CVE-2019-16714

In the Linux kernel before 5.2.14, rds6_inc_info_copy in net/rds/recv.c allows attackers to obtain sensitive information from kernel stack memory because tos and flags fields are not initialized.

• CWE-909

• http://www.openwall.com/lists/oss-security/2019/09/24/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2019/09/25/1Mailing List, Third Party Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.14Mailing List, Vendor Advisory
• https://github.com/torvalds/linux/commit/7d0a06586b2686ba80c4a2da5f91cb10ffbea736Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20191031-0005/Third Party Advisory
• https://support.f5.com/csp/article/K48351130?utm_source=f5support&amp%3Butm_medium=RSS
• https://usn.ubuntu.com/4157-1/Third Party Advisory
• https://usn.ubuntu.com/4157-2/Third Party Advisory
• http://www.openwall.com/lists/oss-security/2019/09/24/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2019/09/25/1Mailing List, Third Party Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.14Mailing List, Vendor Advisory
• https://github.com/torvalds/linux/commit/7d0a06586b2686ba80c4a2da5f91cb10ffbea736Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20191031-0005/Third Party Advisory
• https://support.f5.com/csp/article/K48351130?utm_source=f5support&amp%3Butm_medium=RSS
• https://usn.ubuntu.com/4157-1/Third Party Advisory
• https://usn.ubuntu.com/4157-2/Third Party Advisory

Published

Sep 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16709ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as d…6.5
• CVE-2019-1671A vulnerability in the web-based management interface of Cis…6.1
• CVE-2019-16710ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as d…6.5
• CVE-2019-16711ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeIma…6.5
• CVE-2019-16712ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeIma…6.5
• CVE-2019-16713ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as d…6.5
• CVE-2019-16716OX App Suite through 7.10.2 has Incorrect Access Control.6.6
• CVE-2019-16717OX App Suite through 7.10.2 has XSS.6.1
• CVE-2019-16718In radare2 before 3.9.0, a command injection vulnerability e…7.8
• CVE-2019-16719WTCMS 1.0 allows index.php?g=admin&m=index&a=index CSRF with…6.5
• CVE-2019-1672A vulnerability in the Decryption Policy Default Action func…5.8
• CVE-2019-16720ZZZCMS zzzphp v1.7.2 does not properly restrict file upload …7.5