CVE-2019-18844

The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci_core.h (instead of other mechanisms for propagating error information or diagnostic information), which might allow attackers to cause a denial of service (assertion failure) within pci core. This is fixed in 1.2. 6199e653418e is a mitigation for pre-1.1 versions, whereas 2b3dedfb9ba1 is a mitigation for 1.1.

• CWE-617

• https://github.com/projectacrn/acrn-hypervisor/commit/2b3dedfb9ba13f15887f22b935d373f36c9a59faPatch, Third Party Advisory
• https://github.com/projectacrn/acrn-hypervisor/commit/6199e653418eda58cd698d8769820904453e2535Patch, Third Party Advisory
• https://github.com/projectacrn/acrn-hypervisor/compare/acrn-2019w25.4-140000p...acrn-2019w25.5-140000pThird Party Advisory
• https://github.com/projectacrn/acrn-hypervisor/issues/3252Third Party Advisory
• https://github.com/shuox/acrn-hypervisor/commit/97b153237c256c586e528eac7fc2f51aedb2b2fcThird Party Advisory
• https://github.com/projectacrn/acrn-hypervisor/commit/2b3dedfb9ba13f15887f22b935d373f36c9a59faPatch, Third Party Advisory
• https://github.com/projectacrn/acrn-hypervisor/commit/6199e653418eda58cd698d8769820904453e2535Patch, Third Party Advisory
• https://github.com/projectacrn/acrn-hypervisor/compare/acrn-2019w25.4-140000p...acrn-2019w25.5-140000pThird Party Advisory
• https://github.com/projectacrn/acrn-hypervisor/issues/3252Third Party Advisory
• https://github.com/shuox/acrn-hypervisor/commit/97b153237c256c586e528eac7fc2f51aedb2b2fcThird Party Advisory

Published

Nov 13, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18838An issue was discovered in Envoy 1.12.0. Upon receipt of a m…7.5
• CVE-2019-18839FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin pa…9
• CVE-2019-1884A vulnerability in the web proxy functionality of Cisco Asyn…7.7
• CVE-2019-18840In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity ch…7.5
• CVE-2019-18841Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick g…7.3
• CVE-2019-18842A cross-site scripting (XSS) vulnerability in the configurat…6.1
• CVE-2019-18845The MsIo64.sys and MsIo32.sys drivers in Patriot Viper RGB b…7.1
• CVE-2019-18846OX App Suite through 7.10.2 allows SSRF.5
• CVE-2019-18847Enterprise Access Client Auto-Updater allows for Remote Code…9.8
• CVE-2019-18848The json-jwt gem before 1.11.0 for Ruby lacks an element cou…7.5
• CVE-2019-18849In tnef before 1.4.18, an attacker may be able to write to t…5.5
• CVE-2019-1885A vulnerability in the Redfish protocol of Cisco Integrated …7.2