2017 CVE Vulnerabilities
17,104 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-2640 | HIGH | 7.5 | 6.3% | Jul 27, 2018 | An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A malicious remote server c... |
| CVE-2017-2630 | MEDIUM | 5.5 | 2.6% | Jul 27, 2018 | A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD)... |
| CVE-2017-2625 | MEDIUM | 6.5 | 0.5% | Jul 27, 2018 | It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user syste... |
| CVE-2017-2624 | MEDIUM | 5.9 | 0.7% | Jul 27, 2018 | It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a serie... |
| CVE-2017-2623 | MEDIUM | 5.3 | 1.0% | Jul 27, 2018 | It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages ... |
| CVE-2017-2621 | MEDIUM | 5.5 | 0.4% | Jul 27, 2018 | An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a ser... |
| CVE-2017-2614 | MEDIUM | 6.8 | 0.3% | Jul 27, 2018 | When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for the... |
| CVE-2017-2590 | HIGH | 8.1 | 1.3% | Jul 27, 2018 | A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the... |
| CVE-2017-2587 | LOW | 3.3 | 1.3% | Jul 27, 2018 | A memory allocation vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the appli... |
| CVE-2017-2586 | LOW | 3.3 | 1.2% | Jul 27, 2018 | A null pointer dereference vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause th... |
| CVE-2017-2581 | MEDIUM | 4.5 | 1.1% | Jul 27, 2018 | An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the applic... |
| CVE-2017-2580 | MEDIUM | 4.5 | 1.4% | Jul 27, 2018 | An out-of-bounds write vulnerability was found in netpbm before 10.61. A maliciously crafted file could cause the applic... |
| CVE-2017-2579 | LOW | 3.3 | 1.6% | Jul 27, 2018 | An out-of-bounds read vulnerability was found in netpbm before 10.61. The expandCodeOntoStack() function has an insuffic... |
| CVE-2017-15119 | MEDIUM | 5.8 | 3.3% | Jul 27, 2018 | The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. I... |
| CVE-2017-15113 | HIGH | 7.2 | 1.2% | Jul 27, 2018 | ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. Only... |
| CVE-2017-12173 | MEDIUM | 4.3 | 1.5% | Jul 27, 2018 | It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying i... |
| CVE-2017-12148 | HIGH | 8.4 | 1.7% | Jul 27, 2018 | A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repo... |
| CVE-2017-7497 | MEDIUM | 4.1 | 1.0% | Jul 27, 2018 | The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker... |
| CVE-2017-2670 | HIGH | 7.5 | 3.7% | Jul 27, 2018 | It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on ev... |
| CVE-2017-2595 | HIGH | 7.7 | 3.1% | Jul 27, 2018 | It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to auth... |
| CVE-2017-15125 | MEDIUM | 6.5 | 0.9% | Jul 27, 2018 | A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not prope... |
| CVE-2017-15120 | HIGH | 7.5 | 51.8% | Jul 27, 2018 | An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL poi... |
| CVE-2017-12195 | MEDIUM | 6.5 | 1.4% | Jul 27, 2018 | A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowled... |
| CVE-2017-12165 | LOW | 2.6 | 1.9% | Jul 27, 2018 | It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces ... |
| CVE-2017-7519 | LOW | 2.3 | 0.5% | Jul 27, 2018 | In Ceph, a format string flaw was found in the way libradosstriper parses input from user. A user could crash an applica... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now