PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2017 document archive · 35

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,053 documents · Identifier year 2017 · 35 / 42

  1. CVE-2017-5981zziplib: assertion failure in seeko.c
  2. CVE-2017-5980zziplib: NULL pointer dereference in zzip_mem_entry_new (memdisk.c)
  3. CVE-2017-5979zziplib: NULL pointer dereference in prescan_entry (fseeko.c)
  4. CVE-2017-5978zziplib: out of bounds read in zzip_mem_entry_new (memdisk.c)
  5. CVE-2017-5977zziplib: invalid memory read in zzip_mem_entry_extra_block (memdisk.c)
  6. CVE-2017-5976zziplib: heap-based buffer overflow in zzip_mem_entry_extra_block (memdisk.c)
  7. CVE-2017-5975zziplib: heap-based buffer overflow in __zzip_get64 (fetch.c)
  8. CVE-2017-5974zziplib: heap-based buffer overflow in __zzip_get32 (fetch.c)
  9. CVE-2017-5973Qemu: usb: infinite loop while doing control transfer in xhci_kick_epctx
  10. CVE-2017-5972kernel: SYN cookie protection mechanism not properly implemented
  11. CVE-2017-5970kernel: ipv4: Invalid IP options could cause skb->dst drop
  12. CVE-2017-5969libxml2: Null pointer dereference in xmlSaveDoc implementation
  13. CVE-2017-5967kernel: Time subsystem allows local users to discover real PID values
  14. CVE-2017-5953vim: Tree length values not validated properly when handling a spell file
  15. CVE-2017-5951ghostscript: NULL pointer dereference in the mem_get_bits_rectangle function
  16. CVE-2017-5932bash: Code execution in bash autocompletion
  17. CVE-2017-5931Qemu: virtio: integer overflow in handling virtio-crypto requests
  18. CVE-2017-5899s-nail: privsep helper local privilege escalation
  19. CVE-2017-5898Qemu: usb: integer overflow in emulated_apdu_from_guest
  20. CVE-2017-5897kernel: ip6_gre: Invalid reads in ip6gre_err
  21. CVE-2017-5885gtk-vnc: Integer overflow when processing SetColorMapEntries
  22. CVE-2017-5884gtk-vnc: Improper check of framebuffer boundaries when processing a tile
  23. CVE-2017-5857Qemu: display: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref
  24. CVE-2017-5856Qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd
  25. CVE-2017-5849netpbm: Calls TIFFRGBA with width and height parameters switched
  26. CVE-2017-5848gstreamer-plugins-bad-free: Invalid memory read in gst_ps_demux_parse_psm
  27. CVE-2017-5845gstreamer-plugins-good: Invalid memory read in gst_avi_demux_parse_ncdt
  28. CVE-2017-5844gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps
  29. CVE-2017-5843gstreamer-plugins-bad-free: Use after free in gst_mini_object_unref / gst_tag_list_unref / gst_mxf_demux_update_essence_tracks
  30. CVE-2017-5842gstreamer-plugins-base: Out-of-bounds heap read in html_context_handle_element
  31. CVE-2017-5841gstreamer-plugins-good: Heap out-of-bounds read in gst_avi_demux_parse_ncdt
  32. CVE-2017-5840gstreamer-plugins-good: Out of bounds heap read in qtdemux_parse_samples
  33. CVE-2017-5839gstreamer-plugins-base: Stack overflow in gst_riff_create_audio_caps
  34. CVE-2017-5838gstreamer: Out-of-bounds read in gst_date_time_new_from_iso8601_string()
  35. CVE-2017-5837gstreamer-plugins-base: Floating point exception in gst_riff_create_audio_caps
  36. CVE-2017-5836libplist: Type inconsistency in bplist.c
  37. CVE-2017-5835libplist: Memory allocation error
  38. CVE-2017-5834libplist: Heap-buffer overflow in parse_dict_node
  39. CVE-2017-5754hw: cpu: speculative execution permission faults handling
  40. CVE-2017-5753hw: cpu: speculative execution bounds-check bypass
  41. CVE-2017-5735edk2: Privilege escalation via heap-based buffer overflow in Decode() function
  42. CVE-2017-5734edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function
  43. CVE-2017-5733edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function
  44. CVE-2017-5732edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c
  45. CVE-2017-5731edk2: Privilege escalation via processing of malformed files in TianoCompress.c
  46. CVE-2017-5715hw: cpu: speculative execution branch target injection
  47. CVE-2017-5669kernel: Shmat allows mmap null page protection bypass
  48. CVE-2017-5667Qemu: sd: sdhci OOB access during multi block SDMA transfer
  49. CVE-2017-5664tomcat: Security constrained bypass in error page mechanism
  50. CVE-2017-5662batik: XML external entity processing vulnerability
CVE 2017 document archive — Page 35 | PulseLinux