PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2017 document archive

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,053 documents · Identifier year 2017 · 1 / 42

  1. CVE-2017-1002102kubernetes: Malicious containers can delete any file from the node
  2. CVE-2017-1002101kubernetes: Volume security can be sidestepped with innocent emptyDir and subpath
  3. CVE-2017-1002100kubernetes: Incorrect default access permissions for Persistent Volumes
  4. CVE-2017-1000487plexus-utils: Mishandled strings in Commandline class allow for command injection
  5. CVE-2017-1000476ImageMagick: CPU exhaustion vulnerability in function ReadDDSInfo in coders/dds.c
  6. CVE-2017-1000456poppler: Invalid read in TextPool::addWord() causes crash and can lead to overflow in subsequent calculations
  7. CVE-2017-1000450opencv: out of bounds write in functions FillUniColor and FillUniGray in opencv/modules/imgcodecs/src/utils.cpp
  8. CVE-2017-1000445imagemagick: NULL pointer dereference in MagickCore component can lead to a denial of service
  9. CVE-2017-1000422gdk-pixbuf: Integer overflow in io-gif.c:gif_get_lzw() can lead to memory corruption and potential code execution
  10. CVE-2017-1000418wildmidi: Heap-based Buffer Overflow in WildMidi_Open
  11. CVE-2017-1000410kernel: Stack information leak in the EFS element
  12. CVE-2017-1000409glibc: Buffer overflow triggerable via LD_LIBRARY_PATH
  13. CVE-2017-1000408glibc: Memory leak reachable via LD_HWCAP_MASK
  14. CVE-2017-1000407Kernel: KVM: DoS via write flood to I/O port 0x80
  15. CVE-2017-1000405kernel: pmd can become dirty without going through a COW cycle
  16. CVE-2017-1000383emacs: Ignores umask when creating a swap file
  17. CVE-2017-1000382vim: Ignores umask when creating a swap file
  18. CVE-2017-1000381c-ares: NAPTR parser out of bounds access
  19. CVE-2017-1000380kernel: information leak due to a data race in ALSA timer
  20. CVE-2017-1000379kernel: Incorrectly mapped contents of PIE executable
  21. CVE-2017-1000376libffi: Requests an executable stack
  22. CVE-2017-1000371kernel: offset2lib allows for the stack guard page to be jumped over
  23. CVE-2017-1000370kernel: offset2lib patch protection bypass
  24. CVE-2017-1000368sudo: Privilege escalation via improper get_process_ttyname() parsing (insufficient fix for CVE-2017-1000367)
  25. CVE-2017-1000367sudo: Privilege escalation in via improper get_process_ttyname() parsing
  26. CVE-2017-1000366glibc: heap/stack gap jumping via unbounded stack allocations
  27. CVE-2017-1000365kernel: RLIMIT_STACK/RLIMIT_INFINITY string size limitation bypass
  28. CVE-2017-1000364kernel: heap/stack gap jumping via unbounded stack allocations
  29. CVE-2017-1000363kernel: Out-of-bounds write in lp_setup in drivers/char/lp.c
  30. CVE-2017-1000257curl: IMAP FETCH response out of bounds read
  31. CVE-2017-1000256libvirt: TLS certificate verification disabled for clients
  32. CVE-2017-1000255kernel: Arbitrary stack overwrite causing oops via crafted signal frame
  33. CVE-2017-1000254curl: FTP PWD response parser out of bounds read
  34. CVE-2017-1000253kernel: load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary
  35. CVE-2017-1000252kernel: kvm: Reachable BUG() on out-of-bounds guest IRQ
  36. CVE-2017-1000251kernel: stack buffer overflow in the native Bluetooth stack
  37. CVE-2017-1000250bluez: Out-of-bounds heap read in service_search_attr_req function
  38. CVE-2017-1000249file: Stack-based buffer overflow in do_bid_note()
  39. CVE-2017-1000232ldns: Memory corruption in ldns_str2rdf_long_str
  40. CVE-2017-1000231ldns: Memory corruption in ldns_rr_new_frm_fp_l
  41. CVE-2017-1000229optipng: integer overflow in tiffread.c:minitiff_read_info() leading to denial of service
  42. CVE-2017-1000211lynx: Use after free in HTML.c:HTML_put_string() can lead to memory disclosure
  43. CVE-2017-1000159evince: Command injection when exporting to PDF
  44. CVE-2017-1000158python: Integer overflow in PyString_DecodeEscape results in heap-base buffer overflow
  45. CVE-2017-1000117git: Command injection via malicious ssh URLs
  46. CVE-2017-1000116mercurial: command injection on clients through malicious ssh URLs
  47. CVE-2017-1000115Mercurial: pathaudit: path traversal via symlink
  48. CVE-2017-1000112kernel: Exploitable memory corruption due to UFO to non-UFO path switch
  49. CVE-2017-1000111kernel: Heap out-of-bounds read in AF_PACKET sockets
  50. CVE-2017-1000101curl: URL globbing out of bounds read
CVE 2017 document archive | PulseLinux