Medium WID-SEC-2022-0517 99 CVEs

Red Hat Enterprise Linux: Mehrere Schwachstellen

Published Aug 6, 2019 · Updated Oct 18, 2026 · Revision 53 · de-DE

Vendor: amazon Vendor: Debian Vendor: Dell Vendor: F5 Vendor: gentoo Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: BIG-IP Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: openSUSE Product: PowerEdge Product: Secure Connect Gateway Platform: Linux

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 99

Critical 9.8

CVE-2018-13347

Mercurial mishandles integer addition and subtraction

mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.

mercurial mercurial mercurial Debian Ubuntu PyPI

Jul 6, 2018
Critical 9.8

CVE-2018-20060

Exposure of Sensitive Information to an Unauthorized Actor in urllib3

urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended h…

urllib3 python-urllib3 python-urllib3 Debian Ubuntu PyPI

Dec 11, 2018
Critical 9.1

CVE-2018-1000132

Mercurial Incorrect Access Control vulnerability

Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have bee…

mercurial mercurial mercurial mercurial Debian Ubuntu Alpine PyPI

Mar 14, 2018
High 8.7

CVE-2019-0160

Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privil…

edk2 edk2 Debian Ubuntu

Mar 27, 2019
High 7.8

CVE-2017-15112

keycloak-httpd-client-install Insecure Secrets

keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users.

jdennis keycloak-httpd-client-install keycloak-httpd-client-install PyPI

Jan 20, 2018
High 7.6

CVE-2018-10893

Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames…

Red Hat spice-client spice-gtk spice-gtk Debian Ubuntu

Sep 11, 2018
High 7.5

CVE-2018-13346

Mercurial Improper Input Validation vulnerability

The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004.

mercurial mercurial mercurial Debian Ubuntu PyPI

Jul 6, 2018
High 7.5

CVE-2018-18074 Public exploit

Insufficiently Protected Credentials in Requests

The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.

python-pip requests requests requests Debian Ubuntu PyPI

Oct 9, 2018
High 7.3

CVE-2018-1122 Public exploit

procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unse…

[UNKNOWN] procps-ng, procps procps procps Debian Ubuntu

May 23, 2018
High 7.2

CVE-2019-10192 EPSS 26%

A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x …

Redis Redis redis redis Debian Ubuntu Alpine

Jul 11, 2019
High 7.2

CVE-2019-10193 EPSS 23%

A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x…

Redis Redis redis redis Debian Alpine

Jul 11, 2019
Medium 6.5

CVE-2018-20096

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafte…

exiv2 PyPI

Dec 12, 2018
Medium 6.5

CVE-2018-20097

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A craft…

exiv2 exiv2 Debian PyPI

Dec 12, 2018
Medium 6.5

CVE-2018-20098

There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted…

exiv2 PyPI

Dec 12, 2018
Medium 6.5

CVE-2018-20099

There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will l…

exiv2 PyPI

Dec 12, 2018
Medium 6.1

CVE-2019-11236

Improper Neutralization of CRLF Sequences in urllib3 library for Python

In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.

urllib3 python-urllib3 python-urllib3 Debian Ubuntu PyPI

Apr 15, 2019
Medium 5.5

CVE-2017-15111

keycloak-httpd-client-install symlink attack vulnerability

keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.

jdennis keycloak-httpd-client-install keycloak-httpd-client-install PyPI

Jan 20, 2018
Medium 5.4

CVE-2018-16838

A flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by SSSD due to a too strict …

[UNKNOWN] sssd sssd sssd Debian Ubuntu

Mar 25, 2019
Medium 5.0

CVE-2019-10153

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment…

ClusterLabs fence-agents fence-agents Debian

Jul 30, 2019
Medium 4.1

CVE-2019-3811

A vulnerability was found in sssd. If a user was configured with no home directory set, sssd would return '/' (the root…

The sssd Project sssd sssd sssd Debian Ubuntu

Jan 15, 2019
Unscored —

CVE-2016-3616

The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and applica…

libjpeg-turbo libjpeg-turbo libjpeg9 Debian Ubuntu

Feb 13, 2017
Unscored —

CVE-2017-17724

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, rela…

Feb 12, 2018
Unscored —

CVE-2017-18189

In the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels tri…

sox sox sox Debian Ubuntu Alpine

Feb 15, 2018
Unscored —

CVE-2017-18233

An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RI…

exempi exempi Debian Ubuntu

Mar 15, 2018
Unscored —

CVE-2017-18234

An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service (invalid memcpy…

exempi exempi Debian Ubuntu

Mar 15, 2018
Unscored —

CVE-2017-18236

An issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSup…

exempi exempi Debian Ubuntu

Mar 15, 2018
Unscored —

CVE-2017-18238

An issue was discovered in Exempi before 2.4.4. The TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/Format…

exempi exempi Debian Ubuntu

Mar 15, 2018
Unscored —

CVE-2017-5731

Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escal…

edk2 Ubuntu

Oct 28, 2019
Unscored —

CVE-2017-5732 Rejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to a…

Oct 28, 2019
Unscored —

CVE-2017-5733 Rejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to a…

Oct 28, 2019
Unscored —

CVE-2017-5734 Rejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

Oct 28, 2019
Unscored —

CVE-2017-5735 Rejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to a…

Oct 28, 2019
Unscored —

CVE-2017-6059

Mod_auth_openidc.c in the Ping Identity OpenID Connect authentication module for Apache (aka mod_auth_openidc) before 2…

libapache2-mod-auth-openidc libapache2-mod-auth-openidc Debian Ubuntu

Apr 12, 2017
Unscored —

CVE-2017-6413

The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apa…

libapache2-mod-auth-openidc libapache2-mod-auth-openidc Debian Ubuntu

Mar 2, 2017
Unscored —

CVE-2018-0495

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can b…

openssl openssl1.0 nss libgcrypt20 Debian Ubuntu Alpine

Jun 13, 2018
Unscored —

CVE-2018-1000852

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unkn…

freerdp2 freerdp2 Debian Ubuntu

Dec 20, 2018
Unscored —

CVE-2018-1000876

binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bou…

binutils binutils Debian Ubuntu

Dec 20, 2018
Unscored —

CVE-2018-10689

blktrace (aka Block IO Tracing) 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the dev_map_…

blktrace blktrace blktrace Debian Ubuntu Azure Linux

May 3, 2018
Unscored —

CVE-2018-10772

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (…

May 7, 2018
Unscored —

CVE-2018-10958

In types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at memory allocation for an Exiv…

exiv2 exiv2 Debian Ubuntu

May 10, 2018
Unscored —

CVE-2018-10998

An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of servic…

exiv2 exiv2 Debian Ubuntu

May 12, 2018
Unscored —

CVE-2018-11037

In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote attackers to cause an informa…

exiv2 exiv2 Debian Ubuntu

May 14, 2018
Unscored —

CVE-2018-11212

An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a…

openjdk8 openjdk-9-jre openjdk-10 openjdk7 Debian Ubuntu Alpine Wolfi

May 16, 2018
Unscored —

CVE-2018-11213

An issue was discovered in libjpeg 9a. The get_text_gray_row function in rdppm.c allows remote attackers to cause a den…

libjpeg-turbo libjpeg-turbo libjpeg6b libjpeg9 Debian Ubuntu

May 16, 2018
Unscored —

CVE-2018-11214

An issue was discovered in libjpeg 9a. The get_text_rgb_row function in rdppm.c allows remote attackers to cause a deni…

libjpeg-turbo libjpeg-turbo libjpeg6b libjpeg9 Debian Ubuntu

May 16, 2018
Unscored —

CVE-2018-11813

libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.

libjpeg-turbo libjpeg-turbo libjpeg6b libjpeg-turbo Debian Ubuntu Alpine

Jun 6, 2018
Unscored —

CVE-2018-12121 EPSS 10%

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: B…

The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine

Nov 28, 2018
Unscored —

CVE-2018-12181

Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or eleva…

Extensible Firmware Interface Development Kit (EDK II) Extensible Firmware Interface Development Kit (EDK II) edk2 edk2 Debian Ubuntu

Mar 27, 2019
Unscored —

CVE-2018-12264

Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::Va…

exiv2 exiv2 Debian Ubuntu

Jun 13, 2018
Unscored —

CVE-2018-12265

Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv…

exiv2 exiv2 Debian Ubuntu

Jun 13, 2018
Unscored —

CVE-2018-12404 EPSS 44%

A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content…

Mozilla Network Security Services (NSS) nss nss Debian Ubuntu Alpine

May 2, 2019
Unscored —

CVE-2018-12641

An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustio…

binutils libiberty Ubuntu

Jun 22, 2018
Unscored —

CVE-2018-12697

A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cp…

binutils binutils libiberty Debian Ubuntu

Jun 23, 2018
Unscored —

CVE-2018-13259

An issue was discovered in zsh before 5.6. Shebang lines exceeding 64 characters were truncated, potentially leading to…

zsh zsh Debian Ubuntu

Sep 5, 2018
Unscored —

CVE-2018-14046

Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.

Jul 13, 2018
Unscored —

CVE-2018-14348

libcgroup up to and including 0.41 creates /var/log/cgred with mode 0666 regardless of the configured umask, leading to…

libcgroup libcgroup libcgroup Debian Ubuntu Azure Linux

Aug 14, 2018
Unscored —

CVE-2018-14498

get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of…

libjpeg-turbo libjpeg-turbo libjpeg-turbo Debian Ubuntu Alpine

Mar 7, 2019
Unscored —

CVE-2018-16062

dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial…

elfutils elfutils elfutils Debian Ubuntu Alpine

Aug 29, 2018
Unscored —

CVE-2018-16402

libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application cr…

elfutils elfutils elfutils Debian Ubuntu Alpine

Sep 3, 2018
Unscored —

CVE-2018-16403

libdw in elfutils 0.173 checks the end of the attributes list incorrectly in dwarf_getabbrev in dwarf_getabbrev.c and d…

elfutils elfutils elfutils Debian Ubuntu Alpine

Sep 3, 2018
Unscored —

CVE-2018-16548

An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_…

zziplib zziplib zziplib zziplib Debian Ubuntu Azure Linux Alpine

Sep 5, 2018
Unscored —

CVE-2018-17282

An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference.

Sep 20, 2018
Unscored —

CVE-2018-17336

UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing attackers to obtain sensitive…

udisks2 udisks2 Debian Ubuntu

Sep 22, 2018
Unscored —

CVE-2018-17581

CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive fun…

exiv2 exiv2 Debian Ubuntu

Sep 28, 2018
Unscored —

CVE-2018-18310

An invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl in elfutils through v0.…

elfutils elfutils Debian Ubuntu

Oct 15, 2018
Unscored —

CVE-2018-18520

An Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils through v0.174. Although eu-…

elfutils elfutils Debian Ubuntu

Oct 19, 2018
Unscored —

CVE-2018-18521

Divide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174 allow remote attackers …

elfutils elfutils Debian Ubuntu

Oct 19, 2018
Unscored —

CVE-2018-18584

In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too smal…

clamav libmspack libmspack libmspack Debian Ubuntu Alpine

Oct 23, 2018
Unscored —

CVE-2018-18585

chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second…

clamav libmspack libmspack libmspack Debian Ubuntu Alpine

Oct 23, 2018
Unscored —

CVE-2018-18915

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted inp…

Nov 3, 2018
Unscored —

CVE-2018-19044

keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintDat…

keepalived keepalived keepalived Debian Ubuntu Alpine

Nov 8, 2018
Unscored —

CVE-2018-19107

In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from…

exiv2 exiv2 Debian Ubuntu

Nov 8, 2018
Unscored —

CVE-2018-19108

In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of servic…

exiv2 exiv2 Debian Ubuntu

Nov 8, 2018
Unscored —

CVE-2018-19198

An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an out-of-bounds write via a uriComposeQuery* or u…

uriparser uriparser Debian Ubuntu

Nov 12, 2018
Unscored —

CVE-2018-19199

An issue was discovered in uriparser before 0.9.0. UriQuery.c allows an integer overflow via a uriComposeQuery* or uriC…

uriparser uriparser Debian Ubuntu

Nov 12, 2018
Unscored —

CVE-2018-19208

In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentList…

libwpd libwpd Debian Ubuntu

Nov 12, 2018
Unscored —

CVE-2018-19535

In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (applic…

exiv2 exiv2 Debian Ubuntu

Nov 26, 2018
Unscored —

CVE-2018-19607

Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer…

Nov 27, 2018
Unscored —

CVE-2018-20532

There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2…

libsolv libsolv Debian Ubuntu

Dec 28, 2018
Unscored —

CVE-2018-20533

There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv th…

libsolv libsolv Debian Ubuntu

Dec 28, 2018
Unscored —

CVE-2018-20534

There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of …

libsolv libsolv Debian Ubuntu

Dec 28, 2018
Unscored —

CVE-2018-3613

Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentiall…

Extensible Firmware Interface Development Kit (EDK II) Extensible Firmware Interface Development Kit (EDK II) edk2 Ubuntu

Mar 27, 2019
Unscored —

CVE-2018-5407 Public exploit

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attack…

openssl openssl openssl openssl1.0 Debian Ubuntu Alpine

Nov 15, 2018
Unscored —

CVE-2018-6541

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local …

zziplib zziplib Debian Ubuntu

Feb 2, 2018
Unscored —

CVE-2018-7159

The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header, allowing input such a…

The Node.js Project Node.js nodejs nodejs Debian Ubuntu Azure Linux Alpine

May 17, 2018
Unscored —

CVE-2018-7409

In unixODBC before 2.3.5, there is a buffer overflow in the unicode_to_ansi_copy() function in DriverManager/__info.c.

unixodbc unixodbc Debian Ubuntu

Feb 22, 2018
Unscored —

CVE-2018-7485

The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3.5 has strncpy arguments in the wrong order, …

Feb 26, 2018
Unscored —

CVE-2018-7730

An issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is mishandled in XMPFiles/source…

exempi exempi Debian Ubuntu

Mar 6, 2018
Unscored —

CVE-2018-8976

In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringForm…

exiv2 Debian

Mar 25, 2018
Unscored —

CVE-2018-8977

In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp allows remote attackers to cause a deni…

Mar 25, 2018
Unscored —

CVE-2018-9305

In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak,…

Apr 4, 2018
Unscored —

CVE-2019-0161

Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local a…

Extensible Firmware Interface Development Kit (EDK II) Extensible Firmware Interface Development Kit (EDK II) edk2 edk2 Debian Ubuntu

Mar 27, 2019
Unscored —

CVE-2019-7149

A heap-based buffer over-read was discovered in the function read_srclines in dwarf_getsrclines.c in libdw in elfutils …

elfutils elfutils elfutils Debian Ubuntu Alpine

Jan 29, 2019
Unscored —

CVE-2019-7150

An issue was discovered in elfutils 0.175. A segmentation fault can occur in the function elf64_xlatetom in libelf/elf3…

elfutils elfutils elfutils Debian Ubuntu Alpine

Jan 29, 2019
Unscored —

CVE-2019-7664

In elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h because of an incorrect …

elfutils elfutils Debian Alpine

Feb 9, 2019
Unscored —

CVE-2019-7665

In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in l…

elfutils elfutils elfutils Debian Ubuntu Alpine

Feb 9, 2019
Unscored —

CVE-2019-8379

An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() …

advancecomp advancecomp advancecomp Debian Ubuntu Azure Linux

Feb 17, 2019
Unscored —

CVE-2019-8383

An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function adv_png_unfilter_8…

advancecomp advancecomp Debian Ubuntu

Feb 17, 2019
Unscored —

CVE-2019-9755

An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin…

ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine

Jun 5, 2019

Revision history

2026-10-18 #53
Neue Updates von openSUSE aufgenommen
2026-08-31 #52
Neue Updates von Dell aufgenommen
2025-06-23 #51
Neue Updates von Dell aufgenommen
2024-09-02 #50
Neue Updates von Oracle Linux aufgenommen
2023-11-21 #49
Neue Updates von Oracle Linux aufgenommen
2023-02-22 #48
Neue Updates von Amazon aufgenommen
2022-11-28 #47
Neue Updates von SUSE aufgenommen
2022-10-11 #46
Neue Updates von Ubuntu aufgenommen
2022-09-22 #45
Neue Updates von Ubuntu aufgenommen
2022-08-08 #44
Neue Updates von Ubuntu aufgenommen
2022-08-01 #43
Neue Updates von SUSE aufgenommen
2022-06-30 #42
Neue Updates von Ubuntu aufgenommen
2022-05-23 #41
Neue Updates von SUSE aufgenommen
2022-04-28 #40
Neue Updates von SUSE aufgenommen
2021-10-31 #39
Neue Updates von Debian aufgenommen
2021-09-08 #38
Referenz(en) aufgenommen: USN-5067-1
2021-07-07 #37
Neue Updates von Gentoo aufgenommen
2021-04-29 #36
Neue Updates von Debian aufgenommen
2020-12-28 #35
Neue Updates von F5 aufgenommen
2020-12-16 #34
Neue Updates von SUSE aufgenommen
2020-11-30 #33
Neue Updates von Debian aufgenommen
2020-11-09 #32
Neue Updates von Red Hat aufgenommen
2020-10-18 #31
Neue Updates von SUSE aufgenommen
2020-09-22 #30
Neue Updates von SUSE aufgenommen
2020-07-28 #29
Neue Updates von Red Hat aufgenommen

References

Red Hat Security Advisory RHSA-2019:2332 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2332
Red Hat Security Advisory RHSA-2019:2336 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2336
Red Hat Security Advisory RHSA-2019:2308 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2308
Red Hat Security Advisory RHSA-2019:2285 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2285
Red Hat Security Advisory RHSA-2019:2290 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2290
Red Hat Security Advisory RHSA-2019:2280 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2280
Red Hat Security Advisory RHSA-2019:2283 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2283
Red Hat Security Advisory RHSA-2019:2272 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2272
Red Hat Security Advisory RHSA-2019:2276 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2276
Red Hat Security Advisory RHSA-2019:2258 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2258
Red Hat Security Advisory RHSA-2019:2229 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2229
Red Hat Security Advisory RHSA-2019:2237 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2237
Red Hat Security Advisory RHSA-2019:2196 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2196
Red Hat Security Advisory RHSA-2019:2197 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2197
Red Hat Security Advisory RHSA-2019:2189 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2189
Red Hat Security Advisory RHSA-2019:2177 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2177
Red Hat Security Advisory RHSA-2019:2178 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2178
Red Hat Security Advisory RHSA-2019:2162 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2162
Red Hat Security Advisory RHSA-2019:2157 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2157
Red Hat Security Advisory RHSA-2019:2137 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2137
Red Hat Security Advisory RHSA-2019:2125 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2125
Red Hat Security Advisory RHSA-2019:2126 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2126
Red Hat Security Advisory RHSA-2019:2112 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2112
Red Hat Security Advisory RHSA-2019:2101 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2101
Red Hat Security Advisory RHSA-2019:2075 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2075
Red Hat Security Advisory RHSA-2019:2049 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2049
Red Hat Security Advisory RHSA-2019:2052 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2052
Red Hat Security Advisory RHSA-2019:2047 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2047
Red Hat Security Advisory RHSA-2019:2048 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2048
Red Hat Security Advisory RHSA-2019:2035 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2035
Red Hat Security Advisory RHSA-2019:2037 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2037
Red Hat Security Advisory RHSA-2019:2017 vom 2019-08-06
https://access.redhat.com/errata/RHSA-2019:2017
Red Hat Security Advisory RHSA-2020:0471 vom 2020-02-11
https://access.redhat.com/errata/RHSA-2020:0471
CentOS Security Advisory CESA-2020:0471 vom 2020-02-11
http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-0471-Moderate-CentOS-6-spice-gtk-Security-Update-tp4645840.html
Red Hat Security Advisory RHSA-2019:2437 vom 2019-08-12
https://access.redhat.com/errata/RHSA-2019:2437
Oracle Linux Security Advisory ELSA-2019-2285 vom 2019-08-14
http://linux.oracle.com/errata/ELSA-2019-2285.html
Oracle Linux Security Advisory ELSA-2019-2052 vom 2019-08-14
http://linux.oracle.com/errata/ELSA-2019-2052.html
Oracle Linux Security Advisory ELSA-2019-2258 vom 2019-08-14
http://linux.oracle.com/errata/ELSA-2019-2258.html
Oracle Linux Security Advisory ELSA-2019-2178 vom 2019-08-14
http://linux.oracle.com/errata/ELSA-2019-2178.html
Oracle Linux Security Advisory ELSA-2019-2229 vom 2019-08-14
http://linux.oracle.com/errata/ELSA-2019-2229.html
Oracle Linux Security Advisory ELSA-2019-2177 vom 2019-08-16
http://linux.oracle.com/errata/ELSA-2019-2177.html
Oracle Linux Security Advisory ELSA-2019-2283 vom 2019-08-19
http://linux.oracle.com/errata/ELSA-2019-2283.html
Oracle Linux Security Advisory ELSA-2019-2189 vom 2019-08-21
http://linux.oracle.com/errata/ELSA-2019-2189.html
Oracle Linux Security Advisory ELSA-2019-2280 vom 2019-08-21
http://linux.oracle.com/errata/ELSA-2019-2280.html
Oracle Linux Security Advisory ELSA-2019-2332 vom 2019-08-21
http://linux.oracle.com/errata/ELSA-2019-2332.html
SUSE Security Update SUSE-SU-2019:2267-1 vom 2019-09-02
https://www.suse.com/support/update/announcement/2019/suse-su-20192267-1.html
CentOS Security Advisory CESA-2019:2101 vom 2019-09-18
http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2019-2101-Low-CentOS-7-exiv2-Security-Update-tp4645686.html
CentOS Security Advisory CESA-2019:2258 vom 2019-09-18
http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2019-2258-Moderate-CentOS-7-http-parser-Security-Update-tp4645679.html
SUSE Security Update SUSE-SU-2019:2730-1 vom 2019-10-22
https://www.suse.com/support/update/announcement/2019/suse-su-20192730-1.html
SUSE Security Update SUSE-SU-2019:2750-1 vom 2019-10-23
https://www.suse.com/support/update/announcement/2019/suse-su-20192750-1.html
Red Hat Security Advisory RHSA-2019:3338 vom 2019-11-05
https://access.redhat.com/errata/RHSA-2019:3338
Red Hat Security Advisory RHSA-2019:3651 vom 2019-11-05
https://access.redhat.com/errata/RHSA-2019:3651
Red Hat Security Advisory RHSA-2019:3575 vom 2019-11-05
https://access.redhat.com/errata/RHSA-2019:3575
Red Hat Security Advisory RHSA-2019:3583 vom 2019-11-06
https://access.redhat.com/errata/RHSA-2019:3583
Red Hat Security Advisory RHSA-2019:3590 vom 2019-11-05
https://access.redhat.com/errata/RHSA-2019:3590
Red Hat Security Advisory RHSA-2019:3345 vom 2019-11-06
https://access.redhat.com/errata/RHSA-2019:3345
Red Hat Security Advisory RHSA-2019:3497 vom 2019-11-05
https://access.redhat.com/errata/RHSA-2019:3497
Red Hat Security Advisory RHSA-2019:3335 vom 2019-11-05
https://access.redhat.com/errata/RHSA-2019:3335
Red Hat Security Advisory RHSA-2019:3705 vom 2019-11-05
https://access.redhat.com/errata/RHSA-2019:3705
AVAYA Security Advisory ASA-2019-209 vom 2019-12-22
https://downloads.avaya.com/css/P8/documents/101060434
AVAYA Security Advisory ASA-2019-205 vom 2019-12-22
https://downloads.avaya.com/css/P8/documents/101060432
Red Hat Security Advisory RHSA-2020:0595 vom 2020-02-25
https://access.redhat.com/errata/RHSA-2020:0595
SUSE Security Update SUSE-SU-2020:0555-1 vom 2020-03-02
https://www.suse.com/support/update/announcement/2020/suse-su-20200555-1.html
Red Hat Security Advisory RHSA-2020:0850 vom 2020-03-17
https://access.redhat.com/errata/RHSA-2020:0850
Red Hat Security Advisory RHSA-2020:0851 vom 2020-03-17
https://access.redhat.com/errata/RHSA-2020:0851
CentOS Security Advisory CESA-2020:0851 vom 2020-03-25
http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-0851-Moderate-CentOS-7-python-virtualenv-Security-Update-tp4645882.html
CentOS Security Advisory CESA-2020:0850 vom 2020-03-25
http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-0850-Moderate-CentOS-7-python-pip-Security-Update-tp4645865.html
Red Hat Security Advisory RHSA-2020:1265 vom 2020-04-01
https://access.redhat.com/errata/RHSA-2020:1265
SUSE Security Update SUSE-SU-2020:0921-1 vom 2020-04-04
https://www.suse.com/support/update/announcement/2020/suse-su-20200921-1.html
Red Hat Security Advisory RHSA-2020:1471 vom 2020-04-14
https://access.redhat.com/errata/RHSA-2020:1471
Red Hat Security Advisory RHSA-2020:1464 vom 2020-04-14
https://access.redhat.com/errata/RHSA-2020:1464
Red Hat Security Advisory RHSA-2020:1461 vom 2020-04-14
https://access.redhat.com/errata/RHSA-2020:1461
Red Hat Security Advisory RHSA-2020:1577 vom 2020-04-28
https://access.redhat.com/errata/RHSA-2020:1577
Red Hat Security Advisory RHSA-2020:1916 vom 2020-04-28
https://access.redhat.com/errata/RHSA-2020:1916
Red Hat Security Advisory RHSA-2020:1605 vom 2020-04-28
https://access.redhat.com/errata/RHSA-2020:1605
Red Hat Security Advisory RHSA-2020:2068 vom 2020-05-12
https://access.redhat.com/errata/RHSA-2020:2068
Red Hat Security Advisory RHSA-2020:2081 vom 2020-05-12
https://access.redhat.com/errata/RHSA-2020:2081
SUSE Security Update SUSE-SU-2020:1792-1 vom 2020-06-26
http://lists.suse.com/pipermail/sle-security-updates/2020-June/007049.html
Red Hat Security Advisory RHSA-2020:3194 vom 2020-07-28
https://access.redhat.com/errata/RHSA-2020:3194
SUSE Security Update SUSE-SU-2020:2711-1 vom 2020-09-22
http://lists.suse.com/pipermail/sle-security-updates/2020-September/007450.html