PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2017 document archive · 23

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,053 documents · Identifier year 2017 · 23 / 42

  1. CVE-2017-9814cairo: Out-of-bounds read due to mishandling of unexpected malloc(0) call
  2. CVE-2017-9806libreoffice: Out-of-bounds write in the WW8Fonts::WW8Fonts functionality
  3. CVE-2017-9800subversion: Command injection through clients via malicious svn+ssh URLs
  4. CVE-2017-9798httpd: Use-after-free by limiting unregistered HTTP method (Optionsbleed)
  5. CVE-2017-9789httpd: Read after free in mod_http2
  6. CVE-2017-9788httpd: Uninitialized memory reflection in mod_auth_digest
  7. CVE-2017-9782jasper: cdef.ents[] heap-based buffer over-read in jp2_decode()
  8. CVE-2017-9780flatpak: Privilege escalation via setuid/world-writable file permissions
  9. CVE-2017-9778gdb: Malformed section in an ELF binary or a core file can cause memory exhaustion
  10. CVE-2017-9776poppler: Integer overflow in JBIG2Stream.cc
  11. CVE-2017-9775poppler: Stack-buffer overflow in GfxState.cc
  12. CVE-2017-9772ocaml: Insufficient sanitisation allows privilege escalation for setuid binaries
  13. CVE-2017-9766wireshark: PROFINET IO data with a high recursion depth can cause stack exhaustion
  14. CVE-2017-9763grub2: Stack exhaustion in grub_ext2_read_block
  15. CVE-2017-9756binutils: Address violation in aarch64_ext_ldst_reglist function when disassembling corrupt aarch64 binary
  16. CVE-2017-9755binutils: Global buffer over-read in opcodes/i386-dis.c while checking invalid registers
  17. CVE-2017-9754binutils: Stack-based buffer over-read in process_otr function
  18. CVE-2017-9753binutils: Address violation in versados_mkobject function when disassembling a corrupt versados binary
  19. CVE-2017-9752binutils: Heap buffer over-read in f_bfd_vms_get_value function when processing a corrupt Alpha VMA binary
  20. CVE-2017-9751binutils: Stack-based buffer over-read in opcodes/rl78-decode.opc when disassembling a corrupt RL78 binary
  21. CVE-2017-9750binutils: Global buffer over-read in opcodes/rx-decode.opc when disassembling a corrupt RX binary
  22. CVE-2017-9749binutils: Global buffer over-read in *regs* macros when disassembling corrupt bfin binary
  23. CVE-2017-9748binutils: Stack-based buffer over-read in ieee_object_p function
  24. CVE-2017-9747binutils: Stack-based buffer over-read in ieee_archive_p function while disassembling corrupt IEEE binary
  25. CVE-2017-9746binutils: Heap buffer over-read in disassemble_bytes function when disassembling a corrupt binary
  26. CVE-2017-9745binutils: Heap buffer over-read in _bfd_vms_slurp_etir function when handling VMS alpha binaries
  27. CVE-2017-9744binutils: Address violation in sh_elf_set_mach_from_flags function when disassembling a corrupt SH binary
  28. CVE-2017-9743binutils: Global buffer over-read in print_insn_score32 function while disassembling corrupt score binary
  29. CVE-2017-9742binutils: Global buffer over-read in print_insn_score16 function while disassembling corrupt score binary
  30. CVE-2017-9740ghostscript: Heap-buffer over-read in the xps_decode_font_char_imp function
  31. CVE-2017-9739ghostscript: Heap-buffer over-read in the Ins_JMPR function
  32. CVE-2017-9735jetty: Timing channel attack in util/security/Password.java
  33. CVE-2017-9727ghostscript: Heap-buffer over-read in the gx_ttfReader__Read function
  34. CVE-2017-9726ghostscript: Heap-buffer over-read in the Ins_MDRP function
  35. CVE-2017-9725kernel: Incorrect type conversion for size during dma allocation
  36. CVE-2017-9670gnuplot: Uninitialized stack variable in load_tic_series()
  37. CVE-2017-9620ghostscript: Heap-buffer over-read in the xps_select_font_encoding function
  38. CVE-2017-9619ghostscript: Segmentation fault in the xps_true_callback_glyph_name function
  39. CVE-2017-9618ghostscript: Buffer overflow in the xps_load_sfnt_name function
  40. CVE-2017-9617wireshark: Deeply nested DAAP data may cause stack exhaustion
  41. CVE-2017-9616wireshark: Overly deep mp4 chunks may cause stack exhaustion
  42. CVE-2017-9614libjpeg-turbo: Invalid memory access in the fill_input_buffer function
  43. CVE-2017-9612ghostscript: Use-after-free in the Ins_IP function
  44. CVE-2017-9611ghostscript: Heap-buffer over-read in the Ins_MIRP function
  45. CVE-2017-9610ghostscript: Heap-buffer over-read in the xps_load_sfnt_name function
  46. CVE-2017-9605kernel: Uninitialized kernel memory leak in vmw_gb_surface_define_ioctl function
  47. CVE-2017-9604kmail: Send Later with Delay bypasses OpenPGP
  48. CVE-2017-9526libgcrypt: Possible timing attack on EdDSA session key
  49. CVE-2017-9524Qemu: nbd: segmentation fault due to client non-negotiation
  50. CVE-2017-9503Qemu: scsi: megasas: null pointer dereference while processing megasas command
CVE 2017 document archive — Page 23 | PulseLinux