deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-2045
Published: 2019-05-08
Description: In JSCallTyper of typer.cc, there is an out of bounds write due to an incorrect bounds check. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.1 Android-9 Android ID: A-117554758
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2019-05-01; https://source.android.com/security/bulletin/2019-05-01
CVE: CVE-2019-2046
Published: 2019-05-08
Description: In CalculateInstanceSizeForDerivedClass of objects.cc, there is possible memory corruption due to an integer overflow. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-117556220
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-787
References: https://source.android.com/security/bulletin/2019-05-01; https://source.android.com/security/bulletin/2019-05-01
CVE: CVE-2019-2047
Published: 2019-05-08
Description: In UpdateLoadElement of ic.cc, there is a possible out-of-bounds write due to type confusion. This could lead to remote code execution in the proxy auto-config with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-117607414
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-843
References: https://source.android.com/security/bulletin/2019-05-01; https://source.android.com/security/bulletin/2019-05-01
CVE: CVE-2019-2049
Published: 2019-05-08
Description: In SendMediaUpdate and SendFolderUpdate of avrcp_service.cc, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-9 Android ID: A-120445479
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://source.android.com/security/bulletin/2019-05-01; https://source.android.com/security/bulletin/2019-05-01
CVE: CVE-2019-2050
Published: 2019-05-08
Description: In tearDownClientInterface of WificondControl.java, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android-9 Android ID: A-121327323
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-667
References: https://source.android.com/security/bulletin/2019-05-01; https://source.android.com/security/bulletin/2019-05-01
CVE: CVE-2019-2051
Published: 2019-05-08
Description: In heap of spaces.h, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure when processing a proxy auto config file with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-117555811
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-125
References: https://source.android.com/security/bulletin/2019-05-01; https://source.android.com/security/bulletin/2019-05-01
CVE: CVE-2019-2052
Published: 2019-05-08
Description: In VisitPointers of heap.cc, there is a possible out-of-bounds read due to type confusion. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.1 Android-9 Android ID: A-117556606
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-843
References: https://source.android.com/security/bulletin/2019-05-01; https://source.android.com/security/bulletin/2019-05-01
CVE: CVE-2019-2053
Published: 2019-05-08
Description: In wnm_parse_neighbor_report_elem of wnm_sta.c, there is a possible out-of-bounds read due to missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-122074159
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2019-05-01; https://source.android.com/security/bulletin/2019-05-01
CVE: CVE-2019-2054
Published: 2019-05-08
Description: In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-119769499
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/153799/Kernel-Live-Patch-Security-Notice-LSN-0053-1.html; http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html; https://source.android.com/security/bulletin/2019-05-01
CVE: CVE-2019-5014
Published: 2019-05-08
Description: An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2.0. An attacker can connect to the device to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284, CWE-306
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0772; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0772
CVE: CVE-2019-5021
Published: 2019-05-08
Description: Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to be the result of a regression introduced in December of 2015. Due to the nature of this issue, systems deployed using affected versions of the Alpine Linux container which utilize Linux PAM, or some other mechanism which uses the system shadow file as an authentication database, may accept a NULL password for the `root` user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-258
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00004.html; http://www.securityfocus.com/bid/108288; https://alpinelinux.org/posts/Docker-image-vulnerability-CVE-2019-5021.html
CVE: CVE-2019-11398
Published: 2019-05-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in UliCMS 2019.2 and 2019.1 allow remote attackers to inject arbitrary web script or HTML via the go parameter to admin/index.php, the go parameter to /admin/index.php?register=register, or the error parameter to admin/index.php?action=favicon.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/153219/UliCMS-2019.1-Cross-Site-Scripting.html; https://en.ulicms.de/; https://www.exploit-db.com/exploits/46741/
CVE: CVE-2019-11406
Published: 2019-05-08
Description: Subrion CMS 4.2.1 allows _core/en/contacts/ XSS via the name, email, or phone parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/intelliants/subrion/commits/develop; https://github.com/intelliants/subrion/issues/821; https://github.com/intelliants/subrion/commits/develop
CVE: CVE-2019-11458
Published: 2019-05-08
Description: An issue was discovered in SmtpTransport in CakePHP 3.7.6. An unserialized object with modified internal properties can trigger arbitrary file overwriting upon destruction.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://bakery.cakephp.org/2019/04/23/cakephp_377_3615_3518_released.html; https://github.com/cakephp/cakephp/commit/1a74e798309192a9895c9cedabd714ceee345f4e; https://github.com/cakephp/cakephp/commits/master
CVE: CVE-2019-11494
Published: 2019-05-08
Description: In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login service crashes when the client disconnects prematurely during the AUTH command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00024.html; http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00026.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4XLI55NGRDTGMVOPYFCPPFNPA5VKYSSY/
CVE: CVE-2019-8285
Published: 2019-05-08
Description: Kaspersky Lab Antivirus Engine version before 04.apr.2019 has a heap-based buffer overflow vulnerability that potentially allow arbitrary code execution
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/108284; https://support.kaspersky.com/vulnerability.aspx?el=12430#080519; http://www.securityfocus.com/bid/108284
CVE: CVE-2019-9698
Published: 2019-05-08
Description: Symantec AV Engine, prior to 13.0.9r17, may be susceptible to an arbitrary file deletion issue, which is a type of vulnerability that could allow an attacker to delete files on the resident system without elevated privileges.
CVSS Score: 5.5 (MEDIUM)
References: https://support.symantec.com/en_US/article.SYMSA1481.html; https://support.symantec.com/en_US/article.SYMSA1481.html
CVE: CVE-2019-7442
Published: 2019-05-08
Description: An XML external entity (XXE) vulnerability in the Password Vault Web Access (PVWA) of CyberArk Enterprise Password Vault <=10.7 allows remote attackers to read arbitrary files or potentially bypass authentication via a crafted DTD in the SAML authentication system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://packetstormsecurity.com/files/152801/CyberArk-Enterprise-Password-Vault-10.7-XML-External-Entity-Injection.html; https://www.octority.com/2019/05/07/cyberark-enterprise-password-vault-xml-external-entity-xxe-injection/; http://packetstormsecurity.com/files/152801/CyberArk-Enterprise-Password-Vault-10.7-XML-External-Entity-Injection.html
CVE: CVE-2019-11830
Published: 2019-05-09
Description: PharMetaDataInterceptor in the PharStreamWrapper (aka phar-stream-wrapper) package 2.x before 2.1.1 and 3.x before 3.1.1 for TYPO3 mishandles Phar stub parsing, which allows attackers to bypass a deserialization protection mechanism.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/TYPO3/phar-stream-wrapper/releases/tag/v2.1.1; https://github.com/TYPO3/phar-stream-wrapper/releases/tag/v3.1.1; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/65ODQHDHWR74L6TCAPAQR5FQHG6MCXAW/
CVE: CVE-2019-11831
Published: 2019-05-09
Description: The PharStreamWrapper (aka phar-stream-wrapper) package 2.x before 2.1.1 and 3.x before 3.1.1 for TYPO3 does not prevent directory traversal, which allows attackers to bypass a deserialization protection mechanism, as demonstrated by a phar:///path/bad.phar/../good.phar URL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-502
References: http://www.securityfocus.com/bid/108302; https://github.com/TYPO3/phar-stream-wrapper/releases/tag/v2.1.1; https://github.com/TYPO3/phar-stream-wrapper/releases/tag/v3.1.1
CVE: CVE-2019-11832
Published: 2019-05-09
Description: TYPO3 8.x before 8.7.25 and 9.x before 9.5.6 allows remote code execution because it does not properly configure the applications used for image processing, as demonstrated by ImageMagick or GraphicsMagick.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/108305; https://typo3.org/security/advisory/typo3-core-sa-2019-012/; http://www.securityfocus.com/bid/108305
CVE: CVE-2019-11834
Published: 2019-05-09
Description: cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-787
References: https://github.com/DaveGamble/cJSON/compare/c69134d...93688cb; https://github.com/DaveGamble/cJSON/issues/337; https://github.com/DaveGamble/cJSON/releases/tag/v1.7.11
CVE: CVE-2019-11835
Published: 2019-05-09
Description: cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-787
References: https://github.com/DaveGamble/cJSON/compare/c69134d...93688cb; https://github.com/DaveGamble/cJSON/issues/338; https://github.com/DaveGamble/cJSON/releases/tag/v1.7.11
CVE: CVE-2019-11820
Published: 2019-05-09
Description: Information exposure through process environment vulnerability in Synology Calendar before 2.3.3-0620 allows local users to obtain credentials via cmdline.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://www.synology.com/security/advisory/Synology_SA_19_21; https://www.synology.com/security/advisory/Synology_SA_19_21
CVE: CVE-2019-11836
Published: 2019-05-09
Description: The Rediffmail (aka com.rediff.mail.and) application 2.2.6 for Android has cleartext mail content in file storage, persisting after a logout.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-311
References: https://twitter.com/811Rishi/status/[PII_REDACTED]83017985; https://twitter.com/811Rishi/status/[PII_REDACTED]83017985
CVE: CVE-2019-0226
Published: 2019-05-09
Description: Apache Karaf Config service provides a install method (via service or MBean) that could be used to travel in any directory and overwrite existing file. The vulnerability is low if the Karaf process user has limited permission on the filesystem. Any Apache Karaf version before 4.2.5 is impacted. User should upgrade to Apache Karaf 4.2.5 or later.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://lists.apache.org/thread.html/1baa6f1df0e95fb1cd[PII_REDACTED]54af2ab4423277d9a0ff6e8bf790%40%3Cdev.karaf.apache.org%3E; https://lists.apache.org/thread.html/r218c7e017af0a860ae21bf7ab77520fd2070c8f52db680eeec03a266%40%3Ccommits.karaf.apache.org%3E; https://lists.apache.org/thread.html/1baa6f1df0e95fb1cd[PII_REDACTED]54af2ab4423277d9a0ff6e8bf790%40%3Cdev.karaf.apache.org%3E
CVE: CVE-2019-11323
Published: 2019-05-09
Description: HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include/types/ssl_sock.h error.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327, CWE-908
References: http://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=8ef706502aa2000531d36e4ac56dbdc7c30f718d; https://www.mail-archive.com/haproxy%40formilux.org/msg33410.html; http://git.haproxy.org/?p=haproxy.git%3Ba=commit%3Bh=8ef706502aa2000531d36e4ac56dbdc7c30f718d
CVE: CVE-2019-11353
Published: 2019-05-09
Description: The EnGenius EWS660AP router with firmware 2.0.284 allows an attacker to execute arbitrary commands using the built-in ping and traceroute utilities by using different payloads and injecting multiple parameters. This vulnerability is fixed in a later firmware version.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://securityshards.wordpress.com/2019/04/21/cve-2019-11353-engenius-ews660ap-arbitrary-code-execution/; https://www.engeniustech.com/engenius-products/managed-outdoor-wireless-ews660ap/; https://securityshards.wordpress.com/2019/04/21/cve-2019-11353-engenius-ews660ap-arbitrary-code-execution/
CVE: CVE-2019-11837
Published: 2019-05-09
Description: njs through 0.3.1, used in NGINX, has a segmentation fault in String.prototype.toBytes for negative arguments, related to nxt_utf8_next in nxt/nxt_utf8.h and njs_string_offset in njs/njs_string.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: https://github.com/nginx/njs/issues/155; https://github.com/nginx/njs/issues/155
CVE: CVE-2019-11838
Published: 2019-05-09
Description: njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.splice after a resize, related to njs_array_prototype_splice in njs/njs_array.c, because of njs_array_expand size mishandling.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/nginx/njs/issues/153; https://github.com/nginx/njs/issues/153
CVE: CVE-2019-11839
Published: 2019-05-09
Description: njs through 0.3.1, used in NGINX, has a heap-based buffer overflow in Array.prototype.push after a resize, related to njs_array_prototype_push in njs/njs_array.c, because of njs_array_expand size mishandling.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/nginx/njs/issues/152; https://github.com/nginx/njs/issues/152
CVE: CVE-2019-9847
Published: 2019-05-09
Description: A vulnerability in LibreOffice hyperlink processing allows an attacker to construct documents containing hyperlinks pointing to the location of an executable on the target users file system. If the hyperlink is activated by the victim the executable target is unconditionally launched. Under Windows and macOS when processing a hyperlink target explicitly activated by the user there was no judgment made on whether the target was an executable file, so such executable targets were launched unconditionally. This issue affects: All LibreOffice Windows and macOS versions prior to 6.1.6; LibreOffice Windows and macOS versions in the 6.2 series prior to 6.2.3.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://www.libreoffice.org/about-us/security/advisories/cve-2019-9847/; https://www.libreoffice.org/about-us/security/advisories/cve-2019-9847/
CVE: CVE-2017-12788
Published: 2019-05-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in Metinfo 5.3.18 allows remote attackers to inject arbitrary web script or HTML via the (1) class1 parameter or the (2) anyid parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/lemon666/vuln/blob/master/MetInfo5.3.md; https://github.com/lemon666/vuln/blob/master/MetInfo5.3.md
CVE: CVE-2019-4071
Published: 2019-05-09
Description: IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 157063.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: http://www.ibm.com/support/docview.wss?uid=ibm10872900; https://exchange.xforce.ibmcloud.com/vulnerabilities/157063; http://www.ibm.com/support/docview.wss?uid=ibm10872900
CVE: CVE-2019-4072
Published: 2019-05-09
Description: IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the application even when a user has logged out. Utilizing the application back button users can remain logged in as the current user for a short period of time, therefore users are presented with information for Spectrum Control Application. IBM X-Force ID: 157064.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-613
References: http://www.ibm.com/support/docview.wss?uid=ibm10873036; https://exchange.xforce.ibmcloud.com/vulnerabilities/157064; http://www.ibm.com/support/docview.wss?uid=ibm10873036
CVE: CVE-2019-6544
Published: 2019-05-09
Description: GE Communicator, all versions prior to 4.0.517, has a service running with system privileges that may allow an unprivileged user to perform certain administrative actions, which may allow the execution of scheduled scripts with system administrator privileges. This service is inaccessible to attackers if Windows default firewall settings are used by the end user.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-284
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02; https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02
CVE: CVE-2019-6546
Published: 2019-05-09
Description: GE Communicator, all versions prior to 4.0.517, allows an attacker to place malicious files within the working directory of the program, which may allow an attacker to manipulate widgets and UI elements.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02; https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02
CVE: CVE-2019-6548
Published: 2019-05-09
Description: GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the database. This service is inaccessible to attackers if Windows default firewall settings are used by the end user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02; https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02
CVE: CVE-2019-6564
Published: 2019-05-09
Description: GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to place malicious files within the installer file directory, which may allow an attacker to gain administrative privileges on a system during installation or upgrade.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02; https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02
CVE: CVE-2019-6566
Published: 2019-05-09
Description: GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to replace the uninstaller with a malicious version, which could allow an attacker to gain administrator privileges to the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02; https://ics-cert.us-cert.gov/advisories/ICSA-19-122-02
CVE: CVE-2019-7181
Published: 2019-05-09
Description: Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/152570/QNAP-myQNAPcloud-Connect-1.3.4.0317-Username-Password-Denial-Of-Service.html; https://www.exploit-db.com/exploits/46733/; https://www.qnap.com/zh-tw/security-advisory/nas-201905-09
CVE: CVE-2017-12804
Published: 2019-05-09
Description: The iwgif_init_screen function in imagew-gif.c:510 in ImageWorsener 1.3.2 allows remote attackers to cause a denial of service (hmemory exhaustion) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/jsummers/imageworsener/issues/30; https://github.com/jsummers/imageworsener/issues/30
CVE: CVE-2017-12805
Published: 2019-05-09
Description: In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attackers to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html; https://github.com/ImageMagick/ImageMagick/issues/664; https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html
CVE: CVE-2017-12806
Published: 2019-05-09
Description: In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00001.html; https://github.com/ImageMagick/ImageMagick/issues/660; https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
CVE: CVE-2019-11840
Published: 2019-05-09
Description: An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0[PII_REDACTED]3903-b7391e95e576. A flaw was found in the amd64 implementation of the golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa packages. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-330
References: https://bugzilla.redhat.com/show_bug.cgi?id=1691529; https://github.com/golang/go/issues/30965; https://go.googlesource.com/crypto/+/b7391e95e576cacdcdd422573063bc057239113d