CVE-2019-1010190 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-1010190 Interim 1 42 2025-05-17T02:27:27Z current 2021-05-30T14:34:44Z 2025-05-17T02:27:27Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-1010190 mgetty prior to 1.2.1 is affected by: out-of-bounds read. The impact is: DoS, the program may crash if the memory is not mapped. The component is: putwhitespan() in g3/pbm2g3.c. The attack vector is: Local, the victim must open a specially crafted file. The fixed version is: 1.2.1. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2020-April/006667.html E-Mail link for SUSE-SU-2020:0853-1 https://lists.suse.com/pipermail/sle-security-updates/2020-April/006689.html E-Mail link for SUSE-SU-2020:0957-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5WMDOV6DAMYVMCMX42XVSMWB2EQ2EZPM/ E-Mail link for openSUSE-SU-2020:0506-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SLES for SAP Applications 11 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Leap 15.1 g3utils g3utils-1.1.36-28.6.7 g3utils-1.1.36-58.9.2 g3utils-1.1.37-3.8.1 g3utils-1.1.37-lp151.4.3.1 mgetty mgetty-1.1.36-28.6.7 mgetty-1.1.36-58.9.2 mgetty-1.1.37-3.8.1 mgetty-1.1.37-lp151.4.3.1 sendfax-1.1.37-lp151.4.3.1 g3utils-1.1.37-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 mgetty-1.1.37-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 g3utils-1.1.37-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 mgetty-1.1.37-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 g3utils-1.1.37-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 mgetty-1.1.37-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 g3utils-1.1.37-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 mgetty-1.1.37-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 g3utils-1.1.37-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 mgetty-1.1.37-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 g3utils-1.1.37-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 mgetty-1.1.37-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 g3utils-1.1.37-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 mgetty-1.1.37-3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 g3utils-1.1.36-28.6.7 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA mgetty-1.1.36-28.6.7 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA g3utils-1.1.36-28.6.7 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA mgetty-1.1.36-28.6.7 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA g3utils-1.1.36-58.9.2 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA mgetty-1.1.36-58.9.2 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA g3utils-1.1.36-58.9.2 as a component of SUSE Linux Enterprise Server 12 SP4 mgetty-1.1.36-58.9.2 as a component of SUSE Linux Enterprise Server 12 SP4 g3utils-1.1.36-58.9.2 as a component of SUSE Linux Enterprise Server 12 SP5 mgetty-1.1.36-58.9.2 as a component of SUSE Linux Enterprise Server 12 SP5 g3utils-1.1.36-58.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 mgetty-1.1.36-58.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 g3utils-1.1.36-58.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 mgetty-1.1.36-58.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 g3utils-1.1.37-lp151.4.3.1 as a component of openSUSE Leap 15.1 mgetty-1.1.37-lp151.4.3.1 as a component of openSUSE Leap 15.1 sendfax-1.1.37-lp151.4.3.1 as a component of openSUSE Leap 15.1 g3utils as a component of HPE Helion OpenStack 8 mgetty as a component of HPE Helion OpenStack 8 mgetty as a component of SLES for SAP Applications 11 SP3 g3utils as a component of SUSE Linux Enterprise Desktop 12 SP3 mgetty as a component of SUSE Linux Enterprise Desktop 12 SP3 mgetty as a component of SUSE Linux Enterprise Server 11 SP3 LTSS mgetty as a component of SUSE Linux Enterprise Server 11 SP4 LTSS g3utils as a component of SUSE Linux Enterprise Server 12 SP1-LTSS mgetty as a component of SUSE Linux Enterprise Server 12 SP1-LTSS g3utils as a component of SUSE Linux Enterprise Server 12 SP2-BCL mgetty as a component of SUSE Linux Enterprise Server 12 SP2-BCL g3utils as a component of SUSE Linux Enterprise Server 12 SP2-LTSS mgetty as a component of SUSE Linux Enterprise Server 12 SP2-LTSS g3utils as a component of SUSE Linux Enterprise Server 12 SP3 mgetty as a component of SUSE Linux Enterprise Server 12 SP3 g3utils as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS mgetty as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS g3utils as a component of SUSE Linux Enterprise Server 12 SP4-LTSS mgetty as a component of SUSE Linux Enterprise Server 12 SP4-LTSS g3utils as a component of SUSE Linux Enterprise Server 12-LTSS mgetty as a component of SUSE Linux Enterprise Server 12-LTSS mgetty as a component of SUSE Linux Enterprise Server for SAP Applications 12 g3utils as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 mgetty as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 g3utils as a component of SUSE OpenStack Cloud 8 mgetty as a component of SUSE OpenStack Cloud 8 g3utils as a component of SUSE OpenStack Cloud 9 mgetty as a component of SUSE OpenStack Cloud 9 g3utils as a component of SUSE OpenStack Cloud Crowbar 8 mgetty as a component of SUSE OpenStack Cloud Crowbar 8 g3utils as a component of SUSE OpenStack Cloud Crowbar 9 mgetty as a component of SUSE OpenStack Cloud Crowbar 9 mgetty prior to 1.2.1 is affected by: out-of-bounds read. The impact is: DoS, the program may crash if the memory is not mapped. The component is: putwhitespan() in g3/pbm2g3.c. The attack vector is: Local, the victim must open a specially crafted file. The fixed version is: 1.2.1. CVE-2019-1010190 SUSE Linux Enterprise Module for Basesystem 15 SP1:g3utils-1.1.37-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:mgetty-1.1.37-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:g3utils-1.1.37-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:mgetty-1.1.37-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:g3utils-1.1.37-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:mgetty-1.1.37-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:g3utils-1.1.37-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:mgetty-1.1.37-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:g3utils-1.1.37-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:mgetty-1.1.37-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:g3utils-1.1.37-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:mgetty-1.1.37-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:g3utils-1.1.37-3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:mgetty-1.1.37-3.8.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2:sendfax-1.1.37-3.8.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:sendfax-1.1.37-3.8.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP4:sendfax-1.1.37-3.8.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP5:sendfax-1.1.37-3.8.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:sendfax-1.1.37-3.8.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:sendfax-1.1.37-3.8.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:g3utils-1.1.36-28.6.7 SUSE Linux Enterprise Server 11 SP1-TERADATA:mgetty-1.1.36-28.6.7 SUSE Linux Enterprise Server 11 SP3-TERADATA:g3utils-1.1.36-28.6.7 SUSE Linux Enterprise Server 11 SP3-TERADATA:mgetty-1.1.36-28.6.7 SUSE Linux Enterprise Server 12 SP3-TERADATA:g3utils-1.1.36-58.9.2 SUSE Linux Enterprise Server 12 SP3-TERADATA:mgetty-1.1.36-58.9.2 SUSE Linux Enterprise Server 12 SP4:g3utils-1.1.36-58.9.2 SUSE Linux Enterprise Server 12 SP4:mgetty-1.1.36-58.9.2 SUSE Linux Enterprise Server 12 SP5:g3utils-1.1.36-58.9.2 SUSE Linux Enterprise Server 12 SP5:mgetty-1.1.36-58.9.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:g3utils-1.1.36-58.9.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mgetty-1.1.36-58.9.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:g3utils-1.1.36-58.9.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:mgetty-1.1.36-58.9.2 openSUSE Leap 15.1:g3utils-1.1.37-lp151.4.3.1 openSUSE Leap 15.1:mgetty-1.1.37-lp151.4.3.1 openSUSE Leap 15.1:sendfax-1.1.37-lp151.4.3.1 SLES for SAP Applications 11 SP3:mgetty SUSE Linux Enterprise Desktop 12 SP3:g3utils SUSE Linux Enterprise Desktop 12 SP3:mgetty SUSE Linux Enterprise Server 11 SP3 LTSS:mgetty SUSE Linux Enterprise Server 12 SP1-LTSS:g3utils SUSE Linux Enterprise Server 12 SP1-LTSS:mgetty SUSE Linux Enterprise Server 12 SP2-LTSS:g3utils SUSE Linux Enterprise Server 12 SP2-LTSS:mgetty SUSE Linux Enterprise Server 12 SP3:g3utils SUSE Linux Enterprise Server 12 SP3:mgetty SUSE Linux Enterprise Server 12-LTSS:g3utils SUSE Linux Enterprise Server 12-LTSS:mgetty SUSE Linux Enterprise Server for SAP Applications 12 SP2:g3utils SUSE Linux Enterprise Server for SAP Applications 12 SP2:mgetty SUSE Linux Enterprise Server for SAP Applications 12:mgetty low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 2.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L