PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2017 document archive · 40

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,053 documents · Identifier year 2017 · 40 / 42

  1. CVE-2017-3309mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)
  2. CVE-2017-3308mysql: Server: DML unspecified vulnerability (CPU Apr 2017)
  3. CVE-2017-3305mysql: incorrect enforcement of ssl-mode=REQUIRED in MySQL 5.5 and 5.6
  4. CVE-2017-3302mysql: prepared statement handle use-after-free after disconnect
  5. CVE-2017-3291mysql: unrestricted mysqld_safe's ledir (CPU Jan 2017)
  6. CVE-2017-3289OpenJDK: insecure class construction (Hotspot, 8167104)
  7. CVE-2017-3273mysql: Server: DDL unspecified vulnerability (CPU Jan 2017)
  8. CVE-2017-3272OpenJDK: insufficient protected field access checks in atomic field updaters (Libraries, 8165344)
  9. CVE-2017-3265mysql: unsafe chmod/chown use in init script (CPU Jan 2017)
  10. CVE-2017-3261OpenJDK: integer overflow in SocketOutputStream boundary check (Networking, 8164147)
  11. CVE-2017-3260OpenJDK: menu handling memory corruption (AWT, 8164143)
  12. CVE-2017-3258mysql: Server: DDL unspecified vulnerability (CPU Jan 2017)
  13. CVE-2017-3257mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2017)
  14. CVE-2017-3256mysql: Server: Replication unspecified vulnerability (CPU Jan 2017)
  15. CVE-2017-3253OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)
  16. CVE-2017-3252OpenJDK: LdapLoginModule incorrect userDN extraction (JAAS, 8161743)
  17. CVE-2017-3251mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2017)
  18. CVE-2017-3244mysql: Server: DML unspecified vulnerability (CPU Jan 2017)
  19. CVE-2017-3243mysql: Server: Charsets unspecified vulnerability (CPU Jan 2017)
  20. CVE-2017-3241OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802)
  21. CVE-2017-3238mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2017)
  22. CVE-2017-3231OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934)
  23. CVE-2017-3224quagga: OSPF implementation improperly determines LSA recency (VU#793496)
  24. CVE-2017-3204golang-googlecode-go-crypto: Go SSH library does not verify host keys by default
  25. CVE-2017-3169httpd: mod_ssl NULL pointer dereference
  26. CVE-2017-3167httpd: ap_get_basic_auth_pw() authentication bypass
  27. CVE-2017-3157libreoffice: Arbitrary file disclosure in Calc and Writer
  28. CVE-2017-3145bind: Improper fetch cleanup sequencing in the resolver can cause named to crash
  29. CVE-2017-3144dhcp: omapi code doesn't free socket descriptors when empty message is received allowing denial-of-service
  30. CVE-2017-3143bind: An error in TSIG authentication can permit unauthorized dynamic updates
  31. CVE-2017-3142bind: An error in TSIG authentication can permit unauthorized zone transfers
  32. CVE-2017-3141bind: BIND installer on Windows uses an unquoted service path which allows privilege escalation
  33. CVE-2017-3140bind: Error processing RPZ rules leads to endless loop while handling query
  34. CVE-2017-3139bind: assertion failure in DNSSEC validation
  35. CVE-2017-3138bind: REQUIRE assertion failure when null command string on control channel is received
  36. CVE-2017-3137bind: Processing a response containing CNAME or DNAME with unusual order can crash resolver
  37. CVE-2017-3136bind: Incorrect error handling causes assertion failure when using DNS64 with "break-dnssec yes;"
  38. CVE-2017-3135bind: Assertion failure when using DNS64 and RPZ Can Lead to Crash
  39. CVE-2017-2888SDL: Integer overflow while creating a new RGB surface
  40. CVE-2017-2885libsoup: Stack based buffer overflow with HTTP Chunked Encoding
  41. CVE-2017-2870gdk-pixbuf2: Integer overflow in tiff_image_parse function
  42. CVE-2017-2862gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function
  43. CVE-2017-2839freerdp: Rdp Client License Read Challenge Packet Denial of Service
  44. CVE-2017-2838freerdp: Rdp Client License Read Product Info Denial of Service
  45. CVE-2017-2837freerdp: Rdp Client GCC Read Server Security Data Denial of Service
  46. CVE-2017-2836freerdp: Rdp Client Read Server Proprietary Certificate Denial of Service
  47. CVE-2017-2835freerdp: Out-of-bounds write in rdp_recv_tpkt_pdu
  48. CVE-2017-2834freerdp: Out-of-bounds write in license_recv()
  49. CVE-2017-2820poppler: Integer overflow in the JPEG 2000 image parsing functionality
  50. CVE-2017-2818poppler: Heap-buffer overflow in the image rendering functionality
CVE 2017 document archive — Page 40 | PulseLinux