gsd-2019-15903
Vulnerability from gsd
Modified
2023-12-13 01:23
Details
In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.
Aliases
Aliases
{ GSD: { alias: "CVE-2019-15903", description: "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.", id: "GSD-2019-15903", references: [ "https://www.suse.com/security/cve/CVE-2019-15903.html", "https://www.debian.org/security/2019/dsa-4571", "https://www.debian.org/security/2019/dsa-4549", "https://www.debian.org/security/2019/dsa-4530", "https://access.redhat.com/errata/RHSA-2020:4484", "https://access.redhat.com/errata/RHSA-2020:3952", "https://access.redhat.com/errata/RHSA-2020:2646", "https://access.redhat.com/errata/RHSA-2020:2644", "https://access.redhat.com/errata/RHSA-2019:3756", "https://access.redhat.com/errata/RHSA-2019:3237", "https://access.redhat.com/errata/RHSA-2019:3210", "https://access.redhat.com/errata/RHSA-2019:3196", "https://access.redhat.com/errata/RHSA-2019:3193", "https://ubuntu.com/security/CVE-2019-15903", "https://advisories.mageia.org/CVE-2019-15903.html", "https://security.archlinux.org/CVE-2019-15903", "https://alas.aws.amazon.com/cve/html/CVE-2019-15903.html", "https://linux.oracle.com/cve/CVE-2019-15903.html", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2019-15903", ], details: "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.", id: "GSD-2019-15903", modified: "2023-12-13T01:23:38.818770Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2019-15903", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "USN-4132-1", refsource: "UBUNTU", url: "https://usn.ubuntu.com/4132-1/", }, { name: "20190917 [slackware-security] expat (SSA:2019-259-01)", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Sep/30", }, { name: "USN-4132-2", refsource: "UBUNTU", url: "https://usn.ubuntu.com/4132-2/", }, { name: "FEDORA-2019-613edfe68b", refsource: "FEDORA", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BDUTI5TVQWIGGQXPEVI4T2ENHFSBMIBP/", }, { name: "DSA-4530", refsource: "DEBIAN", url: "https://www.debian.org/security/2019/dsa-4530", }, { name: "20190923 [SECURITY] [DSA 4530-1] expat security update", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Sep/37", }, { name: "FEDORA-2019-9505c6b555", refsource: "FEDORA", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A4TZKPJFTURRLXIGLB34WVKQ5HGY6JJA/", }, { name: "openSUSE-SU-2019:2205", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html", }, { name: "openSUSE-SU-2019:2204", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html", }, { name: "FEDORA-2019-672ae0f060", refsource: "FEDORA", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG/", }, { name: "20191021 [slackware-security] python (SSA:2019-293-01)", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Oct/29", }, { name: "USN-4165-1", refsource: "UBUNTU", url: "https://usn.ubuntu.com/4165-1/", }, { name: "DSA-4549", refsource: "DEBIAN", url: "https://www.debian.org/security/2019/dsa-4549", }, { name: "RHSA-2019:3210", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHSA-2019:3210", }, { name: "RHSA-2019:3237", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHSA-2019:3237", }, { name: "20191101 [SECURITY] [DSA 4549-1] firefox-esr security update", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Nov/1", }, { name: "openSUSE-SU-2019:2420", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html", }, { name: "openSUSE-SU-2019:2424", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html", }, { name: "openSUSE-SU-2019:2425", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html", }, { name: "RHSA-2019:3756", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHSA-2019:3756", }, { name: "openSUSE-SU-2019:2447", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html", }, { name: "openSUSE-SU-2019:2451", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html", }, { name: "openSUSE-SU-2019:2452", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html", }, { name: "openSUSE-SU-2019:2459", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html", }, { name: "openSUSE-SU-2019:2464", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html", }, { name: "[debian-lts-announce] 20191110 [SECURITY] [DLA 1987-1] firefox-esr security update", refsource: "MLIST", url: "https://lists.debian.org/debian-lts-announce/2019/11/msg00006.html", }, { name: "20191118 [SECURITY] [DSA 4571-1] thunderbird security update", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Nov/24", }, { name: "DSA-4571", refsource: "DEBIAN", url: "https://www.debian.org/security/2019/dsa-4571", }, { name: "[debian-lts-announce] 20191118 [SECURITY] [DLA 1997-1] thunderbird security update", refsource: "MLIST", url: "https://lists.debian.org/debian-lts-announce/2019/11/msg00017.html", }, { name: "GLSA-201911-08", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201911-08", }, { name: "USN-4202-1", refsource: "UBUNTU", url: "https://usn.ubuntu.com/4202-1/", }, { name: "20191211 APPLE-SA-2019-12-10-8 watchOS 6.1.1", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Dec/17", }, { name: "20191211 APPLE-SA-2019-12-10-5 tvOS 13.3", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Dec/21", }, { name: "20191211 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra", refsource: "BUGTRAQ", url: "https://seclists.org/bugtraq/2019/Dec/23", }, { name: "20191213 APPLE-SA-2019-12-10-1 iOS 13.3 and iPadOS 13.3", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2019/Dec/23", }, { name: "20191213 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2019/Dec/26", }, { name: "20191213 APPLE-SA-2019-12-10-8 watchOS 6.1.1", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2019/Dec/30", }, { name: "20191213 APPLE-SA-2019-12-10-5 tvOS 13.3", refsource: "FULLDISC", url: "http://seclists.org/fulldisclosure/2019/Dec/27", }, { name: "openSUSE-SU-2020:0010", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html", }, { name: "openSUSE-SU-2020:0086", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html", }, { name: "USN-4335-1", refsource: "UBUNTU", url: "https://usn.ubuntu.com/4335-1/", }, { name: "https://www.oracle.com/security-alerts/cpuapr2020.html", refsource: "MISC", url: "https://www.oracle.com/security-alerts/cpuapr2020.html", }, { name: "https://www.oracle.com/security-alerts/cpuoct2020.html", refsource: "MISC", url: "https://www.oracle.com/security-alerts/cpuoct2020.html", }, { name: "https://github.com/libexpat/libexpat/issues/317", refsource: "MISC", url: "https://github.com/libexpat/libexpat/issues/317", }, { name: "https://github.com/libexpat/libexpat/pull/318", refsource: "MISC", url: "https://github.com/libexpat/libexpat/pull/318", }, { name: "https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43", refsource: "MISC", url: "https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43", }, { name: "https://github.com/libexpat/libexpat/issues/342", refsource: "CONFIRM", url: "https://github.com/libexpat/libexpat/issues/342", }, { name: "http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html", refsource: "MISC", url: "http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html", }, { name: "https://security.netapp.com/advisory/ntap-20190926-0004/", refsource: "CONFIRM", url: "https://security.netapp.com/advisory/ntap-20190926-0004/", }, { name: "http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html", refsource: "MISC", url: "http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html", }, { name: "http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html", refsource: "MISC", url: "http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html", }, { name: "https://support.apple.com/kb/HT210788", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT210788", }, { name: "https://support.apple.com/kb/HT210790", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT210790", }, { name: "https://support.apple.com/kb/HT210785", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT210785", }, { name: "https://support.apple.com/kb/HT210789", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT210789", }, { name: "https://support.apple.com/kb/HT210793", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT210793", }, { name: "https://support.apple.com/kb/HT210795", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT210795", }, { name: "https://support.apple.com/kb/HT210794", refsource: "CONFIRM", url: "https://support.apple.com/kb/HT210794", }, { name: "https://www.tenable.com/security/tns-2021-11", refsource: "CONFIRM", url: "https://www.tenable.com/security/tns-2021-11", }, ], }, }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "2.2.8", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "3.5.8", versionStartIncluding: "3.5.0", vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "2.7.17", versionStartIncluding: "2.7.0", vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "3.7.5", versionStartIncluding: "3.7.0", vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "3.6.10", versionStartIncluding: "3.6.0", vulnerable: true, }, ], operator: "OR", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2019-15903", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-125", }, { lang: "en", value: "CWE-776", }, ], }, ], }, references: { reference_data: [ { name: "https://github.com/libexpat/libexpat/pull/318", refsource: "MISC", tags: [ "Issue Tracking", "Patch", "Third Party Advisory", ], url: "https://github.com/libexpat/libexpat/pull/318", }, { name: "https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43", refsource: "MISC", tags: [ "Patch", "Third Party Advisory", ], url: "https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43", }, { name: "https://github.com/libexpat/libexpat/issues/317", refsource: "MISC", tags: [ "Exploit", "Issue Tracking", "Third Party Advisory", ], url: "https://github.com/libexpat/libexpat/issues/317", }, { name: "USN-4132-1", refsource: "UBUNTU", tags: [ "Third Party Advisory", ], url: "https://usn.ubuntu.com/4132-1/", }, { name: "https://github.com/libexpat/libexpat/issues/342", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://github.com/libexpat/libexpat/issues/342", }, { name: "20190917 [slackware-security] expat (SSA:2019-259-01)", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Sep/30", }, { name: "http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html", refsource: "MISC", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html", }, { name: "USN-4132-2", refsource: "UBUNTU", tags: [ "Third Party Advisory", ], url: "https://usn.ubuntu.com/4132-2/", }, { name: "FEDORA-2019-613edfe68b", refsource: "FEDORA", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BDUTI5TVQWIGGQXPEVI4T2ENHFSBMIBP/", }, { name: "DSA-4530", refsource: "DEBIAN", tags: [ "Third Party Advisory", ], url: "https://www.debian.org/security/2019/dsa-4530", }, { name: "20190923 [SECURITY] [DSA 4530-1] expat security update", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Sep/37", }, { name: "FEDORA-2019-9505c6b555", refsource: "FEDORA", tags: [ "Third Party Advisory", ], url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A4TZKPJFTURRLXIGLB34WVKQ5HGY6JJA/", }, { name: "https://security.netapp.com/advisory/ntap-20190926-0004/", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://security.netapp.com/advisory/ntap-20190926-0004/", }, { name: "openSUSE-SU-2019:2205", refsource: "SUSE", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html", }, { name: "openSUSE-SU-2019:2204", refsource: "SUSE", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html", }, { name: "FEDORA-2019-672ae0f060", refsource: "FEDORA", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG/", }, { name: "20191021 [slackware-security] python (SSA:2019-293-01)", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Oct/29", }, { name: "http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html", refsource: "MISC", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html", }, { name: "http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html", refsource: "MISC", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html", }, { name: "USN-4165-1", refsource: "UBUNTU", tags: [ "Third Party Advisory", ], url: "https://usn.ubuntu.com/4165-1/", }, { name: "DSA-4549", refsource: "DEBIAN", tags: [ "Third Party Advisory", ], url: "https://www.debian.org/security/2019/dsa-4549", }, { name: "RHSA-2019:3237", refsource: "REDHAT", tags: [ "Third Party Advisory", ], url: "https://access.redhat.com/errata/RHSA-2019:3237", }, { name: "RHSA-2019:3210", refsource: "REDHAT", tags: [ "Third Party Advisory", ], url: "https://access.redhat.com/errata/RHSA-2019:3210", }, { name: "20191101 [SECURITY] [DSA 4549-1] firefox-esr security update", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Nov/1", }, { name: "openSUSE-SU-2019:2420", refsource: "SUSE", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html", }, { name: "openSUSE-SU-2019:2424", refsource: "SUSE", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html", }, { name: "openSUSE-SU-2019:2425", refsource: "SUSE", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html", }, { name: "RHSA-2019:3756", refsource: "REDHAT", tags: [ "Third Party Advisory", ], url: "https://access.redhat.com/errata/RHSA-2019:3756", }, { name: "openSUSE-SU-2019:2447", refsource: "SUSE", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html", }, { name: "openSUSE-SU-2019:2459", refsource: "SUSE", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html", }, { name: "openSUSE-SU-2019:2464", refsource: "SUSE", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html", }, { name: "openSUSE-SU-2019:2451", refsource: "SUSE", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html", }, { name: "openSUSE-SU-2019:2452", refsource: "SUSE", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html", }, { name: "[debian-lts-announce] 20191110 [SECURITY] [DLA 1987-1] firefox-esr security update", refsource: "MLIST", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://lists.debian.org/debian-lts-announce/2019/11/msg00006.html", }, { name: "20191118 [SECURITY] [DSA 4571-1] thunderbird security update", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Nov/24", }, { name: "DSA-4571", refsource: "DEBIAN", tags: [ "Third Party Advisory", ], url: "https://www.debian.org/security/2019/dsa-4571", }, { name: "[debian-lts-announce] 20191118 [SECURITY] [DLA 1997-1] thunderbird security update", refsource: "MLIST", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://lists.debian.org/debian-lts-announce/2019/11/msg00017.html", }, { name: "GLSA-201911-08", refsource: "GENTOO", tags: [ "Third Party Advisory", ], url: "https://security.gentoo.org/glsa/201911-08", }, { name: "USN-4202-1", refsource: "UBUNTU", tags: [ "Third Party Advisory", ], url: "https://usn.ubuntu.com/4202-1/", }, { name: "https://support.apple.com/kb/HT210788", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://support.apple.com/kb/HT210788", }, { name: "https://support.apple.com/kb/HT210785", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://support.apple.com/kb/HT210785", }, { name: "https://support.apple.com/kb/HT210790", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://support.apple.com/kb/HT210790", }, { name: "https://support.apple.com/kb/HT210789", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://support.apple.com/kb/HT210789", }, { name: "20191211 APPLE-SA-2019-12-10-5 tvOS 13.3", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Dec/21", }, { name: "20191211 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Dec/23", }, { name: "20191211 APPLE-SA-2019-12-10-8 watchOS 6.1.1", refsource: "BUGTRAQ", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://seclists.org/bugtraq/2019/Dec/17", }, { name: "https://support.apple.com/kb/HT210793", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://support.apple.com/kb/HT210793", }, { name: "https://support.apple.com/kb/HT210795", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://support.apple.com/kb/HT210795", }, { name: "https://support.apple.com/kb/HT210794", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://support.apple.com/kb/HT210794", }, { name: "20191213 APPLE-SA-2019-12-10-1 iOS 13.3 and iPadOS 13.3", refsource: "FULLDISC", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://seclists.org/fulldisclosure/2019/Dec/23", }, { name: "20191213 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra", refsource: "FULLDISC", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://seclists.org/fulldisclosure/2019/Dec/26", }, { name: "20191213 APPLE-SA-2019-12-10-5 tvOS 13.3", refsource: "FULLDISC", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://seclists.org/fulldisclosure/2019/Dec/27", }, { name: "20191213 APPLE-SA-2019-12-10-8 watchOS 6.1.1", refsource: "FULLDISC", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://seclists.org/fulldisclosure/2019/Dec/30", }, { name: "openSUSE-SU-2020:0010", refsource: "SUSE", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html", }, { name: "openSUSE-SU-2020:0086", refsource: "SUSE", tags: [ "Mailing List", "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html", }, { name: "N/A", refsource: "N/A", tags: [ "Third Party Advisory", ], url: "https://www.oracle.com/security-alerts/cpuapr2020.html", }, { name: "USN-4335-1", refsource: "UBUNTU", tags: [ "Third Party Advisory", ], url: "https://usn.ubuntu.com/4335-1/", }, { name: "https://www.oracle.com/security-alerts/cpuoct2020.html", refsource: "MISC", tags: [ "Third Party Advisory", ], url: "https://www.oracle.com/security-alerts/cpuoct2020.html", }, { name: "https://www.tenable.com/security/tns-2021-11", refsource: "CONFIRM", tags: [ "Third Party Advisory", ], url: "https://www.tenable.com/security/tns-2021-11", }, ], }, }, impact: { baseMetricV2: { acInsufInfo: false, cvssV2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "MEDIUM", userInteractionRequired: false, }, baseMetricV3: { cvssV3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 3.9, impactScore: 3.6, }, }, lastModifiedDate: "2022-07-28T11:23Z", publishedDate: "2019-09-04T06:15Z", }, }, }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.