Export limit exceeded: 425865 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,351

Export CSV
CVE-2019-9512

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.

CVSS 3.1 · 7.5 High EPSS 83.4% KEV · Not listed
Vendors
Apache Apple Canonical and 3 more
Products
Traffic Server Mac Os X Swiftnio and 21 more
CVE-2019-9506

Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.

CVSS 3.1 · 8.1 High EPSS 2.9% KEV · Not listed
Vendors
Apple Blackberry Canonical and 5 more
Products
Iphone Os Mac Os X Tvos and 277 more
CVE-2019-9453

kernel: out of bounds read in F2FS touch driver leads to local information disclosure

In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Google
Products
Ubuntu Linux Android
CVE-2019-9445

kernel: out of bounds read due to missing bounds check in F2FS driver leads to local information disclosure

In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Google
Products
Ubuntu Linux Debian Linux Android
CVE-2019-9433

libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354

CVSS 3.1 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2019-9371

libvpx: Resource exhaustion after memory leak in mkvparser.cc

In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254

CVSS 3.1 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2019-9325

libvpx: Out-of-bounds read in read in decoder_peek_si_internal() in vp9/vp9_dx_iface.c

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112001302

CVSS 3.1 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2019-9278

libexif: out of bounds write in exif-data.c

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112537774

CVSS 3.1 · 8.8 High EPSS 4.1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2019-9232

libvpx: Out of bounds read in vp8_norm table

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483

CVSS 3.1 · 7.5 High EPSS 4.9% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2019-9213

kernel: lack of check for mmap minimum address in expand_downwards in mm/mmap.c leads to NULL pointer dereferences exploit on non-SMAP platforms

In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.

CVSS 3.1 · 5.5 Medium EPSS 5.7% KEV · Not listed
Vendors
Canonical Debian Linux and 2 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 2 more
CVE-2019-9210

advancecomp: integer overflow in png_compress in pngex.cc

In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is also a heap-based buffer over-read.)

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Advancemame Canonical Debian and 2 more
Products
Advancecomp Ubuntu Linux Debian Linux and 2 more
CVE-2019-9209

wireshark: Stack-based off-by-one buffer overflow in dissect_ber_GeneralizedTime

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash. This was addressed in epan/dissectors/packet-ber.c by preventing a buffer overflow associated with excessive digits in time values.

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Debian Opensuse and 1 more
Products
Ubuntu Linux Debian Linux Leap and 1 more
CVE-2019-9200

poppler: heap-based buffer overflow in function ImageStream::getLine() in Stream.cc

A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.

CVSS 3.0 · 8.8 High EPSS 3.5% KEV · Not listed
Vendors
Canonical Debian Freedesktop and 1 more
Products
Ubuntu Linux Debian Linux Poppler and 1 more
CVE-2019-9162

kernel: out-of-bounds read/write in et/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module

In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length checks (aka an array index error), making out-of-bounds read and write operations possible, leading to an OOPS or local privilege escalation. This affects snmp_version and snmp_helper.

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Canonical Linux Netapp
Products
Ubuntu Linux Linux Kernel Cn1610 and 4 more
CVE-2019-9075

binutils: heap-based buffer overflow in function _bfd_archive_64_bit_slurp_armap in archive64.c

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.

CVSS 3.1 · 7.8 High EPSS 1.7% KEV · Not listed
Vendors
Canonical F5 Gnu and 1 more
Products
Ubuntu Linux Big-ip Access Policy Manager Big-ip Advanced Firewall Manager and 15 more
CVE-2019-9074

binutils: out-of-bound read in function bfd_getl32 in libbfd.c

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when called from pex64_get_runtime_function in pei-x86_64.c.

CVSS 3.1 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Gnu Netapp
Products
Ubuntu Linux Binutils Hci Management Node and 1 more
CVE-2019-9073

binutils: excessive memory allocation in function _bfd_elf_slurp_version_tables in elf.c

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Canonical Gnu Netapp
Products
Ubuntu Linux Binutils Hci Management Node and 1 more
CVE-2019-9071

binutils: stack consumption in function d_count_templates_scopes in cp-demangle.c

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_count_templates_scopes in cp-demangle.c after many recursive calls.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Gnu Netapp
Products
Ubuntu Linux Binutils Hci Management Node and 1 more
CVE-2019-9070

binutils: heap-based buffer over-read in function d_expression_1 in cp-demangle.c

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls.

CVSS 3.1 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
Canonical F5 Gnu and 1 more
Products
Ubuntu Linux Traffix Signaling Delivery Controller Binutils and 1 more