CVE-2017-7186

pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)

libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup.

CVSS 3.0 · 7.5 High EPSS 5.0% KEV · Not listed

Vendors

Pcre Redhat

Products

Pcre Pcre2 Jboss Core Services

CVE-2017-5073

chromium-browser: use after free in print preview

Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed

Vendors

Apple Google Linux and 2 more

Products

Macos Android Chrome and 6 more

CVE-2017-2938

flash-plugin: multiple code execution issues fixed in APSB17-02

Adobe Flash Player versions 24.0.0.186 and earlier have a security bypass vulnerability related to handling TCP connections.

CVSS 3.1 · 6.5 Medium EPSS 5.1% KEV · Not listed

Vendors

Adobe Apple Google and 3 more

Products

Flash Player Mac Os X Chrome Os and 5 more

CVE-2017-7561

resteasy: Vary header not added by CORS filter leading to cache poisoning

Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.

CVSS 3.0 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Redhat

Products

Jboss Enterprise Application Platform

CVE-2015-7529

sos: Usage of predictable temporary files allows privilege escalation

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Canonical Redhat Sos Project

Products

Ubuntu Linux Enterprise Linux Enterprise Linux Desktop and 6 more

CVE-2017-5071

chromium-browser: out of bounds read in v8

Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CVSS 3.1 · 6.3 Medium EPSS 2.2% KEV · Not listed

Vendors

Apple Google Linux and 2 more

Products

Macos Android Chrome and 6 more

CVE-2017-3169

httpd: mod_ssl NULL pointer dereference

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.

CVSS 3.0 · 9.8 Critical EPSS 20.0% KEV · Not listed

Vendors

Apache Redhat

Products

Http Server Enterprise Linux Jboss Core Services and 2 more

CVE-2017-5069

chromium-browser: cross-origin bypass in blink

Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page.

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed

Vendors

Apple Google Linux and 2 more

Products

Macos Android Chrome and 6 more

CVE-2017-5068

chromium-browser: race condition in webrtc

Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to trigger a race condition via a crafted HTML page.

CVSS 3.1 · 7.5 High EPSS 1.0% KEV · Not listed

Vendors

Apple Google Linux and 2 more

Products

Macos Chrome Linux Kernel and 5 more

CVE-2017-7668

httpd: ap_find_token() buffer overread

The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.

CVSS 3.1 · 7.5 High EPSS 57.5% KEV · Not listed

Vendors

Apache Apple Debian and 3 more

Products

Http Server Mac Os X Debian Linux and 13 more

CVE-2017-5067

chromium-browser: url spoofing in omnibox

An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Apple Google Linux and 2 more

Products

Macos Chrome Linux Kernel and 5 more

CVE-2017-5884

gtk-vnc: Improper check of framebuffer boundaries when processing a tile

gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to execute arbitrary code via the src x, y coordinates in a crafted (1) rre, (2) hextile, or (3) copyrect tile.

CVSS 3.0 · 7.8 High EPSS 2.3% KEV · Not listed

Vendors

Fedoraproject Gnome Redhat

Products

Fedora Gtk-vnc Enterprise Linux

CVE-2014-7851

ovirt-engine-webadmin: does not invalidate all sessions upon logout

oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users with knowledge of another user's session data to gain that user's privileges by replacing their session token with that of another user.

CVSS 3.0 · 7.5 High EPSS 1.0% KEV · Not listed

Vendors

Ovirt Redhat

Products

Ovirt Ovirt-engine Rhev Manager

CVE-2017-9263

openvswitch: Invalid processing of a malicious OpenFlow role status message

In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` in `lib/ofp-print.c` that may be leveraged toward a remote DoS attack by a malicious switch.

CVSS 3.0 · 6.5 Medium EPSS 1.0% KEV · Not listed

Vendors

Openvswitch Redhat

Products

Openvswitch Enterprise Linux Openstack

CVE-2017-3257

mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2017)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts).

CVSS 3.1 · 6.5 Medium EPSS 2.6% KEV · Not listed

Vendors

Debian Mariadb Oracle and 1 more

Products

Debian Linux Mariadb Mysql and 1 more

CVE-2017-2935

flash-plugin: multiple code execution issues fixed in APSB17-02

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing the Flash Video container file format. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 8.8 High EPSS 29.9% KEV · Not listed

Vendors

Adobe Apple Google and 3 more

Products

Flash Player Mac Os X Chrome Os and 5 more

CVE-2017-17790

ruby: Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code execution

The lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might allow Command Injection attacks, as demonstrated by a Resolv::Hosts::new argument beginning with a '|' character, a different vulnerability than CVE-2017-17405. NOTE: situations with untrusted input may be highly unlikely.

CVSS 3.0 · 9.8 Critical EPSS 5.9% KEV · Not listed

Vendors

Redhat Ruby-lang

Products

Enterprise Linux Rhel Software Collections Ruby

CVE-2017-9228

oniguruma: Out-of-bounds heap write in bitset_set_range()

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write occurs in bitset_set_range() during regular expression compilation due to an uninitialized variable from an incorrect state transition. An incorrect state transition in parse_char_class() could create an execution path that leaves a critical local variable uninitialized until it's used as an index, resulting in an out-of-bounds write memory corruption.

CVSS 3.1 · 9.8 Critical EPSS 6.3% KEV · Not listed

Vendors

Oniguruma Project Php Redhat

Products

Oniguruma Php Rhel Software Collections

CVE-2017-10296

mysql: Server: DML unspecified vulnerability (CPU Oct 2017)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVSS 3.0 · 4.9 Medium EPSS 2.7% KEV · Not listed

Vendors

Oracle Redhat

Products

Mysql Rhel Software Collections

CVE-2017-9374

Qemu: usb: ehci host memory leakage during hotunplug

Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Qemu Redhat

Products

Qemu Enterprise Linux Openstack