rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-11409 
app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation that allows authenticated non-administrative attackers to execute commands on the host. This can further lead to remote code execution when combined with an XSS vulnerability also present in the FusionPBX Operator Panel module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T18:02:23.000Z
CVE-2019-11410 
app/backup/index.php in the Backup Module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated administrative attackers to execute commands on the host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-17T18:03:51.000Z
CVE-2019-11411 
An issue was discovered in Artifex MuJS 1.0.5. The Number#toFixed() and numtostr implementations in jsnumber.c have a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T19:14:20.000Z
CVE-2019-11412 
An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service (invalid stack-frame jump) because it lacks an ENDTRY opcode call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T19:14:37.000Z
CVE-2019-11413 
An issue was discovered in Artifex MuJS 1.0.5. It has unlimited recursion because the match function in regexp.c lacks a depth check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T19:14:47.000Z
CVE-2019-11414 
An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. When the administrator password is changed from a certain client IP address, administrative authorization remains available to any client at that IP address, leading to complete control of the router.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T19:38:22.000Z
CVE-2019-11415 
An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause a denial of service (reboot), as demonstrated by JSON misparsing of the \""} string to v1/system/login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T19:38:33.000Z
CVE-2019-11416 
A CSRF issue was discovered on Intelbras IWR 3000N 1.5.0 devices, leading to complete control of the router, as demonstrated by v1/system/user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T19:38:47.000Z
CVE-2019-11417 
system.cgi on TRENDnet TV-IP110WN cameras has a buffer overflow caused by an inadequate source-length check before a strcpy operation in the respondAsp function. Attackers can exploit the vulnerability by using the languse parameter with a long string. This affects 1.2.2 build 28, 64, 65, and 68.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T20:09:41.000Z
CVE-2019-11418 
apply.cgi on the TRENDnet TEW-632BRP 1.010B32 router has a buffer overflow via long strings to the SOAPACTION:HNAP1 interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T20:09:53.000Z
CVE-2019-11419 
vcodec2_hls_filter in libvoipCodec_v7a.so in the WeChat application through 7.0.3 for Android allows attackers to cause a denial of service (application crash) by replacing an emoji file (under the /sdcard/tencent/MicroMsg directory) with a crafted .wxgf file. The content of the replacement must be derived from the phone's IMEI. The crash occurs upon receiving a message that contains the replaced emoji.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-14T18:03:36.000Z
CVE-2019-11426 
An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T21:35:39.000Z
CVE-2019-11427 
An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T21:35:53.000Z
CVE-2019-11428 
I, Librarian 4.10 has XSS via the export.php export_files parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-21T22:06:45.000Z
CVE-2019-11429 
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version), 0.9.8.753 (Pro) and 0.9.8.807 (Pro) is vulnerable to Reflected XSS for the "Domain" field on the "DNS Functions > "Add DNS Zone" screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-13T14:44:56.000Z
CVE-2019-11444 
An issue was discovered in Liferay Portal CE 7.1.2 GA3. An attacker can use Liferay's Groovy script console to execute OS commands. Commands can be executed via a [command].execute() call, as demonstrated by "def cmd =" in the ServerAdminPortlet_script value to group/control_panel/manage. Valid credentials for an application administrator user account are required. NOTE: The developer disputes this as a vulnerability since it is a feature for administrators to run groovy scripts and therefore not a design flaw
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T04:00:36.000Z
CVE-2019-11445 
OpenKM 6.3.2 through 6.3.7 allows an attacker to upload a malicious JSP file into the /okm:root directories and move that file to the home directory of the site, via frontend/FileUpload and admin/repository_export.jsp. This is achieved by interfering with the Filesystem path control in the admin's Export field. As a result, attackers can gain remote code execution through the application server with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T04:00:49.000Z
CVE-2019-11446 
An issue was discovered in ATutor through 2.2.4. It allows the user to run commands on the server with the teacher user privilege. The Upload Files section in the File Manager field contains an arbitrary file upload vulnerability via upload.php. The $IllegalExtensions value only lists lowercase (and thus .phP is a bypass), and omits .shtml and .phtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T04:01:09.000Z
CVE-2019-11447 
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatar_file field to index.php?mod=main&opt=personal. There is no effective control of $imgsize in /core/modules/dashboard.php. The header content of a file can be changed and the control can be bypassed for code execution. (An attacker can use the GIF header for this.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T04:01:27.000Z
CVE-2019-11448 
An issue was discovered in Zoho ManageEngine Applications Manager 11.0 through 14.0. An unauthenticated user can gain the authority of SYSTEM on the server due to a Popup_SLA.jsp sid SQL injection vulnerability. For example, the attacker can subsequently write arbitrary text to a .vbs file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T04:01:40.000Z
CVE-2019-11449 
I, Librarian 4.10 has XSS via the notes.php notes parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T13:51:18.000Z
CVE-2019-11450 
whatsns 4.0 allows index.php?question/ajaxadd.html title SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T14:12:47.000Z
CVE-2019-11451 
whatsns 4.0 allows index.php?inform/add.html qid SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T14:12:58.000Z
CVE-2019-11452 
whatsns 4.0 allows index.php?admin_category/remove.html cid[] SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T14:13:09.000Z
CVE-2019-11454 
Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash Monit before 5.25.3 allows a remote unauthenticated attacker to introduce arbitrary JavaScript via manipulation of an unsanitized user field of the Authorization header for HTTP Basic Authentication, which is mishandled during an _viewlog operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T15:05:51.000Z
CVE-2019-11455 
A buffer over-read in Util_urlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters. The attacker can also cause a denial of service (application outage).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T15:06:12.000Z
CVE-2019-11456 
Gila CMS 1.10.1 allows fm/save CSRF for executing arbitrary PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T15:33:49.000Z
CVE-2019-11457 
Multiple CSRF issues exist in MicroPyramid Django CRM 0.2.1 via /change-password-by-admin/, /api/settings/add/, /cases/create/, /change-password-by-admin/, /comment/add/, /documents/1/view/, /documents/create/, /opportunities/create/, and /login/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T14:52:31.000Z
CVE-2019-11458 
An issue was discovered in SmtpTransport in CakePHP 3.7.6. An unserialized object with modified internal properties can trigger arbitrary file overwriting upon destruction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-08T17:07:54.000Z
CVE-2019-11459 
The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T20:26:32.000Z
CVE-2019-11460 
An issue was discovered in GNOME gnome-desktop 3.26, 3.28, and 3.30 prior to 3.30.2.2, and 3.32 prior to 3.32.1.1. A compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling terminal, allowing an attacker to escape the sandbox if the thumbnailer has a controlling terminal. This is due to improper filtering of the TIOCSTI ioctl on 64-bit systems, similar to CVE-2019-10063.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T20:26:42.000Z
CVE-2019-11461 
An issue was discovered in GNOME Nautilus 3.30 prior to 3.30.6 and 3.32 prior to 3.32.1. A compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling terminal, allowing an attacker to escape the sandbox if the thumbnailer has a controlling terminal. This is due to improper filtering of the TIOCSTI ioctl on 64-bit systems, similar to CVE-2019-10063.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-22T20:26:50.000Z
CVE-2019-11463 
A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-23T02:05:47.000Z
CVE-2019-11464 
Some enterprises require that REST API endpoints include security-related headers in REST responses. Headers such as X-Frame-Options and X-Content-Type-Options are generally advisable, however some information security professionals additionally look for X-Permitted-Cross-Domain-Policies and X-XSS-Protection, which are more generally applicable to HTML endpoint, to be included too. These headers were not included in Couchbase Server 5.5.0 and 5.1.2 . They are now included in version 6.0.2 in responses from the Couchbase Server Views REST API (port 8092).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-10T16:38:19.000Z
CVE-2019-11465 
An issue was discovered in Couchbase Server 5.5.x through 5.5.3 and 6.0.0. The Memcached "connections" stat block command emits a non-redacted username. The system information submitted to Couchbase as part of a bug report included the usernames for all users currently logged into the system even if the log was redacted for privacy. This has been fixed (in 5.5.4 and 6.0.1) so that usernames are tagged properly in the logs and are hashed out when the logs are redacted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-10T16:55:49.000Z
CVE-2019-11466 
In Couchbase Server 6.0.0 and 5.5.0, the eventing service exposes system diagnostic profile via an HTTP endpoint that does not require credentials on a port earmarked for internal traffic only. This has been remedied in version 6.0.1 and now requires valid credentials to access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-10T17:02:30.000Z
CVE-2019-11467 
In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like \t, <, >, it caused buffer overrun as encoded string would be much larger than accounted for, causing indexer service to crash and restart. This has been remedied in versions 5.1.2 and 5.5.2 to ensure buffer always grows as needed for any input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-10T17:21:50.000Z
CVE-2019-11469 
Zoho ManageEngine Applications Manager 12 through 14 allows FaultTemplateOptions.jsp resourceid SQL injection. Subsequently, an unauthenticated user can gain the authority of SYSTEM on the server by uploading a malicious file via the "Execute Program Action(s)" feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-23T03:12:55.000Z
CVE-2019-11470 
The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for insufficient image data in a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-23T13:54:54.000Z
CVE-2019-11471 
libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context.h because heif_context.cc mishandles references to non-existing alpha images.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-23T13:55:06.000Z
CVE-2019-11472 
ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (divide-by-zero error) by crafting an XWD image file in which the header indicates neither LSB first nor MSB first.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-23T13:55:18.000Z
CVE-2019-11473 
coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-23T13:55:28.000Z
CVE-2019-11474 
coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating-point exception and application crash) by crafting an XWD image file, a different vulnerability than CVE-2019-11008 and CVE-2019-11009.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-23T13:55:39.000Z
CVE-2019-11476 Integer overflow in whoopsie results in out-of-bounds heap write
An integer overflow in whoopsie before versions 0.2.52.5ubuntu0.1, 0.2.62ubuntu0.1, 0.2.64ubuntu0.1, 0.2.66, results in an out-of-bounds write to a heap allocated buffer when processing large crash dumps. This results in a crash or possible code-execution in the context of the whoopsie process.
Problem types: cwe_id: CWE-190
description: CWE-190 Integer Overflow or Wraparound
Affected products: vendor: Ubuntu
product: Whoopsie
Credits: lang: en
value: Kevin Backhouse of Semmle Security Research Team
Published: 2019-08-29T14:38:46.242Z
CVE-2019-11477 Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.
Problem types: cwe_id: CWE-190
description: CWE-190 Integer Overflow or Wraparound
Affected products: vendor: Linux
product: Linux kernel
Credits: lang: en
value: Jonathan Looney from Netflix
Published: 2019-06-18T23:34:51.026Z
CVE-2019-11478 SACK can cause extensive memory use via fragmented resend queue
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.
Problem types: cwe_id: CWE-770
description: CWE-770 Allocation of Resources Without Limits or Throttling
Affected products: vendor: Linux
product: Linux kernel
Credits: lang: en
value: Jonathan Looney from Netflix
Published: 2019-06-18T23:34:51.077Z
CVE-2019-11479 
Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c2221478101ee72f5cb4654b9fc363.
Problem types: cwe_id: CWE-405
description: CWE-405 Asymmetric Resource Consumption (Amplification)
Affected products: vendor: Linux
product: Linux kernel
Credits: lang: en
value: Jonathan Looney from Netflix
Published: 2019-06-18T23:34:51.124Z
CVE-2019-11480 Ubuntu kernel snap build process could use unauthenticated sources
The pc-kernel snap build process hardcoded the --allow-insecure-repositories and --allow-unauthenticated apt options when creating the build chroot environment. This could allow an attacker who is able to perform a MITM attack between the build environment and the Ubuntu archive to install a malicious package within the build chroot. This issue affects pc-kernel versions prior to and including 2019-07-16
Problem types: cwe_id: CWE-353
description: CWE-353: Missing Support for Integrity Check
Affected products: vendor: Canonical
product: pc-kernel
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 8.4
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Sachi King
Published: 2020-04-14T02:10:13.554Z
CVE-2019-11481 Apport reads arbitrary files if ~/.config/apport/settings is a symlink
Kevin Backhouse discovered that apport would read a user-supplied configuration file with elevated privileges. By replacing the file with a symbolic link, a user could get apport to read any file on the system as root, with unknown consequences.
Problem types: description: Read user data with administrator privileges
Affected products: vendor: Canonical
product: apport
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 3.8
baseSeverity: LOW
Credits: lang: en
value: Kevin Backhouse
Published: 2020-02-08T04:50:21.892Z
CVE-2019-11482 Race condition between reading current working directory and writing a core dump
Sander Bos discovered a time of check to time of use (TOCTTOU) vulnerability in apport that allowed a user to cause core files to be written in arbitrary directories.
Problem types: description: Read user data with administrator privileges
Affected products: vendor: Canonical
product: apport
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 4.2
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L
version: 3.1
Credits: lang: en
value: Sander Bos
Published: 2020-02-08T04:50:22.302Z
CVE-2019-11483 
Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be used by a local attacker to generate a crash report for a privileged process that is readable by an unprivileged user.
Problem types: description: Read user data with administrator privileges
Affected products: vendor: Canonical
product: apport
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
version: 3.1
Credits: lang: en
value: Sander Bos
Published: 2020-02-08T04:50:22.806Z
CVE-2019-11484 Integer overflow in bson_ensure_space
Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.
Problem types: cwe_id: CWE-190
description: CWE-190 Integer Overflow or Wraparound
Affected products: vendor: Canonical
product: whoopsie
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
Credits: lang: en
value: Kevin Backhouse
Published: 2020-02-08T04:50:23.208Z
CVE-2019-11485 apport created lock file in wrong directory
Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling.
Problem types: cwe_id: CWE-412
description: CWE-412 Unrestricted Externally Accessible Lock
Affected products: vendor: Canonical
product: apport
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 3.3
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Credits: lang: en
value: Sander Bos
Published: 2020-02-08T04:50:23.604Z
CVE-2019-11486 
The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-23T22:00:24.000Z