Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

Export CSV
CVE-2019-20485

libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent

qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows attackers to cause a denial of service (API blockage).

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Redhat
Products
Debian Linux Fedora Advanced Virtualization and 2 more
CVE-2019-20479

mod_auth_openidc: Open redirect issue exists in URLs with slash and backslash

A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs with a slash and backslash at the beginning.

CVSS 3.1 · 6.1 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Fedoraproject Openidc and 2 more
Products
Debian Linux Fedora Mod Auth Openidc and 2 more
CVE-2019-20477

PyYAML: command execution through python/object/apply constructor in FullLoader

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342.

CVSS 3.1 · 9.8 Critical EPSS 5.1% KEV · Not listed
Vendors
Fedoraproject Pyyaml Redhat
Products
Fedora Pyyaml Enterprise Linux and 1 more
CVE-2019-20446

librsvg: Resource exhaustion via crafted SVG file with nested patterns

In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows exponentially.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 4 more
CVE-2019-20421

exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS

In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.

CVSS 3.1 · 7.5 High EPSS 4.3% KEV · Not listed
Vendors
Canonical Debian Exiv2 and 1 more
Products
Ubuntu Linux Debian Linux Exiv2 and 1 more
CVE-2019-20398

libyang: NULL pointer dereference in function lys_extension_instances_free()

A NULL pointer dereference is present in libyang before v1.0-r3 in the function lys_extension_instances_free() due to a copy of unresolved extensions in lys_restr_dup(). Applications that use libyang to parse untrusted input yang files may crash.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Cesnet Redhat
Products
Libyang Enterprise Linux
CVE-2019-20397

libyang: double-free in yyparse() when organization field is not terminated

A double-free is present in libyang before v1.0-r1 in the function yyparse() when an organization field is not terminated. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution.

CVSS 3.1 · 8.8 High EPSS 2.5% KEV · Not listed
Vendors
Cesnet Redhat
Products
Libyang Enterprise Linux
CVE-2019-20396

libyang: heap-based buffer over-read in function lys_type_free() due to malformed pattern

A segmentation fault is present in yyparse in libyang before v1.0-r1 due to a malformed pattern statement value during lys_parse_path parsing.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Cesnet Redhat
Products
Libyang Enterprise Linux
CVE-2019-20395

libyang: stack-overflow when parsing yang files with self-referential union types

A stack consumption issue is present in libyang before v1.0-r1 due to the self-referential union type containing leafrefs. Applications that use libyang to parse untrusted input yang files may crash.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Cesnet Redhat
Products
Libyang Enterprise Linux
CVE-2019-20394

libyang: double-free in yyparse() when a type statement is used in a notification statement

A double-free is present in libyang before v1.0-r3 in the function yyparse() when a type statement in used in a notification statement. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution.

CVSS 3.1 · 8.8 High EPSS 2.8% KEV · Not listed
Vendors
Cesnet Redhat
Products
Libyang Enterprise Linux
CVE-2019-20393

libyang: double-free in function yyparse() when empty description is used

A double-free is present in libyang before v1.0-r1 in the function yyparse() when an empty description is used. Applications that use libyang to parse untrusted input yang files may be vulnerable to this flaw, which would cause a crash or potentially code execution.

CVSS 3.1 · 8.8 High EPSS 2.8% KEV · Not listed
Vendors
Cesnet Redhat
Products
Libyang Enterprise Linux
CVE-2019-20392

libyang: invalid memory access when if-feature statement is used inside a list key node

An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolve_feature_value() when an if-feature statement is used inside a list key node, and the feature used is not defined. Applications that use libyang to parse untrusted input yang files may crash.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Cesnet Redhat
Products
Libyang Enterprise Linux
CVE-2019-20391

libyang: invalid memory access in resolve_feature_value() when a if-feature is used inside a bit

An invalid memory access flaw is present in libyang before v1.0-r3 in the function resolve_feature_value() when an if-feature statement is used inside a bit. Applications that use libyang to parse untrusted input yang files may crash.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Cesnet Redhat
Products
Libyang Enterprise Linux
CVE-2019-20387

libsolv: out-of-bounds read in repodata_schema2id in repodata.c

repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Debian Opensuse Redhat
Products
Debian Linux Libsolv Enterprise Linux
CVE-2019-20382

QEMU: vnc: memory leakage upon disconnect

QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Opensuse and 2 more
Products
Ubuntu Linux Debian Linux Leap and 4 more
CVE-2019-20372

nginx: HTTP request smuggling in configurations with URL redirect used as error_page

NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

CVSS 3.1 · 5.3 Medium EPSS 15.0% KEV · Not listed
Vendors
Apple Canonical F5 and 3 more
Products
Xcode Ubuntu Linux Nginx and 5 more
CVE-2019-20149

nodejs-kind-of: ctorName in index.js allows external user input to overwrite certain internal attributes

ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Kind-of Project Redhat
Products
Kind-of Acm
CVE-2019-20054

kernel: Null pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c

In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Netapp Redhat
Products
Linux Kernel 8300 8300 Firmware and 16 more
CVE-2019-20044

zsh: insecure dropping of privileges when unsetting PRIVILEGED option

In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 3 more
Products
Ipados Iphone Os Mac Os X and 9 more