2017 CVE Vulnerabilities
17,105 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12994 | CRITICAL | 9.8 | 2.5% | Sep 14, 2017 | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). |
| CVE-2017-12993 | CRITICAL | 9.8 | 2.5% | Sep 14, 2017 | The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions. |
| CVE-2017-12992 | CRITICAL | 9.8 | 2.4% | Sep 14, 2017 | The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng_print(). |
| CVE-2017-12991 | — | — | 2.4% | Sep 14, 2017 | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). |
| CVE-2017-12990 | CRITICAL | 9.8 | 2.5% | Sep 14, 2017 | The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions. |
| CVE-2017-12989 | — | — | 2.3% | Sep 14, 2017 | The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp_get_length(). |
| CVE-2017-12988 | — | — | 2.4% | Sep 14, 2017 | The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse(). |
| CVE-2017-12987 | CRITICAL | 9.8 | 3.3% | Sep 14, 2017 | The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements(). |
| CVE-2017-12986 | — | — | 3.4% | Sep 14, 2017 | The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print(). |
| CVE-2017-12985 | CRITICAL | 9.8 | 3.5% | Sep 14, 2017 | The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6_print(). |
| CVE-2017-12902 | CRITICAL | 9.8 | 3.5% | Sep 14, 2017 | The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions. |
| CVE-2017-12901 | CRITICAL | 9.8 | 2.4% | Sep 14, 2017 | The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp_print(). |
| CVE-2017-12900 | — | — | 2.4% | Sep 14, 2017 | Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf(). |
| CVE-2017-12899 | CRITICAL | 9.8 | 3.3% | Sep 14, 2017 | The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print(). |
| CVE-2017-12898 | CRITICAL | 9.8 | 2.5% | Sep 14, 2017 | The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp_reply(). |
| CVE-2017-12897 | CRITICAL | 9.8 | 2.5% | Sep 14, 2017 | The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns_print(). |
| CVE-2017-12896 | CRITICAL | 9.8 | 3.3% | Sep 14, 2017 | The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp_rfc3948_print(). |
| CVE-2017-12895 | CRITICAL | 9.8 | 2.4% | Sep 14, 2017 | The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print(). |
| CVE-2017-12894 | CRITICAL | 9.8 | 2.5% | Sep 14, 2017 | Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup_bytestring(). |
| CVE-2017-12893 | CRITICAL | 9.8 | 2.4% | Sep 14, 2017 | The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len(). |
| CVE-2017-14431 | — | — | 0.3% | Sep 13, 2017 | Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory c... |
| CVE-2017-12249 | — | — | 3.1% | Sep 13, 2017 | A vulnerability in the Traversal Using Relay NAT (TURN) server included with Cisco Meeting Server (CMS) could allow an a... |
| CVE-2017-2816 | HIGH | 8.8 | 2.4% | Sep 13, 2017 | An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially craft... |
| CVE-2017-1556 | — | — | 1.5% | Sep 13, 2017 | IBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that could allow an authenticated a... |
| CVE-2017-1508 | — | — | 0.3% | Sep 13, 2017 | IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privil... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now