The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a database and tools to fix them.

Computer vulnerabilities of RSA Authentication Manager

threat announce CVE-2019-13631

Linux kernel: buffer overflow via parse_hid_report_descriptor

Synthesis of the vulnerability

An attacker can trigger a buffer overflow via parse_hid_report_descriptor() of the Linux kernel, in order to trigger a denial of service, and possibly to run code.
Severity: 1/4.
Creation date: 26/07/2019.
Identifiers: CERTFR-2019-AVI-376, CERTFR-2019-AVI-381, CERTFR-2019-AVI-392, CERTFR-2019-AVI-417, CERTFR-2019-AVI-418, CERTFR-2019-AVI-419, CERTFR-2019-AVI-441, CERTFR-2019-AVI-458, CERTFR-2019-AVI-478, CERTFR-2019-AVI-482, CVE-2019-13631, DLA-1884-1, DLA-1885-1, DSA-2019-148, DSA-2019-149, DSA-4495-1, DSA-4497-1, FEDORA-2019-3dbfaeac73, FEDORA-2019-9d3fe6fd5b, openSUSE-SU-2019:1923-1, openSUSE-SU-2019:1924-1, RHBUG-1731000, SSA:2019-226-01, SUSE-SU-2019:14157-1, SUSE-SU-2019:2068-1, SUSE-SU-2019:2069-1, SUSE-SU-2019:2070-1, SUSE-SU-2019:2071-1, SUSE-SU-2019:2072-1, SUSE-SU-2019:2073-1, SUSE-SU-2019:2262-1, SUSE-SU-2019:2263-1, SUSE-SU-2019:2299-1, SUSE-SU-2019:2430-1, SUSE-SU-2019:2450-1, USN-4115-1, USN-4115-2, USN-4118-1, USN-4145-1, USN-4147-1, VIGILANCE-VUL-29889.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can trigger a buffer overflow via parse_hid_report_descriptor() of the Linux kernel, in order to trigger a denial of service, and possibly to run code.
Full Vigil@nce bulletin... (Free trial)

computer threat CVE-2009-5155

glibc: assertion error via parse_reg_exp

Synthesis of the vulnerability

An attacker can force an assertion error via parse_reg_exp() of glibc, in order to trigger a denial of service.
Severity: 2/4.
Creation date: 18/07/2019.
Identifiers: CVE-2009-5155, DSA-2019-148, DSA-2019-149, K64119434, SUSE-SU-2019:1877-1, SUSE-SU-2019:1958-1, SUSE-SU-2019:1958-2, VIGILANCE-VUL-29823.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can force an assertion error via parse_reg_exp() of glibc, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial)

weakness CVE-2018-20836

Linux kernel: use after free via smp_task_timedout

Synthesis of the vulnerability

An attacker can force the usage of a freed memory area via smp_task_timedout() of the Linux kernel, in order to trigger a denial of service, and possibly to run code.
Severity: 2/4.
Creation date: 12/07/2019.
Identifiers: CERTFR-2019-AVI-330, CERTFR-2019-AVI-337, CERTFR-2019-AVI-346, CERTFR-2019-AVI-354, CERTFR-2019-AVI-381, CERTFR-2019-AVI-392, CERTFR-2019-AVI-458, CVE-2018-20836, DLA-1884-1, DLA-1885-1, DSA-2019-133, DSA-4495-1, DSA-4497-1, openSUSE-SU-2019:1716-1, openSUSE-SU-2019:1757-1, SUSE-SU-2019:14127-1, SUSE-SU-2019:1823-1, SUSE-SU-2019:1823-2, SUSE-SU-2019:1851-1, SUSE-SU-2019:1852-1, SUSE-SU-2019:1854-1, SUSE-SU-2019:1855-1, SUSE-SU-2019:1870-1, SUSE-SU-2019:2430-1, SUSE-SU-2019:2450-1, USN-4076-1, VIGILANCE-VUL-29763.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can force the usage of a freed memory area via smp_task_timedout() of the Linux kernel, in order to trigger a denial of service, and possibly to run code.
Full Vigil@nce bulletin... (Free trial)

computer weakness bulletin CVE-2019-10639

Linux kernel: information disclosure via net_hash_mix

Synthesis of the vulnerability

An attacker can bypass access restrictions to data via net_hash_mix() of the Linux kernel, in order to obtain sensitive information.
Severity: 2/4.
Creation date: 08/07/2019.
Identifiers: CERTFR-2019-AVI-330, CERTFR-2019-AVI-337, CERTFR-2019-AVI-392, CERTFR-2019-AVI-419, CERTFR-2019-AVI-441, CERTFR-2019-AVI-458, CVE-2019-10639, DLA-1862-1, DLA-1885-1, DSA-2019-133, DSA-4497-1, K32804955, openSUSE-SU-2019:1716-1, openSUSE-SU-2019:1757-1, SUSE-SU-2019:1823-1, SUSE-SU-2019:1823-2, SUSE-SU-2019:1851-1, SUSE-SU-2019:1852-1, SUSE-SU-2019:1854-1, SUSE-SU-2019:1855-1, SUSE-SU-2019:2430-1, SUSE-SU-2019:2450-1, USN-4115-1, USN-4115-2, USN-4118-1, VIGILANCE-VUL-29705.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can bypass access restrictions to data via net_hash_mix() of the Linux kernel, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial)

computer vulnerability bulletin CVE-2019-10638

Linux kernel: information disclosure via IP ID Tracking

Synthesis of the vulnerability

An attacker can bypass access restrictions to data via IP ID Tracking of the Linux kernel, in order to obtain sensitive information.
Severity: 2/4.
Creation date: 08/07/2019.
Identifiers: CERTFR-2019-AVI-330, CERTFR-2019-AVI-337, CERTFR-2019-AVI-381, CERTFR-2019-AVI-392, CERTFR-2019-AVI-419, CERTFR-2019-AVI-441, CERTFR-2019-AVI-458, CVE-2019-10638, DLA-1884-1, DLA-1885-1, DSA-2019-133, DSA-4495-1, DSA-4497-1, openSUSE-SU-2019:1716-1, openSUSE-SU-2019:1757-1, RHSA-2019:3309-01, RHSA-2019:3517-01, SSA:2019-311-01, SUSE-SU-2019:1823-1, SUSE-SU-2019:1823-2, SUSE-SU-2019:1851-1, SUSE-SU-2019:1852-1, SUSE-SU-2019:1854-1, SUSE-SU-2019:1855-1, SUSE-SU-2019:2430-1, SUSE-SU-2019:2450-1, USN-4114-1, USN-4115-1, USN-4115-2, USN-4116-1, USN-4117-1, USN-4118-1, VIGILANCE-VUL-29704.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can bypass access restrictions to data via IP ID Tracking of the Linux kernel, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial)

threat announce CVE-2019-8457

SQLite: out-of-bounds memory reading via rtreenode

Synthesis of the vulnerability

An attacker can force a read at an invalid address via rtreenode() of SQLite, in order to trigger a denial of service, or to obtain sensitive information.
Severity: 2/4.
Creation date: 03/06/2019.
Identifiers: CVE-2019-8457, DSA-2019-133, FEDORA-2019-02b81266b7, FEDORA-2019-3377813d18, openSUSE-SU-2019:1645-1, SUSE-SU-2019:14083-1, SUSE-SU-2019:14120-1, SUSE-SU-2019:1522-1, SUSE-SU-2019:1601-1, USN-4004-1, USN-4004-2, USN-4019-1, USN-4019-2, VIGILANCE-VUL-29449.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can force a read at an invalid address via rtreenode() of SQLite, in order to trigger a denial of service, or to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial)

computer vulnerability note CVE-2019-5435 CVE-2019-5436

curl: multiple vulnerabilities

Synthesis of the vulnerability

An attacker can use several vulnerabilities of curl.
Severity: 2/4.
Number of vulnerabilities in this bulletin: 2.
Creation date: 22/05/2019.
Identifiers: cpuoct2019, CVE-2019-5435, CVE-2019-5436, DLA-1804-1, DSA-2019-117, FEDORA-2019-3f5b6f0f97, FEDORA-2019-697de0501f, openSUSE-SU-2019:1492-1, openSUSE-SU-2019:1508-1, SSA:2019-142-01, SUSE-SU-2019:1357-1, SUSE-SU-2019:1357-2, SUSE-SU-2019:1363-1, SUSE-SU-2019:14064-1, USN-3993-1, USN-3993-2, VIGILANCE-VUL-29382.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can use several vulnerabilities of curl.
Full Vigil@nce bulletin... (Free trial)

threat announce CVE-2019-11884

Linux kernel: information disclosure via Bluetooth hidp

Synthesis of the vulnerability

A local attacker can read a memory fragment via Bluetooth hidp of the Linux kernel, in order to obtain sensitive information.
Severity: 1/4.
Creation date: 13/05/2019.
Identifiers: CERTFR-2019-AVI-277, CERTFR-2019-AVI-355, CERTFR-2019-AVI-368, CERTFR-2019-AVI-419, CERTFR-2019-AVI-458, CVE-2019-11884, DLA-1823-1, DLA-1824-1, DSA-2019-117, DSA-4465-1, FEDORA-2019-640f8d8dd1, FEDORA-2019-c36afa818c, FEDORA-2019-e6bf55e821, openSUSE-SU-2019:1404-1, openSUSE-SU-2019:1407-1, openSUSE-SU-2019:1479-1, RHSA-2019:3309-01, RHSA-2019:3517-01, SUSE-SU-2019:14089-1, SUSE-SU-2019:1527-1, SUSE-SU-2019:1529-1, SUSE-SU-2019:1530-1, SUSE-SU-2019:1532-1, SUSE-SU-2019:1533-1, SUSE-SU-2019:1534-1, SUSE-SU-2019:1535-1, SUSE-SU-2019:1536-1, SUSE-SU-2019:1550-1, SUSE-SU-2019:1692-1, SUSE-SU-2019:2430-1, USN-4068-1, USN-4068-2, USN-4069-1, USN-4069-2, USN-4076-1, USN-4118-1, VIGILANCE-VUL-29273.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

A local attacker can read a memory fragment via Bluetooth hidp of the Linux kernel, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial)

security bulletin CVE-2019-11810

Linux kernel: NULL pointer dereference via megasas_alloc_cmds

Synthesis of the vulnerability

An attacker can force a NULL pointer to be dereferenced via megasas_alloc_cmds() of the Linux kernel, in order to trigger a denial of service.
Severity: 1/4.
Creation date: 09/05/2019.
Identifiers: 1103505, CERTFR-2019-AVI-244, CERTFR-2019-AVI-254, CERTFR-2019-AVI-361, CERTFR-2019-AVI-376, CERTFR-2019-AVI-417, CERTFR-2019-AVI-418, CERTFR-2019-AVI-419, CERTFR-2019-AVI-440, CERTFR-2019-AVI-441, CERTFR-2019-AVI-451, CERTFR-2019-AVI-458, CVE-2019-11810, DLA-1823-1, DSA-2019-148, DSA-2019-149, openSUSE-SU-2019:1923-1, openSUSE-SU-2019:1924-1, RHSA-2019:1959-01, RHSA-2019:1971-01, RHSA-2019:2029-01, RHSA-2019:2043-01, RHSA-2019:2736-01, RHSA-2019:2837-01, RHSA-2019:3217-01, SUSE-SU-2019:14157-1, SUSE-SU-2019:2068-1, SUSE-SU-2019:2069-1, SUSE-SU-2019:2070-1, SUSE-SU-2019:2071-1, SUSE-SU-2019:2072-1, SUSE-SU-2019:2073-1, SUSE-SU-2019:2262-1, SUSE-SU-2019:2263-1, SUSE-SU-2019:2299-1, SUSE-SU-2019:2430-1, SUSE-SU-2019:2450-1, USN-4005-1, USN-4008-1, USN-4008-3, USN-4115-1, USN-4115-2, USN-4118-1, VIGILANCE-VUL-29255.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can force a NULL pointer to be dereferenced via megasas_alloc_cmds() of the Linux kernel, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial)

weakness announce CVE-2019-9500 CVE-2019-9503

Linux kernel: buffer overflow via brcmf_wowl_nd_results

Synthesis of the vulnerability

An attacker can trigger a buffer overflow via brcmf_wowl_nd_results() of the Linux kernel, in order to trigger a denial of service, and possibly to run code.
Severity: 1/4.
Number of vulnerabilities in this bulletin: 2.
Creation date: 25/04/2019.
Identifiers: 1103505, CERTFR-2019-AVI-211, CERTFR-2019-AVI-212, CERTFR-2019-AVI-233, CERTFR-2019-AVI-277, CERTFR-2019-AVI-391, CERTFR-2019-AVI-428, CERTFR-2019-AVI-440, CERTFR-2019-AVI-458, CERTFR-2019-AVI-479, CVE-2019-9500, CVE-2019-9503, DLA-1799-1, DLA-1799-2, DLA-1824-1, DSA-2019-117, DSA-4465-1, FEDORA-2019-1b986880ea, FEDORA-2019-1e8a4c6958, FEDORA-2019-8219efa9f6, FEDORA-2019-87d807d7cb, openSUSE-SU-2019:1404-1, openSUSE-SU-2019:1407-1, openSUSE-SU-2019:1479-1, RHSA-2019:2600-01, RHSA-2019:2609-01, RHSA-2019:2703-01, RHSA-2019:2741-01, RHSA-2019:2945-01, RHSA-2019:3217-01, SUSE-SU-2019:1240-1, SUSE-SU-2019:1241-1, SUSE-SU-2019:1242-1, SUSE-SU-2019:1244-1, SUSE-SU-2019:1245-1, SUSE-SU-2019:1287-1, SUSE-SU-2019:1289-1, SUSE-SU-2019:1550-1, SUSE-SU-2019:2430-1, USN-3979-1, USN-3980-1, USN-3981-1, USN-3981-2, USN-4076-1, USN-4095-1, USN-4095-2, VIGILANCE-VUL-29128, VU#166939.
Full Vigil@nce bulletin... (Free trial)

Description of the vulnerability

An attacker can trigger a buffer overflow via brcmf_wowl_nd_results() of the Linux kernel, in order to trigger a denial of service, and possibly to run code.
Full Vigil@nce bulletin... (Free trial)
Our database contains other pages. You can request a free trial to read them.

Display information about RSA Authentication Manager: