CVE-2019-7096
flash-plugin: Arbitrary Code Execution vulnerability (APSB19-19)
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD, Red Hat. Plus basse selon Ubuntu (moyenne).
Description
Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 1:20190409.1-0ubuntu0.14.04.1 et 1 autres |
| ubuntu 16.04 | adobe-flashplugin, flashplugin-nonfree | 1:20190409.1-0ubuntu0.16.04.1 et 1 autres |
| ubuntu 16.04-ESM | flashplugin-nonfree | 32.0.0.171ubuntu0.16.04.1 |
| ubuntu 18.04 | adobe-flashplugin, flashplugin-nonfree | 1:20190409.1-0ubuntu0.18.04.1 et 1 autres |
| ubuntu 18.04-ESM | flashplugin-nonfree | 32.0.0.171ubuntu0.18.04.1 |
| ubuntu 18.10 | adobe-flashplugin, flashplugin-nonfree | 1:20190409.1-0ubuntu0.18.10.1 et 1 autres |
| ubuntu 19.04 | adobe-flashplugin, flashplugin-nonfree | 1:20190409.1-0ubuntu1 et 1 autres |
Afficher les 12 entrées de 7 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| ubuntu 14.04 | adobe-flashplugin | 1:20190409.1-0ubuntu0.14.04.1 |
| ubuntu 14.04 | flashplugin-nonfree | 32.0.0.171ubuntu0.14.04.1 |
| ubuntu 16.04 | adobe-flashplugin | 1:20190409.1-0ubuntu0.16.04.1 |
| ubuntu 16.04 | flashplugin-nonfree | 32.0.0.171ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | flashplugin-nonfree | 32.0.0.171ubuntu0.16.04.1 |
| ubuntu 18.04 | adobe-flashplugin | 1:20190409.1-0ubuntu0.18.04.1 |
| ubuntu 18.04 | flashplugin-nonfree | 32.0.0.171ubuntu0.18.04.1 |
| ubuntu 18.04-ESM | flashplugin-nonfree | 32.0.0.171ubuntu0.18.04.1 |
| ubuntu 18.10 | adobe-flashplugin | 1:20190409.1-0ubuntu0.18.10.1 |
| ubuntu 18.10 | flashplugin-nonfree | 32.0.0.171ubuntu0.18.10.1 |
| ubuntu 19.04 | adobe-flashplugin | 1:20190409.1-0ubuntu1 |
| ubuntu 19.04 | flashplugin-nonfree | 32.0.0.171ubuntu1 |
Références
- https://access.redhat.com/security/cve/CVE-2019-7096
- https://helpx.adobe.com/security/products/flash-player/apsb19-19.html
- https://nvd.nist.gov/vuln/detail/CVE-2019-7096
- https://rhn.redhat.com/errata/RHSA-2019-0737.html
- https://security.gentoo.org/glsa/201908-21
- https://www.cve.org/CVERecord?id=CVE-2019-7096