|
222741
|
9.8 |
CRITICAL
Network
|
freebsd netapp
|
freebsd clustered_data_ontap
|
In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE before 11.3-RELEASE-p8, incomplete packet data validation may result in memory…
|
CWE-20 CWE-416
Improper Input Validation Use After Free
|
CVE-2019-15874
|
2024-11-21 13:29 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222742
|
5.5 |
MEDIUM
Local
|
freebsd
|
freebsd
|
In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller has sufficient privi…
|
CWE-862
Missing Authorization
|
CVE-2019-15877
|
2024-11-21 13:29 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222743
|
5.5 |
MEDIUM
Local
|
freebsd
|
freebsd
|
In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, driver specific ioctl command handlers in the oce netw…
|
CWE-862
Missing Authorization
|
CVE-2019-15876
|
2024-11-21 13:29 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222744
|
3.3 |
LOW
Local
|
apport_project canonical
|
apport ubuntu_linux
|
Apport reads and writes information on a crashed process to /proc/pid with elevated privileges. Apport then determines which user the crashed process belongs to by reading /proc/pid through get_pid_i…
|
CWE-269
Improper Privilege Management
|
CVE-2019-15790
|
2024-11-21 13:29 |
2020-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222745
|
6.7 |
MEDIUM
Local
|
linux canonical
|
linux_kernel ubuntu_linux
|
Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the or…
|
CWE-672
Operation on a Resource after Expiration or Release
|
CVE-2019-15794
|
2024-11-21 13:29 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222746
|
8.8 |
HIGH
Local
|
linux canonical
|
linux_kernel ubuntu_linux
|
In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing operations in the l…
|
CWE-276
Incorrect Default Permissions
|
CVE-2019-15793
|
2024-11-21 13:29 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222747
|
7.8 |
HIGH
Local
|
linux canonical
|
linux_kernel ubuntu_linux
|
In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resu…
|
CWE-843
Type Confusion
|
CVE-2019-15792
|
2024-11-21 13:29 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222748
|
7.8 |
HIGH
Local
|
linux canonical
|
linux_kernel ubuntu_linux
|
In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() installs an fd referencing a file from the lower filesystem wit…
|
CWE-191
Integer Underflow (Wrap or Wraparound)
|
CVE-2019-15791
|
2024-11-21 13:29 |
2020-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222749
|
7.8 |
HIGH
Local
|
canonical
|
microk8s
|
Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to the host by provisioning a privileged container. Fixed in MicroK8s 1.15.3.
|
NVD-CWE-noinfo
|
CVE-2019-15789
|
2024-11-21 13:29 |
2020-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222750
|
4.7 |
MEDIUM
Network
|
ubuntu debian
|
python-apt
|
Python-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py or in `_fetch_archives()` of apt/cache.py in version 1.9.3ubuntu2 and earlier.…
|
CWE-347
Improper Verification of Cryptographic Signature
|
CVE-2019-15796
|
2024-11-21 13:29 |
2020-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|