PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2017 document archive · 7

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

2,053 documents · Identifier year 2017 · 7 / 42

  1. CVE-2017-16532kernel: Null pointer dereference in get_endpoints function in drivers/usb/misc/usbtest.c
  2. CVE-2017-16531kernel: out-of-bounds read in drivers/usb/core/config.c
  3. CVE-2017-16530kernel: out-of-bounds read in drivers/usb/storage/uas-detect{.h,.c}
  4. CVE-2017-16529kernel: out-of-bounds read in snd_usb_create_streams
  5. CVE-2017-16528kernel: use-after-free in snd_rawmidi_dev_seq_free
  6. CVE-2017-16527kernel: Use-after-free in snd_usb_mixer_interrupt
  7. CVE-2017-16526kernel: General protection fault in drivers/uwb/uwbd.c
  8. CVE-2017-16525kernel: Use-after-free in usb_serial_console_disconnect()
  9. CVE-2017-16353GraphicsMagick: memory information disclosure in DescribeImage function in magick/describe.c
  10. CVE-2017-16352GraphicsMagick: Heap based buffer over-write in DescribeImage() function of the magick/describe.c or magick/image.c
  11. CVE-2017-16232libtiff: Memory leaks in tif_open.c, tif_lzw.c, and tif_aux.c
  12. CVE-2017-16231pcre: self-recursive call in match() in pcre_exec.c leads to denial of service
  13. CVE-2017-16227quagga: Incorrect AS_PATH size calculation for long paths
  14. CVE-2017-16026nodejs-request: Remote Memory Exposure when a multipart request is made
  15. CVE-2017-16005nodejs-http-signature: HTTP header forgery
  16. CVE-2017-15996binutils: Excessive memory allocation in elfcomm.c
  17. CVE-2017-15994rsync: Mishandles archaic checksums
  18. CVE-2017-15951kernel: Race condition in the KEYS subsystem
  19. CVE-2017-15939binutils: NULL pointer dereference in the concat_filename
  20. CVE-2017-15938binutils: Invalid memory read in find_abstract_instance_name
  21. CVE-2017-15908systemd: Infinite loop in the dns_packet_read_type_window() function
  22. CVE-2017-15906openssh: Improper write operations in readonly mode allow for zero-length file creation
  23. CVE-2017-15897nodejs: Unitialized buffer due to incorrect encoding
  24. CVE-2017-15874busybox: Integer underflow in archival/libarchive/decompress_unlzma.c
  25. CVE-2017-15873busybox: Integer overflow in the get_next_block function
  26. CVE-2017-15868kernel: bnep_add_connection does not check if l2cap socket is available allowing privilege escalation
  27. CVE-2017-15804glibc: Buffer overflow during unescaping of user names with the ~ operator
  28. CVE-2017-15723irssi: NULL pointer dereference due to overlong nicks while splitting the message
  29. CVE-2017-15722irssi: Out-of-bounds access while verifying that a Safe channel ID is long enough
  30. CVE-2017-15721irssi: NULL pointer dereference due to incorrectly formatted DCC CTCP messages
  31. CVE-2017-15715httpd: bypass with a trailing newline in the file name
  32. CVE-2017-15710httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language values
  33. CVE-2017-15706tomcat: Incorrect documentation of CGI Servlet search algorithm may lead to misconfiguration
  34. CVE-2017-15705spamassassin: Certain unclosed tags in crafted emails allow for scan timeouts and result in denial of service
  35. CVE-2017-15671glibc: Memory leak in glob with GLOB_TILDE
  36. CVE-2017-15670glibc: Buffer overflow in glob with GLOB_TILDE
  37. CVE-2017-15649kernel: Use-after-free in the af_packet.c
  38. CVE-2017-15642sox: Use-after-free in lsx_aiffstartread
  39. CVE-2017-15565poppler: NULL pointer dereference in the GfxImageColorMap::getGrayLine() function
  40. CVE-2017-15537kernel: Information leak of x86 FPU registers
  41. CVE-2017-15422chromium-browser: integer overflow in icu
  42. CVE-2017-15412libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c
  43. CVE-2017-15400cups: Insufficient restriction of IPP filters allows a remote attacker to execute commands with the privilege level of cups daemon
  44. CVE-2017-15372sox: Stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function
  45. CVE-2017-15371sox: Reachable assertion abort in the function sox_append_comment()
  46. CVE-2017-15370sox: Heap-based buffer overflow in the ImaExpandS function
  47. CVE-2017-15365mariadb: Replication in sql/event_data_objects.cc occurs before ACL checks
  48. CVE-2017-15306Kernel: KVM: oops when checking KVM_CAP_PPC_HTM on PPC platform
  49. CVE-2017-15299kernel: Incorrect updates of uninstantiated keys crash the kernel
  50. CVE-2017-15298git: Mishandling layers of tree objects
CVE 2017 document archive — Page 7 | PulseLinux