CVE-2017-5732

edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

CVSS 3.0 · 6.7 Medium EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux

CVE-2017-11544

tcpdump: Segmentation Violation in the compressed_sl_print

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11543. Reason: This candidate is a duplicate of CVE-2017-11543. Notes: All CVE users should reference CVE-2017-11543 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 5.5 Medium EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux

CVE-2016-5617

mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6664. Reason: This candidate is a reservation duplicate of CVE-2016-6664. Notes: All CVE users should reference CVE-2016-6664 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 7.8 High EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Rhel Software Collections

CVE-2016-5616

mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016)

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason: This candidate is a reservation duplicate of CVE-2016-6663. Notes: All CVE users should reference CVE-2016-6663 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 7.0 High EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Rhel Software Collections

CVE-2016-5483

mysql: Incorrect input validation allowing code execution via mysqldump

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2017-3600. Notes: All CVE users should reference CVE-2017-3600 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 6.4 Medium EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Rhel Software Collections

CVE-2016-5320

libtiff: Out-of-bounds write in PixarLogDecode() function in tif_pixarlog.c

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 6.3 Medium EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux

CVE-2015-5196

ntp: config command can be used to set the pidfile and drift file paths

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7703. Reason: This candidate is a reservation duplicate of CVE-2015-7703. Notes: All CVE users should reference CVE-2015-7703 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVSS 2.0 · 4.0 Medium EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux

CVE-2014-9298

ntp: drop packets with source address ::1

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9750, CVE-2014-9751. Reason: this ID was intended for one issue, but was associated with two issues. Notes: All CVE users should consult CVE-2014-9750 and CVE-2014-9751 to identify the ID or IDs of interest. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 2.0 · 5.0 Medium EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux

CVE-2014-9297

ntp: vallen in extension fields are not validated

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-9750, CVE-2014-9751. Reason: this ID was intended for one issue, but was associated with two issues. Notes: All CVE users should consult CVE-2014-9750 and CVE-2014-9751 to identify the ID or IDs of interest. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 2.0 · 2.6 Low EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux

CVE-2013-1752

python: multiple unbound readline() DoS flaws in python stdlib

Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long string, related to (1) httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; (2) ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; (3) imaplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; (4) nntplib - fixed in 2.7.6, 2.6.9, 3.3.3; (5) poplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; and (6) smtplib - not yet fixed in 2.7.x, fixed in 2.6.9, not yet fixed in 3.3.x. NOTE: this was REJECTed because it is incompatible with CNT1 "Independently Fixable" in the CVE Counting Decisions

CVSS 2.0 · 4.3 Medium EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Rhel Software Collections

CVE-2013-0743

nss: Dis-trust TURKTRUST mis-issued *.google.com certificate

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA at the suggestion of the CVE project team. The candidate had been associated with a correct report of a security problem, but not a problem that is categorized as a vulnerability within CVE. Compromised or unauthorized SSL certificates are not within CVE's scope. Notes: none

CVSS 2.0 · 4.3 Medium EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux

CVE-2012-6686

glibc: stack overflow in getaddrinfo()'s use of alloca()

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-4357. Reason: This candidate is a duplicate of CVE-2013-4357. Notes: All CVE users should reference CVE-2013-4357 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 2.0 · 4.3 Medium EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux

CVE-2009-1563

firefox: (rejected CVE-2009-1563) Firefox heap buffer overflow in string to number conversion

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-0689. Reason: This candidate is a duplicate of CVE-2009-0689. Certain codebase relationships were not originally clear. Notes: All CVE users should reference CVE-2009-0689 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 2.0 · 6.8 Medium EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux

CVE-2007-3005

SUN JRE: Unspecified vulnerability in Sun JRE

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2789. Reason: This candidate is a duplicate of CVE-2007-2789. Notes: All CVE users should reference CVE-2007-2789 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS n/a EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux

CVE-2007-3004

IBM JDK: Integer overflow in IBM JDK's ICC profile parser

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2788. Reason: This candidate is a duplicate of CVE-2007-2788. Notes: All CVE users should reference CVE-2007-2788 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS n/a EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux