PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2017 document archive · 11

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,053 documents · Identifier year 2017 · 11 / 42

  1. CVE-2017-14265libraw: Stack based buffer overflow in the xtrans_interpolate function
  2. CVE-2017-14249ImageMagick: Division by zero in the GetPixelCacheTileSize function
  3. CVE-2017-14248ImageMagick: Heap-based buffer over-read in the SampleImage() function
  4. CVE-2017-14246libsndfile: Out-of-bounds read in the function d2ulaw_array()
  5. CVE-2017-14245libsndfile: Out-of-bounds read in the function d2alaw_array()
  6. CVE-2017-14230cyrus-imapd: Off-by-one error in prefix calculation in the mboxlist_do_find function
  7. CVE-2017-14229jasper: excessive looping in jpc_dec_tileinit()
  8. CVE-2017-14228nasm: NULL pointer dereference in the paste_tokens function
  9. CVE-2017-14226libwpd: Heap-based buffer over-read in WPXTableList class
  10. CVE-2017-14224ImageMagick: Heap-based buffer overflow in the WritePCXImage function
  11. CVE-2017-14176bzr: does not strip bzr+ssh SSH options
  12. CVE-2017-14175ImageMagick: Lack of EOF check in the ReadXBMImage() function
  13. CVE-2017-14174ImageMagick: Lack of EOF check in the ReadPSDLayersInternal() function
  14. CVE-2017-14173ImageMagick: Integer overflow in the function ReadTXTImage()
  15. CVE-2017-14172ImageMagick: Lack of an EOF check in ReadPSImage() function
  16. CVE-2017-14167Qemu: i386: multiboot OOB access while loading kernel image
  17. CVE-2017-14166libarchive: Heap-based buffer over-read in the atol8 function
  18. CVE-2017-14164openjpeg2: Heap-based buffer overflow in opj_write_bytes_LE
  19. CVE-2017-14160libvorbis: Out-of-bounds read in the bark_noise_hybridmp function
  20. CVE-2017-14159openldap: Privilege escalation via PID file manipulation
  21. CVE-2017-14156kernel: driver/video/fbdev/aty/atyfb_base.c: atyfb_ioctl() stack infoleak
  22. CVE-2017-14152openjpeg: Heap-based buffer overflow in opj_write_bytes_LE in cio.c
  23. CVE-2017-14151openjpeg: Heap-based buffer overflow in opj_mqc_flush in mqc.c
  24. CVE-2017-14140kernel: Missing permission check in move_pages system call
  25. CVE-2017-14139GraphicsMagick: Memory leak in WriteMSLImage function in coders/msl.c
  26. CVE-2017-14138ImageMagick: Memory leak in ReadWEBPImage function in coders/webp.c
  27. CVE-2017-14137ImageMagick: Excessive memory allocation in ReadWEBPImage function in coders/webp.c
  28. CVE-2017-14136opencv: out-of-bounds write error in the function FillColorRow1
  29. CVE-2017-14132jasper: heap-based buffer over-read in jas_image_ishomosamp()
  30. CVE-2017-14130binutils: Heap-based buffer over-read in the _bfd_elf_parse_attributes function
  31. CVE-2017-14129binutils: Heap-based buffer over-read in the read_section function
  32. CVE-2017-14128binutils: Heap-based buffer over-read in the decode_line_info function
  33. CVE-2017-14108gedit: CPU consumption via crafted file
  34. CVE-2017-14107libzip: Memory allocation failure in _zip_cdir_grow function
  35. CVE-2017-14106kernel: Divide-by-zero in __tcp_select_window
  36. CVE-2017-14064ruby: Arbitrary heap exposure during a JSON.generate call
  37. CVE-2017-14062libidn2: Integer overflow in puny_decode.c/decode_digit
  38. CVE-2017-14061libidn2: integer overflow in bidi.c/_isBidi()
  39. CVE-2017-14060ImageMagick: NULL pointer dereference in ReadCUTImage function
  40. CVE-2017-14051kernel: Integer overflow in the qla2x00_sysfs_write_optrom_ctl function
  41. CVE-2017-14041openjpeg: Stack-based buffer over-write in pgxtoimage function in bin/jp2/convert.c
  42. CVE-2017-14040openjpeg: Invalid write access in bin/jp2/convert.c
  43. CVE-2017-14039openjpeg: Heap-based buffer overflow in opj_t2_encode_packet function in lib/openjp2/t2.c
  44. CVE-2017-14033ruby: Buffer underrun in OpenSSL ASN1 decode
  45. CVE-2017-13870webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution
  46. CVE-2017-13866webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution
  47. CVE-2017-13856webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution
  48. CVE-2017-13769ImageMagick: Improper input validation in WriteTHUMBNAILImage function in coders/thumbnail.c
  49. CVE-2017-13768ImageMagick: NULL pointer dereference in IdentifyImage function in MagickCore/identify.c
  50. CVE-2017-13767wireshark: MSDP dissector infinite loop (wnpa-sec-2017-38)
CVE 2017 document archive — Page 11 | PulseLinux