgrade.sh file. Additional Analyst Notes: - CVE Program
ed for integrity control) and injecting malicious code into the upgrade.sh file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gotenigatien/Xorux-critical-vulnerability/blob/master/README.md
CVE ID: CVE-2019-19043 State: PUBLISHED Published: 2019-11-18T05:23:37 Last Updated: 2024-08-05T02:09:38.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the i40e_setup_macvlans() function in drivers/net/ethernet/intel/i40e/i40e_main.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering i40e_setup_channel() failures, aka CID-27d461333459. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/27d461333459d282ffa4a2bdb6b215a59d493a8f - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YT
a8f - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/ - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://usn.ubuntu.com/4300-1/
CVE ID: CVE-2019-19044 State: PUBLISHED Published: 2019-11-18T05:23:39 Last Updated: 2024-08-05T02:09:38.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11 - https://github.com/torvalds/linux/commit/29cd13cfd7624726d9e6becbae9aa419ef35af7f - https://security.netapp.com/advisory/ntap-20191205-0001/
orvalds/linux/commit/29cd13cfd7624726d9e6becbae9aa419ef35af7f - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://usn.ubuntu.com/4225-1/
CVE ID: CVE-2019-19045 State: PUBLISHED Published: 2019-11-18T05:23:40 Last Updated: 2024-08-05T02:09:38.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11 - https://github.com/torvalds/linux/commit/c8c2a057fdc7de1cd16f4baa51425b932a42eb39 - https://security.netapp.com/advisory/ntap
://github.com/torvalds/linux/commit/c8c2a057fdc7de1cd16f4baa51425b932a42eb39 - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://usn.ubuntu.com/4227-1/ - https://usn.ubuntu.com/4226-1/ - https://usn.ubuntu.com/4225-1/ - https://usn.ubuntu.com/4227-2/ - https://usn.ubuntu.com/4225-2/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
CVE ID: CVE-2019-19046 State: PUBLISHED Published: 2019-11-18T05:23:42 Last Updated: 2024-08-05T02:09:38.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure, aka CID-4aa7afb0ee20. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control this failure at probe time Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/4aa7afb0ee20a97fbf0c5bab3df028d5fb85fdab - h
E Program Container: References: - https://github.com/torvalds/linux/commit/4aa7afb0ee20a97fbf0c5bab3df028d5fb85fdab - https://bugzilla.suse.com/show_bug.cgi?id=1157304 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/ - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - https://usn.ubuntu.com/4302-1/ - https://usn.ubuntu.com/4325-1/ - https://usn.ubuntu.com/4319-1/
CVE ID: CVE-2019-19047 State: PUBLISHED Published: 2019-11-18T05:23:43 Last Updated: 2024-08-05T02:09:38.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_crdump_collect() failures, aka CID-c7ed6d0183d5. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11 - https://github.com/torvalds/linux/commit/c7ed6d0183d5ea9bc31bcaeeba4070bd62546471 - https://security.netapp.com/advisory/
ttps://github.com/torvalds/linux/commit/c7ed6d0183d5ea9bc31bcaeeba4070bd62546471 - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://usn.ubuntu.com/4225-1/
CVE ID: CVE-2019-19048 State: PUBLISHED Published: 2019-11-18T05:23:44 Last Updated: 2024-08-05T02:09:38.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the crypto_reportstat() function in drivers/virt/vboxguest/vboxguest_utils.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering copy_form_user() failures, aka CID-e0b0cb938864. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9 - https://github.com/torvalds/linux/commit/e0b0cb9388642c104838fac100a4af32745621e2 - https://usn.ubuntu.com/4208-1/ - https://security.netapp.com/a
s/linux/commit/e0b0cb9388642c104838fac100a4af32745621e2 - https://usn.ubuntu.com/4208-1/ - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://usn.ubuntu.com/4226-1/
CVE ID: CVE-2019-19049 State: PUBLISHED Published: 2019-11-18T05:23:46 Last Updated: 2024-08-05T02:09:38.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to cause a denial of service (memory consumption) by triggering of_fdt_unflatten_tree() failures, aka CID-e13de8fe0d6a. NOTE: third parties dispute the relevance of this because unittest.c can only be reached during boot Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.10 - https://github.com/torvalds/li
Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.10 - https://github.com/torvalds/linux/commit/e13de8fe0d6a51341671bbe384826d527afe8d44 - https://bugzilla.suse.com/show_bug.cgi?id=1157173 - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html
CVE ID: CVE-2019-19050 State: PUBLISHED Published: 2019-11-18T05:23:47 Last Updated: 2024-08-05T02:09:38.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/c03b04dcdba1da39903e23cc4d072abf8f68f2dd - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/
ts.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/ - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://usn.ubuntu.com/4258-1/ - http://packetstormsecurity.com/files/156455/Kernel-Live-Patch-Security-Notice-LSN-0063-1.html - https://usn.ubuntu.com/4284-1/
CVE ID: CVE-2019-19051 State: PUBLISHED Published: 2019-11-18T05:23:49 Last Updated: 2024-08-05T02:09:38.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11 - https://github.com/torvalds/linux/commit/6f3ef5c25cc762687a7341c18cbea5af54461407 - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://usn.ubuntu.com/4225-1/ - htt
7341c18cbea5af54461407 - https://security.netapp.com/advisory/ntap-20191205-0001/ - https://usn.ubuntu.com/4225-1/ - https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - https://usn.ubuntu.com/4225-2/ - https://usn.ubuntu.com/4286-2/ - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - https://usn.ubuntu.com/4286-1/ - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html - https://usn.ubuntu.com/4302-1/ - https://usn.ubuntu.com/4344-1/
CVE ID: CVE-2019-19052 State: PUBLISHED Published: 2019-11-18T05:23:50 Last Updated: 2024-08-05T02:09:38.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - https://usn.ubuntu.com/4228-1/ - https://usn.ubuntu.com/4227-1/ - https://usn.ubuntu.com/4226-1/ - https://usn.ubuntu.com/4225-1/ - https://usn.ubunt