PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2017 document archive · 31

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,053 documents · Identifier year 2017 · 31 / 42

  1. CVE-2017-7608elfutils: Heap-buffer overflow in the ebl_object_note_type_name function
  2. CVE-2017-7607elfutils: Heap-buffer overflow in the handle_gnu_hash function
  3. CVE-2017-7606ImageMagick: Char outside of range in coders/rle.c
  4. CVE-2017-7602libtiff: Signed integer overflow in tif_read.c
  5. CVE-2017-7601libtiff: Signed integer overflow in tif_jpeg.c
  6. CVE-2017-7600libtiff: Unsigned char out of range in tif_dirwrite.c
  7. CVE-2017-7599libtiff: Unsigned short out of range in tif_dirwrite.c
  8. CVE-2017-7598libtiff: Divide-by-zero in tif_dirread.c
  9. CVE-2017-7597libtiff: Float out of range issue in tif_dirread.c
  10. CVE-2017-7596libtiff: Float out of range issue in tif_dir.c
  11. CVE-2017-7595libtiff: Divide-by-zero in JPEGSetupEncode (tiff_jpeg.c)
  12. CVE-2017-7594libtiff: Memory leak in OJPEGReadHeaderInfoSecTablesDcTable function
  13. CVE-2017-7593libtiff: tif_rawdata not properly initialized in tif_read.c
  14. CVE-2017-7592libtiff: Left shift of unsigned char without a cast
  15. CVE-2017-7586libsndfile: Error in header_read() causing stack-based buffer overflow
  16. CVE-2017-7585libsndfile: Stack-based buffer overflow in flac_buffer_copy()
  17. CVE-2017-7562krb5: Authentication bypass by improper validation of certificate EKU and SAN
  18. CVE-2017-7560rhnsd: World-writable PID files
  19. CVE-2017-7558kernel: Out of bounds read in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() in SCTP stack
  20. CVE-2017-7555augeas: Improper handling of escaped strings leading to memory corruption
  21. CVE-2017-7551389-ds-base: Password brute-force possible for locked account due to different return codes
  22. CVE-2017-7548postgresql: lo_put() function ignores ACLs
  23. CVE-2017-7547postgresql: pg_user_mappings view discloses passwords to users lacking server privileges
  24. CVE-2017-7546postgresql: Empty password accepted in some authentication methods
  25. CVE-2017-7544libexif: Out-of-bounds heap read in exif_data_save_data_entry function
  26. CVE-2017-7542kernel: Integer overflow in ip6_find_1stfragopt() causes infinite loop
  27. CVE-2017-7541kernel: Possible heap buffer overflow in brcmf_cfg80211_mgmt_tx()
  28. CVE-2017-7539Qemu: qemu-nbd crashes due to undefined I/O coroutine
  29. CVE-2017-7537pki-core: mock CMC authentication plugin with hardcoded secret enabled by default
  30. CVE-2017-7536hibernate-validator: Privilege escalation when running under the security manager
  31. CVE-2017-7533kernel: a race between inotify_handle_event() and sys_rename()
  32. CVE-2017-7526libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery
  33. CVE-2017-7525jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper
  34. CVE-2017-7524tpm2-tools: Sending password in plaintext for HMAC generation on server
  35. CVE-2017-7518Kernel: KVM: debug exception via syscall emulation
  36. CVE-2017-7516cpio: --no-absolute-filenames bypass via symlinks
  37. CVE-2017-7515poppler: Stack exhaustion due to infinite recursive call in pdfunite
  38. CVE-2017-7511poppler: Null pointer dereference in pdfunite via crafted documents
  39. CVE-2017-7507gnutls: Crash upon receiving well-formed status_request extension
  40. CVE-2017-7506spice: Possible buffer overflow via invalid monitor configurations
  41. CVE-2017-7502nss: Null pointer dereference when handling empty SSLv2 messages
  42. CVE-2017-7501rpm: Following symlinks to files when installing packages allows privilege escalation
  43. CVE-2017-7500rpm: Following symlinks to directories when installing packages allows privilege escalation
  44. CVE-2017-7495kernel: ext4: power failure during write(2) causes on-disk information leak
  45. CVE-2017-7494samba: Loading shared modules from any path in the system leading to RCE (SambaCry)
  46. CVE-2017-7493Qemu: 9pfs: guest privilege escalation in virtfs mapped-file mode
  47. CVE-2017-7488authconfig: Information leak when SSSD is used for authentication against remote server
  48. CVE-2017-7487kernel: Reference counter leak in ipxitf_ioctl resulting into use after free
  49. CVE-2017-7486postgresql: pg_user_mappings view discloses foreign server passwords
  50. CVE-2017-7485postgresql: libpq ignores PGREQUIRESSL environment variable
CVE 2017 document archive — Page 31 | PulseLinux