PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2017 document archive · 6

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,053 documents · Identifier year 2017 · 6 / 42

  1. CVE-2017-16996kernel: memory corruption caused by BPF verifier bugs can allow for arbitrary code execution
  2. CVE-2017-16995kernel: memory corruption caused by BPF verifier bugs can allow for arbitrary code execution
  3. CVE-2017-16994kernel: mm/pagewalk.c: walk_hugetlb_range function mishandles holes in hugetlb ranges causing information leak
  4. CVE-2017-16942libsndfile: divide-by-zero error in wav_w64_read_fmt_chunk()
  5. CVE-2017-16939Kernel: ipsec: xfrm: use-after-free leading to potential privilege escalation
  6. CVE-2017-16938optipng: global buffer overflow in gifread.c:LZWReadByte when parsing malicious GIF
  7. CVE-2017-16932libxml2: Infinite recursion in parameter entities
  8. CVE-2017-16931libxml2: Mishandling parameter-entity references
  9. CVE-2017-16914kernel: NULL pointer dereference in usb/usbip/stub_tx.c:stub_send_ret_submit() can lead to denial of service via crafted USB over IP packet
  10. CVE-2017-16913kernel: Improper validation in usbip/stub_rx.c:stub_recv_cmd_submit() allows for denial of service via crafted USB over IP CMD_SUBMIT packet
  11. CVE-2017-16912kernel: Out-of-bounds read in usbip/stub_rx.c:get_pipe() allows attackers to cause a denial of service via crafted USB over IP packet
  12. CVE-2017-16911kernel: vhci_cd driver in usbip/vhci_sysfs.c:port_show_vhci() discloses kernel memory addresses to local attackers
  13. CVE-2017-16910libraw: Invalid read memory access in the LibRaw::xtrans_interpolate() function
  14. CVE-2017-16909libraw: Heap-buffer overflow in the LibRaw::panasonic_load_raw() function
  15. CVE-2017-16899transfig: Array index error in the fig2dev program
  16. CVE-2017-16879ncurses: Stack-based buffer overflow in the _nc_write_entry function
  17. CVE-2017-16845Qemu: ps2: information leakage via post_load routine
  18. CVE-2017-16844procmail: Heap-based buffer overflow in loadbuf function in formisc.c
  19. CVE-2017-16837tboot: Incorrect validation of certain function pointers
  20. CVE-2017-16832binutils: Segmentation fault in the pe_bfd_read_buildid function
  21. CVE-2017-16831binutils: Integer overflow in coffgen.c
  22. CVE-2017-16830binutils: Segmentation fault in the print_gnu_property_note function
  23. CVE-2017-16829binutils: Out-of-bounds read in the _bfd_elf_parse_gnu_properties function
  24. CVE-2017-16828binutils: Integer overflow in the display_debug_frames function
  25. CVE-2017-16827binutils: Invalid free in the aout_get_external_symbols function
  26. CVE-2017-16826binutils: Invalid memory access in the coff_slurp_line_table function
  27. CVE-2017-16820collectd: double free in csnmp_read_table function in snmp.c
  28. CVE-2017-16818ceph: Failed assertion through user input in ceph_assert() function in rgw_iam_policy.cc
  29. CVE-2017-16808tcpdump: heap-based buffer over-read in aoe_print in print-aoe.c and lookup_emem in addrtoname.c
  30. CVE-2017-16650kernel: Divide-by-zero in drivers/net/usb/qmi_wwan.c
  31. CVE-2017-16649kernel: Divide-by-zero in drivers/net/usb/cdc_ether.c
  32. CVE-2017-16648kernel: Use-after-free in drivers/media/dvb-core/dvb_frontend.c
  33. CVE-2017-16647kernel: NULL pointer dereference in drivers/net/usb/asix_devices.c
  34. CVE-2017-16646kernel: BUG in drivers/media/usb/dvb-usb/dib0700_devices.c
  35. CVE-2017-16645kernel: Out-of-bounds read in drivers/input/misc/ims-pcu.c
  36. CVE-2017-16644kernel: Improper error handling in drivers/media/usb/hdpvr/hdpvr-core.c
  37. CVE-2017-16643kernel: Out-of-bounds read in drivers/input/tablet/gtco.c
  38. CVE-2017-16642php: Out-of-bound read in timelib_meridian()
  39. CVE-2017-16612libXcursor: file.c: heap-based buffer overflow when reading/creating images
  40. CVE-2017-16611libXfont: User can trigger arbitrary file read by X server causing a DoS
  41. CVE-2017-16548rsync: Heap-based buffer over-read in receive_xattr function
  42. CVE-2017-16546ImageMagick: Invalid memory allocation in the ReadWPGImage function
  43. CVE-2017-16541Mozilla: Proxy bypass using automount and autofs
  44. CVE-2017-16539docker: The DefaultLinuxSpec function does not block /proc/scsi pathnames
  45. CVE-2017-16538kernel: general protection fault in drivers/media/usb/dvb-usb-v2/lmedm04.c
  46. CVE-2017-16537kernel: NULL pointer dereference in imon_probe function in drivers/media/rc/imon.c
  47. CVE-2017-16536kernel: Null pointer dereference in cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c
  48. CVE-2017-16535kernel: out-of-bounds read in usb_get_bos_descriptor function in drivers/usb/core/config.c
  49. CVE-2017-16534kernel: out-of-bounds read in cdc_parse_cdc_header function in drivers/usb/core/message.c
  50. CVE-2017-16533kernel: out-of-bounds read in usbhid_parse function in drivers/hid/usbhid/hid-core.c
CVE 2017 document archive — Page 6 | PulseLinux