CVE-2015-1795

glusterfs: glusterfs-server %pretrans rpm script temporary file issue

Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Gluster Storage Storage

CVE-2016-9444

bind: assertion failure while handling an unusually-formed DS record response

named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted DS resource record in an answer.

CVSS 3.0 · 7.5 High EPSS 18.1% KEV · Not listed

Vendors

Isc Redhat

Products

Bind Enterprise Linux Rhel Eus

CVE-2016-9634

gstreamer-plugins-good: Heap buffer overflow in FLIC decoder

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via the start_line parameter.

CVSS 3.0 · 9.8 Critical EPSS 8.8% KEV · Not listed

Vendors

Debian Gstreamer Redhat

Products

Debian Linux Gstreamer Enterprise Linux and 4 more

CVE-2017-5022

chromium-browser: bypass of content security policy in blink

Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.

CVSS 3.0 · 4.3 Medium EPSS 1.2% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2017-13088

wpa_supplicant: reinstallation of the integrity group key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowing an attacker within radio range to replay frames from access points to clients.

CVSS 3.0 · 5.3 Medium EPSS 1.8% KEV · Not listed

Vendors

Canonical Debian Freebsd and 4 more

Products

Ubuntu Linux Debian Linux Freebsd and 10 more

CVE-2017-7659

httpd: mod_http2 NULL pointer dereference

A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process.

CVSS 3.0 · 7.5 High EPSS 53.9% KEV · Not listed

Vendors

Apache Redhat

Products

Http Server Rhel Software Collections

CVE-2016-9147

bind: assertion failure while handling a query response containing inconsistent DNSSEC information

named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among the DNSSEC-related RRsets.

CVSS 3.0 · 7.5 High EPSS 24.6% KEV · Not listed

Vendors

Isc Redhat

Products

Bind Enterprise Linux Rhel Aus and 3 more

CVE-2017-15306

Kernel: KVM: oops when checking KVM_CAP_PPC_HTM on PPC platform

The kvm_vm_ioctl_check_extension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a KVM_CHECK_EXTENSION KVM_CAP_PPC_HTM ioctl call to /dev/kvm.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux

CVE-2017-7549

instack-undercloud: uses hardcoded /tmp paths

A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files.

CVSS 3.0 · 6.4 Medium EPSS < 1% KEV · Not listed

Vendors

Openstack Redhat

Products

Instack-undercloud Openstack Openstack-director

CVE-2017-2671

kernel: ping socket / AF_LLC connect() sin_family race

The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Mrg and 1 more

CVE-2017-2647

kernel: Null pointer dereference in search_keyring

The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Mrg and 3 more

CVE-2016-10251

jasper: integer overflow in jpc_pi_nextcprl(), leading to out-of-bounds read

Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact via a crafted file, which triggers use of an uninitialized value.

CVSS 3.0 · 7.8 High EPSS 2.4% KEV · Not listed

Vendors

Jasper Project Redhat

Products

Jasper Enterprise Linux

CVE-2017-7547

postgresql: pg_user_mappings view discloses passwords to users lacking server privileges

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.

CVSS 3.0 · 8.8 High EPSS 5.6% KEV · Not listed

Vendors

Postgresql Redhat

Products

Postgresql Enterprise Linux Rhel Software Collections

CVE-2017-7542

kernel: Integer overflow in ip6_find_1stfragopt() causes infinite loop

The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Mrg and 1 more

CVE-2017-7512

AMP: validation bypass in oauth

Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation of an access token without a client secret. An attacker could use this flaw to circumvent authentication controls and gain access to restricted APIs. NOTE: some sources have a typo in which CVE-2017-7512 maps to an OpenVPN vulnerability. The proper CVE ID for that OpenVPN vulnerability is CVE-2017-7521. Specifically, CVE-2017-7521 is the correct CVE ID for TWO closely related findings in OpenVPN. Any source that lists BOTH CVE-2017-7512 and CVE-2017-7521 for OpenVPN should have listed ONLY CVE-2017-7521.

CVSS 3.0 · 9.8 Critical EPSS 2.2% KEV · Not listed

Vendors

Redhat

Products

3scale Amp 3scale Api Management Platform

CVE-2016-5204

chromium-browser: universal xss in blink

Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

CVSS 3.0 · 6.1 Medium EPSS 1.2% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2017-3241

OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS v3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts).

CVSS 3.0 · 9.0 Critical EPSS 32.8% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Jrockit and 4 more

CVE-2017-7488

authconfig: Information leak when SSSD is used for authentication against remote server

Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames.

CVSS 3.0 · 4.3 Medium EPSS 1.4% KEV · Not listed

Vendors

Authconfig Project Redhat

Products

Authconfig Enterprise Linux

CVE-2017-7484

postgresql: Selectivity estimators bypass SELECT privilege checks

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pg_statistic, possibly leaking information. An unprivileged attacker could use this flaw to steal some information from tables they are otherwise not allowed to access.

CVSS 3.0 · 7.5 High EPSS 2.6% KEV · Not listed

Vendors

Postgresql Redhat

Products

Postgresql Enterprise Linux Network Satellite and 2 more

CVE-2017-2596

Kernel: kvm: page reference leakage in handle_vmon

The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction, which allows KVM L1 guest OS users to cause a denial of service (host OS memory consumption) by leveraging the mishandling of page references.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Rhel Extras Rt