How severe is CVE-2019-19240?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5.3 out of 10.

What type of vulnerability is CVE-2019-19240?

This is classified as CWE-787, which is a common weakness in software security.

CVE-2019-19240 - MEDIUM Severity | CVSS 5.3

Vulnerability Description

Embedthis GoAhead before 5.0.1 mishandles redirected HTTP requests with a large Host header. The GoAhead WebsRedirect uses a static host buffer that has a limited length and can overflow. This can cause a copy of the Host header to fail, leaving that buffer uninitialized, which may leak uninitialized data in a response.

Related Vulnerabilities

CVE-2013-7491

MEDIUM

CVSS:5.3(Medium)

An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated.

CWE-7872013

CVE-2017-17286

MEDIUM

CVSS:5.3(Medium)

Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R005C32, ...

CWE-7872017

CVE-2017-3630

MEDIUM

CVSS:5.3(Medium)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low priv...

CWE-7872017

CVE-2018-0981

MEDIUM

CVSS:5.3(Medium)

An information disclosure vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Information Disclosure Vulnerability." This af...

CWE-7872018

CVE-2018-1000

MEDIUM

CVSS:5.3(Medium)

CWE-7872018

CVE-2018-7517

MEDIUM

CVSS:5.3(Medium)

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability.

CWE-7872018