CVEs published April 28, 2019
4 CVEs were published on April 28, 2019: 0 critical, 0 high.
- Published
- 4
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- code.gitea.io/gitea
- 1
Medium, low and unrated 4
- CVE-2019-11579dhcp.c in dhcpcd before 7.2.1 contains a 1-byte read overflow with DHO_OPTSOVERLOADED.
- CVE-2019-11578auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.
- CVE-2019-11577dhcpcd before 7.2.1 contains a buffer overflow in dhcp6_findna in dhcp6.c when reading NA/TA addresses.
- CVE-2019-11576Gitea before 1.8.0 allows 1FA for user accounts that have completed 2FA enrollment.code.gitea.io/gitea