CVE-2017-7552

RHMAP Millicore IDE allows RCE on SCM

A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core installation.

CVSS 3.0 · 9.8 Critical EPSS 1.4% KEV · Not listed

Vendors

Redhat

Products

Mobile Application Platform

CVE-2016-8884

jasper: missing jas_matrix_create() parameter checks

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a crafted BMP image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8690.

CVSS 3.0 · 5.5 Medium EPSS 2.4% KEV · Not listed

Vendors

Fedoraproject Jasper Project Redhat

Products

Fedora Jasper Enterprise Linux

CVE-2017-11166

ImageMagick: memory leak vulnerability in ReadXWDImage function in coders/xwd.c

The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of color-map entries) field in the header of an XWD file.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Imagemagick Redhat

Products

Imagemagick Enterprise Linux

CVE-2016-8693

jasper: incorrect handling of bufsize 0 in mem_resize()

Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.

CVSS 3.0 · 7.8 High EPSS 3.3% KEV · Not listed

Vendors

Fedoraproject Jasper Project Opensuse and 1 more

Products

Fedora Jasper Opensuse and 1 more

CVE-2016-8692

jasper: missing SIZ marker segment XRsiz and YRsiz fields range check

The jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted YRsiz value in a BMP image to the imginfo command.

CVSS 3.0 · 5.5 Medium EPSS 2.2% KEV · Not listed

Vendors

Debian Fedoraproject Jasper Project and 1 more

Products

Debian Linux Fedora Jasper and 1 more

CVE-2017-13032

tcpdump: Buffer over-read in print-radius.c:print_attr_string() in RADIUS parser

The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string().

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed

Vendors

Redhat Tcpdump

Products

Enterprise Linux Tcpdump

CVE-2017-7244

pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)

The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed

Vendors

Pcre Redhat

Products

Pcre Jboss Core Services

CVE-2017-6462

ntp: Buffer Overflow in DPTS Clock

Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Ntp Redhat

Products

Ntp Enterprise Linux

CVE-2017-3273

mysql: Server: DDL unspecified vulnerability (CPU Jan 2017)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

CVSS 3.0 · 6.5 Medium EPSS 3.1% KEV · Not listed

Vendors

Oracle Redhat

Products

Mysql Rhel Software Collections

CVE-2017-5082

chromium-browser: insufficient hardening in credit card editor

Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for Android allowed a local attacker to take screen shots of credit card information via a crafted HTML page.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Google Redhat

Products

Android Chrome Rhel Extras

CVE-2017-7400

python-django-horizon: XSS in federation mappings UI

OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.

CVSS 3.0 · 4.8 Medium EPSS 1.1% KEV · Not listed

Vendors

Openstack Redhat

Products

Horizon Openstack

CVE-2016-5218

chromium-browser: address spoofing in omnibox

The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to temporarily spoof the contents of the Omnibox (URL bar) via a crafted HTML page containing PDF data.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2017-5046

chromium-browser: information disclosure in blink

V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure.

CVSS 3.1 · 4.3 Medium EPSS 1.6% KEV · Not listed

Vendors

Apple Debian Google and 3 more

Products

Macos Debian Linux Android and 7 more

CVE-2017-7393

tigervnc: Double free via crafted fences

In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of service or potentially code execution.

CVSS 3.0 · 8.8 High EPSS 1.8% KEV · Not listed

Vendors

Redhat Tigervnc

Products

Enterprise Linux Tigervnc

CVE-2017-5115

chromium-browser: type confusion in v8

Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.

CVSS 3.0 · 8.8 High EPSS 26.3% KEV · Not listed

Vendors

Google Microsoft Redhat

Products

Chrome Windows Rhel Extras

CVE-2016-8690

jasper: missing jas_matrix_create() parameter checks

The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted BMP image in an imginfo command.

CVSS 3.0 · 5.5 Medium EPSS 2.5% KEV · Not listed

Vendors

Fedoraproject Jasper Project Redhat

Products

Fedora Jasper Enterprise Linux

CVE-2017-17095

libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service

tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file.

CVSS 3.0 · 8.8 High EPSS 10.6% KEV · Not listed

Vendors

Libtiff Redhat

Products

Libtiff Enterprise Linux

CVE-2017-7503

EAP: XXE issue in TransformerFactory

It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE. An attacker could use this flaw to launch DoS or SSRF attacks, or read files from the server where EAP is deployed.

CVSS 3.0 · 9.8 Critical EPSS 2.0% KEV · Not listed

Vendors

Redhat

Products

Jboss Enterprise Application Platform Jboss Enterprise Application Platform Cd

CVE-2017-5029

chromium-browser: integer overflow in libxslt

The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 2.5% KEV · Not listed

Vendors

Apple Debian Google and 4 more

Products

Macos Debian Linux Android and 8 more

CVE-2017-3649

mysql: Server: Replication unspecified vulnerability (CPU Jul 2017)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVSS 3.0 · 4.4 Medium EPSS 2.7% KEV · Not listed

Vendors

Oracle Redhat

Products

Mysql Rhel Software Collections