Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2019-2389
HistoryOct 24, 2019 - 1:50 p.m.

CVE-2019-2389

2019-10-2413:50:45
redhat.com
access.redhat.com
25

4.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Incorrect scoping of kill operations in MongoDB Server’s packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue affects MongoDB Server v4.0 versions prior to 4.0.11; MongoDB Server v3.6 versions prior to 3.6.14; MongoDB Server v3.4 versions prior to 3.4.22.

Related

prion 2
osv 2
nvd 2
debiancve 2
veracode 1
redhatcve 1
ubuntucve 2
cve 2
cvelist 2
openvas 7
nessus 17
mongodb 1
freebsd 1
ibm 4
centos 1
redhat 1
oraclelinux 1
cloudfoundry 1
ubuntu 1
amazon 1
rosalinux 1
prion
prion
Code injection
2019-01-14 22:29:00
Code injection
2019-08-30 15:15:00
osv
osv
CVE-2018-16888
2019-01-14 22:29:00
CVE-2019-2389
2019-08-30 15:15:10
nvd
nvd
CVE-2018-16888
2019-01-14 22:29:00
CVE-2019-2389
2019-08-30 15:15:10
debiancve
debiancve
CVE-2018-16888
2019-01-14 22:29:00
CVE-2019-2389
2019-08-30 15:15:00
veracode
veracode
Denial Of Service (DoS)
2019-01-04 02:50:51
redhatcve
redhatcve
CVE-2018-16888
2019-01-02 13:19:49
ubuntucve
ubuntucve
CVE-2018-16888
2019-01-14 00:00:00
CVE-2019-2389
2019-08-30 00:00:00
cve
cve
CVE-2018-16888
2019-01-14 22:29:00
CVE-2019-2389
2019-08-30 15:15:10
cvelist
cvelist
CVE-2018-16888
2019-01-14 22:00:00
CVE-2019-2389 Process termination via PID file manipulation
2019-08-30 14:41:23
openvas
openvas
Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2019-2671)
2020-01-23 00:00:00
MongoDB 3.4 < 3.4.22, 3.6 < 3.6.14, 4.0 < 4.0.11, 4.1 < 4.1.14 DoS Vulnerability - Linux
2019-09-03 00:00:00
Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2019-2232)
2020-01-23 00:00:00
nessus
nessus
EulerOS 2.0 SP3 : systemd (EulerOS-SA-2019-2671)
2019-12-18 00:00:00
FreeBSD : mongodb -- Our init scripts check /proc/[pid]/stat should validate that `(${procname})` is the process' command name. (273c6c43-e3ad-11e9-8af7-08002720423d)
2019-10-14 00:00:00
NewStart CGSL CORE 5.05 / MAIN 5.05 : systemd Multiple Vulnerabilities (NS-SA-2019-0242)
2019-12-31 00:00:00
mongodb
mongodb
CVE-2019-2389
2019-08-30 12:47:34
freebsd
freebsd
mongodb -- Our init scripts check /proc/[pid]/stat should validate that `(${procname})` is the process' command name.
2019-08-06 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in MongoDB affects IBM Spectrum Protect Plus (CVE-2019-2389)
2020-06-12 20:16:05
Security Bulletin: Multiple Vulnerabilities in MongoDB affects IBM Watson Studio Local
2019-12-20 08:47:33
Security Bulletin: Multiple vulnerabilities in MongoDB server affect IBM Cloud App Management
2019-10-23 16:05:11
centos
centos
libgudev1, systemd security update
2019-08-30 04:25:11
redhat
redhat
(RHSA-2019:2091) Moderate: systemd security, bug fix, and enhancement update
2019-08-06 07:59:50
oraclelinux
oraclelinux
systemd security, bug fix, and enhancement update
2019-08-13 00:00:00
cloudfoundry
cloudfoundry
USN-4269-1: systemd vulnerabilities | Cloud Foundry
2020-02-20 00:00:00
ubuntu
ubuntu
systemd vulnerabilities
2020-02-05 00:00:00
amazon
amazon
Important: systemd
2021-05-20 17:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1982
2021-07-02 18:13:58

4.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON
Related for RH:CVE-2019-2389
prion2osv2nvd2debiancve2veracode1redhatcve1ubuntucve2cve2cvelist2openvas7nessus17mongodb1freebsd1ibm4centos1redhat1oraclelinux1cloudfoundry1ubuntu1amazon1rosalinux1