CVE-2019-8981

tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the need_bytes value is mismanaged.

• CWE-787

• http://axtls.sourceforge.netProduct, Third Party Advisory
• https://www.telekom.com/en/corporate-responsibility/data-protection-data-security/security/details/advisories-504842Patch, Third Party Advisory
• https://www.telekom.com/resource/blob/566546/276aaa2eab781729f2544d62edecf002/dl-190322-remote-buffer-overflow-in-a-axtls-data.pdfExploit, Patch, Third Party Advisory
• http://axtls.sourceforge.netProduct, Third Party Advisory
• https://www.telekom.com/en/corporate-responsibility/data-protection-data-security/security/details/advisories-504842Patch, Third Party Advisory
• https://www.telekom.com/resource/blob/566546/276aaa2eab781729f2544d62edecf002/dl-190322-remote-buffer-overflow-in-a-axtls-data.pdfExploit, Patch, Third Party Advisory

Published

Mar 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-8960A Denial of Service vulnerability related to command handlin…7.5
• CVE-2019-8961A Denial of Service vulnerability related to stack exhaustio…7.5
• CVE-2019-8963A Denial of Service (DoS) vulnerability was discovered in Fl…7.5
• CVE-2019-8978An improper authentication vulnerability can be exploited th…
• CVE-2019-8979Kohana through 3.3.6 has SQL Injection when the order_by() p…
• CVE-2019-8980A memory leak in the kernel_read_file function in fs/exec.c …7.5
• CVE-2019-8982com/wavemaker/studio/StudioService.java in WaveMaker Studio …
• CVE-2019-8983MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (iss…
• CVE-2019-8984MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (iss…
• CVE-2019-8985On Netis WF2411 with firmware 2.1.36123 and other Netis WF2x…
• CVE-2019-8986The SOAP API component vulnerability of TIBCO Software Inc.'…7.7
• CVE-2019-8987The application server component of TIBCO Software Inc.'s TI…5.4