29 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2019-1010319	908		2019-07-11	2021-02-09	4.3	None	Remote	Medium	Not required	None	None	Partial
WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig (wave64.c:211). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fe.
2	CVE-2019-1010317	908		2019-07-11	2021-01-15	4.3	None	Remote	Medium	Not required	None	None	Partial
WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig (caff.c:486). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b.
3	CVE-2019-1010305	119	Overflow	2019-07-15	2021-11-30	4.3	None	Remote	Medium	Not required	Partial	None	None
libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() in libmspack(file libmspack/mspack/chmd.c). The attack vector is: the victim must open a specially crafted chm file. The fixed version is: after commit 2f084136cfe0d05e5bf5703f3e83c6d955234b4d.
4	CVE-2019-1010301	787	DoS Overflow	2019-07-15	2022-04-26	4.3	None	Remote	Medium	Not required	None	None	Partial
jhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is: gpsinfo.c Line 151 ProcessGpsInfo(). The attack vector is: Open a specially crafted JPEG file.
5	CVE-2019-1010238	787	Exec Code Overflow	2019-07-19	2022-04-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize.
6	CVE-2019-1010228	787	DoS Exec Code Overflow	2019-07-22	2022-04-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
OFFIS.de DCMTK 3.6.3 and below is affected by: Buffer Overflow. The impact is: Possible code execution and confirmed Denial of Service. The component is: DcmRLEDecoder::decompress() (file dcrledec.h, line 122). The attack vector is: Many scenarios of DICOM file processing (e.g. DICOM to image conversion). The fixed version is: 3.6.4, after commit 40917614e.
7	CVE-2019-1010057	787	DoS Exec Code Overflow	2019-07-16	2022-05-03	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
nfdump 1.6.16 and earlier is affected by: Buffer Overflow. The impact is: The impact could range from a denial of service to local code execution. The component is: nfx.c:546, nffile_inline.c:83, minilzo.c (redistributed). The attack vector is: nfdump must read and process a specially crafted file. The fixed version is: after commit 9f0fe9563366f62a71d34c92229da3432ec5cf0e.
8	CVE-2019-1000020	835		2019-02-04	2020-08-24	4.3	None	Remote	Medium	Not required	None	None	Partial
libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0 onwards) contains a CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660 file.
9	CVE-2019-1000019	125	DoS	2019-02-04	2019-11-06	4.3	None	Remote	Medium	Not required	None	None	Partial
libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression, archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This attack appears to be exploitable via the victim opening a specially crafted 7zip file.
10	CVE-2019-1000018	77	Exec Code	2019-02-04	2021-05-28	4.6	None	Local	Low	Not required	Partial	Partial	Partial
rssh version 2.3.4 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in allowscp permission that can result in Local command execution. This attack appear to be exploitable via An authorized SSH user with the allowscp permission.
11	CVE-2019-19010	94		2019-11-16	2020-08-24	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Eval injection in the Math plugin of Limnoria (before 2019.11.09) and Supybot (through 2018-05-09) allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands.
12	CVE-2019-18218	787	Overflow	2019-10-21	2021-09-14	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).
13	CVE-2019-17055	862		2019-10-01	2022-03-31	2.1	None	Local	Low	Not required	None	Partial	None
base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.
14	CVE-2019-16928	787	Exec Code Overflow	2019-09-27	2022-03-31	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string_vformat in string.c involving a long EHLO command.
15	CVE-2019-16910			2019-09-26	2022-04-18	2.6	None	Remote	High	Not required	Partial	None	None
Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)
16	CVE-2019-16884	863	Bypass	2019-09-25	2022-04-06	5.0	None	Remote	Low	Not required	None	Partial	None
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.
17	CVE-2019-16276	444		2019-09-30	2021-03-22	5.0	None	Remote	Low	Not required	None	Partial	None
Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.
18	CVE-2019-16237	346		2019-09-11	2020-09-14	5.0	None	Remote	Low	Not required	None	Partial	None
Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313_message_archive_management.vala.
19	CVE-2019-16236	862		2019-09-11	2020-09-14	5.0	None	Remote	Low	Not required	None	Partial	None
Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala.
20	CVE-2019-16235	346		2019-09-11	2020-09-14	5.0	None	Remote	Low	Not required	None	Partial	None
Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280_message_carbons.vala.
21	CVE-2019-16159	787	Overflow	2019-09-09	2022-04-18	5.0	None	Remote	Low	Not required	None	None	Partial
BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow. The BGP daemon's support for RFC 8203 administrative shutdown communication messages included an incorrect logical expression when checking the validity of an input message. Sending a shutdown communication with a sufficient message length causes a four-byte overflow to occur while processing the message, where two of the overflow bytes are attacker-controlled and two are fixed.
22	CVE-2019-15718			2019-09-04	2022-02-20	3.6	None	Local	Low	Not required	Partial	Partial	None
In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.
23	CVE-2019-15538	400		2019-08-25	2021-06-02	7.8	None	Remote	Low	Not required	None	None	Complete
An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.
24	CVE-2019-15531	125		2019-08-23	2022-03-31	4.3	None	Remote	Medium	Not required	None	None	Partial
GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.
25	CVE-2019-15166	120		2019-10-03	2022-04-13	5.0	None	Remote	Low	Not required	None	None	Partial
lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
26	CVE-2019-15165	770		2019-10-03	2022-04-08	5.0	None	Remote	Low	Not required	None	Partial	None
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
27	CVE-2019-15145	125		2019-08-18	2022-03-29	4.3	None	Remote	Medium	Not required	None	None	Partial
DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h because of a missing zero-bytes check in libdjvu/GBitmap.h.
28	CVE-2019-15144	674		2019-08-18	2022-03-29	4.3	None	Remote	Medium	Not required	None	None	Partial
In DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate<TYPE>::sort) allows attackers to cause a denial-of-service (application crash due to an Uncontrolled Recursion) by crafting a PBM image file that is mishandled in libdjvu/GContainer.h.
29	CVE-2019-15143	835		2019-08-18	2022-03-29	4.3	None	Remote	Medium	Not required	None	None	Partial
In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhaustion caused by a GBitmap::read_rle_raw infinite loop) by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp.
30	CVE-2019-15142	125		2019-08-18	2022-03-29	4.3	None	Remote	Medium	Not required	None	None	Partial
In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read) by crafting a DJVU file.
31	CVE-2019-14869	732	Exec Code Bypass	2019-11-15	2020-10-09	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.
32	CVE-2019-14847	476	DoS	2019-11-06	2021-05-29	4.0	None	Remote	Low	???	None	None	Partial
A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue.
33	CVE-2019-14844			2019-09-26	2022-03-25	5.0	None	Remote	Low	Not required	None	None	Partial
A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote unauthenticated user could use this flaw to crash the KDC.
34	CVE-2019-14835	120	Overflow	2019-09-17	2021-06-02	7.2	None	Local	Low	Not required	Complete	Complete	Complete
A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
35	CVE-2019-14833	521		2019-11-06	2021-05-29	4.9	None	Remote	Medium	???	Partial	Partial	None
A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks.
36	CVE-2019-14821	787	DoS	2019-09-19	2021-06-02	7.2	None	Local	Low	Not required	Complete	Complete	Complete
An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system.
37	CVE-2019-14817	863	Exec Code Bypass	2019-09-03	2020-10-16	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
38	CVE-2019-14813	863	Exec Code Bypass	2019-09-06	2020-10-16	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
39	CVE-2019-14811	863	Exec Code Bypass	2019-09-03	2020-10-16	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
40	CVE-2019-14463	125		2019-07-31	2021-11-23	6.4	None	Remote	Low	Not required	Partial	None	Partial
An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUS_FC_WRITE_MULTIPLE_REGISTERS case, aka VD-1301.
41	CVE-2019-14462	125		2019-07-31	2021-11-23	6.4	None	Remote	Low	Not required	Partial	None	Partial
An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUS_FC_WRITE_MULTIPLE_COILS case, aka VD-1302.
42	CVE-2019-14379	915	Exec Code	2019-07-29	2022-04-22	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.
43	CVE-2019-14287	755	Bypass	2019-10-17	2022-04-18	9.0	None	Remote	Low	???	Complete	Complete	Complete
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.
44	CVE-2019-13619	119	Overflow	2019-07-17	2021-02-10	5.0	None	Remote	Low	Not required	None	None	Partial
In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments.
45	CVE-2019-13616	125		2019-07-16	2021-11-30	5.8	None	Remote	Medium	Not required	Partial	None	Partial
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
46	CVE-2019-13272	269		2019-07-17	2021-11-28	7.2	None	Local	Low	Not required	Complete	Complete	Complete
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.
47	CVE-2019-13225	476	DoS	2019-07-10	2019-12-16	4.3	None	Remote	Medium	Not required	None	None	Partial
A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust.
48	CVE-2019-13115	125	DoS Overflow	2019-07-16	2022-04-05	5.8	None	Remote	Medium	Not required	Partial	None	Partial
In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855.
49	CVE-2019-13050	295	DoS	2019-06-29	2021-06-29	5.0	None	Remote	Low	Not required	None	None	Partial
Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.
50	CVE-2019-12854		DoS	2019-08-15	2022-01-01	5.0	None	Remote	Low	Not required	None	None	Partial
Due to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated memory. On systems with memory access protections, this can cause the CGI process to terminate unexpectedly, resulting in a denial of service for all clients using it.

Total number of vulnerabilities : 266 Page : 1 (This Page)2 3 4 5 6