Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

Export CSV
CVE-2019-25036

unbound: assertion failure and denial of service in synth_cname

Unbound before 1.9.5 allows an assertion failure and denial of service in synth_cname. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

CVSS 3.1 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Debian Nlnetlabs Redhat
Products
Debian Linux Unbound Enterprise Linux and 1 more
CVE-2019-25035

unbound: out-of-bounds write in sldns_bget_token_par

Unbound before 1.9.5 allows an out-of-bounds write in sldns_bget_token_par. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Debian Nlnetlabs Redhat
Products
Debian Linux Unbound Enterprise Linux and 1 more
CVE-2019-25034

unbound: integer overflow in sldns_str2wire_dname_buf_origin can lead to an out-of-bounds write

Unbound before 1.9.5 allows an integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Debian Nlnetlabs Redhat
Products
Debian Linux Unbound Enterprise Linux and 1 more
CVE-2019-25033

unbound: integer overflow in the regional allocator via the ALIGN_UP macro

Unbound before 1.9.5 allows an integer overflow in the regional allocator via the ALIGN_UP macro. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Debian Nlnetlabs Redhat
Products
Debian Linux Unbound Enterprise Linux and 1 more
CVE-2019-25032

unbound: integer overflow in the regional allocator via regional_alloc

Unbound before 1.9.5 allows an integer overflow in the regional allocator via regional_alloc. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, a running Unbound installation cannot be remotely or locally exploited

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Debian Nlnetlabs Redhat
Products
Debian Linux Unbound Enterprise Linux and 1 more
CVE-2019-25025

rubygem-activerecord-session_store: hijack sessions by using timing attacks targeting the session id

The activerecord-session_store (aka Active Record Session Store) component through 1.1.3 for Ruby on Rails does not use a constant-time approach when delivering information about whether a guessed session ID is valid. Consequently, remote attackers can leverage timing discrepancies to achieve a correct guess in a relatively short amount of time. This is a related issue to CVE-2019-16782.

CVSS 3.1 · 5.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Redhat Rubyonrails
Products
Satellite Active Record Session Store
CVE-2019-25014

istio-pilot: requests to debug api can result in panic

A NULL pointer dereference was found in pkg/proxy/envoy/v2/debug.go getResourceVersion in Istio pilot before 1.5.0-alpha.0. If a particular HTTP GET request is made to the pilot API endpoint, it is possible to cause the Go runtime to panic (resulting in a denial of service to the istio-pilot application).

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Istio Redhat
Products
Istio Openshift Service Mesh Service Mesh
CVE-2019-20934

kernel: use-after-free in show_numa_stats function

An issue was discovered in the Linux kernel before 5.2.6. On NUMA systems, the Linux fair scheduler has a use-after-free in show_numa_stats() because NUMA fault statistics are inappropriately freed, aka CID-16d51a590a8c.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Aus and 3 more
CVE-2019-20922

nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS

Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop while processing crafted templates. This may allow attackers to exhaust system resources.

CVSS 3.1 · 7.5 High EPSS 3.7% KEV · Not listed
Vendors
Handlebarsjs Redhat
Products
Handlebars Jboss Enterprise Bpms Platform Openshift and 2 more
CVE-2019-20916

python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py

The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.

CVSS 3.1 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Debian Opensuse Oracle and 2 more
Products
Debian Linux Leap Communications Cloud Native Core Network Function Cloud Native Environment and 4 more
CVE-2019-20908

kernel: lockdown: bypass through ACPI write via efivar_ssdt

An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Opensuse and 1 more
Products
Ubuntu Linux Linux Kernel Leap and 3 more
CVE-2019-20892

net-snmp: double free in usm_free_usmStateReference function in snmplib/snmpusm.c via an SNMPv3 GetBulk request

net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release.

CVSS 3.1 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Net-snmp Oracle Redhat
Products
Net-snmp Zfs Storage Appliance Kit Enterprise Linux
CVE-2019-20812

kernel: af_packet: TPACKET_V3: invalid timer timeout on error

An issue was discovered in the Linux kernel before 5.4.7. The prb_calc_retire_blk_tmo() function in net/packet/af_packet.c can result in a denial of service (CPU consumption and soft lockup) in a certain failure case involving TPACKET_V3, aka CID-b43d1f9f7067.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2019-20811

kernel: net-sysfs: *_queue_add_kobject refcount issue

An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 2 more
CVE-2019-20807

vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode

In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Python, Ruby, or Lua).

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Mac Os X Ubuntu Linux Debian Linux and 5 more
CVE-2019-20792

opensc: Double free in coolkey_free_private_data in libopensc/card-coolkey.c

OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Opensc Project Redhat
Products
Opensc Enterprise Linux
CVE-2019-20788

libvncserver: integer overflow and heap-based buffer overflow in libvncclient/cursor.c in HandleCursorShape function

libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may overlap CVE-2019-15690.

CVSS 3.1 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors
Canonical Debian Libvnc Project and 2 more
Products
Ubuntu Linux Debian Linux Libvncserver and 14 more
CVE-2019-20637

varnish: not clearing pointer between two client requests leads to information disclosure

An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does not clear a pointer between the handling of one client request and the next request within the same connection. This sometimes causes information to be disclosed from the connection workspace, such as data structures associated with previous requests within this connection or VCL-related temporary headers.

CVSS 3.1 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Opensuse Redhat Varnish-cache and 1 more
Products
Backports Sle Leap Enterprise Linux and 2 more
CVE-2019-20636

kernel: out-of-bounds write via crafted keycode table

In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Netapp Redhat
Products
Linux Kernel Cloud Backup Fas 8300 and 21 more