Week 25, 2019

17–23 June 2019

New CVEs: 299
Critical: 8
High: 24
Newly exploited: 0
Advisories: 120
Malicious pkgs: 0

Newly exploited 0

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

No newly exploited vulnerabilities were reported this week.

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2019-2729 Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6…
Oracle · WebLogic Server

EPSS 89%
Critical 9.8
CVE-2019-12900 out-of-bounds write when there are many bzip2 selectors
EPSS 8%
Critical 9.8
CVE-2018-15747 glot-code-runner RCE
EPSS 3.6%
Critical 10.0
CVE-2019-5016 An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least …
Talos · KCodes

EPSS 3.6%
Critical 9.8
CVE-2018-15890 Deserialization of Untrusted Data in EthereumJ
EPSS 2.9%
Critical 9.8
CVE-2016-7404 Openstack Magnum Unsafe Credential Handling
EPSS 1.9%
Critical 9.3
CVE-2019-1848 Cisco DNA Center Authentication Bypass Vulnerability
Cisco · Cisco Digital Network Architecture Center (DNA Center)
Critical
GHSA-28xh-wpgr-7fm8 Command Injection in open

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

High 7.5
CVE-2019-11477 Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs
Linux · linux_kernel

EPSS 99%
Medium 5.3
CVE-2019-11478 SACK can cause extensive memory use via fragmented resend queue
Linux · linux_kernel

EPSS 94%
Medium 5.3
CVE-2019-11479 Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly m…
Linux · linux_kernel

EPSS 91%
Unscored
CVE-2019-11409 app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation th…
EPSS 87%
High 7.5
CVE-2019-10072 Improper Locking in Apache Tomcat
EPSS 73%
Unscored
CVE-2019-12181 A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.
EPSS 65%
Unscored
CVE-2018-18852 Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-interface PING feature's use of Save.cgi …
EPSS 64%
Unscored
CVE-2018-20470 An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnerability exists in the web reports module.…
EPSS 46%

Advisories

SUSE-SU-2019:1683-1 Security update for MozillaThunderbird 6 CVEs
USN-4030-1 web2py vulnerabilities 5 CVEs
SUSE-SU-2019:1684-1 Security update for MozillaFirefox 1 CVEs
SUSE-SU-2019:1682-1 Security update for MozillaFirefox 1 CVEs
SCA-2019-0001 MSC800 affected by hard-coded credentials vulnerability 1 CVEs