deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-5944
Published: 2019-05-17
Description: Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the contents of application 'Address' without modify privileges via the application 'Address'.
CVSS Score: 4.3 (MEDIUM)
References: http://jvn.jp/en/jp/JVN58849431/index.html; https://kb.cybozu.support/article/35487/; http://jvn.jp/en/jp/JVN58849431/index.html
CVE: CVE-2019-5945
Published: 2019-05-17
Description: Cybozu Garoon 4.2.4 to 4.10.1 allow remote attackers to obtain the users' credential information via the authentication of Cybozu Garoon.
CVSS Score: 9.8 (CRITICAL)
References: http://jvn.jp/en/jp/JVN58849431/index.html; https://kb.cybozu.support/article/35488/; http://jvn.jp/en/jp/JVN58849431/index.html
CVE: CVE-2019-5946
Published: 2019-05-17
Description: Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the Login Screen.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://jvn.jp/en/jp/JVN58849431/index.html; https://kb.cybozu.support/article/35492/; http://jvn.jp/en/jp/JVN58849431/index.html
CVE: CVE-2019-5947
Published: 2019-05-17
Description: Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Cabinet'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN58849431/index.html; https://kb.cybozu.support/article/35496/; http://jvn.jp/en/jp/JVN58849431/index.html
CVE: CVE-2019-5953
Published: 2019-05-17
Description: Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://jvn.jp/en/jp/JVN25261088/index.html; https://access.redhat.com/errata/RHSA-2019:2979; https://access.redhat.com/errata/RHSA-2019:3168
CVE: CVE-2019-5954
Published: 2019-05-17
Description: JR East Japan train operation information push notification App for Android version 1.2.4 and earlier allows remote attackers to bypass access restriction to obtain or alter the user's registered information via unspecified vectors.
CVSS Score: 9.1 (CRITICAL)
References: http://jvn.jp/en/jp/JVN01119243/index.html; https://www.jreast.co.jp/press/2018/20190310.pdf; http://jvn.jp/en/jp/JVN01119243/index.html
CVE: CVE-2019-5955
Published: 2019-05-17
Description: CREATE SD official App for Android version 1.0.2 and earlier allows remote attackers to bypass access restriction to lead a user to access an arbitrary website via vulnerable application and conduct phishing attacks.
CVSS Score: 5.4 (MEDIUM)
References: http://jvn.jp/en/jp/JVN87655507/index.html; https://www.create-sd.co.jp/Portals/0/pdf/appsec_en.pdf; http://jvn.jp/en/jp/JVN87655507/index.html
CVE: CVE-2019-5957
Published: 2019-05-17
Description: Untrusted search path vulnerability in Installer of Electronic reception and examination of application for radio licenses Online 1.0.9.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN91361851/index.html; https://www.denpa.soumu.go.jp/public/prog/onlineInstaller_download.html; http://jvn.jp/en/jp/JVN91361851/index.html
CVE: CVE-2019-5958
Published: 2019-05-17
Description: Untrusted search path vulnerability in Electronic reception and examination of application for radio licenses Offline 1.0.9.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN69903953/index.html; https://www.denpa.soumu.go.jp/public/prog/offlineInstaller_download.html; http://jvn.jp/en/jp/JVN69903953/index.html
CVE: CVE-2019-6781
Published: 2019-05-17
Description: An Improper Input Validation issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It was possible to use the profile name to inject a potentially malicious link into notification emails.
CVSS Score: 7.5 (HIGH)
CWE: CWE-601
References: https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/22076; https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/
CVE: CVE-2019-6787
Published: 2019-05-17
Description: An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The GitLab API allowed project Maintainers and Owners to view the trigger tokens of other project users.
CVSS Score: 6.5 (MEDIUM)
References: https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/; https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/
CVE: CVE-2019-6790
Published: 2019-05-17
Description: An Incorrect Access Control (issue 2 of 3) issue was discovered in GitLab Community and Enterprise Edition 8.14 and later but before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. Guest users were able to view the list of a group's merge requests.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/51328; https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/
CVE: CVE-2019-6797
Published: 2019-05-17
Description: An information disclosure issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The GitHub token used in CI/CD for External Repos was being leaked to project maintainers in the UI.
CVSS Score: 7.5 (HIGH)
References: https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/; https://about.gitlab.com/blog/categories/releases/; https://about.gitlab.com/2019/01/31/security-release-gitlab-11-dot-7-dot-3-released/
CVE: CVE-2019-11057
Published: 2019-05-17
Description: SQL injection vulnerability in Vtiger CRM before 7.1.0 hotfix3 allows authenticated users to execute arbitrary SQL commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://lists.vtigercrm.com/pipermail/vtigercrm-developers/2019-April/037964.html; https://cybersecurityworks.com/zerodays/cve-2019-11057-vtiger.html; https://medium.com/%40mohnishdhage/sql-injection-vtiger-crm-v7-1-0-cve-2019-11057-245f84fc5c2c
CVE: CVE-2019-11887
Published: 2019-05-17
Description: SimplyBook.me through 2019-05-11 does not properly restrict File Upload which could allow remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://news.simplybook.me/notification/; https://news.simplybook.me/notification/
CVE: CVE-2019-12086
Published: 2019-05-17
Description: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: http://russiansecurity.expert/2016/04/20/mysql-connect-file-read/; http://www.securityfocus.com/bid/109227; https://access.redhat.com/errata/RHSA-2019:2858
CVE: CVE-2019-7353
Published: 2019-05-17
Description: An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition 11.7.x before 11.7.4. GitLab Releases were vulnerable to an authorization issue that allowed users to view confidential issue and merge request titles of other projects.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://about.gitlab.com/2019/02/05/critical-security-release-gitlab-11-dot-7-dot-4-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/56568; https://about.gitlab.com/2019/02/05/critical-security-release-gitlab-11-dot-7-dot-4-released/
CVE: CVE-2018-16156
Published: 2019-05-17
Description: In PaperStream IP (TWAIN) 1.42.0.5685 (Service Update 7), the FJTWSVIC service running with SYSTEM privilege processes unauthenticated messages received over the FjtwMkic_Fjicube_32 named pipe. One of these message processing functions attempts to dynamically load the UninOldIS.dll library and executes an exported function named ChangeUninstallString. The default install does not contain this library and therefore if any DLL with that name exists in any directory listed in the PATH variable, it can be used to escalate to SYSTEM level privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://packetstormsecurity.com/files/160832/PaperStream-IP-TWAIN-1.42.0.5685-Local-Privilege-Escalation.html; https://www.securifera.com/advisories/cve-2018-16156/; http://packetstormsecurity.com/files/160832/PaperStream-IP-TWAIN-1.42.0.5685-Local-Privilege-Escalation.html
CVE: CVE-2019-12158
Published: 2019-05-17
Description: GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/fekberg/GoHttp/issues/17; https://github.com/fekberg/GoHttp/issues/17
CVE: CVE-2019-12159
Published: 2019-05-17
Description: GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function (when called from getRequestType) via a long URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/fekberg/GoHttp/issues/16; https://github.com/fekberg/GoHttp/issues/16
CVE: CVE-2019-12160
Published: 2019-05-17
Description: GoHTTP through 2017-07-25 has a sendHeader use-after-free.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://github.com/fekberg/GoHttp/issues/15; https://github.com/fekberg/GoHttp/issues/15
CVE: CVE-2019-12161
Published: 2019-05-17
Description: WPO WebPageTest 19.04 allows SSRF because ValidateURL in www/runtest.php does not consider octal encoding of IP addresses (such as 0300.0250 as a replacement for 192.168).
CVSS Score: 8.8 (HIGH)
CWE: CWE-918
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1550366; https://bugzilla.mozilla.org/show_bug.cgi?id=1550366
CVE: CVE-2019-8339
Published: 2019-05-17
Description: An issue was discovered in Falco through 0.14.0. A missing indicator for insufficient resources allows local users to bypass the detection engine.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://falco.org/docs/event-sources/dropped-events/; https://github.com/falcosecurity/falco/pull/561; https://sysdig.com/blog/cve-2019-8339-falco-vulnerability/
CVE: CVE-2019-11644
Published: 2019-05-17
Description: In the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security before 17.6, F-Secure Anti-Virus before 17.6, F-Secure Client Security Standard and Premium before 14.10, F-Secure PSB Workstation Security before 12.01, and F-Secure Computer Protection Standard and Premium before 19.3, a local user can escalate their privileges through a DLL hijacking attack against the installer. The installer writes the file rm.exe to C:\Windows\Temp and then executes it. The rm.exe process then attempts to load several DLLs from its current directory. Non-admin users are able to write to this folder, so an attacker can create a malicious C:\Windows\Temp\OLEACC.dll file. When an admin runs the installer, rm.exe will execute the attacker's DLL in an elevated security context.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.f-secure.com/en/web/labs_global/fsc-2019-2; https://www.f-secure.com/en/web/labs_global/fsc-2019-2
CVE: CVE-2019-12163
Published: 2019-05-17
Description: GAT-Ship Web Module through 1.30 allows remote attackers to obtain potentially sensitive information via {} in a ws/gatshipWs.asmx/SqlVersion request.
CVSS Score: 5.3 (MEDIUM)
References: http://packetstormsecurity.com/files/152964/GAT-Ship-Web-Module-1.30-Information-Disclosure.html; http://seclists.org/fulldisclosure/2019/May/32; https://seclists.org/fulldisclosure/2019/May/29
CVE: CVE-2019-12168
Published: 2019-05-17
Description: Four-Faith Wireless Mobile Router F3x24 v1.0 devices allow remote code execution via the Command Shell (aka Administration > Commands) screen.
CVSS Score: 7.2 (HIGH)
CWE: CWE-862
References: https://medium.com/%40bertinjoseb/four-faith-industrial-routers-command-injection-rce-reverse-shell-121c4dedb0d8; https://medium.com/%40bertinjoseb/four-faith-industrial-routers-command-injection-rce-reverse-shell-121c4dedb0d8
CVE: CVE-2019-12170
Published: 2019-05-17
Description: ATutor through 2.2.4 is vulnerable to arbitrary file uploads via the mods/_core/backups/upload.php (aka backup) component. This may result in remote command execution. An attacker can use the instructor account to fully compromise the system using a crafted backup ZIP archive. This will allow for PHP files to be written to the web root, and for code to execute on the remote server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://incidentsecurity.com/atutor-2-2-4-backup-remote-command-execution/; http://packetstormsecurity.com/files/153869/ATutor-2.2.4-Backup-Remote-Command-Execution.html; https://github.com/fuzzlove/ATutor-Instructor-Backup-Arbitrary-File
CVE: CVE-2019-12172
Published: 2019-05-17
Description: Typora 0.9.9.21.1 (1913) allows arbitrary code execution via a modified file: URL syntax in the HREF attribute of an AREA element, as demonstrated by file:\\\ on macOS or Linux, or file://C| on Windows. This is different from CVE-2019-12137.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://github.com/typora/typora-issues/issues/2166; https://github.com/typora/typora-issues/issues/2166
CVE: CVE-2019-12173
Published: 2019-05-18
Description: MacDown 0.7.1 (870) allows remote code execution via a file:\\\ URI, with a .app pathname, in the HREF attribute of an A element. This is different from CVE-2019-12138.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/MacDownApp/macdown/issues/1050; https://github.com/MacDownApp/macdown/issues/1050
CVE: CVE-2019-12184
Published: 2019-05-19
Description: There is XSS in browser/components/MarkdownPreview.js in BoostIO Boostnote 0.11.15 via a label named flowchart, sequence, gallery, or chart, as demonstrated by a crafted SRC attribute of an IFRAME element, a different vulnerability than CVE-2019-12136.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/rebirthwyw/9836b2445abd4c1358e3d68ff2415247; https://gist.github.com/rebirthwyw/9836b2445abd4c1358e3d68ff2415247
CVE: CVE-2019-12185
Published: 2019-05-20
Description: eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An attacker can use a user account to fully compromise the system using a POST request. This will allow for PHP files to be written to the web root, and for code to execute on the remote server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://incidentsecurity.com/elabftw-1-8-5-entitycontroller-arbitrary-file-upload-rce/; https://github.com/fuzzlove/eLabFTW-1.8.5-EntityController-Arbitrary-File-Upload-RCE; http://incidentsecurity.com/elabftw-1-8-5-entitycontroller-arbitrary-file-upload-rce/
CVE: CVE-2019-12198
Published: 2019-05-20
Description: In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/fekberg/GoHttp/issues/18; https://github.com/fekberg/GoHttp/issues/18
CVE: CVE-2019-11809
Published: 2019-05-20
Description: An issue was discovered in Joomla! before 3.9.6. The debug views of com_users do not properly escape user supplied data, which leads to a potential XSS attack vector.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-xss-in-com-users-acl-debug-view; https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-xss-in-com-users-acl-debug-view
CVE: CVE-2018-12270
Published: 2019-05-20
Description: In Valve Steam[PII_REDACTED] BETA, it is possible to perform a homograph / homoglyph attack to create fake URLs in the client, which may trick users into visiting unintended web sites.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: https://github.com/VixusFoxy/CVE/wiki/CVE-2018-12270; https://github.com/VixusFoxy/CVE/wiki/CVE-2018-12270
CVE: CVE-2019-12206
Published: 2019-05-20
Description: njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in nxt_utf8_encode in nxt_utf8.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/nginx/njs/issues/162; https://github.com/nginx/njs/issues/162
CVE: CVE-2019-12207
Published: 2019-05-20
Description: njs through 0.3.1, used in NGINX, has a heap-based buffer over-read in nxt_utf8_decode in nxt/nxt_utf8.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/nginx/njs/issues/168; https://github.com/nginx/njs/issues/168
CVE: CVE-2019-12208
Published: 2019-05-20
Description: njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in njs_function_native_call in njs/njs_function.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/nginx/njs/issues/163; https://github.com/nginx/njs/issues/163
CVE: CVE-2019-12211
Published: 2019-05-20
Description: When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://lists.debian.org/debian-lts-announce/2019/12/msg00012.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PUWVVP67FYM4GMWD7TPQ7C7JPPRUZHYE/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZ7KBYPPNRMX7RRWVJSX4T63E3TFB6TG/
CVE: CVE-2019-12212
Published: 2019-05-20
Description: When FreeImage 3.18.0 reads a special JXR file, the StreamCalcIFDSize function of JXRMeta.c repeatedly calls itself due to improper processing of the file, eventually causing stack exhaustion. An attacker can achieve a remote denial of service attack by sending a specially constructed file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://sourceforge.net/p/freeimage/discussion/36111/thread/e06734bed5/; https://sourceforge.net/p/freeimage/discussion/36111/thread/e06734bed5/
CVE: CVE-2019-12213
Published: 2019-05-20
Description: When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-674
References: https://lists.debian.org/debian-lts-announce/2019/12/msg00012.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PUWVVP67FYM4GMWD7TPQ7C7JPPRUZHYE/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZ7KBYPPNRMX7RRWVJSX4T63E3TFB6TG/
CVE: CVE-2019-12214
Published: 2019-05-20
Description: In FreeImage 3.18.0, an out-of-bounds access occurs because of mishandling of the OpenJPEG j2k_read_ppm_v3 function in j2k.c. The value of l_N_ppm comes from the file read in, and the code does not consider that l_N_ppm may be greater than the size of p_header_data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://sourceforge.net/p/freeimage/discussion/36111/thread/e06734bed5/; https://sourceforge.net/p/freeimage/discussion/36111/thread/e06734bed5/
CVE: CVE-2019-12215
Published: 2019-05-20
Description: A full path disclosure vulnerability was discovered in Matomo v3.9.1 where a user can trigger a particular error to discover the full path of Matomo on the disk, because lastError.file is used in plugins/CorePluginsAdmin/templates/safemode.twig. NOTE: the vendor disputes the significance of this issue, stating "avoid reporting path disclosures, as we don't consider them as security vulnerabilities.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209
References: https://github.com/matomo-org/matomo/issues/14464; https://github.com/matomo-org/matomo/issues/14464
CVE: CVE-2019-12216
Published: 2019-05-20
Description: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a heap-based buffer overflow in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://bugzilla.libsdl.org/show_bug.cgi?id=4619; https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html; https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html
CVE: CVE-2019-12217
Published: 2019-05-20
Description: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a NULL pointer dereference in the SDL stdio_read function in file/SDL_rwops.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html; https://bugzilla.libsdl.org/show_bug.cgi?id=4626
CVE: CVE-2019-12218
Published: 2019-05-20
Description: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a NULL pointer dereference in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html; https://bugzilla.libsdl.org/show_bug.cgi?id=4620
CVE: CVE-2019-12219
Published: 2019-05-20
Description: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an invalid free error in the SDL function SDL_SetError_REAL at SDL_error.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: https://bugzilla.libsdl.org/show_bug.cgi?id=4625; https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html; https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html
CVE: CVE-2019-12220
Published: 2019-05-20
Description: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an out-of-bounds read in the SDL function SDL_FreePalette_REAL at video/SDL_pixels.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html; https://bugzilla.libsdl.org/show_bug.cgi?id=4627
CVE: CVE-2019-12221
Published: 2019-05-20
Description: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a SEGV in the SDL function SDL_free_REAL at stdlib/SDL_malloc.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html; https://bugzilla.libsdl.org/show_bug.cgi?id=4628
CVE: CVE-2019-12222
Published: 2019-05-20
Description: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9. There is an out-of-bounds read in the function SDL_InvalidateMap at video/SDL_pixels.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html; http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html; https://bugzilla.libsdl.org/show_bug.cgi?id=4621