deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-6663
Published: 2019-11-15
Description: The BIG-IP 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1 configuration utility is vulnerable to Anti DNS Pinning (DNS Rebinding) attack.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.f5.com/csp/article/K76052144; https://support.f5.com/csp/article/K76052144
CVE: CVE-2019-6664
Published: 2019-11-15
Description: On BIG-IP 15.0.0 and 14.1.0-14.1.0.6, under certain conditions, network protections on the management port do not follow current best practices.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K03126093; https://support.f5.com/csp/article/K03126093
CVE: CVE-2019-16761
Published: 2019-11-15
Description: A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slp-validate@1.0.0 npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. All versions >1.0.0 have been patched.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://github.com/simpleledger/slp-validate/commit/50ad96c2798dad6b9f9a13333dd05232defe5730#diff-fe58606994c412ba56a65141a7aa4a62L123; https://github.com/simpleledger/slp-validate/security/advisories/GHSA-wmx6-vxcf-c3gr; https://github.com/simpleledger/slp-validate/commit/50ad96c2798dad6b9f9a13333dd05232defe5730#diff-fe58606994c412ba56a65141a7aa4a62L123
CVE: CVE-2019-16762
Published: 2019-11-15
Description: A specially crafted Bitcoin script can cause a discrepancy between the specified SLP consensus rules and the validation result of the slpjs npm package. An attacker could create a specially crafted Bitcoin script in order to cause a hard-fork from the SLP consensus. Affected users can upgrade to any version >= 0.21.4.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://github.com/simpleledger/slpjs/commit/ac8809b42e47790a6f0205991b36f2699ed10c84#diff-fe58606994c412ba56a65141a7aa4a62L701; https://github.com/simpleledger/slpjs/security/advisories/GHSA-425c-ccf3-3jrr; https://github.com/simpleledger/slpjs/commit/ac8809b42e47790a6f0205991b36f2699ed10c84#diff-fe58606994c412ba56a65141a7aa4a62L701
CVE: CVE-2019-19010
Published: 2019-11-16
Description: Eval injection in the Math plugin of Limnoria (before 2019.11.09) and Supybot (through 2018-05-09) allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/ProgVal/Limnoria/commit/3848ae78de45b35c029cc333963d436b9d2f0a35; https://github.com/ProgVal/Limnoria/wiki/math-eval-vulnerability; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/54CQM2TEXRADLE77VOMCPHL5PBHR3ZWJ/
CVE: CVE-2019-19011
Published: 2019-11-17
Description: MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueColor in ngiflib.c via a file that lacks a palette.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/miniupnp/ngiflib/issues/16; https://github.com/miniupnp/ngiflib/issues/16
CVE: CVE-2019-19012
Published: 2019-11-17
Description: An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a denial-of-service or information disclosure, or possibly have unspecified other impact, via a crafted regular expression.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-190
References: https://github.com/kkos/oniguruma/issues/164; https://github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2; https://github.com/tarantula-team/CVE-2019-19012
CVE: CVE-2019-19022
Published: 2019-11-17
Description: iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which might allow remote attackers to obtain sensitive information, as demonstrated by searching for the NoSyncSearchHistory string in .plist files within public Git repositories.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://gitlab.com/gnachman/iterm2/issues/8491; https://gitlab.com/gnachman/iterm2/issues/8491
CVE: CVE-2019-19035
Published: 2019-11-17
Description: jhead 3.03 is affected by: heap-based buffer over-read. The impact is: Denial of service. The component is: ReadJpegSections and process_SOFn in jpgfile.c. The attack vector is: Open a specially crafted JPEG file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1765647; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GPNV43VBUCMUBRBKPJBY4DDSYLHQ2GFR/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UOL6LCMEVOOB342EJ4TKWTPJAJPJSVWH/
CVE: CVE-2019-19040
Published: 2019-11-17
Description: KairosDB through 1.2.2 has XSS in view.html because of showErrorMessage in js/graph.js, as demonstrated by view.html?q= with a '"sampling":{"value":"<script>' substring.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kairosdb/kairosdb/issues/569; https://github.com/kairosdb/kairosdb/issues/569
CVE: CVE-2019-19041
Published: 2019-11-17
Description: An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41. They do not correctly verify the integrity of an upgrade package before processing it. As a result, official upgrade packages can be modified to inject an arbitrary Bash script that will be executed by the underlying system. It is possible to achieve this by modifying the values in the files.SUM file (which are used for integrity control) and injecting malicious code into the upgrade.sh file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://github.com/gotenigatien/Xorux-critical-vulnerability/blob/master/README.md; https://github.com/gotenigatien/Xorux-critical-vulnerability/blob/master/README.md
CVE: CVE-2019-19043
Published: 2019-11-18
Description: A memory leak in the i40e_setup_macvlans() function in drivers/net/ethernet/intel/i40e/i40e_main.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering i40e_setup_channel() failures, aka CID-27d461333459.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/torvalds/linux/commit/27d461333459d282ffa4a2bdb6b215a59d493a8f; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/
CVE: CVE-2019-19044
Published: 2019-11-18
Description: Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11; https://github.com/torvalds/linux/commit/29cd13cfd7624726d9e6becbae9aa419ef35af7f; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-19045
Published: 2019-11-18
Description: A memory leak in the mlx5_fpga_conn_create_cq() function in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_vector2eqn() failures, aka CID-c8c2a057fdc7.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11; https://github.com/torvalds/linux/commit/c8c2a057fdc7de1cd16f4baa51425b932a42eb39
CVE: CVE-2019-19046
Published: 2019-11-18
Description: A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure, aka CID-4aa7afb0ee20. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control this failure at probe time
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html; https://bugzilla.suse.com/show_bug.cgi?id=1157304; https://github.com/torvalds/linux/commit/4aa7afb0ee20a97fbf0c5bab3df028d5fb85fdab
CVE: CVE-2019-19047
Published: 2019-11-18
Description: A memory leak in the mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mlx5_crdump_collect() failures, aka CID-c7ed6d0183d5.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11; https://github.com/torvalds/linux/commit/c7ed6d0183d5ea9bc31bcaeeba4070bd62546471; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-19048
Published: 2019-11-18
Description: A memory leak in the crypto_reportstat() function in drivers/virt/vboxguest/vboxguest_utils.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering copy_form_user() failures, aka CID-e0b0cb938864.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9; https://github.com/torvalds/linux/commit/e0b0cb9388642c104838fac100a4af32745621e2; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-19049
Published: 2019-11-18
Description: A memory leak in the unittest_data_add() function in drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to cause a denial of service (memory consumption) by triggering of_fdt_unflatten_tree() failures, aka CID-e13de8fe0d6a. NOTE: third parties dispute the relevance of this because unittest.c can only be reached during boot
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html; https://bugzilla.suse.com/show_bug.cgi?id=1157173; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.10
CVE: CVE-2019-19050
Published: 2019-11-18
Description: A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://packetstormsecurity.com/files/156455/Kernel-Live-Patch-Security-Notice-LSN-0063-1.html; https://github.com/torvalds/linux/commit/c03b04dcdba1da39903e23cc4d072abf8f68f2dd; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/
CVE: CVE-2019-19051
Published: 2019-11-18
Description: A memory leak in the i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-rfkill.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-6f3ef5c25cc7.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11; https://github.com/torvalds/linux/commit/6f3ef5c25cc762687a7341c18cbea5af54461407
CVE: CVE-2019-19052
Published: 2019-11-18
Description: A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11; https://github.com/torvalds/linux/commit/fb5be6a7b4863ecc44963bb80ca614584b6c7817
CVE: CVE-2019-19053
Published: 2019-11-18
Description: A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy_from_iter_full() failures, aka CID-bbe692e349e2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://github.com/torvalds/linux/commit/bbe692e349e2a1edf3fe0a29a0e05899c9c94d51; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://usn.ubuntu.com/4300-1/
CVE: CVE-2019-19054
Published: 2019-11-18
Description: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a7b2df76b42b.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html; https://github.com/torvalds/linux/commit/a7b2df76b42bdd026e3106cf2ba97db41345a177; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/
CVE: CVE-2019-19055
Published: 2019-11-18
Description: A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering nl80211hdr_put() failures, aka CID-1399c59fa929. NOTE: third parties dispute the relevance of this because it occurs on a code path where a successful allocation has already occurred
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://bugzilla.suse.com/show_bug.cgi?id=1157319; https://github.com/torvalds/linux/commit/1399c59fa92984836db90538cf92397fe7caaa57; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/
CVE: CVE-2019-19056
Published: 2019-11-18
Description: A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-db8fd2cde932.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html; https://github.com/torvalds/linux/commit/db8fd2cde93227e566a412cf53173ffa227998bc; https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
CVE: CVE-2019-19057
Published: 2019-11-18
Description: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering mwifiex_map_pci_memory() failures, aka CID-d10dcb615c8e.
CVSS Score: 3.3 (LOW)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html; http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html; https://github.com/torvalds/linux/commit/d10dcb615c8e29d403a24d35f8310a7a53e3050c
CVE: CVE-2019-19058
Published: 2019-11-18
Description: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures, aka CID-b4b814fec1a5.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html; https://github.com/torvalds/linux/commit/b4b814fec1a5a849383f7b3886b654a13abbda7d; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/
CVE: CVE-2019-19059
Published: 2019-11-18
Description: Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering iwl_pcie_init_fw_sec() or dma_alloc_coherent() failures, aka CID-0f4f199443fa.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-401
References: https://github.com/torvalds/linux/commit/0f4f199443faca715523b0659aa536251d8b978f; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/
CVE: CVE-2019-19060
Published: 2019-11-18
Description: A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-ab612b1daf41.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9; https://github.com/torvalds/linux/commit/ab612b1daf415b62c58e130cb3d0f30b255a14d0
CVE: CVE-2019-19061
Published: 2019-11-18
Description: A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-9c0530e898f3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9; https://github.com/torvalds/linux/commit/9c0530e898f384c5d279bfcebd8bb17af1105873; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-19062
Published: 2019-11-18
Description: A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html; http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html; https://github.com/torvalds/linux/commit/ffdde[PII_REDACTED]c6807d46c1550b28b0db6a3bc
CVE: CVE-2019-19063
Published: 2019-11-18
Description: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption), aka CID-3f[PII_REDACTED].
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html; http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html; https://github.com/torvalds/linux/commit/3f[PII_REDACTED]8a598d930dcaec40f2bfd9ce43bb
CVE: CVE-2019-19064
Published: 2019-11-18
Description: A memory leak in the fsl_lpspi_probe() function in drivers/spi/spi-fsl-lpspi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering pm_runtime_get_sync() failures, aka CID-057b8945f78f. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control these failures at probe time
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://bugzilla.suse.com/show_bug.cgi?id=1157300; https://github.com/torvalds/linux/commit/057b8945f78f76d0b04eeb5c27cd9225e5e7ad86; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/
CVE: CVE-2019-19065
Published: 2019-11-18
Description: A memory leak in the sdma_init() function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering rhashtable_init() failures, aka CID-34b3be18a04e. NOTE: This has been disputed as not a vulnerability because "rhashtable_init() can only fail if it is passed invalid values in the second parameter's struct, but when invoked from sdma_init() that is a pointer to a static const struct, so an attacker could only trigger failure if they could corrupt kernel memory (in which case a small memory leak is not a significant problem).
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9; https://github.com/torvalds/linux/commit/34b3be18a04ecdc610aae4c48e5d1b799d8689f6
CVE: CVE-2019-19066
Published: 2019-11-18
Description: A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures, aka CID-0e62395da2bd.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html; https://github.com/torvalds/linux/commit/0e62395da2bd5166d7c9e14cbc7503b256a34cb0; https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
CVE: CVE-2019-19067
Published: 2019-11-18
Description: Four memory leaks in the acp_hw_init() function in drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption) by triggering mfd_add_hotplug_devices() or pm_genpd_add_device() failures, aka CID-57be09c6e874. NOTE: third parties dispute the relevance of this because the attacker must already have privileges for module loading
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html; https://bugzilla.suse.com/show_bug.cgi?id=1157180; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.8
CVE: CVE-2019-19068
Published: 2019-11-18
Description: A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-a2cdd07488e6.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-401
References: http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html; https://github.com/torvalds/linux/commit/a2cdd07488e666aa93a49a3fc9c9b1299e27ef3c; https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
CVE: CVE-2019-19069
Published: 2019-11-18
Description: A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering dma_get_sgtable() failures, aka CID-fc739a058d99.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9; https://github.com/torvalds/linux/commit/fc739a058d99c9297ef6bfd923b809d85855b9a9; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-19070
Published: 2019-11-18
Description: A memory leak in the spi_gpio_probe() function in drivers/spi/spi-gpio.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering devm_add_action_or_reset() failures, aka CID-d3b0ffa1d75d. NOTE: third parties dispute the relevance of this because the system must have already been out of memory before the probe began
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://bugzilla.suse.com/show_bug.cgi?id=1157294; https://github.com/torvalds/linux/commit/d3b0ffa1d75d5305ebe[PII_REDACTED]3afbb8a869d; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/