CVE-2017-3648

mysql: Server: Charsets unspecified vulnerability (CPU Jul 2017)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVSS 3.0 · 4.4 Medium EPSS 2.8% KEV · Not listed

Vendors

Debian Oracle Redhat

Products

Debian Linux Mysql Rhel Software Collections

CVE-2016-10158

php: Wrong calculation in exif_convert_any_to_int function

The exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (application crash) via crafted EXIF data that triggers an attempt to divide the minimum representable negative integer by -1.

CVSS 3.0 · 7.5 High EPSS 7.8% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2016-10159

php: Integer overflow in phar_parse_pharfile

Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory consumption or application crash) via a truncated manifest entry in a PHAR archive.

CVSS 3.1 · 7.5 High EPSS 7.6% KEV · Not listed

Vendors

Debian Php Redhat

Products

Debian Linux Php Rhel Software Collections

CVE-2016-10160

php: Off-by-one error in phar_parse_pharfile when loading crafted phar archive

Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch.

CVSS 3.1 · 9.8 Critical EPSS 7.4% KEV · Not listed

Vendors

Debian Netapp Php and 1 more

Products

Debian Linux Clustered Data Ontap Php and 1 more

CVE-2016-10161

php: Out-of-bounds heap read on unserialize in finish_nested_data()

The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via crafted serialized data that is mishandled in a finish_nested_data call.

CVSS 3.0 · 7.5 High EPSS 13.3% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2016-10162

php: Null pointer dereference when unserializing PHP object

The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an inapplicable class name in a wddxPacket XML document, leading to mishandling in a wddx_deserialize call.

CVSS 3.0 · 7.5 High EPSS 5.9% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2017-11628

php: Stack based 1-byte buffer over-write in zend_ini_do_op() function Zend/zend_ini_parser.c

In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zend_ini_do_op() function in Zend/zend_ini_parser.c could cause a denial of service or potentially allow executing code. NOTE: this is only relevant for PHP applications that accept untrusted input (instead of the system's php.ini file) for the parse_ini_string or parse_ini_file function, e.g., a web application for syntax validation of php.ini directives.

CVSS 3.0 · 7.8 High EPSS 3.4% KEV · Not listed

Vendors

Php Redhat

Products

Php Rhel Software Collections

CVE-2016-10167

gd: DoS vulnerability in gdImageCreateFromGd2Ctx()

The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted image file.

CVSS 3.0 · 5.5 Medium EPSS 3.7% KEV · Not listed

Vendors

Libgd Redhat

Products

Libgd Enterprise Linux Rhel Software Collections

CVE-2016-10168

gd: Integer overflow in gd_io.c

Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors involving the number of horizontal and vertical chunks in an image.

CVSS 3.0 · 7.8 High EPSS 3.7% KEV · Not listed

Vendors

Libgd Redhat

Products

Libgd Enterprise Linux Rhel Software Collections

CVE-2017-14064

ruby: Arbitrary heap exposure during a JSON.generate call

Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ext/json/ext/generator/generator.c, which will stop after encountering a '\0' byte, returning a pointer to a string of length zero, which is not the length stored in space_len.

CVSS 3.0 · 9.8 Critical EPSS 9.4% KEV · Not listed

Vendors

Canonical Debian Redhat and 1 more

Products

Ubuntu Linux Debian Linux Enterprise Linux and 8 more

CVE-2017-7486

postgresql: pg_user_mappings view discloses foreign server passwords

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.

CVSS 3.0 · 7.5 High EPSS 6.3% KEV · Not listed

Vendors

Postgresql Redhat

Products

Postgresql Enterprise Linux Network Satellite and 2 more

CVE-2017-10378

mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.11 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

CVSS 3.1 · 6.5 Medium EPSS 3.3% KEV · Not listed

Vendors

Debian Mariadb Netapp and 2 more

Products

Debian Linux Mariadb Active Iq Unified Manager and 16 more

CVE-2017-7546

postgresql: Empty password accepted in some authentication methods

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.

CVSS 3.0 · 9.8 Critical EPSS 61.6% KEV · Not listed

Vendors

Debian Postgresql Redhat

Products

Debian Linux Postgresql Enterprise Linux and 1 more

CVE-2017-7547

postgresql: pg_user_mappings view discloses passwords to users lacking server privileges

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.

CVSS 3.0 · 8.8 High EPSS 5.6% KEV · Not listed

Vendors

Postgresql Redhat

Products

Postgresql Enterprise Linux Rhel Software Collections

CVE-2017-10365

mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.0 Base Score 3.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L).

CVSS 3.1 · 3.8 Low EPSS 1.7% KEV · Not listed

Vendors

Mariadb Netapp Oracle and 1 more

Products

Mariadb Active Iq Unified Manager Oncommand Balance and 7 more

CVE-2017-7890

php: Buffer over-read from unitialized data in gdImageCreateFromGifCtx function

The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.31 and 7.x before 7.1.7, does not zero colorMap arrays before use. A specially crafted GIF image could use the uninitialized tables to read ~700 bytes from the top of the stack, potentially disclosing sensitive information.

CVSS 3.0 · 6.5 Medium EPSS 3.4% KEV · Not listed

Vendors

Php Redhat

Products

Php Enterprise Linux Rhel Software Collections

CVE-2017-10379

mysql: Client programs unspecified vulnerability (CPU Oct 2017)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.57 and earlier, 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

CVSS 3.1 · 6.5 Medium EPSS 2.3% KEV · Not listed

Vendors

Debian Mariadb Netapp and 2 more

Products

Debian Linux Mariadb Active Iq Unified Manager and 16 more

CVE-2017-10314

mysql: Server: Memcached unspecified vulnerability (CPU Oct 2017)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVSS 3.0 · 4.9 Medium EPSS 2.8% KEV · Not listed

Vendors

Oracle Redhat

Products

Mysql Rhel Software Collections

CVE-2017-9226

oniguruma: Heap buffer overflow in next_state_val() during regular expression compilation

An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A heap out-of-bounds write or read occurs in next_state_val() during regular expression compilation. Octal numbers larger than 0xff are not handled correctly in fetch_token() and fetch_token_in_cc(). A malformed regular expression containing an octal number in the form of '\700' would produce an invalid code point value larger than 0xff in next_state_val(), resulting in an out-of-bounds write memory corruption.

CVSS 3.1 · 9.8 Critical EPSS 7.5% KEV · Not listed

Vendors

Oniguruma Project Php Redhat

Products

Oniguruma Php Rhel Software Collections

CVE-2017-10313

mysql: Group Replication GCS unspecified vulnerability (CPU Oct 2017)

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Group Replication GCS). Supported versions that are affected are 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVSS 3.0 · 4.9 Medium EPSS 2.4% KEV · Not listed

Vendors

Oracle Redhat

Products

Mysql Rhel Software Collections