CVE-2019-3995
High · 7.5CVSS
7.5
EPSS
28.5%
Published
Dec 17, 2019
CISA due date
—
The record
ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference. A remote unauthenticated attacker can crash the ELOG server by sending a crafted HTTP GET request.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Ubuntu:16.04:LTS | elog | 0 | No fix |
| Ubuntu:18.04:LTS | elog | 0 | No fix |
| Ubuntu:20.04:LTS | elog | 0 | No fix |
| Ubuntu:22.04:LTS | elog | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | elog | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | elog | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | elog | 0 | No fix |
Related vulnerabilities
- CVE-2019-3993 ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. Also affects elog
- CVE-2026-112405 Pillow is a Python imaging library. CWE-476
- CVE-2026-112392 Pillow is a Python imaging library. CWE-476
- CVE-2026-100348 kin-openapi is a Go project for handling OpenAPI files. CWE-476
- CVE-2026-100349 kin-openapi is a Go project for handling OpenAPI files. CWE-476
- CVE-2026-109280 ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx… CWE-476
- CVE-2026-109272 ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the… CWE-476
- CVE-2026-109258 ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the… CWE-476