Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,030

Export CSV
CVE-2017-15412

libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c

Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.0 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Debian Google Redhat and 1 more
Products
Debian Linux Chrome Ansible Tower and 7 more
CVE-2017-15408

chromium-browser: heap buffer overflow in pdfium

Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium.

CVSS 3.0 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Debian Google Redhat
Products
Debian Linux Chrome Enterprise Linux Desktop and 3 more
CVE-2017-15396

chromium-browser: stack overflow in v8

A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Debian Google Icu-project and 1 more
Products
Debian Linux Chrome International Components For Unicode and 4 more
CVE-2017-15134

389-ds-base: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c

A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x before 1.4.0.5 handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.

CVSS 3.0 · 7.5 High EPSS 3.9% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
389 Directory Server Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2017-15129

kernel: net: double-free and memory corruption in get_net_ns_by_id()

A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Fedoraproject Linux and 1 more
Products
Ubuntu Linux Fedora Linux Kernel and 19 more
CVE-2017-15101

liblouis: incomplete fix for CVE-2014-8184

A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could cause a denial of service condition or potentially even arbitrary code execution.

CVSS 3.0 · 7.8 High EPSS 1.5% KEV · Not listed
Vendors
Liblouis Redhat
Products
Liblouis Enterprise Linux Enterprise Linux Desktop and 4 more
CVE-2017-15097

postgresql: Start scripts permit database administrator to modify root-owned files

Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user account could use these flaws to obtain root access on the server machine.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Linux Desktop Enterprise Linux Server and 5 more
CVE-2017-12173

sssd: unsanitized input when searching in local cache database

It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized login environment, if a password hash was locally cached for a given user, an authenticated attacker could use this flaw to retrieve it.

CVSS 3.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
Sssd Enterprise Linux Enterprise Linux Desktop and 4 more
CVE-2017-12171

httpd: # character matches all IPs

A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuration lines to be parsed incorrectly. A web administrator could unintentionally allow any client to access a restricted HTTP resource.

CVSS 3.0 · 6.5 Medium EPSS 8.1% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2017-12163

Samba: Server memory information leak over SMB1

An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.

CVSS 3.0 · 4.1 Medium EPSS 7.6% KEV · Not listed
Vendors
Debian Redhat Samba
Products
Debian Linux Enterprise Linux Enterprise Linux Desktop and 5 more
CVE-2017-12151

samba: SMB2 connections don't keep encryption across DFS redirects

A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.

CVSS 3.0 · 7.4 High EPSS 4.1% KEV · Not listed
Vendors
Debian Hp Redhat and 1 more
Products
Debian Linux Cifs Server Enterprise Linux and 6 more
CVE-2017-12150

samba: Some code path don't enforce smb signing, when they should

It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.

CVSS 3.1 · 7.4 High EPSS 13.1% KEV · Not listed
Vendors
Debian Redhat Samba
Products
Debian Linux Enterprise Linux Enterprise Linux Desktop and 5 more
CVE-2016-9651

chromium-browser: private property access in v8

A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.0 · 8.8 High EPSS 11.2% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Enterprise Linux Desktop Enterprise Linux Server and 2 more