Oracle Linux 7 : dovecot (ELSA-2019-2836)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2836 advisory. 1:2.2.36-3.1 - fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte when scanning data in quoted strings, leading to out of bounds heap...

RHEL 7 : kernel (RHSA-2019:2837)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2837 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Kernel: page cache side channel attack...

Debian DLA-1919-2 : linux-4.9 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. This updated advisory text mentions the additional non-security changes and notes the need to install new binary packages. CVE-2019-0136 It was...

[SECURITY] Fedora 31 Update: dovecot-2.3.7.2-1.fc31

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...

[SECURITY] Fedora 29 Update: sphinx-2.2.11-12.fc29

Sphinx is a full-text search engine, distributed under GPL version 2. Commercial licensing e.g. for embedded use is also available upon request. Generally, it's a standalone search engine, meant to provide fast, size-efficient and relevant full-text search functions to other applications. Sphinx...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Null pointer dereference

drivers/scsi/qla2xxx/qlaos.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference...

CVE-2019-16231

drivers/net/fjes/fjesmain.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference...

Null pointer dereference

drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference...

CVE-2019-16230

CVE-2019-16230 in Linux kernel 5.2.14 (drivers/gpu/drm/radeon/radeon_display.c) does not check the return value of alloc_workqueue, enabling a NULL pointer dereference during device initialization (boot). Unity Linux 20.1070e and Unity UTSA-2026 advisories reproduce this issue for kernel 5.2.14; ...

CVE-2019-16233

CVE-2019-16233 affects the Linux kernel, specifically drivers/scsi/qla2xxx/qla_os.c, where the alloc_workqueue return value is not checked, leading to a NULL pointer dereference. The Initial Description states this is a Linux kernel 5.2.14 issue. Connected documents corroborate the CVE entry and ...

CVE-2019-15221

A NULL pointer dereference flaw was found in the way the LINE6 drivers in the Linux kernel allocated buffers for USB packets. This flaw allows an attacker with physical access to the system to crash the system. Mitigation To mitigate this issue, prevent module snd-usb-line6 from being loaded...

CVE-2019-16089

An issue was discovered in the Linux kernel through 5.2.13. nbdgenlstatus in drivers/block/nbd.c does not check the nlaneststartnoflag return value...

Code injection

An issue was discovered in the Linux kernel through 5.2.13. nbdgenlstatus in drivers/block/nbd.c does not check the nlaneststartnoflag return value...

CVE-2019-16089

An issue was discovered in the Linux kernel through 5.2.13. nbdgenlstatus in drivers/block/nbd.c does not check the nlaneststartnoflag return value...

CVE-2019-9270

In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Out-of-bounds

In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-16089

An issue was discovered in the Linux kernel through 5.2.13. nbdgenlstatus in drivers/block/nbd.c does not check the nlaneststartnoflag return value...

CVE-2019-9270

Technical details for CVE-2019-9270 are not publicly provided in the supplied Connected documents. The initial description contains only a high‑level summary. Monitor for updates from vendors/security advisories; no additional exploit, affected products, or remediation details are provided here.

[SECURITY] Fedora 29 Update: dovecot-2.3.7.2-1.fc29

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plug-ins are in their subpackages...