# CVEs published 2019-10-03

53 CVEs were published on October 3, 2019: 5 critical, 20 high. Days are UTC.

- [CVE-2019-17113](https://cve.now/CVE-2019-17113.md): In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug\_InstrumentName and ModPlug\_SampleName in libopenmpt\_modplug.c do not restrict th (no CVSS)
- [CVE-2019-13329](https://cve.now/CVE-2019-13329.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5. (CVSS 7.8, Foxit Reader)
- [CVE-2019-13330](https://cve.now/CVE-2019-13330.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. (CVSS 7.8, Foxit Reader)
- [CVE-2019-13331](https://cve.now/CVE-2019-13331.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. (CVSS 7.8, Foxit Reader)
- [CVE-2019-13326](https://cve.now/CVE-2019-13326.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. (CVSS 7.8, Foxit Reader)
- [CVE-2019-13327](https://cve.now/CVE-2019-13327.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. (CVSS 7.8, Foxit Reader)
- [CVE-2019-13328](https://cve.now/CVE-2019-13328.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. (CVSS 7.8, Foxit Reader)
- [CVE-2019-13332](https://cve.now/CVE-2019-13332.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114. (CVSS 7.8, Foxit Reader)
- [CVE-2019-13323](https://cve.now/CVE-2019-13323.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.909. (CVSS 7.8, Foxit Studio Photo)
- [CVE-2019-13324](https://cve.now/CVE-2019-13324.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.909. (CVSS 7.8, Foxit Studio Photo)
- [CVE-2019-13325](https://cve.now/CVE-2019-13325.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.909. (CVSS 7.8, Foxit Studio Photo)
- [CVE-2019-11932](https://cve.now/CVE-2019-11932.md): A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in W (no CVSS, koral-- android-gif-drawable · pl.droidsonroids.gif:android…)
- [CVE-2019-16198](https://cve.now/CVE-2019-16198.md): KSLabs KSWEB 3.93 allows ../ directory traversal, as demonstrated by the hostFile parameter. (no CVSS)
- [CVE-2019-15766](https://cve.now/CVE-2019-15766.md): The KSLABS KSWEB (aka ru.kslabs.ksweb) application 3.93 for Android allows authenticated remote code execution via a POST request to the AJA (no CVSS)
- [CVE-2019-16328](https://cve.now/CVE-2019-16328.md): In RPyC 4.1.x through 4.1.1, a remote attacker can dynamically modify object attributes to construct a remote procedure call that executes c (no CVSS, rpyc)
- [CVE-2019-16866](https://cve.now/CVE-2019-16866.md): Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. (no CVSS)
- [CVE-2019-15165](https://cve.now/CVE-2019-15165.md): sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory. (CVSS 5.3)
- [CVE-2019-15164](https://cve.now/CVE-2019-15164.md): rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source. (no CVSS)
- [CVE-2019-16931](https://cve.now/CVE-2019-16931.md): A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript w (no CVSS)
- [CVE-2019-15163](https://cve.now/CVE-2019-15163.md): rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daemon crash) if a crypt (no CVSS)
- [CVE-2019-15162](https://cve.now/CVE-2019-15162.md): rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easie (no CVSS)
- [CVE-2019-15161](https://cve.now/CVE-2019-15161.md): rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. (no CVSS)
- [CVE-2019-15166](https://cve.now/CVE-2019-15166.md): lmp\_print in tcpdump lacks certain boundary checks (CVSS 1.6)
- [CVE-2018-16452](https://cve.now/CVE-2018-16452.md): The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb\_fdata() via recursion. (CVSS 7.5)
- [CVE-2018-16451](https://cve.now/CVE-2018-16451.md): The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print\_trans() for \\MAILSLOT\\BROWSE and \\PIPE\\LANMAN. (CVSS 9.8)
- [CVE-2018-16301](https://cve.now/CVE-2018-16301.md): The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read\_infile(). (no CVSS, The Tcpdump Group tcpdump)
- [CVE-2018-16300](https://cve.now/CVE-2018-16300.md): The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp\_attr\_print() because of unlimited recursion. (CVSS 7.5)
- [CVE-2018-16230](https://cve.now/CVE-2018-16230.md): The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp\_attr\_print() (MP\_REACH\_NLRI). (CVSS 9.8)
- [CVE-2018-16229](https://cve.now/CVE-2018-16229.md): The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp\_print\_option(). (no CVSS)
- [CVE-2018-16228](https://cve.now/CVE-2018-16228.md): The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print\_prefix(). (CVSS 9.8)
- [CVE-2018-16227](https://cve.now/CVE-2018-16227.md): The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802\_11.c for the Mesh Flags subfield. (no CVSS)
- [CVE-2018-14882](https://cve.now/CVE-2018-14882.md): The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c. (CVSS 9.8)
- [CVE-2018-14881](https://cve.now/CVE-2018-14881.md): The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp\_capabilities\_print() (BGP\_CAPCODE\_RESTART). (CVSS 9.8)
- [CVE-2018-14880](https://cve.now/CVE-2018-14880.md): The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6\_print\_lshdr(). (no CVSS)
- [CVE-2018-14879](https://cve.now/CVE-2018-14879.md): The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get\_next\_file(). (CVSS 7.0)
- [CVE-2018-14470](https://cve.now/CVE-2018-14470.md): The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel\_print\_v2(). (CVSS 7.5)
- [CVE-2018-14469](https://cve.now/CVE-2018-14469.md): The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1\_n\_print(). (no CVSS)
- [CVE-2018-14468](https://cve.now/CVE-2018-14468.md): The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr\_print(). (CVSS 7.5)
- [CVE-2018-14467](https://cve.now/CVE-2018-14467.md): The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp\_capabilities\_print() (BGP\_CAPCODE\_MP). (CVSS 7.5)
- [CVE-2018-14466](https://cve.now/CVE-2018-14466.md): The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx\_cache\_find() and rx\_cache\_insert(). (no CVSS)
- [CVE-2018-14465](https://cve.now/CVE-2018-14465.md): The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp\_obj\_print(). (CVSS 7.5)
- [CVE-2018-14464](https://cve.now/CVE-2018-14464.md): The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp\_print\_data\_link\_subobjs(). (no CVSS)
- [CVE-2018-14463](https://cve.now/CVE-2018-14463.md): The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp\_print() for VRRP version 2, a different vulnerability th (no CVSS)
- [CVE-2018-14462](https://cve.now/CVE-2018-14462.md): The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp\_print(). (CVSS 7.5)
- [CVE-2018-14461](https://cve.now/CVE-2018-14461.md): The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp\_tlv\_print(). (CVSS 7.5)
- [CVE-2018-10105](https://cve.now/CVE-2018-10105.md): tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2). (no CVSS)
- [CVE-2018-10103](https://cve.now/CVE-2018-10103.md): tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2). (no CVSS)
- [CVE-2019-4441](https://cve.now/CVE-2019-4441.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to obtain sensitive information when a stack (CVSS 5.3, IBM WebSphere Application Server)
- [CVE-2019-4422](https://cve.now/CVE-2019-4422.md): IBM Security Guardium 9.0, 9.5, and 10.6 are vulnerable to a privilege escalation which could allow an authenticated user to change the acce (CVSS 8.8, IBM Security Guardium)
- [CVE-2019-3834](https://cve.now/CVE-2019-3834.md): It was found that the fix for CVE-2014-0114 had been reverted in JBoss Operations Network 3 (JON). (CVSS 5.6, RedHat struts)
- [CVE-2019-13629](https://cve.now/CVE-2019-13629.md): MatrixSSL 4.2.1 and earlier contains a timing side channel in ECDSA signature generation. (no CVSS)
- [CVE-2019-13628](https://cve.now/CVE-2019-13628.md): wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without --enable-fpecc, --enable-sp, or --enable-sp-math) contain a timing side cha (no CVSS, wolfcrypt)
- [CVE-2019-15809](https://cve.now/CVE-2019-15809.md): Smart cards from the Athena SCS manufacturer, based on the Atmel Toolbox 00.03.11.05 and the AT90SC chip, contain a timing side channel in E (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-10-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.