Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-11470 State: PUBLISHED Published: 2019-04-23T13:54:54 Last Updated: 2024-08-04T22:55:40.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for insufficient image data in a file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1472 - https://github.com/ImageMagick/ImageMagick/commit/e3cdce6fe12193f235b8c0ae5efe6880a25eb957 - http://lis
ck/issues/1472 - https://github.com/ImageMagick/ImageMagick/commit/e3cdce6fe12193f235b8c0ae5efe6880a25eb957 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00057.html - https://usn.ubuntu.com/4034-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html - https://lists.debian.org/debian-lts-announce/2019/10/msg00028.html - https://www.debian.org/security/2020/dsa-4712 - https://lists.debian
ian.org/debian-lts-announce/2019/10/msg00028.html - https://www.debian.org/security/2020/dsa-4712 - https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html
CVE ID: CVE-2019-11471 State: PUBLISHED Published: 2019-04-23T13:55:06 Last Updated: 2024-08-04T22:55:40.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context.h because heif_context.cc mishandles references to non-existing alpha images. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libheif/issues/123 - https://github.com/strukturag/libheif/commit/995a4283d8ed2d0d2c1ceb1a577b993df2f0e014
CVE ID: CVE-2019-11472 State: PUBLISHED Published: 2019-04-23T13:55:18 Last Updated: 2024-08-04T22:55:40.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (divide-by-zero error) by crafting an XWD image file in which the header indicates neither LSB first nor MSB first. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1546 - https://github.com/ImageMagick/ImageMagick6/commit/f663dfb8431c97d95682a2b533cca1c8233d21b4 - http://lists.opensuse.org/opensuse-security-announce/2019-06/
eMagick6/commit/f663dfb8431c97d95682a2b533cca1c8233d21b4 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00057.html - https://usn.ubuntu.com/4034-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html - https://www.debian.org/security/2020/dsa-4712 - https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html
CVE ID: CVE-2019-11473 State: PUBLISHED Published: 2019-04-23T13:55:28 Last Updated: 2024-08-04T22:55:40.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009. Additional Analyst Notes: - CVE Program Container: References: - http://www.graphicsmagick.org/Changelog.html - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/944dcbc457f8 - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/5402c5cbd8bd - http://www.securityfocus.com/bid/108055 - http://lists.opensuse
.graphicsmagick.org/hg/GraphicsMagick/rev/5402c5cbd8bd - http://www.securityfocus.com/bid/108055 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00020.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00055.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4207-1/ - ht
ckage-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4207-1/ - https://www.debian.org/security/2020/dsa-4640
CVE ID: CVE-2019-11474 State: PUBLISHED Published: 2019-04-23T13:55:39 Last Updated: 2024-08-04T22:55:40.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating-point exception and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009. Additional Analyst Notes: - CVE Program Container: References: - http://www.graphicsmagick.org/Changelog.html - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/944dcbc457f8 - http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/5402c5cbd8bd - http://www.securityfocus.com/bid/108055 - http://lists.op
p://hg.graphicsmagick.org/hg/GraphicsMagick/rev/5402c5cbd8bd - http://www.securityfocus.com/bid/108055 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00020.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00055.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4207-1
ist/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/ - https://usn.ubuntu.com/4207-1/ - https://www.debian.org/security/2020/dsa-4640
CVE ID: CVE-2019-11476 State: PUBLISHED Published: 2019-08-29T14:38:46.242464Z Last Updated: 2024-09-16T19:15:47.644Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Ubuntu Products: Whoopsie Problem Types: CWE-190 Description: An integer overflow in whoopsie before versions 0.2.52.5ubuntu0.1, 0.2.62ubuntu0.1, 0.2.64ubuntu0.1, 0.2.66, results in an out-of-bounds write to a heap allocated buffer when processing large crash dumps. This results in a crash or possible code-execution in the context of the whoopsie process. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/4052-1/ - https://bugs.launchpad.net/ubuntu/%2Bsource/
es: - CVE Program Container: References: - https://usn.ubuntu.com/4052-1/ - https://bugs.launchpad.net/ubuntu/%2Bsource/whoopsie/%2Bbug/1830863 - http://packetstormsecurity.com/files/172858/Ubuntu-Apport-Whoopsie-DoS-Integer-Overflow.html
CVE ID: CVE-2019-11477 State: PUBLISHED Published: 2019-06-18T23:34:51.026970Z Last Updated: 2024-09-17T02:21:15.995Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Linux Products: Linux kernel Problem Types: CWE-190 Description: Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff. Additional Analyst Notes: - CVE Progra
4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/905115 - http://www.openwall.com/lists/oss-security/2019/06/20/3 - https://access.redhat.com/errata/RHSA-2019:1594 - https://access.redhat.com/errata/RHSA-2019:1602 - http://www.openwall.com/lists/oss-security/2019/06/28/2 - http://www.openwall.com/lists/oss-security/2019/07/06/3 - http://www.openwall.com/lists/oss-security/2019/07/06/4 - https://access.redhat.com/errata/RHSA-2019:1699 - http://www.openwall.com/lists/oss-security/2019/10/24/1 - http://www.openwall.com/lists/oss-security/2019/10/29/3 - https://www.or
.openwall.com/lists/oss-security/2019/10/24/1 - http://www.openwall.com/lists/oss-security/2019/10/29/3 - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=3b4929f65b0d8249f19a50245cd88ed1a2f78cff - https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md - https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic - https://access.redhat.com/security/vulnerabilities/tcpsack - https://support.f5.com/csp/article/K78234183 - http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security-Notice-LSN-0052-1.html - ht
p/article/K78234183 - http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security-Notice-LSN-0052-1.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193 - https://www.synology.com/security/advisory/Synology_SA_19_28 - https://security.netapp.com/advisory/ntap-20190625-0001/ - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0006 - https://kc.mcafee.com/corporate/index?page=content&id=SB10287 - http://www.vmware.com/security/advisories/VMSA-2019-0010.html - https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf - https://www.us-cert.gov/ics/advisories/icsa-19-253-03 - http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-No
ww.us-cert.gov/ics/advisories/icsa-19-253-03 - http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-kernel-en - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt
CVE ID: CVE-2019-11478 State: PUBLISHED Published: 2019-06-18T23:34:51.077803Z Last Updated: 2024-09-16T23:45:54.779Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Linux kernel Problem Types: CWE-770 Description: Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e. Additional Anal
82, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/905115 - https://access.redhat.com/errata/RHSA-2019:1594 - https://access.redhat.com/errata/RHSA-2019:1602 - http://www.openwall.com/lists/oss-security/2019/06/28/2 - http://www.openwall.com/lists/oss-security/2019/07/06/3 - http://www.openwall.com/lists/oss-security/2019/07/06/4 - https://access.redhat.com/errata/RHSA-2019:1699 - https://seclists.org/bugtraq/2019/Jul/30 - http://www.openwall.com/lists/oss-security/2019/10/24/1 - http://www.openwall.com/lists/oss-security/2019/10/29/3 - https:
tp://www.openwall.com/lists/oss-security/2019/10/24/1 - http://www.openwall.com/lists/oss-security/2019/10/29/3 - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md - https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic - https://access.redhat.com/security/vulnerabilities/tcpsack - http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security-Notice-LSN-0052-1.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193 - https://www.synology.com/security/advisory/Synology_SA_19_28 - https://security.netap
ulse_Security_Advisories/SA44193 - https://www.synology.com/security/advisory/Synology_SA_19_28 - https://security.netapp.com/advisory/ntap-20190625-0001/ - https://kc.mcafee.com/corporate/index?page=content&id=SB10287 - http://www.vmware.com/security/advisories/VMSA-2019-0010.html - https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf - https://www.us-cert.gov/ics/advisories/icsa-19-253-03 - http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt - https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=f070ef2ac66716357066b683fb0baf55f8191a2e - https://support
.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=f070ef2ac66716357066b683fb0baf55f8191a2e - https://support.f5.com/csp/article/K26618426 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0007 - http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html
CVE ID: CVE-2019-11479 State: PUBLISHED Published: 2019-06-18T23:34:51.124134Z Last Updated: 2024-09-16T23:22:00.170Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Linux Products: Linux kernel Problem Types: CWE-405 Description: Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c22
, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c2221478101ee72f5cb4654b9fc363. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/108818 - https://www.kb.cert.org/vuls/id/905115 - https://access.redhat.com/errata/RHSA-2019:1594 - https://access.redhat.com/errata/RHSA-2019:1602 - http://www.openwall.com/lists/oss-security/2019/06/28/2 - https://usn.ubuntu.com/4041-2/ - http://www.openwall.com/lists/oss-security/2019/07/06/3 - http://www.openwall.com/lists/oss-security/2019/07/06/4 - https://access.redhat.com/errata/RHSA-2019:1699 - https://usn.ubuntu.com/4041-1/ - https://www.o
security/2019/07/06/4 - https://access.redhat.com/errata/RHSA-2019:1699 - https://usn.ubuntu.com/4041-1/ - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.oracle.com/security-alerts/cpuoct2020.html - https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md - https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic - https://access.redhat.com/security/vulnerabilities/tcpsack - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193 - https://www.synology.com/security/advisory/Synology_SA_19_28 - https://security.netapp.com/advisory/ntap-20190625-0001/ - https://kc.mcafee.com/corporate/index?page=content&id=SB10287 - ht
://security.netapp.com/advisory/ntap-20190625-0001/ - https://kc.mcafee.com/corporate/index?page=content&id=SB10287 - https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf - https://www.us-cert.gov/ics/advisories/icsa-19-253-03 - http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt - https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=5f3e2bf008c2221478101ee72f5cb4654b9fc363 - https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=967c05aee439e6e5d7d805e195b3a20ef5c433d6 - https://support.f5.com/csp/article/K35421172 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0008 - https://support.f5.com/csp/article/K35421172?utm_
72 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0008 - https://support.f5.com/csp/article/K35421172?utm_source=f5support&amp%3Butm_medium=RSS - https://www.us-cert.gov/ics/advisories/icsma-20-170-06
CVE ID: CVE-2019-11480 State: PUBLISHED Published: 2020-04-14T02:10:13.554325Z Last Updated: 2024-09-16T20:46:41.386Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Canonical Products: pc-kernel Problem Types: CWE-353 Description: The pc-kernel snap build process hardcoded the --allow-insecure-repositories and --allow-unauthenticated apt options when creating the build chroot environment. This could allow an attacker who is able to perform a MITM attack between the build environment and the Ubuntu archive to install a malicious package within the build chroot. This issue affects pc-kernel versions prior to and including 2019-07-16 Additional Analyst Notes: -
n the build chroot. This issue affects pc-kernel versions prior to and including 2019-07-16 Additional Analyst Notes: - CVE Program Container: References: - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11480 - https://bugs.launchpad.net/bugs/1836041
CVE ID: CVE-2019-11481 State: PUBLISHED Published: 2020-02-08T04:50:21.892355Z Last Updated: 2024-09-16T23:25:27.956Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Canonical Products: apport Problem Types: Read user data with administrator privileges Description: Kevin Backhouse discovered that apport would read a user-supplied configuration file with elevated privileges. By replacing the file with a symbolic link, a user could get apport to read any file on the system as root, with unknown consequences. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/usn/usn-4171-1 - https://usn.ubuntu.com/usn/usn-4171-2 - http://packe
am Container: References: - https://usn.ubuntu.com/usn/usn-4171-1 - https://usn.ubuntu.com/usn/usn-4171-2 - http://packetstormsecurity.com/files/172858/Ubuntu-Apport-Whoopsie-DoS-Integer-Overflow.html
CVE ID: CVE-2019-11482 State: PUBLISHED Published: 2020-02-08T04:50:22.302773Z Last Updated: 2024-09-17T00:00:44.526Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: Canonical Products: apport Problem Types: Read user data with administrator privileges Description: Sander Bos discovered a time of check to time of use (TOCTTOU) vulnerability in apport that allowed a user to cause core files to be written in arbitrary directories. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/usn/usn-4171-1 - https://usn.ubuntu.com/usn/usn-4171-2
CVE ID: CVE-2019-11483 State: PUBLISHED Published: 2020-02-08T04:50:22.806Z Last Updated: 2025-11-03T19:25:22.572Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: Canonical Products: apport Problem Types: Read user data with administrator privileges Description: Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be used by a local attacker to generate a crash report for a privileged process that is readable by an unprivileged user. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/usn/usn-4171-1 - https://usn.ubuntu.com/usn/usn-4171-2
CVE ID: CVE-2019-11484 State: PUBLISHED Published: 2020-02-08T04:50:23.208886Z Last Updated: 2024-09-17T01:50:56.647Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: Canonical Products: whoopsie Problem Types: CWE-190 Description: Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/usn/usn-4170-1 - https://usn.ubuntu.com/usn/usn-4170-2 - http://packetstormsecurity.com/files/172858/Ubuntu-Apport-Whoopsie-DoS-Integer-Overflow.html
CVE ID: CVE-2019-11485 State: PUBLISHED Published: 2020-02-08T04:50:23.604794Z Last Updated: 2024-09-16T16:57:41.110Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Canonical Products: apport Problem Types: CWE-412 Description: Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/usn/usn-4171-1 - https://usn.ubuntu.com/usn/usn-4171-2
CVE ID: CVE-2019-11486 State: PUBLISHED Published: 2019-04-23T22:00:24 Last Updated: 2024-08-04T22:55:40.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/c7084edc3f6d67750f50d4183134c4fb5712a5c8 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c7084edc3f6d67750f50d4183134c4fb5712a5c8 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.35 - https:/
nel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.35 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.112 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.169 - http://www.openwall.com/lists/oss-security/2019/04/29/1 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00037.html - https://security.netapp.com/advisory/ntap-20190517-0005/ - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html - http://lists.opensuse.org/opensuse-security-ann
l - https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html - https://support.f5.com/csp/article/K50222414 - https://www.debian.org/security/2019/dsa-4465 - https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html - https://seclists.org/bugtraq/2019/Jun/26
CVE ID: CVE-2019-11487 State: PUBLISHED Published: 2019-04-23T22:00:44 Last Updated: 2024-08-04T22:55:40.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/108054 - http://www.openwall.com/lists/oss-security/2019/04/29/1 - http://lists.opensuse.org/o
www.securityfocus.com/bid/108054 - http://www.openwall.com/lists/oss-security/2019/04/29/1 - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html - https://usn.ubuntu.com/4069-1/ - https://usn.ubuntu.com/4069-2/ - https://usn.ubuntu.com/4115-1/ - https://usn.ubuntu.com/4118-1/ - https://access.redhat.com/errata/RHSA-2019:2703 - https://access.redhat.com/errata/RHSA-2019:2741 - https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html - https: