2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6347 | HIGH | 7.8 | 0.4% | Mar 1, 2017 | The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c in the Linux kernel before 4.10.1 has incorrect expectation... |
| CVE-2017-6346 | HIGH | 7 | 0.3% | Mar 1, 2017 | Race condition in net/packet/af_packet.c in the Linux kernel before 4.9.13 allows local users to cause a denial of servi... |
| CVE-2017-6345 | — | — | 0.4% | Mar 1, 2017 | The LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor exists in required circums... |
| CVE-2017-5995 | HIGH | 7.5 | 1.9% | Mar 1, 2017 | The NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote attackers to obtain sensitive... |
| CVE-2017-2685 | — | — | 1.0% | Mar 1, 2017 | Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.... |
| CVE-2017-5981 | — | — | 1.6% | Mar 1, 2017 | seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a craf... |
| CVE-2017-5980 | — | — | 1.3% | Mar 1, 2017 | The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NU... |
| CVE-2017-5979 | — | — | 1.6% | Mar 1, 2017 | The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL poi... |
| CVE-2017-5978 | — | — | 1.6% | Mar 1, 2017 | The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (ou... |
| CVE-2017-5977 | — | — | 1.7% | Mar 1, 2017 | The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of ser... |
| CVE-2017-5976 | MEDIUM | 5.5 | 2.1% | Mar 1, 2017 | Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60,... |
| CVE-2017-5975 | MEDIUM | 5.5 | 2.1% | Mar 1, 2017 | Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.5... |
| CVE-2017-5974 | MEDIUM | 5.5 | 1.8% | Mar 1, 2017 | Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.5... |
| CVE-2017-5886 | — | — | 1.7% | Mar 1, 2017 | Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows... |
| CVE-2017-5855 | — | — | 1.0% | Mar 1, 2017 | The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a d... |
| CVE-2017-5854 | — | — | 1.5% | Mar 1, 2017 | base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference ... |
| CVE-2017-5853 | — | — | 1.3% | Mar 1, 2017 | Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted ... |
| CVE-2017-5852 | — | — | 1.4% | Mar 1, 2017 | The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers t... |
| CVE-2017-5851 | — | — | 0.9% | Mar 1, 2017 | The free_options function in options_manager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service (NU... |
| CVE-2017-5666 | — | — | 0.9% | Mar 1, 2017 | The free_options function in options_manager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service (in... |
| CVE-2017-5665 | — | — | 0.9% | Mar 1, 2017 | The splt_cue_export_to_file function in cue.c in libmp3splt 0.9.2 allows remote attackers to cause a denial of service (... |
| CVE-2017-5504 | — | — | 1.6% | Mar 1, 2017 | The jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of ser... |
| CVE-2017-5503 | — | — | 1.8% | Mar 1, 2017 | The dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers to cause a denial of se... |
| CVE-2017-5502 | — | — | 1.3% | Mar 1, 2017 | libjasper/jp2/jp2_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors invo... |
| CVE-2017-5501 | — | — | 1.3% | Mar 1, 2017 | Integer overflow in libjasper/jpc/jpc_tsfb.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (cr... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now