PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2017 document archive · 4

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,053 documents · Identifier year 2017 · 4 / 42

  1. CVE-2017-18008ImageMagick: Memory Leak in ReadPWPImage in coders/pwp.c
  2. CVE-2017-18005exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp
  3. CVE-2017-17997wireshark: Misuse of NULL pointer in MRDISC dissector
  4. CVE-2017-17975kernel: use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c
  5. CVE-2017-17973libtiff: heap-based use after free in tiff2pdf.c:t2p_writeproc
  6. CVE-2017-17969p7zip: heap-based buffer overflow in 7zip/Compress/ShrinkDecoder.cpp can allow an attacker to write arbitrary data and cause a crash
  7. CVE-2017-17942libtiff: Heap-based buffer overflow in PackBitsEncode function in tif_packbits.c
  8. CVE-2017-17935Wireshark: denial of service in the File_read_line function in epan/wslua/wslua_file.c
  9. CVE-2017-17934ImageMagick: memory leaks in coders/msl.c
  10. CVE-2017-17914ImageMagick: denial of service in the function ReadOnePNGImage in coders/png.c
  11. CVE-2017-17887ImageMagick: memory leak in the function GetImagePixelCache
  12. CVE-2017-17886ImageMagick: memory leak in the function ReadPSDChannelZip in coders/psd.c
  13. CVE-2017-17885ImageMagick: memory leak in the function ReadPICTImage in coders/pict.c
  14. CVE-2017-17884ImageMagick: memory leak in function WriteOnePNGImage in coders/png.c
  15. CVE-2017-17883ImageMagick: memory leak in the function ReadPGXImage in coders/pgx.c
  16. CVE-2017-17882ImageMagick: Memory leak in function ReadXPMImage in coders/xpm.c
  17. CVE-2017-17881ImageMagick: memory leak vulnerability in the function ReadMATImage in coders/mat.c
  18. CVE-2017-17880ImageMagick: stack-based buffer over-read in WriteWEBPImage in coders/webp.c
  19. CVE-2017-17879ImageMagick: Heap-based buffer over-read in ReadOneMNGImage function in coders/png.c
  20. CVE-2017-17864kernel: information disclosure via pointer leak in kernel/bpf/verifier.c
  21. CVE-2017-17863kernel: integer overflow in static int check_alu_op function in bpf/verifier.c
  22. CVE-2017-17862kernel: Improper logic pruning in bpf/verifier.c
  23. CVE-2017-17857kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging mishandling of invalid variable stack read operations
  24. CVE-2017-17856kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging the lack of stack-pointer alignment enforcement
  25. CVE-2017-17855kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging improper use of pointers in place of scalars
  26. CVE-2017-17854kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging unrestricted integer values for pointer arithmetic
  27. CVE-2017-17853kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging incorrect BPF_RSH signed bounds calculations
  28. CVE-2017-17852kernel: bpf/verifier.c allows local users to cause a denial of service by leveraging mishandling of 32-bit ALU ops
  29. CVE-2017-17840iscsi-initiator-utils: Heap-based buffer overflow in process_iscsid_broadcast()
  30. CVE-2017-17833openslp: Heap memory corruption in slpd/slpd_process.c allows denial of service or potentially code execution
  31. CVE-2017-17820nasm: Use-after-free in pp_list_one_macro function in asm/preproc.c
  32. CVE-2017-17819nasm: Illegal address access in find_cc function in asm/preproc.c
  33. CVE-2017-17818nasm: Heap-based buffer over-read in paste_tokens function in asm/preproc.c
  34. CVE-2017-17817nasm: Use-after-free in pp_verror function in asm/preproc.c
  35. CVE-2017-17816nasm: Use-after-free in pp_getline function in asm/preproc.c
  36. CVE-2017-17815nasm: Illegal address access in is_mmacro function in asm/preproc.c
  37. CVE-2017-17814nasm: use-after-free in do_directive function in asm/preproc.c
  38. CVE-2017-17813nasm: use-after-free in pp_list_one_macro function in asm/preproc.c
  39. CVE-2017-17812nasm: Heap-based buffer over-read in detoken function in asm/preproc.c
  40. CVE-2017-17811nasm: Heap-based buffer overflow in paste_tokens function in asm/preproc.c
  41. CVE-2017-17810nasm: Segfault via mishandled macro calls in asm/preproc.c
  42. CVE-2017-17807kernel: Missing permissions check for request_key() destination allows local attackers to add keys to keyring without Write permission
  43. CVE-2017-17806kernel: HMAC implementation does not validate that the underlying cryptographic hash algorithm is unkeyed allowing local attackers to cause denial-of-service
  44. CVE-2017-17805kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial-of-service
  45. CVE-2017-17790ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution
  46. CVE-2017-17789gimp: Heap-based buffer overflow in read_channel_data function in plug-ins/common/file-psp.c
  47. CVE-2017-17788gimp: Stack-based buffer over-read in xcf_load_stream function in app/xcf/xcf.c
  48. CVE-2017-17787gimp: Heap-based buffer over-read in read_creator_block function in plug-ins/common/file-psp.c
  49. CVE-2017-17786gimp: Heap-based buffer over-read in ReadImage function in plug-ins/common/file-tga.c
  50. CVE-2017-17785gimp: Heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c
CVE 2017 document archive — Page 4 | PulseLinux