CVE-2017-1376

JDK: class verifier allowing Security Manager bypass

A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges. IBM X-Force ID: 126873.

CVSS 3.0 · 9.8 Critical EPSS 2.6% KEV · Not listed

Vendors

Ibm Redhat

Products

Operations Analytics Predictive Insights Rhel Extras

CVE-2016-7939

tcpdump: multiple overflow issues in protocol decoding

The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions.

CVSS 3.0 · 9.8 Critical EPSS 3.5% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-7940

tcpdump: multiple overflow issues in protocol decoding

The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions.

CVSS 3.0 · 9.8 Critical EPSS 3.4% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-7974

tcpdump: multiple overflow issues in protocol decoding

The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-7983

tcpdump: multiple overflow issues in protocol decoding

The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().

CVSS 3.0 · 9.8 Critical EPSS 3.9% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-7984

tcpdump: multiple overflow issues in protocol decoding

The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftp_print().

CVSS 3.0 · 9.8 Critical EPSS 3.4% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-7985

tcpdump: multiple overflow issues in protocol decoding

The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calm_fast_print().

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-7986

tcpdump: multiple overflow issues in protocol decoding

The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-7993

tcpdump: multiple overflow issues in protocol decoding

A bug in util-print.c:relts_print() in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP, lightweight resolver protocol, PIM).

CVSS 3.0 · 9.8 Critical EPSS 3.4% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-7923

tcpdump: multiple overflow issues in protocol decoding

The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print().

CVSS 3.0 · 9.8 Critical EPSS 3.4% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2016-4473

php: Invalid free() instead of efree() in phar_extract_file()

/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.

CVSS 3.0 · 9.8 Critical EPSS 7.8% KEV · Not listed

Vendors

Php Redhat Suse

Products

Php Rhel Software Collections Linux Enterprise Module For Web Scripting and 1 more

CVE-2016-8574

tcpdump: multiple overflow issues in protocol decoding

The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15_print().

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-1000089

jenkins-plugin-pipeline-build-step: Missing check of Item/Build permission (SECURITY-433)

Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in Jenkins. The Pipeline: Build Step Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.

CVSS 3.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Pipeline\ Openshift

CVE-2016-4459

mod_cluster: Buffer overflow in mod_manager when sending request with long JVMRoute

Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.

CVSS 3.0 · 7.5 High EPSS 2.7% KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Jboss Core Services Jboss Enterprise Application Platform and 1 more

CVE-2016-4457

CFME: default certificate used across all installs

CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate.

CVSS 3.0 · 7.5 High EPSS 1.1% KEV · Not listed

Vendors

Redhat

Products

Cloudforms Management Engine Cloudforms Managementengine

CVE-2017-1000061

xmlsec1: xmlsec vulnerable to external entity expansion

xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting in possible information disclosure or denial of service

CVSS 3.0 · 7.1 High EPSS 1.4% KEV · Not listed

Vendors

Redhat Xmlsec Project

Products

Enterprise Linux Xmlsec

CVE-2017-5929

logback: Serialization vulnerability in SocketServer and ServerSocketReceiver

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

CVSS 3.1 · 9.8 Critical EPSS 7.5% KEV · Not listed

Vendors

Qos Redhat

Products

Logback Jboss Amq Jboss Bpms and 4 more

CVE-2017-16818

ceph: Failed assertion through user input in ceph_assert() function in rgw_iam_policy.cc

RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not necessarily admin) privileges to post an invalid profile to the admin API, related to rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h, and rgw/rgw_iam_types.h.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed

Vendors

Fedoraproject Redhat

Products

Fedora Ceph

CVE-2016-5212

chromium-browser: local file disclosure in devtools

Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2017-14503

libarchive: Out-of-bounds read in lha_read_data_none

libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed

Vendors

Libarchive Redhat

Products

Libarchive Enterprise Linux