Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2019-19450
HistorySep 20, 2023 - 12:00 a.m.

CVE-2019-19450

2023-09-2000:00:00
ubuntu.com
ubuntu.com
19
paraparser
reportlab
remote code execution
untrusted user input
crafted xml document
cve-2019-19450
cve-2019-17626

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.051 Low

EPSS

Percentile

93.0%

JSON

paraparser in ReportLab before 3.5.31 allows remote code execution because
start_unichar in paraparser.py evaluates untrusted user input in a unichar
element in a crafted XML document with ‘<unichar code="’ followed by
arbitrary Python code, a similar issue to CVE-2019-17626.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchpython-reportlab< anyUNKNOWN
ubuntu16.04noarchpython-reportlab< anyUNKNOWN

Related

osv 7
nessus 45
redhatcve 2
nvd 2
debiancve 2
cve 2
prion 2
github 2
amazon 2
cvelist 2
debian 4
openvas 17
fedora 4
redhat 10
oraclelinux 5
veracode 2
almalinux 1
centos 3
suse 1
gentoo 1
ubuntu 1
mageia 1
ubuntucve 1
redos 1
osv
osv
ReportLab vulnerable to remote code execution via paraparser
2023-09-20 15:30:51
Important: python-reportlab security update
2023-10-17 00:00:00
XML Injection in ReportLab
2022-05-24 22:00:57
nessus
nessus
Fedora 39 : python-reportlab (2024-6ec4e78241)
2024-04-28 00:00:00
openSUSE 15 Security Update : python-reportlab (SUSE-SU-2023:3972-1)
2023-10-05 00:00:00
Oracle Linux 7 : python-reportlab (ELSA-2023-5616)
2023-10-10 00:00:00
redhatcve
redhatcve
CVE-2019-19450
2023-09-22 04:54:14
CVE-2019-17626
2020-01-27 10:06:47
nvd
nvd
CVE-2019-19450
2023-09-20 14:15:12
CVE-2019-17626
2019-10-16 12:15:12
debiancve
debiancve
CVE-2019-19450
2023-09-20 14:15:12
CVE-2019-17626
2019-10-16 12:15:12
cve
cve
CVE-2019-19450
2023-09-20 14:15:12
CVE-2019-17626
2019-10-16 12:15:12
prion
prion
Remote code execution
2023-09-20 14:15:00
Remote code execution
2019-10-16 12:15:00
github
github
ReportLab vulnerable to remote code execution via paraparser
2023-09-20 15:30:51
XML Injection in ReportLab
2022-05-24 22:00:57
amazon
amazon
Important: python-reportlab
2023-09-27 22:49:00
Important: python-reportlab
2020-02-05 16:34:00
cvelist
cvelist
CVE-2019-19450
2023-09-20 00:00:00
CVE-2019-17626
2019-10-16 11:29:38
debian
debian
[SECURITY] [DLA 3590-1] python-reportlab security update
2023-09-29 19:57:32
[SECURITY] [DSA 4663-1] python-reportlab security update
2020-04-25 09:51:45
[SECURITY] [DSA 4663-1] python-reportlab security update
2020-04-25 09:51:45
openvas
openvas
Debian: Security Advisory (DLA-3590-1)
2023-10-02 00:00:00
Fedora: Security Advisory for python-reportlab (FEDORA-2024-6ec4e78241)
2024-05-27 00:00:00
CentOS: Security Advisory for python-reportlab (CESA-2023:5616)
2024-03-05 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: python-reportlab-4.2.0-1.fc39
2024-04-28 03:29:47
[SECURITY] Fedora 40 Update: python-reportlab-4.2.0-1.fc40
2024-04-28 03:18:20
[SECURITY] Fedora 30 Update: python-reportlab-3.5.34-2.fc30
2020-01-26 01:01:16
redhat
redhat
(RHSA-2023:5787) Important: python-reportlab security update
2023-10-17 13:33:05
(RHSA-2023:5786) Important: python-reportlab security update
2023-10-17 13:32:35
(RHSA-2023:5616) Important: python-reportlab security update
2023-10-10 14:35:13
oraclelinux
oraclelinux
python-reportlab security update
2023-10-19 00:00:00
python-reportlab security update
2020-01-21 00:00:00
python-reportlab security update
2023-10-11 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2023-10-08 05:35:22
Remote Code Execution
2019-10-17 03:15:30
almalinux
almalinux
Important: python-reportlab security update
2023-10-17 00:00:00
centos
centos
python security update
2024-02-20 14:49:49
python security update
2020-01-28 21:28:12
python security update
2020-01-28 21:23:46
suse
suse
Security update for python-reportlab (important)
2020-02-04 00:00:00
gentoo
gentoo
ReportLab: Arbitrary code execution
2020-07-27 00:00:00
ubuntu
ubuntu
ReportLab vulnerability
2020-02-06 00:00:00
mageia
mageia
Updated python-reportlab packages fix security vulnerability
2020-01-28 10:52:40
ubuntucve
ubuntucve
CVE-2019-17626
2019-10-16 00:00:00
redos
redos
ROS-20240524-02
2024-05-24 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.051 Low

EPSS

Percentile

93.0%

JSON
Related for UB:CVE-2019-19450
osv7nessus45redhatcve2nvd2debiancve2cve2prion2github2amazon2cvelist2debian4openvas17fedora4redhat10oraclelinux5veracode2almalinux1centos3suse1gentoo1ubuntu1mageia1ubuntucve1redos1