CVE-2019-11485

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-412

Affected software

No affected versions have been published.

Timeline

Published
Feb 8, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-114867.0The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions.CVE-2019-114877.8The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RCVE-2019-114888.1Incorrect Access Control in the Account Access / Password Reset Link in SimplyBook.me Enterprise before 2019-04-23 allows Unauthorized AttacCVE-2019-114898.8Incorrect Access Control in the Administrative Management Interface in SimplyBook.me Enterprise before 2019-04-23 allows Authenticated Low-PCVE-2019-11498.8A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker CVE-2019-114907.8An issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter using either pcap_sendqueue_queue() or pcapCVE-2019-114927.5ProjectSend before r1070 writes user passwords to the server logs.CVE-2019-114937.8VeryPDF 4.1 has a Memory Overflow leading to Code Execution because pdfocx!CxImageTIF::operator in pdfocx.ocx (used by pdfeditor.exe and pdfCVE-2019-114947.5In the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login service crashes when the client disconnects prematurely during theCVE-2019-114959.8In Couchbase Server 5.1.1, the cookie used for intra-node communication was not generated securely. Couchbase Server uses erlang:now() to seCVE-2019-114969.1In versions of Couchbase Server prior to 5.0, the bucket named "default" was a special bucket that allowed read and write access without autCVE-2019-114977.5In Couchbase Server 5.0.0, when an invalid Remote Cluster Certificate was entered as part of the reference creation, XDCR did not parse and
CVE-2019-11485: Low severity, CVSS 3.3 | Vulnix