huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2019-11479: kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service
Component: kernel
Severity: Moderate
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 5.3 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Public date: 2019-06-17T17:00:00+00:00

An excessive resource consumption flaw was found in the way the Linux kernel's networking subsystem processed TCP segments. If the Maximum Segment Size (MSS) of a TCP connection was set to low values, such as 48 bytes, it can leave as little as 8 bytes for the user data, which significantly increases the Linux kernel's resource (CPU, Memory, and Bandwidth) utilization. A remote attacker could use this flaw to cause a denial of service (DoS) by repeatedly sending network traffic on a TCP connection with low TCP MSS.

Statement: Red Hat Product Security is aware of this issue. Updates will be released as they become available. For additional information, please refer to the Red Hat Knowledgebase article:  https://access.redhat.com/security/vulnerabilities/tcpsack

Red Hat Enterprise Linux 5 is now in the Extended Life Phase of maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: 4.4 < 4.4.182, 4.9 < 4.9.182, 4.14 < 4.14.127, 4.19 < 4.19.52, 5.1 < 5.1.11
Fixed upstream versions: 4.14.127, 4.19.52, 4.4.182, 4.9.182, 5.1.11
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git
Upstream fix commit: 5f3e2bf008c2221478101ee72f5cb4654b9fc363
CVE-2019-11487: kernel: Count overflow in FUSE request leading to use-after-free issues.
Component: kernel
Severity: Important
CWE: CWE-416 (Use After Free)
CVSS v3: 7.8 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Public date: 2019-04-22T00:00:00+00:00

A flaw was found in the Linux kernel's implementation of the FUSE filesystem, where it allows a page reference counter overflow. If a page reference counter overflows into a negative value, it can be placed back into the "free" list for reuse by other applications. This flaw allows a local attacker who can manipulate memory page reference counters to cause memory corruption and possible privilege escalation by triggering a use-after-free condition.

The current attack requires the system to have approximately 140 GB of RAM for this attack to be performed. It may be possible that the attack can occur with fewer memory requirements.


Affected upstream versions: n/a
Fixed upstream versions: v5.1
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 6b3a707736301c2128ca85ce85fb13f60b5e350a
CVE-2019-11498: wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS
Component: wavpack
Severity: Low
CWE: CWE-456 (Missing Initialization of a Variable)
CVSS v3: 4 (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Public date: 2019-03-05T00:00:00+00:00

WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition, which might allow attackers to cause a denial of service (application crash) via a DFF file that lacks valid sample-rate data.


Affected upstream versions: n/a
Fixed upstream versions: 5.2.0
Upstream repository: https://github.com/dbry/WavPack
Upstream fix commit: bc6cba3f552c44565f7f1e66dc1580189addb2b4
CVE-2019-11596: memcached: null-pointer dereference in "lru mode" and "lru temp_ttl" causing denial of service
Component: memcached
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-04-10T00:00:00+00:00

In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in memcached.c.

Statement: The vulnerable code is not present in the versions of memcached as shipped in Red Hat Enterprise Linux 6 and 7, so they are not affected by this flaw.

Affected upstream versions: n/a
Fixed upstream versions: 1.5.14
Upstream repository: https://github.com/memcached/memcached
Upstream fix commit: d35334f368817a77a6bd1f33c6a5676b2c402c02
CVE-2019-11599: kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping
Component: kernel
Severity: Moderate
CWE: CWE-820 (Missing Synchronization)
CVSS v3: 6.1 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H)
Public date: 2019-04-19T00:00:00+00:00

A flaw was found in the Linux kernel where the coredump implementation does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs. This allows local users to obtain sensitive information, cause a denial of service (DoS), or possibly have unspecified other impact by triggering a race condition with mmget_not_zero or get_task_mm calls.


Affected upstream versions: n/a
Fixed upstream versions: v5.1
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 04f5866e41fb70690e28397487d8bd8eea7d712a
CVE-2019-11810: kernel: a NULL pointer dereference in drivers/scsi/megaraid/megaraid_sas_base.c leading to DoS
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 6.2 (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-05-07T00:00:00+00:00

A flaw was found in the Linux kernel, prior to version 5.0.7, in drivers/scsi/megaraid/megaraid_sas_base.c, where a NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds().  An attacker can crash the system if they were able to load the megaraid_sas kernel module and groom memory beforehand, leading to a denial of service (DoS), related to a use-after-free.


Affected upstream versions: n/a
Fixed upstream versions: v5.1
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: bcf3b67d16a4c8ffae0aa79de5853435e683945c
CVE-2019-11811: kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2019-05-07T00:00:00+00:00

A flaw was found in the Linux kernel's implementation of IPMI (remote baseband access). An attacker, with local access to read /proc/ioports, may be able to create a use-after-free condition when the kernel module is unloaded which may result in privilege escalation.

Statement: This flaw has been rated as "Moderate" as the attacker needs to be able to abuse this flaw in a very narrow race condition of the kernel module being unloaded. This scoring system from this flaw differentiates from other sources as the attacker must have a local account to be able to read the file (/proc/ioports) while the module is unloaded. None of the above actions are 'network facing' attack vectors.

Affected upstream versions: n/a
Fixed upstream versions: v5.1
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 401e7e88d4ef80188ffa07095ac00456f901b8c4
CVE-2019-11833: kernel: fs/ext4/extents.c leads to information disclosure
Component: kernel
Severity: Moderate
CWE: CWE-908 (Use of Uninitialized Resource)
CVSS v3: 5.5 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Public date: 2019-05-11T00:00:00+00:00

A flaw was found in the Linux kernel's implementation of ext4 extent management. The kernel doesn't correctly initialize memory regions in the extent tree block which may be exported to a local user to obtain sensitive information by reading empty/uninitialized data from the filesystem.

Statement: This is a possible information leak of data that existed in the extent tree blocks.  While the attacker does not have control of what exists in the blocks prior to this point they may be able to glean confidential information or possibly information that could be used to further another attack.

Affected upstream versions: n/a
Fixed upstream versions: v5.2
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 592acbf16821288ecdc4192c47e3774a4c48bb64
CVE-2019-11884: kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command
Component: kernel
Severity: Moderate
CWE: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
CVSS v3: 6.8 (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)
Public date: 2019-05-10T00:00:00+00:00

A flaw was found in the Linux kernel's implementation of the Bluetooth Human Interface Device Protocol (HIDP). A local attacker with access permissions to the Bluetooth device can issue an IOCTL which will trigger the do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c.c. This function can leak potentially sensitive information from the kernel stack memory via a HIDPCONNADD command because a name field may not be correctly NULL terminated.


Affected upstream versions: n/a
Fixed upstream versions: v5.2
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: a1616a5ac99ede5d605047a9012481ce7ff18b16
CVE-2019-12155: QEMU: qxl: null pointer dereference while releasing spice resources
Component: QEMU
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 3.8 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L)
Public date: 2019-04-25T00:00:00+00:00

interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.


Affected upstream versions: n/a
Fixed upstream versions: v3.1.1
Upstream repository: https://git.qemu.org/qemu.git
Upstream fix commit: 3be7eb2f47bf71db5f80fcf8750ea395dd5ffdd2
CVE-2019-12382: kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-05-24T00:00:00+00:00

A flaw was found in the Linux kernel’s implementation of Extended Display Identification Data (EDID) technology. A firmware identifier string is duplicated with the kstrdup function, and the allocation may fail under very low memory conditions. An attacker could abuse this flaw by causing a Denial of Service and crashing the system.


Affected upstream versions: n/a
Upstream repository: https://cgit.freedesktop.org/drm/drm-misc
Upstream fix commit: 9f1f1a2dab38d4ce87a13565cf4dc1b73bef3a5f
CVE-2019-12387: python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods
Component: python-twisted
Severity: Moderate
CWE: CWE-113 (Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting'))
CVSS v3: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Public date: 2019-06-10T00:00:00+00:00

In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.

Statement: * This issue does not affect Red Hat Gluster Storage 3 and Red Hat Ceph Storage 2 and 3 because these products do not use the twisted web APIs.
* This issue does affect Red Hat Enterprise Linux 6. However, because this version is now in Maintenance Support 2 Phase and the flaw has a security impact of Moderate,  it is not currently planned to be addressed in future Red Hat Enterprise Linux 6 updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata
* In Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP python-twisted package.

Affected upstream versions: n/a
Fixed upstream versions: twisted-19.7.0
Upstream repository: https://github.com/twisted/twisted
Upstream fix commit: 6c61fc4503ae39ab8ecee52d10f10ee2c371d7e2
CVE-2019-12439: bubblewrap: temporary directory misuse as mount point
Component: bubblewrap
Severity: Moderate
CWE: CWE-377 (Insecure Temporary File)
CVSS v3: 7 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2019-03-01T00:00:00+00:00

bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related to XDG_RUNTIME_DIR), a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code.

Statement: This flaw requires a local user account to exploit. Since local users without root privileges are not supported on Red Had CloudForms, or on Red Hat Ansible Tower, this vulnerability is rated Low severity on these products.  Future updates may address this vulnerability.

Affected upstream versions: n/a
Fixed upstream versions: v0.3.2
Upstream repository: https://github.com/projectatomic/bubblewrap
Upstream fix commit: efc89e3b939b4bde42c10f065f6b7b02958ed50e
CVE-2019-12447: gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c
Component: gvfs
Severity: Moderate
CWE: CWE-282 (Improper Ownership Management)
CVSS v3: 6.4 (CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N)
Public date: 2019-05-29T00:00:00+00:00

It was discovered that gvfs incorrectly set the ownership of files handled by the admin:// backend. An attacker could abuse this flaw when the destination file of a copy/move operation is handled by the admin:// backend. The attacker would have access to the target files with the ability to read and write them.


Affected upstream versions: n/a
Fixed upstream versions: 1.41.3
Upstream repository: https://gitlab.gnome.org/GNOME/gvfs
Upstream fix commit: d7d362995aa0cb8905c8d5c2a2a4c305d2ffff80
CVE-2019-12448: gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write
Component: gvfs
Severity: Moderate
CWE: CWE-364 (Signal Handler Race Condition)
CVSS v3: 6.4 (CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N)
Public date: 2019-05-29T00:00:00+00:00

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement query_info_on_read/write.


Affected upstream versions: n/a
Fixed upstream versions: 1.41.3
Upstream repository: https://gitlab.gnome.org/GNOME/gvfs
Upstream fix commit: 764e9af7522e3096c0f44613c330377d31c9bbb5
CVE-2019-12449: gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges
Component: gvfs
Severity: Moderate
CWE: CWE-282 (Improper Ownership Management)
CVSS v3: 4.8 (CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N)
Public date: 2019-05-29T00:00:00+00:00

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to file:// URIs, because root privileges are unavailable.


Affected upstream versions: n/a
Fixed upstream versions: 1.41.3
Upstream repository: https://gitlab.gnome.org/GNOME/gvfs
Upstream fix commit: 409619412e11be146a31b9a99ed965925f1aabb8
CVE-2019-12450: glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress
Component: glib2
Severity: Moderate
CWE: CWE-552 (Files or Directories Accessible to External Parties)
CVSS v3: 6.6 (CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N)
Public date: 2019-05-23T00:00:00+00:00

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.

Statement: This issue affects the versions of glib2 as shipped with Red Hat Enterprise Linux 6, 7 and 8 . Red Hat Product Security has rated this issue as having a security impact of Moderate.

Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: 2.61.2
Upstream repository: https://gitlab.gnome.org/GNOME/glib
Upstream fix commit: d8f8f4d637ce43f8699ba94c9b7648beda0ca174
CVE-2019-12614: kernel: null pointer dereference in dlpar_parse_cc_property in arch/powerrc/platforms/pseries/dlpar.c causing denial of service
Component: kernel
Severity: Low
CVSS v3: 4.1 (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2019-06-03T00:00:00+00:00

A flaw was found in the way Linux kernel's Dynamic Logical Partitioning (DLPAR) functionality on PowerPC systems handled low memory conditions on device discovery. An attacker who can change the LPAR configuration and incur low memory conditions at the same time could use this flaw to crash the system.

Statement: An attacker needs to be highly privileged to exploit this issue. He either needs to trigger LPAR configuration change (or wait for such event to happen) and incur low memory conditions at the same time. It could be argued that possessing privileges required to exploit this issue could have the same impact as the issue itself.

The indications say that this issue was found by static code analysing tool which looks for memory allocations without failure checks and not actually reproduced on a running system. The CVE assignment also looks automated and following the "better be safe than sorry" approach.

As such, this issue is theoretical in nature and Low impact at best.

Affected upstream versions: n/a
Fixed upstream versions: v5.3
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git
Upstream fix commit: efa9ace68e487ddd29c2b4d6dd23242158f1f607
CVE-2019-12735: vim/neovim: ': source!' command allows arbitrary command execution via modelines
Component: vim/neovim
Severity: Important
CWE: CWE-94 (Improper Control of Generation of Code ('Code Injection'))
CVSS v3: 5.3 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)
Public date: 2019-06-05T00:00:00+00:00

It was found that the `:source!` command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text file in vim could result in arbitrary command execution.

Statement: To be successfully and automatically triggered when a specially crafted file is opened, this vulnerability requires 3 parts :

1) The `source!` command inability to check if it is running in sandbox mode (the fix commit prevents this)

2) The `modeline` to be enabled (by default, modeline is disabled when running with root permission. See `Mitigation` steps to disable the modeline)

3) A function, to be inserted in the modeline, that can be used to trigger the `source!` command (e.g.: `assert_fail()` in the public reproducer). To the best of our knowledge, no such functions were found in the default installation of Red Hat Enterprise Linux versions 5, 6 and 7 at the time of the flaw. However, Red Hat Enterprise Linux version 8 contains `assert_fail()`.

Without part 2 or 3, it would be required for an attacker to be able to craft the command line used to open the crafted file, in order to trigger the vulnerability.

Affected upstream versions: n/a
Fixed upstream versions: v8.1.1365
Upstream repository: https://github.com/vim/vim
Upstream fix commit: 53575521406739cf20bbe4e384d88e7dca11f040
CVE-2019-12795: gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd
Component: gvfs
Severity: Low
CWE: CWE-285 (Improper Authorization)
CVSS v3: 4.5 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L)
Public date: 2019-06-05T00:00:00+00:00

daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3 opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)

Statement: This issue affects the versions of gvfs as shipped with Red Hat Enterprise Linux 6, 7, and 8.

Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Low, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Affected upstream versions: n/a
Fixed upstream versions: 1.41.3
Upstream repository: https://gitlab.gnome.org/GNOME/gvfs
Upstream fix commit: 70dbfc68a79faac49bd3423e079cb6902522082a
CVE-2019-12817: kernel: ppc: unrelated processes being able to read/write to each other's virtual memory
Component: kernel
Severity: Important
CWE: CWE-1341 (Multiple Releases of Same Resource or Handle)
CVSS v3: 7 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2019-06-24T00:00:00+00:00

A flaw was found in the way the Linux kernel's memory subsystem on certain 64-bit PowerPCs with the hash page table MMU handled memory above 512TB. A local, unprivileged user could use this flaw to escalate their privileges on the system.

Statement: Red Hat Product Security is aware of this issue. Updates will be released as they become available.

Affected upstream versions: n/a
Fixed upstream versions: v5.2
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Upstream fix commit: ca72d88378b2f2444d3ec145dd442d449d3fefbc
CVE-2019-12819: kernel: use-after-free in function __mdiobus_register() in drivers/net/phy/mdio_bus.c
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 4.4 (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Public date: 2019-06-13T00:00:00+00:00

A use-after-free flaw was found in the Linux kernel's MDIO section of the network management subsystem. An attacker who is able to hot-plug a network device can trigger the __mdiobus_register() function in drivers/net/phy/mdio_bus.c, which can cause a use-after-free condition causing a memory corruption and kernel panic or privilege escalation.


Affected upstream versions: n/a
Fixed upstream versions: v5.0
Upstream repository: https://github.com/torvalds/linux
Upstream fix commit: 6ff7b060535e87c2ae14dd8548512abfdda528fb
CVE-2019-12900: bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).
Component: bzip2
Severity: Moderate
CWE: CWE-787 (Out-of-bounds Write)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)
Public date: 2024-11-15T10:00:00+00:00

A data integrity error was found in the bzip2 (User-space package) functionality when decompressing. This issue occurs when a user decompresses a particular kind of .bz2 files. A local user could get unexpected results (or corrupted data) as result of decompressing these files.

Statement: This vulnerability only causes failure to decompress when using the package bzip2 functionality. There is no known vector of attack (apart of possibility that some of the older archives compressed with bzip2 could become unaccessible if still buggy version of bzip2 being used to decompress). This bug has been fixed in upstream with multiple iterations.

Affected upstream versions: n/a
Upstream repository: https://gitlab.com/federicomenaquintero/bzip2
Upstream fix commit: 74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc
CVE-2019-12973: openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c
Component: openjpeg
Severity: Low
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 3.3 (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Public date: 2019-06-26T00:00:00+00:00

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.


Affected upstream versions: n/a
Upstream repository: https://github.com/uclouvain/openjpeg
Upstream fix commit: cbe7384016083eac16078b359acd7a842253d503