CVE-2019-6338

In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; Drupal core uses the third-party PEAR Archive_Tar library. This library has released a security update which impacts some Drupal configurations. Refer to CVE-2018-1000888 for details

• CWE-502

• http://www.securityfocus.com/bid/106706Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/02/msg00032.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2019/dsa-4370Third Party Advisory
• https://www.drupal.org/sa-core-2019-001Patch, Vendor Advisory
• http://www.securityfocus.com/bid/106706Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/02/msg00032.htmlMailing List, Third Party Advisory
• https://www.debian.org/security/2019/dsa-4370Third Party Advisory
• https://www.drupal.org/sa-core-2019-001Patch, Vendor Advisory

Published

Jan 22, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6331An issue was found in Samsung Mobile Print (Android) version…3.3
• CVE-2019-6332A potential security vulnerability has been identified with …4.8
• CVE-2019-6333A potential security vulnerability has been identified with …6.7
• CVE-2019-6334HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Ma…9.8
• CVE-2019-6335A potential security vulnerability has been identified with …7.5
• CVE-2019-6337For the printers listed a maliciously crafted print file mig…5.2
• CVE-2019-6339In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.…
• CVE-2019-6340Some field types do not properly sanitize data from non-form…8.1
• CVE-2019-6341In Drupal 7 versions prior to 7.65; Drupal 8.6 versions prio…
• CVE-2019-6342An access bypass vulnerability exists when the experimental …9.8
• CVE-2019-6438SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishan…
• CVE-2019-6439examples/benchmark/tls_bench.c in a benchmark tool in wolfSS…