2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12966 | — | — | 1.1% | Aug 20, 2017 | The asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to c... |
| CVE-2017-10663 | HIGH | 7.8 | 0.4% | Aug 19, 2017 | The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and seg... |
| CVE-2017-10662 | HIGH | 7.8 | 0.5% | Aug 19, 2017 | The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment c... |
| CVE-2017-10661 | HIGH | 7 | 13.4% | Aug 19, 2017 | Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denia... |
| CVE-2017-12967 | — | — | 3.1% | Aug 19, 2017 | The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils... |
| CVE-2017-11323 | HIGH | 7.8 | 2.8% | Aug 19, 2017 | Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a cr... |
| CVE-2017-12964 | — | — | 1.8% | Aug 18, 2017 | There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cpp... |
| CVE-2017-12963 | — | — | 1.2% | Aug 18, 2017 | There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of... |
| CVE-2017-12962 | — | — | 1.2% | Aug 18, 2017 | There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open paren... |
| CVE-2017-12961 | — | — | 1.3% | Aug 18, 2017 | There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU P... |
| CVE-2017-12960 | — | — | 1.3% | Aug 18, 2017 | There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GN... |
| CVE-2017-12959 | — | — | 1.3% | Aug 18, 2017 | There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU... |
| CVE-2017-12958 | — | — | 1.3% | Aug 18, 2017 | There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP be... |
| CVE-2017-12957 | — | — | 1.4% | Aug 18, 2017 | There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in i... |
| CVE-2017-12956 | — | — | 1.4% | Aug 18, 2017 | There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that wil... |
| CVE-2017-12955 | — | — | 1.7% | Aug 18, 2017 | There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in E... |
| CVE-2017-8446 | — | — | 0.7% | Aug 18, 2017 | The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.... |
| CVE-2017-8445 | — | — | 0.2% | Aug 18, 2017 | An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If reloading the trust material... |
| CVE-2017-9685 | — | — | 0.5% | Aug 18, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can le... |
| CVE-2017-9684 | — | — | 0.3% | Aug 18, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lea... |
| CVE-2017-9682 | — | — | 0.3% | Aug 18, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver func... |
| CVE-2017-9680 | — | — | 0.5% | Aug 18, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from usersp... |
| CVE-2017-9679 | — | — | 0.5% | Aug 18, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-termin... |
| CVE-2017-9678 | — | — | 0.5% | Aug 18, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can... |
| CVE-2017-7364 | — | — | 0.8% | Aug 18, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_da... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now