CVE-2019-7096
flash-plugin: Arbitrary Code Execution vulnerability (APSB19-19)
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Red Hat. Daha düşük diyenler: Ubuntu (orta).
Açıklama
Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| ubuntu 14.04 | adobe-flashplugin, flashplugin-nonfree | 1:20190409.1-0ubuntu0.14.04.1 ve 1 tane daha |
| ubuntu 16.04 | adobe-flashplugin, flashplugin-nonfree | 1:20190409.1-0ubuntu0.16.04.1 ve 1 tane daha |
| ubuntu 16.04-ESM | flashplugin-nonfree | 32.0.0.171ubuntu0.16.04.1 |
| ubuntu 18.04 | adobe-flashplugin, flashplugin-nonfree | 1:20190409.1-0ubuntu0.18.04.1 ve 1 tane daha |
| ubuntu 18.04-ESM | flashplugin-nonfree | 32.0.0.171ubuntu0.18.04.1 |
| ubuntu 18.10 | adobe-flashplugin, flashplugin-nonfree | 1:20190409.1-0ubuntu0.18.10.1 ve 1 tane daha |
| ubuntu 19.04 | adobe-flashplugin, flashplugin-nonfree | 1:20190409.1-0ubuntu1 ve 1 tane daha |
7 kaynaktaki 12 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| ubuntu 14.04 | adobe-flashplugin | 1:20190409.1-0ubuntu0.14.04.1 |
| ubuntu 14.04 | flashplugin-nonfree | 32.0.0.171ubuntu0.14.04.1 |
| ubuntu 16.04 | adobe-flashplugin | 1:20190409.1-0ubuntu0.16.04.1 |
| ubuntu 16.04 | flashplugin-nonfree | 32.0.0.171ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | flashplugin-nonfree | 32.0.0.171ubuntu0.16.04.1 |
| ubuntu 18.04 | adobe-flashplugin | 1:20190409.1-0ubuntu0.18.04.1 |
| ubuntu 18.04 | flashplugin-nonfree | 32.0.0.171ubuntu0.18.04.1 |
| ubuntu 18.04-ESM | flashplugin-nonfree | 32.0.0.171ubuntu0.18.04.1 |
| ubuntu 18.10 | adobe-flashplugin | 1:20190409.1-0ubuntu0.18.10.1 |
| ubuntu 18.10 | flashplugin-nonfree | 32.0.0.171ubuntu0.18.10.1 |
| ubuntu 19.04 | adobe-flashplugin | 1:20190409.1-0ubuntu1 |
| ubuntu 19.04 | flashplugin-nonfree | 32.0.0.171ubuntu1 |
Referanslar
- https://access.redhat.com/security/cve/CVE-2019-7096
- https://helpx.adobe.com/security/products/flash-player/apsb19-19.html
- https://nvd.nist.gov/vuln/detail/CVE-2019-7096
- https://rhn.redhat.com/errata/RHSA-2019-0737.html
- https://security.gentoo.org/glsa/201908-21
- https://www.cve.org/CVERecord?id=CVE-2019-7096