# CVEs published 2019-12-08

9 CVEs were published on December 8, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-19642](https://cve.now/CVE-2019-19642.md): On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenti (no CVSS)
- [CVE-2019-19636](https://cve.now/CVE-2019-19636.md): An issue was discovered in libsixel 1.8.2. (no CVSS)
- [CVE-2019-19637](https://cve.now/CVE-2019-19637.md): An issue was discovered in libsixel 1.8.2. (no CVSS)
- [CVE-2019-19638](https://cve.now/CVE-2019-19638.md): An issue was discovered in libsixel 1.8.2. (no CVSS)
- [CVE-2019-19635](https://cve.now/CVE-2019-19635.md): An issue was discovered in libsixel 1.8.2. (no CVSS)
- [CVE-2019-19630](https://cve.now/CVE-2019-19630.md): HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd\_strlcpy() function in string.c (when called from render\_contents in ps-pdf.cxx) (no CVSS)
- [CVE-2019-19449](https://cve.now/CVE-2019-19449.md): In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs\_build\_segment\_manage (no CVSS)
- [CVE-2019-19448](https://cve.now/CVE-2019-19448.md): In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs syste (no CVSS)
- [CVE-2019-19447](https://cve.now/CVE-2019-19447.md): In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-fre (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-12-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.