PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2017 document archive · 2

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,053 documents · Identifier year 2017 · 2 / 42

  1. CVE-2017-1000100curl: TFTP sends more than buffer size
  2. CVE-2017-1000099curl: FILE buffer read out of bounds
  3. CVE-2017-1000098golang: net/http: multipart ReadForm close file after copy
  4. CVE-2017-1000097golang: User's trust preferences for root certificates were not honored
  5. CVE-2017-1000083evince: command injection via filename in tar-compressed comics archive
  6. CVE-2017-1000082systemd: fails to parse usernames that start with digits
  7. CVE-2017-1000061xmlsec1: xmlsec vulnerable to external entity expansion
  8. CVE-2017-1000056kubernetes: Privilege escalation in the PodSecurityPolicy admission plugin
  9. CVE-2017-1000050jasper: NULL pointer exception in jp2_encode()
  10. CVE-2017-1000044gtk-vnc: Incorrect boundaries check when updating framebuffer
  11. CVE-2017-1000024shotwell: Information disclosure in the web publishing plugins
  12. CVE-2017-20285perl-yaml: perl-yaml: Arbitrary destructor method execution via crafted YAML document
  13. CVE-2017-20230perl-Storable: Storable for Perl: Denial of service via stack overflow in retrieve_hook function
  14. CVE-2017-20146gorilla: Usage of the CORS handler may apply improper CORS headers
  15. CVE-2017-20005nginx: buffer overflow in ngx_gmtime() triggered by 5 digit years
  16. CVE-2017-20004rust: synchronization problem in the MutexGuard object
  17. CVE-2017-18926raptor: heap-based buffer overflows due to an error in calculating the maximum nspace declarations for the XML writer
  18. CVE-2017-18922libvncserver: websocket decoding buffer overflow
  19. CVE-2017-18640snakeyaml: Billion laughs attack via alias feature
  20. CVE-2017-18595kernel: double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c
  21. CVE-2017-18594nmap: denial of service condition due to a double free when SSH connection fails
  22. CVE-2017-18552kernel: OOB read and write in net/rds/af_rds.c
  23. CVE-2017-18551kernel: out of bounds write in function i2c_smbus_xfer_emulated in drivers/i2c/i2c-core-smbus.c
  24. CVE-2017-18550kernel: information exposure in drivers/scsi/aacraid/commctrl.c
  25. CVE-2017-18549kernel: information exposure in drivers/scsi/aacraid/commctrl.c
  26. CVE-2017-18509kernel: not checking sk_type and protocol in net/ipv6/ip6mr.c leads to general protection fault, or arbitrary code execution
  27. CVE-2017-18379kernel: out of bound access in drivers/nvme/target/fc.c
  28. CVE-2017-18360kernel: Division by zero in change_port_settings in drivers/usb/serial/io_ti.c resulting in a denial of service
  29. CVE-2017-18344kernel: out-of-bounds access in the show_timer function in kernel/time/posix-timers.c
  30. CVE-2017-18342PyYAML: yaml.load() API could execute arbitrary code
  31. CVE-2017-18273ImageMagick: infinite loop ReadTXTImage in function in coders/txt.c
  32. CVE-2017-18272ImageMagick: use-after-free in ReadOneMNGImage function in coders/png.c
  33. CVE-2017-18271ImageMagick: infinite loop in ReadMIFFImage function in coders/miff.c
  34. CVE-2017-18270kernel: improper keyrings creation
  35. CVE-2017-18269glibc: memory corruption in memcpy-sse2-unaligned.S
  36. CVE-2017-18267poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service
  37. CVE-2017-18266xdg-utils: Argument injection vulnerability in open_envvar() function
  38. CVE-2017-18261kernel: Infinite recursion in arch/arm64/include/asm/arch_timer.h:arch_timer_reg_read_stable macro allows local users to cause denial of service
  39. CVE-2017-18258libxml2: Unrestricted memory usage in xz_head() function in xzlib.c
  40. CVE-2017-18257kernel: Inifinite loop caused by integer overflow in fs/f2fs/data.c:__get_data_block() allows for denial of service
  41. CVE-2017-18255kernel: Integer overflow in events/core.c:perf_cpu_time_max_percent_handler() can allow for denial of service
  42. CVE-2017-18254ImageMagick: memory leak in WriteGIFImage function in coders/gif.c
  43. CVE-2017-18253ImageMagick: NULL pointer dereference LoadOpenCLDevices function in MagickCore/opencl.c
  44. CVE-2017-18252ImageMagick: assertion failure in MogrifyImageList function in MagickWand/mogrify.c
  45. CVE-2017-18251ImageMagick: memory leak in ReadPCDImage function in coders/pcd.c
  46. CVE-2017-18250ImageMagick: NULL pointer dereference in LogOpenCLBuildFailure function in MagickCore/opencl.c
  47. CVE-2017-18249kernel: Race condition in fs/f2fs/node.c:add_free_nid() function allows local users to cause denial of service
  48. CVE-2017-18248cups: Invalid usernames handled in scheduler/ipp.c:add_job() allow remote attackers to cause a denial of service
  49. CVE-2017-18241kernel: Null pointer dereference in fs/f2fs/segment.c via mounting fs with noflush_merge option allows local denial of service
  50. CVE-2017-18238exempi: Infinite loop in TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTime_Support.cpp
CVE 2017 document archive — Page 2 | PulseLinux