Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-13173 State: PUBLISHED Published: 2019-07-02T19:26:05 Last Updated: 2024-08-04T23:41:10.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter() function is vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/advisories/886 - https://github.com/npm/fstream/commit/6a77d2fa6e1462693cf8e46f930da96ec1b0bb22 - http://lists.opensuse.org/opensuse
86 - https://github.com/npm/fstream/commit/6a77d2fa6e1462693cf8e46f930da96ec1b0bb22 - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00052.html - https://usn.ubuntu.com/4123-1/
CVE ID: CVE-2019-13175 State: PUBLISHED Published: 2019-07-02T19:56:16 Last Updated: 2024-08-04T23:41:10.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Read the Docs before 3.5.1 has an Open Redirect if certain user-defined redirects are used. This affects private instances of Read the Docs (in addition to the public readthedocs.org web sites). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/readthedocs/readthedocs.org/security/advisories/GHSA-2mw9-4c46-qrcv
CVE ID: CVE-2019-13176 State: PUBLISHED Published: 2019-08-08T13:26:33 Last Updated: 2024-08-04T23:41:10.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the 3CX Phone system (web) management console 12.5.44178.1002 through 12.5 SP2. The Content.MainForm.wgx component is affected by XXE via a crafted XML document in POST data. There is potential to use this for SSRF (reading local files, outbound HTTP, and outbound DNS). Additional Analyst Notes: - CVE Program Container: References: - https://www.logicallysecure.com/blog/3cx-phone-system-web-console-affected-by-xxe/
CVE ID: CVE-2019-13177 State: PUBLISHED Published: 2019-07-02T21:17:53 Last Updated: 2024-08-04T23:41:10.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static string for signatures (i.e., the Django Signing API is misused), which allows remote attackers to spoof the verification process. This occurs because incorrect code refactoring led to calling a security-critical function with an incorrect argument. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apragacz/django-rest-registration/security/advisories/GHSA-p3w6-jcg4-52xh - https:/
er: References: - https://github.com/apragacz/django-rest-registration/security/advisories/GHSA-p3w6-jcg4-52xh - https://github.com/apragacz/django-rest-registration/releases/tag/0.5.0
CVE ID: CVE-2019-13178 State: PUBLISHED Published: 2019-07-02T22:43:24 Last Updated: 2024-08-04T23:41:10.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyfile is created and when secure permissions are set. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/calamares/calamares/issues/1190 - https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835096 - https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835095 - https://www.pavelkogan.com/2014/05/23/luks-full-disk-encryption/ - https://
buntu/+source/initramfs-tools/+bug/1835095 - https://www.pavelkogan.com/2014/05/23/luks-full-disk-encryption/ - https://www.pavelkogan.com/2015/01/25/linux-mint-encryption/ - https://github.com/calamares/calamares/issues/1191 - https://bugzilla.redhat.com/show_bug.cgi?id=1726565 - https://calamares.io/calamares-3.2.11-is-out/ - https://calamares.io/calamares-cve-2019/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q57BOTBA2J5U4GVKUP7N2PD5H7B3BVUU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2ZDQRGBGRVRW5LPJWKUNS3M66LZ3KYC/ - http://lists.opensuse.org/opensuse-security-announce/2019-12/
oraproject.org/message/R2ZDQRGBGRVRW5LPJWKUNS3M66LZ3KYC/ - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00020.html
CVE ID: CVE-2019-13179 State: PUBLISHED Published: 2019-07-02T22:43:46 Last Updated: 2024-08-04T23:41:10.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image with insecure permissions, which allows this originally protected file to be read by any user, thereby disclosing decryption keys for LUKS containers created with Full Disk Encryption. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835096 - https://bugs.launchpad.net/ubuntu/
eferences: - https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835096 - https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835095 - https://github.com/calamares/calamares/issues/1191 - https://bugzilla.redhat.com/show_bug.cgi?id=1726542 - https://calamares.io/calamares-3.2.11-is-out/ - https://calamares.io/calamares-cve-2019/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q57BOTBA2J5U4GVKUP7N2PD5H7B3BVUU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R2ZDQRGBGRVRW5LPJWKUNS3M66LZ3KYC/
CVE ID: CVE-2019-13181 State: PUBLISHED Published: 2019-12-16T20:26:41 Last Updated: 2024-08-04T23:41:10.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Dec/33 - https://www.themissinglink.com.au/security-advisories-cve-2019-13181 - http://packetstormsecurity.com/files/155673/Serv-U-FTP-Server-15.1.7-CSV-Injection.html
CVE ID: CVE-2019-13182 State: PUBLISHED Published: 2019-12-16T20:27:41 Last Updated: 2024-08-04T23:41:10.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2019/Dec/32 - https://www.themissinglink.com.au/security-advisories-cve-2019-13182 - http://packetstormsecurity.com/files/155672/Serv-U-FTP-Server-15.1.7-Persistent-Cross-Site-Scripting.html
CVE ID: CVE-2019-13183 State: PUBLISHED Published: 2019-07-07T14:34:45 Last Updated: 2024-08-04T23:41:10.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flarum/core/blob/master/CHANGELOG.md - https://discuss.flarum.org/d/20606-flarum-0-1-0-beta-9-released - https://github.com/flarum/core/security/advisories/GHSA-3wjh-93gr-chh6
CVE ID: CVE-2019-13186 State: PUBLISHED Published: 2019-07-03T16:07:16 Last Updated: 2024-08-04T23:41:10.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the tags box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, and CVE-2018-20520. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bg5sbk/MiniCMS/issues/31
CVE ID: CVE-2019-13187 State: PUBLISHED Published: 2019-09-05T17:22:44 Last Updated: 2024-08-04T23:41:10.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Rich Text Formatter (Redactor) extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.php and content.imageupload.php. Additional Analyst Notes: - CVE Program Container: References: - http://symphonyextensions.com/extensions/richtext_redactor/ - https://blog.contentsecurity.com.au/redactor-unrestricted-file-upload
CVE ID: CVE-2019-13188 State: PUBLISHED Published: 2019-09-05T17:32:06 Last Updated: 2024-08-04T23:41:10.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application. Additional Analyst Notes: - CVE Program Container: References: - https://blog.contentsecurity.com.au/knowage-access-control-bypass
CVE ID: CVE-2019-13189 State: PUBLISHED Published: 2019-08-28T15:41:07 Last Updated: 2024-08-04T23:41:10.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Knowage through 6.1.1, there is XSS via the start_url or user_id field to the ChangePwdServlet page. Additional Analyst Notes: - CVE Program Container: References: - https://blog.contentsecurity.com.au/security-advisory-knowage-cross-site-scripting
CVE ID: CVE-2019-13190 State: PUBLISHED Published: 2019-09-05T16:49:25 Last Updated: 2024-08-04T23:41:10.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page. Additional Analyst Notes: - CVE Program Container: References: - https://blog.contentsecurity.com.au/knowage-captcha-bypass
CVE ID: CVE-2019-13191 State: PUBLISHED Published: 2019-09-05T17:26:09 Last Updated: 2024-08-04T23:41:10.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in IntraMaps MapControl 8 allows attackers to execute arbitrary SQL commands via the /ApplicationEngine/Search/Refine/Set page. Additional Analyst Notes: - CVE Program Container: References: - https://blog.contentsecurity.com.au/mapcontrol-sql-injection
CVE ID: CVE-2019-13192 State: PUBLISHED Published: 2020-03-13T18:42:10 Last Updated: 2024-08-04T23:41:10.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names properly. This would allow an attacker to execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://global.brother - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-brother-printers/ - https://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00100670_000
CVE ID: CVE-2019-13193 State: PUBLISHED Published: 2020-03-13T18:40:31 Last Updated: 2024-08-04T23:41:10.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parse the cookie value properly. This would allow an attacker to execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://global.brother - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-brother-printers/ - https://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00100670_000
CVE ID: CVE-2019-13194 State: PUBLISHED Published: 2020-03-13T18:38:43 Last Updated: 2024-08-04T23:41:10.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Brother printers (such as the HL-L8360CDW v1.20) were affected by different information disclosure vulnerabilities that provided sensitive information to an unauthenticated user who visits a specific URL. Additional Analyst Notes: - CVE Program Container: References: - https://global.brother - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-brother-printers/ - https://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00100670_000
CVE ID: CVE-2019-13195 State: PUBLISHED Published: 2020-03-13T18:12:19 Last Updated: 2024-08-04T23:41:10.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web application of some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was vulnerable to path traversal, allowing an unauthenticated user to retrieve arbitrary files, or check if files or folders existed within the file system. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers/
CVE ID: CVE-2019-13196 State: PUBLISHED Published: 2020-03-13T18:11:02 Last Updated: 2024-08-04T23:41:10.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the arg4 and arg9 parameters of several functionalities of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the device, or potentially execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers/
CVE ID: CVE-2019-13197 State: PUBLISHED Published: 2020-03-13T18:09:38 Last Updated: 2024-08-04T23:41:10.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the URI paths of the web application that would allow an unauthenticated attacker to perform a Denial of Service attack, crashing the device, or potentially execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers/
CVE ID: CVE-2019-13198 State: PUBLISHED Published: 2020-03-13T18:08:38 Last Updated: 2024-08-04T23:41:10.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web application of several Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was affected by Stored XSS. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers/
CVE ID: CVE-2019-13199 State: PUBLISHED Published: 2020-03-13T18:07:37 Last Updated: 2024-08-04T23:41:10.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) did not implement any mechanism to avoid CSRF. Successful exploitation of this vulnerability can lead to the takeover of a local account on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers/
CVE ID: CVE-2019-13200 State: PUBLISHED Published: 2020-03-13T18:06:26 Last Updated: 2024-08-04T23:41:10.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web application of several Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was affected by Reflected XSS. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers/
CVE ID: CVE-2019-13201 State: PUBLISHED Published: 2020-03-13T18:04:49 Last Updated: 2024-08-04T23:41:10.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the LPD service. This would allow an unauthenticated attacker to cause a Denial of Service (DoS) in the LPD service and potentially execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers/
CVE ID: CVE-2019-13202 State: PUBLISHED Published: 2020-03-13T18:03:08 Last Updated: 2024-08-04T23:41:10.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the okhtmlfile and failhtmlfile parameters of several functionalities of the web application that would allow an unauthenticated attacker to perform a Denial of Service attack, crashing the device, or potentially execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyoc
Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers/
CVE ID: CVE-2019-13203 State: PUBLISHED Published: 2020-03-13T17:58:16 Last Updated: 2024-08-04T23:41:10.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by an integer overflow vulnerability in the arg3 parameter of several functionalities of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the device, or potentially execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers/
CVE ID: CVE-2019-13204 State: PUBLISHED Published: 2020-03-13T17:49:09 Last Updated: 2024-08-04T23:41:10.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by multiple buffer overflow vulnerabilities in the IPP service. This would allow an unauthenticated attacker to cause a Denial of Service (DoS), and potentially execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers/
CVE ID: CVE-2019-13205 State: PUBLISHED Published: 2020-03-13T17:47:09 Last Updated: 2024-08-04T23:41:10.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: All configuration parameters of certain Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were accessible by unauthenticated users. This information was only presented in the menus when authenticated, and the pages that loaded this information were also protected. However, all files that contained the configuration parameters were accessible. These files contained sensitive information, such as users, community strings, and other passwords configured in the printer. Additional Analyst Notes: - CVE Program Contai
users, community strings, and other passwords configured in the printer. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers/
CVE ID: CVE-2019-13206 State: PUBLISHED Published: 2020-03-13T17:39:56 Last Updated: 2024-08-04T23:41:10.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in multiple parameters of the Document Boxes functionality of the web application that would allow an authenticated attacker to perform a Denial of Service attack, crashing the device, or potentially execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-kyocera-printers/
CVE ID: CVE-2019-13207 State: PUBLISHED Published: 2019-07-03T19:49:12 Last Updated: 2024-08-04T23:41:10.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dname_concatenate() function in dname.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NLnetLabs/nsd/issues/20 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDS4H7WVHQGCX3LF72F5K22VJXN7HDBB/
CVE ID: CVE-2019-13208 State: PUBLISHED Published: 2019-07-03T22:01:29 Last Updated: 2024-08-04T23:41:10.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0. Additional Analyst Notes: - CVE Program Container: References: - https://versprite.com/blog/security-research/windows-registry/
CVE ID: CVE-2019-13209 State: PUBLISHED Published: 2019-09-04T13:40:18 Last Updated: 2024-08-04T23:41:10.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher. The attack requires a victim to be logged into a Rancher server, and then to access a third-party site hosted by the exploiter. Once that is accomplished, the exploiter is able to execute commands against the cluster's Kubernetes API with the permissions and identity of the victim. Additional Analyst Notes: - CVE Program Container: References: - https://forums.rancher.com/c/a
identity of the victim. Additional Analyst Notes: - CVE Program Container: References: - https://forums.rancher.com/c/announcements - https://forums.rancher.com/t/rancher-release-v2-2-5-addresses-rancher-cve-2019-13209/14801
CVE ID: CVE-2019-13217 State: PUBLISHED Published: 2019-08-15T00:00:00 Last Updated: 2024-08-04T23:41:10.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap buffer overflow in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or execute arbitrary code by opening a crafted Ogg Vorbis file. Additional Analyst Notes: - CVE Program Container: References: - http://nothings.org/stb_vorbis/ - https://github.com/nothings/stb/commits/master/stb_vorbis.c - https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6 - https://lists.debian.org/debian-lts-announce/2023/01/msg00045.html
CVE ID: CVE-2019-13218 State: PUBLISHED Published: 2019-08-15T00:00:00 Last Updated: 2024-08-04T23:41:10.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Division by zero in the predict_point function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file. Additional Analyst Notes: - CVE Program Container: References: - http://nothings.org/stb_vorbis/ - https://github.com/nothings/stb/commits/master/stb_vorbis.c - https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6 - https://lists.debian.org/debian-lts-announce/2023/01/msg00045.html