PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2017 document archive · 5

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,053 documents · Identifier year 2017 · 5 / 42

  1. CVE-2017-17784gimp: Heap-based buffer over-read in load_image function in plug-ins/common/file-gbr.c
  2. CVE-2017-17760opencv: Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp
  3. CVE-2017-17742ruby: HTTP response splitting in WEBrick
  4. CVE-2017-17741kernel: kvm: stack-based out-of-bounds read via vmcall instruction
  5. CVE-2017-17740openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service
  6. CVE-2017-17725exiv2: heap-based buffer over-read in Exiv2::getULong function in types.cpp
  7. CVE-2017-17724exiv2: heap-buffer-overflow in Exiv2::IptcData::printStructure in src/iptc.cpp
  8. CVE-2017-17723exiv2: heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp
  9. CVE-2017-17722exiv2: reachable assertion in the readHeader function in bigtiffimage.cpp
  10. CVE-2017-17712kernel: Race condition in raw_sendmsg function allows denial-of-service or kernel addresses leak
  11. CVE-2017-17689S/MIME: CBC gadget attacks allows to exfiltrate plaintext out of encrypted emails
  12. CVE-2017-17688OpenPGP: CFB gadget attacks allows to exfiltrate plaintext out of encrypted emails
  13. CVE-2017-17682ImageMagick: Resource exhaustion in ExtractPostscript function in coders/wpg.c
  14. CVE-2017-17681ImageMagick: Infinite loop in ReadPSDChannelZip function in coders/psd.c
  15. CVE-2017-17680ImageMagick: Memory leak in ReadXPMImage function in coders/xpm.c
  16. CVE-2017-17669exiv2: Heap-based buffer over-read in PngChunk::keyTXTChunk function of pngchunk_int.cpp
  17. CVE-2017-17558kernel: Unallocated memory access by malicious USB device via bNumInterfaces overflow
  18. CVE-2017-17522python: Command injection in Lib/webbrowser.py
  19. CVE-2017-17521fontforge: Command injetion in help function uiutil.c
  20. CVE-2017-17513texlive: Command injection in mswin/mtxrun.lua and lualibs/lualibs-os.lua
  21. CVE-2017-17504ImageMagick: Heap-based buffer overflow in Magick_png_read_raw_profile
  22. CVE-2017-17499ImageMagick: Use-after-free in Magick::Image::read
  23. CVE-2017-17485jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095)
  24. CVE-2017-17484icu: stack-based buffer overflow in ucnv_u8.cpp:ucnv_UTF8FromUTF8 can lead to denial of service
  25. CVE-2017-17480openjpeg: Stack-buffer overflow in the pgxtovolume function
  26. CVE-2017-17479openjpeg: Stack-buffer overflow in the pgxtoimage function
  27. CVE-2017-17458mercurial: arbitrary command execution in mercurial repo with a git submodule
  28. CVE-2017-17450kernel: Unchecked capabilities in net/netfilter/xt_osf.c allows for unprivileged modification to systemwide fingerprint list
  29. CVE-2017-17449kernel: Missing namespace check in net/netlink/af_netlink.c allows for network monitors to observe systemwide activity
  30. CVE-2017-17448kernel: Missing capabilities check in net/netfilter/nfnetlink_cthelper.c allows for unprivileged access to systemwide nfnl_cthelper_list structure
  31. CVE-2017-17434rsync: daemon does not check for fnamecmp filenames allowing for access restriction bypass
  32. CVE-2017-17433rsync: recv_files function metadata handling allows for access restriction bypass
  33. CVE-2017-17426glibc: Integer overflow with enabled tcache
  34. CVE-2017-17405ruby: Command injection vulnerability in Net::FTP
  35. CVE-2017-17381Qemu: virtio: divide by zero exception while updating rings
  36. CVE-2017-17126binutils: Invalid memory access in the load_debug_section function
  37. CVE-2017-17125binutils: Buffer over-read in the _bfd_elf_get_symbol_version_string function
  38. CVE-2017-17124binutils: Heap buffer overflow in the _bfd_coff_read_string_table function
  39. CVE-2017-17123binutils: NULL pointer dereference in the coff_slurp_reloc_table function
  40. CVE-2017-17122binutils: Excessive memory allocation in the dump_relocs_in_section function
  41. CVE-2017-17121binutils: Memory access violation via a crafted COFF binary
  42. CVE-2017-17095libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service
  43. CVE-2017-17087vim: Sets the group ownership of a .swp file to the editor's primary group
  44. CVE-2017-17085wireshark: CIP Safety dissector crash
  45. CVE-2017-17084wireshark: IWARP_MPA dissector crash
  46. CVE-2017-17083wireshark: NetBIOS dissector crash
  47. CVE-2017-17080binutils: Heap-based buffer over-read in bfd_getl32
  48. CVE-2017-17053kernel: Incorrect handling in arch/x86/include/asm/mmu_context.h:init_new_context function allowing use-after-free
  49. CVE-2017-17052kernel: use-after-free in kernel/fork.c:mm_init function
  50. CVE-2017-16997glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary libraries
CVE 2017 document archive — Page 5 | PulseLinux