Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

CVE-2017-7870

libreoffice: Heap-buffer-overflow in tools::Polygon::Insert

LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in tools/source/generic/poly.cxx.

CVSS 3.0 · 9.8 Critical EPSS 3.9% KEV · Not listed
Vendors
Libreoffice Redhat
Products
Libreoffice Enterprise Linux
CVE-2016-9808

gstreamer-plugins-good: Heap buffer overflow in FLIC decoder

The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted series of skip and count pairs.

CVSS 3.0 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Gstreamer Redhat
Products
Gstreamer Enterprise Linux
CVE-2017-3462

mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2017)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVSS 3.0 · 4.9 Medium EPSS 2.9% KEV · Not listed
Vendors
Debian Oracle Redhat
Products
Debian Linux Mysql Rhel Software Collections
CVE-2017-3454

mysql: Server: InnoDB unspecified vulnerability (CPU Apr 2017)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Oracle Redhat
Products
Mysql Rhel Software Collections
CVE-2015-5182

Console: CSRF via form-based API call

Cross-site request forgery (CSRF) vulnerability in the jolokia API in A-MQ.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Amq
CVE-2017-1000385

erlang: TLS server vulnerable to Adaptive Chosen Ciphertext attack allowing plaintext recovery or MITM attack

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key (this is a variation of the Bleichenbacher attack).

CVSS 3.0 · 5.9 Medium EPSS 22.1% KEV · Not listed
Vendors
Debian Erlang Redhat
Products
Debian Linux Erlang\/otp Cloudforms Managementengine and 1 more
CVE-2017-1000366

glibc: heap/stack gap jumping via unbounded stack allocations

glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap memory but these issues are not directly exploitable, as such they have not been given a CVE. This affects glibc 2.25 and earlier.

CVSS 3.0 · 7.8 High EPSS 2.7% KEV · Not listed
Vendors
Debian Gnu Mcafee and 5 more
Products
Debian Linux Glibc Web Gateway and 23 more
CVE-2017-6056

tomcat: Infinite loop in the processing of https requests

It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. The denial of service is easily achievable as a consequence of backporting a CVE-2016-6816 fix but not backporting the fix for Tomcat bug 57544. Distributions affected by this backporting issue include Debian (before 7.0.56-3+deb8u8 and 8.0.14-1+deb8u7 in jessie) and Ubuntu.

CVSS 3.0 · 7.5 High EPSS 7.6% KEV · Not listed
Vendors
Canonical Debian Redhat
Products
Ubuntu Linux Debian Linux Jboss Enterprise Application Platform
CVE-2016-8693

jasper: incorrect handling of bufsize 0 in mem_resize()

Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image to the imginfo command.

CVSS 3.0 · 7.8 High EPSS 3.3% KEV · Not listed
Vendors
Fedoraproject Jasper Project Opensuse and 1 more
Products
Fedora Jasper Opensuse and 1 more
CVE-2017-8824

kernel: Use-after-free vulnerability in DCCP socket

The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.

CVSS 3.1 · 7.8 High EPSS 1.3% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Mrg and 6 more
CVE-2017-15102

kernel: NULL pointer dereference due to race condition in probe function of legousbtower driver

The tower_probe function in drivers/usb/misc/legousbtower.c in the Linux kernel before 4.8.1 allows local users (who are physically proximate for inserting a crafted USB device) to gain privileges by leveraging a write-what-where condition that occurs after a race condition and a NULL pointer dereference.

CVSS 3.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Linux
CVE-2017-15103

heketi: OS command injection in heketi API

A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted requests to the Heketi server, resulting in remote command execution as the user running Heketi server and possibly privilege escalation.

CVSS 3.0 · 8.8 High EPSS 5.5% KEV · Not listed
Vendors
Heketi Project Redhat
Products
Heketi Enterprise Linux Storage
CVE-2017-12440

openstack-aodh: Aodh can be used to launder Keystone trusts

Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenticated users with knowledge of trust IDs where Aodh is the trustee to obtain a Keystone token and perform unspecified authenticated actions by adding an alarm action with the scheme trust+http, and providing a trust id where Aodh is the trustee.

CVSS 3.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Openstack Openstack
CVE-2017-16818

ceph: Failed assertion through user input in ceph_assert() function in rgw_iam_policy.cc

RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not necessarily admin) privileges to post an invalid profile to the admin API, related to rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h, and rgw/rgw_iam_types.h.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
Fedora Ceph
CVE-2017-1000089

jenkins-plugin-pipeline-build-step: Missing check of Item/Build permission (SECURITY-433)

Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in Jenkins. The Pipeline: Build Step Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.

CVSS 3.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Pipeline\ Openshift
CVE-2016-7030

ipa: DoS attack against kerberized services by abusing password policy

FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication attempts, which allows remote attackers to cause a denial of service by locking out the account in which system services run on.

CVSS 3.0 · 7.5 High EPSS 4.7% KEV · Not listed
Vendors
Freeipa Redhat
Products
Freeipa Enterprise Linux
CVE-2017-1000256

libvirt: TLS certificate verification disabled for clients

libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates by default.

CVSS 3.1 · 8.1 High EPSS 1.7% KEV · Not listed
Vendors
Debian Redhat
Products
Debian Linux Libvirt
CVE-2016-7433

ntp: Broken initial sync calculations regression

NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance that did not include the peer dispersion."

CVSS 3.0 · 5.3 Medium EPSS 9.8% KEV · Not listed
Vendors
Ntp Redhat
Products
Ntp Enterprise Linux