PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2017 document archive · 21

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,053 documents · Identifier year 2017 · 21 / 42

  1. CVE-2017-10972xorg-x11-server: Unitialized data in endianness conversion in the XEvent handling
  2. CVE-2017-10971xorg-x11-server: Stack overflow in the endianness conversion of X Events
  3. CVE-2017-10966irssi: Use-after-free while updating the internal nick list
  4. CVE-2017-10965irssi: NULL pointer dereference when receiving messages with invalid time stamps
  5. CVE-2017-10928ImageMagick: heap-based buffer over-read in the GetNextToken function
  6. CVE-2017-10911xen: blkif responses leak backend stack data (XSA-216)
  7. CVE-2017-10810Kernel: virtio-gpu: memory leakage while creating gpu object
  8. CVE-2017-10806Qemu: usb-redirect: stack buffer overflow in debug logging
  9. CVE-2017-10790libtasn1: NULL pointer dereference in the _asn1_check_identifier function
  10. CVE-2017-10789perl-DBD-MySQL: Possible MITM attack when mysql_ssl=1
  11. CVE-2017-10788perl-DBD-MySQL: Use-after-free when calling mysql_stmt_error() after mysql_stmt_close()
  12. CVE-2017-10784ruby: Escape sequence injection vulnerability in the Basic authentication of WEBrick
  13. CVE-2017-10688libtiff: Assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function
  14. CVE-2017-10686nasm: Use-after-free in the detoken() function
  15. CVE-2017-10685ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function
  16. CVE-2017-10684ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c
  17. CVE-2017-10672perl-XML-LibXML: Use-after-free by controlling the arguments to a replaceChild call
  18. CVE-2017-10664Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort
  19. CVE-2017-10663kernel: Missing sanity check for segno and blkoff read
  20. CVE-2017-10662kernel: Missing sanity check for segment count in f2fs
  21. CVE-2017-10661kernel: Handling of might_cancel queueing is not properly pretected against race
  22. CVE-2017-10388OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794)
  23. CVE-2017-10384mysql: Server: DDL unspecified vulnerability (CPU Oct 2017)
  24. CVE-2017-10379mysql: Client programs unspecified vulnerability (CPU Oct 2017)
  25. CVE-2017-10378mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)
  26. CVE-2017-10365mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)
  27. CVE-2017-10357OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597)
  28. CVE-2017-10356OpenJDK: weak protection of key stores against brute forcing (Security, 8181692)
  29. CVE-2017-10355OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612)
  30. CVE-2017-10350OpenJDK: unbounded memory allocation in JAXWSExceptionBase deserialization (JAX-WS, 8181100)
  31. CVE-2017-10349OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)
  32. CVE-2017-10348OpenJDK: multiple unbounded memory allocations in deserialization (Libraries, 8181432)
  33. CVE-2017-10347OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)
  34. CVE-2017-10346OpenJDK: insufficient loader constraints checks for invokespecial (Hotspot, 8180711)
  35. CVE-2017-10345OpenJDK: unbounded resource use in JceKeyStore deserialization (Serialization, 8181370)
  36. CVE-2017-10320mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)
  37. CVE-2017-10314mysql: Server: Memcached unspecified vulnerability (CPU Oct 2017)
  38. CVE-2017-10313mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2017)
  39. CVE-2017-10311mysql: Server: FTS unspecified vulnerability (CPU Oct 2017)
  40. CVE-2017-10296mysql: Server: DML unspecified vulnerability (CPU Oct 2017)
  41. CVE-2017-10295OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)
  42. CVE-2017-10294mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)
  43. CVE-2017-10286mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)
  44. CVE-2017-10285OpenJDK: incorrect privilege use when handling unreferenced objects (RMI, 8174966)
  45. CVE-2017-10284mysql: Server: Stored Procedure unspecified vulnerability (CPU Oct 2017)
  46. CVE-2017-10283mysql: Server: Performance Schema unspecified vulnerability (CPU Oct 2017)
  47. CVE-2017-10281OpenJDK: multiple unbounded memory allocations in deserialization (Serialization, 8174109)
  48. CVE-2017-10279mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)
  49. CVE-2017-10276mysql: Server: FTS unspecified vulnerability (CPU Oct 2017)
  50. CVE-2017-10274OpenJDK: CardImpl incorrect state handling (Smart Card IO, 8169026)
CVE 2017 document archive — Page 21 | PulseLinux