{"schemaVersion":3,"id":"CVE-2019-8375","aliases":["SUSE-SU-2019:0890-1","SUSE-SU-2019:1030-1","UBUNTU-CVE-2019-8375","DEBIAN-CVE-2019-8375","openSUSE-SU-2019:1206-1"],"status":"published","duplicateOf":null,"title":null,"description":"The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany).","dates":{"published":"2019-02-24T13:00:00.000Z","modified":"2024-08-04T21:17:31.297Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":9.8,"severity":"critical","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":9.8,"severity":"critical","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.15697,"percentile":0.96829,"severity":"medium","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":-0.4159999999999997,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.16113},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.1318,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.15697,"percentile":0.96829}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.1318,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.16113,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.15697,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.15697,"percentile":0.96829}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_3AB47B9E94DF34C1","name":"Exploit Reference (inputzero.io)","source":"reference","url":"https://www.inputzero.io/2019/02/fuzzing-webkit.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"46465","name":"WebKitGTK 2.23.90 / WebKitGTK+ 2.22.6 - Denial of Service","source":"exploit-database","url":"https://www.exploit-db.com/exploits/46465","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"dos","platforms":["linux"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"dos","platform":"linux","file":"exploits/linux/dos/46465.txt","codes":["CVE-2019-8375"]},"metasploit":null}],"exploitCount":2,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"18.04","noFixRecorded":false,"fixedIn":null},{"text":"18.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"18.04 | 18.10","eol":{"isEol":true,"eolDate":"2023-05-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"18.04","label":"18.04 'Bionic Beaver' (LTS)","eolFrom":"2023-05-31T00:00:00.000Z","isLts":true,"isMaintained":true,"latestVersion":"18.04.6"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"webkit2gtk","name":"webkit2gtk","label":"webkit2gtk","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/webkit2gtk","purlType":"deb","versions":[{"text":"< 2.24.1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24.1-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"qtwebkit-opensource-src","name":"qtwebkit-opensource-src","label":"qtwebkit-opensource-src","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/qtwebkit-opensource-src","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"qtwebkit-source","name":"qtwebkit-source","label":"qtwebkit-source","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/qtwebkit-source","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"webkit2gtk","name":"webkit2gtk","label":"webkit2gtk","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/webkit2gtk","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.24.1-0ubuntu0.18.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.24.1-0ubuntu0.18.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"webkitgtk","name":"webkitgtk","label":"webkitgtk","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/webkitgtk","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"opensuse","product":"leap","name":"leap","label":"leap","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"15.0","noFixRecorded":false,"fixedIn":null},{"text":"42.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"15.0 | 42.3","eol":{"isEol":true,"eolDate":"2019-12-03T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"15.0","label":"Leap 15.0","eolFrom":"2019-12-03T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"opensuse","label":"openSUSE","category":"os"}},"hubHref":"/vendor/opensuse/leap"},{"vendor":"opensuse","product":"webkit2gtk3&distro=openSUSE Leap 15.0","name":"webkit2gtk3","label":"webkit2gtk3&distro=openSUSE Leap 15.0","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE Leap 15.0","purlType":"rpm","versions":[{"text":"< 2.24.0-lp150.2.16.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24.0-lp150.2.16.1","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Desktop 12 SP3","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Desktop 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Desktop 12 SP3","purlType":"rpm","versions":[{"text":"< 2.24.0-2.38.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24.0-2.38.2","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Desktop 12 SP4","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Desktop 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Desktop 12 SP4","purlType":"rpm","versions":[{"text":"< 2.24.0-2.38.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24.0-2.38.2","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Basesystem 15","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Basesystem 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Module for Basesystem 15","purlType":"rpm","versions":[{"text":"< 2.24.0-3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24.0-3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Desktop Applications 15","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Desktop Applications 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Module for Desktop Applications 15","purlType":"rpm","versions":[{"text":"< 2.24.0-3.21.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24.0-3.21.1","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP3","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP3","purlType":"rpm","versions":[{"text":"< 2.24.0-2.38.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24.0-2.38.2","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP4","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP4","purlType":"rpm","versions":[{"text":"< 2.24.0-2.38.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24.0-2.38.2","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","purlType":"rpm","versions":[{"text":"< 2.24.0-2.38.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24.0-2.38.2","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","purlType":"rpm","versions":[{"text":"< 2.24.0-2.38.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24.0-2.38.2","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Software Development Kit 12 SP3","purlType":"rpm","versions":[{"text":"< 2.24.0-2.38.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24.0-2.38.2","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Software Development Kit 12 SP4","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Software Development Kit 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Software Development Kit 12 SP4","purlType":"rpm","versions":[{"text":"< 2.24.0-2.38.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24.0-2.38.2","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Workstation Extension 12 SP3","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Workstation Extension 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Workstation Extension 12 SP3","purlType":"rpm","versions":[{"text":"< 2.24.0-2.38.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24.0-2.38.2","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Workstation Extension 12 SP4","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Workstation Extension 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Workstation Extension 12 SP4","purlType":"rpm","versions":[{"text":"< 2.24.0-2.38.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24.0-2.38.2","eol":null,"hubHref":null},{"vendor":"webkitgtk","product":"webkitgtk","name":"webkitgtk","label":"webkitgtk","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.23.90","noFixRecorded":false,"fixedIn":null},{"text":"≤ 2.22.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.23.90 | ≤ 2.22.6","eol":null,"hubHref":"/vendor/webkitgtk/webkitgtk"}],"affectedCount":21,"eol":{"hasEol":true,"count":2},"references":[{"url":"https://trac.webkit.org/changeset/241515/webkit","label":"trac.webkit.org/changeset/241515/webkit","hostname":"trac.webkit.org","tags":["X Refsource MISC","REPORT","Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/46465/","label":"www.exploit-db.com/exploits/46465/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/WebKit/webkit/commit/6f9b511a115311b13c06eb58038ddc2c78da5531","label":"github.com/WebKit/webkit/commit/6f9b511a115311b13c06eb58038ddc2c78da5531","hostname":"github.com","tags":["X Refsource MISC","Patch","Third Party Advisory"]},{"url":"https://www.inputzero.io/2019/02/fuzzing-webkit.html","label":"www.inputzero.io/2019/02/fuzzing-webkit.html","hostname":"www.inputzero.io","tags":["X Refsource MISC","REPORT","Exploit","Third Party Advisory"]},{"url":"https://bugs.webkit.org/show_bug.cgi?id=184875","label":"bugs.webkit.org/show_bug.cgi?id=184875","hostname":"bugs.webkit.org","tags":["X Refsource MISC","Issue Tracking","Permissions Required","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00058.html","label":"lists.opensuse.org/opensuse-security-announce/2019-04/msg00058.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3948-1/","label":"usn.ubuntu.com/3948-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00005.html","label":"lists.opensuse.org/opensuse-security-announce/2019-05/msg00005.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190890-1/","label":"www.suse.com/support/update/announcement/2019/suse-su-20190890-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1126768","label":"bugzilla.suse.com/1126768","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8375","label":"www.suse.com/security/cve/CVE-2019-8375","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191030-1/","label":"www.suse.com/support/update/announcement/2019/suse-su-20191030-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-8375","label":"ubuntu.com/security/CVE-2019-8375","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-3948-1","label":"ubuntu.com/security/notices/USN-3948-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-8375","label":"www.cve.org/CVERecord?id=CVE-2019-8375","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-8375","label":"security-tracker.debian.org/tracker/CVE-2019-8375","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/B3HW6YDRCI5JKJU4FUJEBPP26LUQJZET/#B3HW6YDRCI5JKJU4FUJEBPP26LUQJZET","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:11506-1","USN-3948-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:11506-1","USN-3948-1"]},"timeline":[{"kind":"published","date":"2019-02-24T13:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-04T21:17:31.297Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T18:26:56.952Z","stale":false,"partial":false}}