CVE-2019-3500
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2019-3500
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-3500.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2019-3500
- Downstream
- Related
- Published
- 2019-01-02T07:29:00.197Z
- Modified
- 2025-11-20T11:04:12.692389Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.
- References
-
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/532M22TAOOIY3J4XX4R7BLZHXJRUSBQ2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MUUYDELHRLVE2AFNVR3OJ6ILUKVLY4B/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5OLPTVYHJZJ2MVEXJCNPXBSFPVPE4XX/
- https://github.com/aria2/aria2/issues/1329
- https://lists.debian.org/debian-lts-announce/2019/01/msg00012.html
- https://lists.debian.org/debian-lts-announce/2021/12/msg00039.html
- https://usn.ubuntu.com/3965-1/
Affected packages
Git / github.com/aria2/aria2
Affected ranges
- Type
- GIT
- Repo
- https://github.com/aria2/aria2
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
release-1.*
release-1.10.7
release-1.10.8
release-1.10.9
release-1.11.0
release-1.11.1
release-1.11.2
release-1.12.0
release-1.12.1
release-1.13.0
release-1.14.0
release-1.14.1
release-1.14.2
release-1.15.0
release-1.15.1
release-1.15.2
release-1.16.0
release-1.16.1
release-1.16.2
release-1.16.3
release-1.16.4
release-1.16.5
release-1.17.0
release-1.17.1
release-1.18.0
release-1.18.1
release-1.18.10
release-1.18.2
release-1.18.3
release-1.18.4
release-1.18.5
release-1.18.6
release-1.18.7
release-1.18.8
release-1.18.9
release-1.19.0
release-1.19.1
release-1.19.2
release-1.19.3
release-1.20.0
release-1.21.0
release-1.22.0
release-1.23.0
release-1.24.0
release-1.25.0
release-1.26.0
release-1.27.0
release-1.27.1
release-1.28.0
release-1.29.0
release-1.30.0
release-1.31.0
release-1.32.0
release-1.33.0
release-1.33.1