A denial-of-service vulnerability could allow an authenticated user to trigger an internal service restart via a specially crafted API request.

PrivX before 34.0 allows data exfiltration and denial of service via the REST API. This is fixed in minor versions 33.1, 32.3, 31.3, and later, and in major version 34.0 and later,

kernel: mm, kmsan: fix infinite recursion due to RCU critical section

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

kernel: xen/console: harden hvc_xen against event channel storms

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

kernel: xen/netfront: harden netfront against event channel storms

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

kernel: xen/blkfront: harden blkfront against event channel storms

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

OpenJDK: segmentation fault in ciMethodBlocks

** REJECT ** This CVE ID has been rejected by its CNA as it was not a security issue.

binutils: Excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c read_section()

Non Security Issue. See the binutils security policy for more details, https://sourceware.org/cgit/binutils-gdb/tree/binutils/SECURITY.txt

kernel: sctp: local DoS: unprivileged user can cause BUG()

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

bison: Assertion failure in src/parse-gram.c could result in DoS

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

exiv2: integer buffer overflow in getUShort fucntion leads to DoS

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-13110 Reason: This candidate is a duplicate of CVE-2019-13110. Notes: All CVE users should reference CVE-2019-13110 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

kernel: hwpoison implementation in mm/memory-failure.c leads to denial of service

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

yaml-cpp: remote dos via crafted YAML file in function SingleDocParser::HandleFlowSequence

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6285. Reason: This candidate is a duplicate of CVE-2019-6285. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2019-6285 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

libbfd: remote dos via crafted file in function aout_32_swap_std_reloc_out in aoutx.h

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-7642. Reason: This candidate is a reservation duplicate of CVE-2018-7642. Notes: All CVE users should reference CVE-2018-7642 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

binutils: Stack Exhaustion in debug_write_type in debug.c

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

python: multiple unbound readline() DoS flaws in python stdlib

Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long string, related to (1) httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; (2) ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; (3) imaplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; (4) nntplib - fixed in 2.7.6, 2.6.9, 3.3.3; (5) poplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; and (6) smtplib - not yet fixed in 2.7.x, fixed in 2.6.9, not yet fixed in 3.3.x. NOTE: this was REJECTed because it is incompatible with CNT1 "Independently Fixable" in the CVE Counting Decisions