huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2019-19074: kernel: a memory leak in the ath9k management function in allows local DoS
Component: kernel
Severity: Low
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
CVSS v3: 7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-21T00:00:00+00:00

A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4.


Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 728c1e2a05e4b5fc52fab3421dce772a806612a2
CVE-2019-19077: kernel: memory leak in bnxt_re_create_srq function in drivers/infiniband/hw/bnxt_re/ib_verbs.c
Component: kernel
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-09-10T00:00:00+00:00

A memory leak flaw was found in the Broadcom NetXtreme HCA driver in the Linux kernel, in the way it handled resource cleanup on the copy to userspace error. This flaw allows a local attacker to trigger this error and crash the system.

Statement: This issue is rated as having Moderate impact because local attacker is needed in order to trigger it.

Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 4a9d46a9fe14401f21df69cea97c62396d5fb053
CVE-2019-19221: libarchive: out-of-bounds read in archive_wstring_append_from_mbs in archive_string.c
Component: libarchive
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2019-11-21T00:00:00+00:00

In Libarchive 3.4.0, archive_wstring_append_from_mbs in archive_string.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive.


Affected upstream versions: n/a
Fixed upstream versions: v3.4.1
Upstream repository: https://github.com/libarchive/libarchive
Upstream fix commit: 22b1db9d46654afc6f0c28f90af8cdc84a199f41
CVE-2019-19246: oniguruma: Heap-based buffer overflow in str_lower_case_match in regexec.c
Component: oniguruma
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H)
Public date: 2019-08-13T00:00:00+00:00

A vulnerability was found in Oniguruma, where improper bounds checking in str_lower_case_match within regexec.c can cause a heap-based buffer overflow, a remote attacker could exploit this flaw to crash the application or, in certain scenarios, execute arbitrary code. This occurs when the application processes specially crafted regex patterns, potentially leading to unintended behavior.

Statement: This vulnerability is rated as moderate because a heap-based buffer overflow in Oniguruma’s str_lower_case_match within regexec.c could lead to application crashes or potential code execution. However, successful exploitation depends on specific conditions, such as how the application processes untrusted regex inputs, making the overall impact limited in most cases.

Affected upstream versions: n/a
Fixed upstream versions: v6.9.4
Upstream repository: https://github.com/kkos/oniguruma
Upstream fix commit: d3e402928b6eb3327f8f7d59a9edfa622fec557b
CVE-2019-19319: kernel: out-of-bounds write in ext4_xattr_set_entry in fs/ext4/xattr.c
Component: kernel
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2019-11-27T00:00:00+00:00

An out-of-bounds write flaw was found in the Linux kernel’s Ext4 FileSystem in the way it uses a crafted ext4 image. This flaw allows a local user with physical access to crash the system or potentially escalate their privileges on the system.

Statement: This issue is rated as having Moderate impact because of the preconditions needed to trigger the issue (physical access or user interaction to mount the crafted filesystem image).

Affected upstream versions: n/a
Fixed upstream versions: v5.2
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 345c0dbf3a30
CVE-2019-19330: haproxy: HTTP/2 implementation vulnerable to intermediary encapsulation attacks
Component: haproxy
Severity: Moderate
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 5.9 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Public date: 2019-11-25T00:00:00+00:00

The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulation Attacks.

Statement: Support for HTTP/2 protocol was added to haproxy in version 1.8, therefore previous versions are not affected by this flaw.

The version of haproxy shipped in OpenShift Container Platform 4 contains the vulnerable code, however exploitation requires setting ROUTER_USE_HTTP2 in the OpenShift Ingress Operator, which is not currently possible. The impact of this vulnerability is therefore reduced in OpenShift Container Platform 4 to Low.

Affected upstream versions: n/a
Fixed upstream versions: v2.1.0
Upstream repository: https://git.haproxy.org/haproxy.git
Upstream fix commit: 54f53ef7ce4102be596130b44c768d1818570344
CVE-2019-19333: libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
Component: libyang
Severity: Important
CWE: CWE-121 (Stack-based Buffer Overflow)
CVSS v3: 8.1 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2019-12-05T00:00:00+00:00

A stack-based buffer overflow flaw was discovered in the way libyang parses YANG files with a leaf of type "bits". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of service or execute code.


Affected upstream versions: libyang all versions before 1.0-r5
Fixed upstream versions: v1.0-r5
Upstream repository: https://github.com/CESNET/libyang
Upstream fix commit: f6d684ade99dd37b21babaa8a856f64faa1e2e0d
CVE-2019-19334: libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used
Component: libyang
Severity: Important
CWE: CWE-121 (Stack-based Buffer Overflow)
CVSS v3: 8.1 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2019-12-05T00:00:00+00:00

A stack-based buffer overflow flaw was discovered in the way libyang parses YANG files with a leaf of type "identityref". An application that uses libyang to parse untrusted YANG files may be vulnerable to this flaw, which would allow an attacker to cause a denial of service or execute code.


Affected upstream versions: libyang all versions before 1.0-r5
Fixed upstream versions: v1.0-r5
Upstream repository: https://github.com/CESNET/libyang
Upstream fix commit: 6980afae2ff9fcd6d67508b0a3f694d75fd059d6
CVE-2019-19479: opensc: Incorrect read operation during parsing of a SETCOS file attribute
Component: opensc
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 4.3 (CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Public date: 2019-11-03T00:00:00+00:00

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SETCOS file attribute.


Affected upstream versions: n/a
Fixed upstream versions: 0.20.0
Upstream repository: https://github.com/OpenSC/OpenSC
Upstream fix commit: c3f23b836e5a1766c36617fe1da30d22f7b63de2
CVE-2019-19481: opensc: Improper handling of buffer limits for CAC certificates
Component: opensc
Severity: Moderate
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
CVSS v3: 4.6 (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-10-30T00:00:00+00:00

An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates.


Affected upstream versions: n/a
Fixed upstream versions: 0.20.0
Upstream repository: https://github.com/OpenSC/OpenSC
Upstream fix commit: b75c002cfb1fd61cd20ec938ff4937d7b1a94278
CVE-2019-19523: kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver
Component: kernel
Severity: Moderate
CWE: CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2019-10-04T00:00:00+00:00

A flaw was found in the Linux kernel’s implementation for ADU devices from Ontrak Control Systems, where an attacker with administrative privileges and access to a local account could pre-groom the memory and physically disconnect or unload a module. The attacker must be able to access either of these two events to trigger the use-after-free, and then race the access to the use-after-free, to create a situation where key USB structs can be manipulated into corrupting memory.


Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 44efc269db7929f6275a1fa927ef082e533ecde0
CVE-2019-19524: kernel: a malicious USB device in the drivers/input/ff-memless.c leads to use-after-free
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 4.6 (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-11-15T00:00:00+00:00

A use-after-free flaw was found in the Linux kernel’s input device driver functionality when unplugging a device. A user with physical access could use this flaw to crash the system.


Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: fa3a5a1880c91bb92594ad42dfe9eedad7996b86
CVE-2019-19527: kernel: use-after-free caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 6.8 (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2019-08-06T00:00:00+00:00

A vulnerability was found in hiddev_open in drivers/hid/usbhid/hiddev.c in the USB Human Interface Device class subsystem, where an existing device must be validated prior to its access. The device should also ensure the hiddev_list cleanup occurs at failure, as this may lead to a use-after-free problem, or possibly escalate privileges to an unauthorized user.

Statement: This issue is rated as Moderate because of the need of physical access to the system.

Affected upstream versions: n/a
Fixed upstream versions: v5.3
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 9c09b214f30e3c11f9b0b03f89442df03643794d
CVE-2019-19528: kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 6.1 (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Public date: 2019-10-09T00:00:00+00:00

A use-after-free flaw was found in iowarrior_disconnect  in iowarrior USB driver module were a flag was simultaneously modified causing a race between a device open and disconnect. This flaw could allow a physical attacker to cause a denial of service (DoS) attack. This vulnerability could even lead to a kernel information leak problem.


Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: edc4746f253d907d048de680a621e121517f484b
CVE-2019-19530: kernel: use-after-free caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 5.7 (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Public date: 2019-08-15T00:00:00+00:00

A use-after-free flaw was found in the acm_probe USB subsystem in the Linux kernel. A race condition occurs when a destroy() procedure is initiated allowing the refcount to decrement on the interface so early that it is never under counted. A malicious USB device is required for exploit. System availability is the largest threat from the vulnerability, however data integrity and confidentiality are also threatened.


Affected upstream versions: n/a
Fixed upstream versions: v5.3
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: c52873e5a1ef72f845526d9f6a50704433f9c625
CVE-2019-19532: kernel: malicious USB devices can lead to multiple out-of-bounds write
Component: kernel
Severity: Moderate
CWE: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
CVSS v3: 6.8 (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2019-12-03T00:00:00+00:00

An out-of-bounds write flaw was found in the Linux kernel’s HID drivers. An attacker, able to plug in a malicious USB device, can crash the system or read and write to memory with an incorrect address.

Statement: This issue was rated as having Moderate impact because of the need of physical access to trigger it.

Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: d9d4b1e46d9543a82c23f6df03f4ad697dab361b
CVE-2019-19533: kernel: information leak bug caused  by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c
Component: kernel
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 2.4 (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Public date: 2019-08-21T00:00:00+00:00

An information leak flaw was found in the Linux kernel's USB digital video device driver. An attacker with a malicious USB device presenting itself as a 'Technotrend/Hauppauge USB DEC' device is able to issue commands to this specific device and leak kernel internal memory information.  The highest threat from this vulnerability is a breach of data confidentiality.


Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: a10feaf8c464c3f9cfdd3a8a7ce17e1c0d498da1
CVE-2019-19534: kernel: information leak bug caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver
Component: kernel
Severity: Moderate
CWE: CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere)
CVSS v3: 4.6 (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Public date: 2019-11-04T00:00:00+00:00

An information-leak flaw was found in the Linux kernel's pcan USB driver. When a device using this driver connects to the system, the stack information is leaked to the CAN bus, a controller area network for automobiles. The highest threat with this vulnerability is breach of data confidentiality.


Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: f7a1337f0d29b98733c8824e165fca3371d7d4fd
CVE-2019-19537: kernel: race condition caused by a malicious USB device in the USB character device driver layer
Component: kernel
Severity: Moderate
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
CVSS v3: 4.2 (CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-08-12T00:00:00+00:00

A flaw was found in the Linux kernel, where there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer. An attacker who can hotplug at least two devices of this class can cause a use-after-free situation.


Affected upstream versions: n/a
Fixed upstream versions: v5.3
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 303911cfc5b95d33687d9046133ff184cf5043ff
CVE-2019-19543: kernel: use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 6.7 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Public date: 2019-03-19T00:00:00+00:00

A flaw was found in the Linux kernel’s infrared serial module. An attacker could use this flaw to corrupt memory and possibly escalate privileges.


Affected upstream versions: n/a
Fixed upstream versions: v5.2
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 56cd26b618855c9af48c8301aa6754ced8dd0beb
CVE-2019-19602: kernel: cached use of fpu_fpregs_owner_ctx in arch/x86/include/asm/fpu/internal.h can lead to DoS
Component: kernel
Severity: Moderate
CWE: CWE-672 (Operation on a Resource after Expiration or Release)
CVSS v3: 6.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
Public date: 2019-11-26T00:00:00+00:00

A flaw was found in the Linux kernel. When compiled with GCC 9, a vector register corruption occurs on return from a signal handler where the top page of the signal stack had not yet been paged in which can allow a local attacker with special user privilege (or root) to leak kernel internal information. The highest threat from this vulnerability is to data confidentiality.


Affected upstream versions: n/a
Fixed upstream versions: v5.5
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: 59c4bd853abcea95eccc167a7d7fd5f1a5f47b98
CVE-2019-19603: sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS
Component: sqlite
Severity: Moderate
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-12-09T00:00:00+00:00

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.


Affected upstream versions: n/a
Fixed upstream versions: version-3.31.0
Upstream repository: https://github.com/sqlite/sqlite
Upstream fix commit: 527cbd4a104cb93bf3994b3dd3619a6299a78b13
CVE-2019-19645: sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements
Component: sqlite
Severity: Moderate
CWE: CWE-674 (Uncontrolled Recursion)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-12-09T00:00:00+00:00

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.


Affected upstream versions: n/a
Fixed upstream versions: version-3.31.0
Upstream repository: https://github.com/sqlite/sqlite
Upstream fix commit: 38096961c7cd109110ac21d3ed7dad7e0cb0ae06
CVE-2019-19646: sqlite: pragma.c mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns
Component: sqlite
Severity: Moderate
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 6.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)
Public date: 2019-12-09T00:00:00+00:00

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

Statement: This flaw only affects sqlite databases which contain generated columns. The support for generated columns was added to sqlite-3.31.0 (https://sqlite.org/gencol.html). Therefore sqlite packages shipped with Red Hat products are not vulnerable to this flaw.

Affected upstream versions: n/a
Fixed upstream versions: version-3.31.0
Upstream repository: https://github.com/sqlite/sqlite
Upstream fix commit: ebd70eedd5d6e6a890a670b5ee874a5eae86b4dd
CVE-2019-19767: kernel: use-after-free in __ext4_expand_extra_isize and ext4_xattr_set_entry related to fs/ext4/inode.c and fs/ext4/super.c
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Public date: 2019-11-07T00:00:00+00:00

A use-after-free flaw was found in the Linux kernel’s ext4 file system functionality when the user mount ext4 partition, with the usage of an additional debug parameter is defining an extra inode size. If this parameter has a non zero value, this flaw allows a local user to crash the system when inode expansion happens.


Affected upstream versions: n/a
Fixed upstream versions: v5.5
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 4ea99936a1630f51fc3a2d61a58ec4a1c4b7d55a
CVE-2019-19807: kernel: use-after-free in sound/core/timer.c
Component: kernel
Severity: Important
CWE: CWE-416 (Use After Free)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2019-11-06T00:00:00+00:00

A memory flaw was found in the ALSA subsystem of the Linux kernel. The struct snd_timer_instance function fails the timer->max_instances check leading to an invalid address. This could lead to a use-after-free vulnerability.

Statement: This issue affected Linux kernel versions as shipped with Red Hat Enterprise Linux 8 starting with RHEL-8.1.0, that is Red Hat Enterprise Linux 8.1 GA kernel version.

Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: e7af6307a8a54f0b873960b32b6a644f2d0fbd97
CVE-2019-19880: sqlite: invalid pointer dereference in exprListAppendList in window.c
Component: sqlite
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-12-17T00:00:00+00:00

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.


Affected upstream versions: n/a
Fixed upstream versions: version-3.31.0
Upstream repository: https://github.com/sqlite/sqlite
Upstream fix commit: 75e95e1fcd52d3ec8282edb75ac8cd0814095d54
CVE-2019-19922: kernel: when cpu.cfs_quota_us is used allows attackers to cause a denial of service against non-cpu-bound applications
Component: kernel
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-12-22T00:00:00+00:00

A flaw was found in the Linux kernel’s scheduler, where it can allow attackers to cause a denial of service against non-CPU-bound applications by generating a workload that triggers unwanted scheduling slice expiration. A local attacker who can trigger a specific workload type could abuse this technique to trigger a system to be seen as degraded, and possibly trigger workload-rebalance in systems that use the slice-expiration metric as a measure of system health.


Affected upstream versions: n/a
Fixed upstream versions: v5.4
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: de53fd7aedb100f03e5d2231cfce0e4993282425
CVE-2019-19923: sqlite: mishandling of certain uses of SELECT DISTINCT involving a LEFT JOIN in flattenSubquery in select.c leads to a NULL pointer dereference
Component: sqlite
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2020-01-08T00:00:00+00:00

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).


Affected upstream versions: n/a
Fixed upstream versions: version-3.31.0
Upstream repository: https://github.com/sqlite/sqlite
Upstream fix commit: 396afe6f6aa90a31303c183e11b2b2d4b7956b35
CVE-2019-19924: sqlite: incorrect sqlite3WindowRewrite() error handling leads to mishandling certain parser-tree rewriting
Component: sqlite
Severity: Moderate
CWE: CWE-391 (Unchecked Error Condition)
CVSS v3: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Public date: 2020-01-08T00:00:00+00:00

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.


Affected upstream versions: n/a
Fixed upstream versions: version-3.31.0
Upstream repository: https://github.com/sqlite/sqlite
Upstream fix commit: 8654186b0236d556aa85528c2573ee0b6ab71be3