CVE-2019-16892

highPriorität · verfolgen · 23EPSS 0.016 · 75. PerzentilEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.58% (75th) EPSS
CVSS 7.1 · high
Is it mine?
56 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · nvd · osv

EPSS · bewertet 2026-10-28

In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of service (disk consumption).

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobencfme-0:5.10.13.1-1.el7cf.src as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobencfme-0:5.10.13.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobencfme-amazon-smartstate-0:5.10.13.1-1.el7cf.src as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobencfme-amazon-smartstate-0:5.10.13.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobencfme-appliance-0:5.10.13.1-1.el7cf.src as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobencfme-appliance-0:5.10.13.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobencfme-appliance-common-0:5.10.13.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobencfme-appliance-debuginfo-0:5.10.13.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobencfme-appliance-tools-0:5.10.13.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobencfme-debuginfo-0:5.10.13.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobencfme-gemset-0:5.10.13.1-1.el7cf.src as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobencfme-gemset-0:5.10.13.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobencfme-gemset-debuginfo-0:5.10.13.1-1.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenruby-0:2.4.9-93.el7cf.src as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenruby-0:2.4.9-93.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenruby-debuginfo-0:2.4.9-93.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenruby-devel-0:2.4.9-93.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenruby-doc-0:2.4.9-93.el7cf.noarch as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenruby-irb-0:2.4.9-93.el7cf.noarch as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenruby-libs-0:2.4.9-93.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenrubygem-bigdecimal-0:1.3.2-93.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenrubygem-did_you_mean-0:1.1.0-93.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenrubygem-io-console-0:0.4.6-93.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenrubygem-minitest-0:5.10.1-93.el7cf.noarch as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenrubygem-net-telnet-0:0.1.1-93.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenrubygem-openssl-0:2.0.9-93.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenrubygem-power_assert-0:0.4.1-93.el7cf.noarch as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenrubygem-psych-0:2.2.2-93.el7cf.x86_64 as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenrubygem-rake-0:12.0.0-93.el7cf.noarch as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenrubygem-rdoc-0:5.0.1-93.el7cf.noarch as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenrubygem-test-unit-0:3.2.3-93.el7cf.noarch as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenrubygem-xmlrpc-0:0.2.1-93.el7cf.noarch as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenrubygems-0:2.6.14.4-93.el7cf.noarch as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobenrubygems-devel-0:2.6.14.4-93.el7cf.noarch as a component of CloudForms Management Engine 5.10redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHBA-2019:4047
  • Behobencfme-0:5.11.1.2-1.el8cf.src as a component of CloudForms Management Engine 5.11redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:4201
  • Behobencfme-0:5.11.1.2-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:4201
  • Behobencfme-amazon-smartstate-0:5.11.1.2-1.el8cf.src as a component of CloudForms Management Engine 5.11redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:4201
  • Behobencfme-amazon-smartstate-0:5.11.1.2-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:4201
  • Behobencfme-appliance-0:5.11.1.2-1.el8cf.src as a component of CloudForms Management Engine 5.11redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:4201
  • Behobencfme-appliance-0:5.11.1.2-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:4201
  • Behobencfme-appliance-common-0:5.11.1.2-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:4201
  • Behobencfme-appliance-tools-0:5.11.1.2-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:4201
  • Behobencfme-gemset-0:5.11.1.2-1.el8cf.src as a component of CloudForms Management Engine 5.11redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:4201
  • Behobencfme-gemset-0:5.11.1.2-1.el8cf.x86_64 as a component of CloudForms Management Engine 5.11redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:4201
  • Behobenovirt-ansible-hosted-engine-setup-0:1.0.28-1.el8ev.noarch as a component of CloudForms Management Engine 5.11redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:4201
  • Behobenovirt-ansible-hosted-engine-setup-0:1.0.28-1.el8ev.src as a component of CloudForms Management Engine 5.11redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:4201
  • Behobenv2v-conversion-host-0:1.15.0-1.el8ev.src as a component of CloudForms Management Engine 5.11redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:4201
  • Behobenv2v-conversion-host-ansible-0:1.15.0-1.el8ev.noarch as a component of CloudForms Management Engine 5.11redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. After installing the updated packages, the httpd daemon will be restarted automatically.

    https://access.redhat.com/errata/RHSA-2019:4201
02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.1
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.1–7.1

v2.07.1highAV:N/AC:M/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USAusnutzbarkeit 8.6 · Auswirkung 6.9
v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 3.6
v3.05.5mediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondary · Red Hat Product Security US
v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondary · OSV
v3.15.1mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-400USCWE-400US
04

betroffene Produkte (56)

Betroffene Produkte und Versionsbereiche.

20 von 56 angezeigt
05

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHBA-2019:4047Red Hat Bug Fix Advisory: CloudForms 4.7.13 bug fix and enhancement update2019-12-03csaf · redhat_csafUS

    An update is now available for CloudForms Management Engine 5.10.

  • RHSA-2019:4201Red Hat Security Advisory: CloudForms 5.0.1 security, bug fix and enhancement update2019-12-13csaf · redhat_csafUS

    An update is now available for CloudForms Management Engine 5.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • GHSA-5m2v-hc64-56h6Rubyzip denial of service 2019-09-30ghsa · osvUS

    In Rubyzip before 1.3.0, a crafted ZIP file can bypass application checks on ZIP entry sizes because data about the uncompressed size can be spoofed. This allows attackers to cause a denial of service (disk consumption).

06

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdnvdosvredhat_csafNVDCVE.orgMITRE
veröffentlicht 2019-09-25geändert 2026-06-17
08

Referenzen (24)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan