Question 1

What is CVE-2019-20445?

Accepted Answer

CVE-2019-20445 is a critical-severity software vulnerability (CWE-444) with a CVSS score of 9.1.

Question 2

Is CVE-2019-20445 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 13%.

Question 3

What products does CVE-2019-20445 affect?

Accepted Answer

Tracked products affected include Ubuntu, Debian, Red Hat Enterprise Linux, Fedora, Spark, JBoss. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2019-20445?

Accepted Answer

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2019-20445

Summary

Affected products we track (6)

Recommendation

Additional information