Skip to contentRedhat Enterprise Linux Server vulnerabilities
- jasper, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 moreJasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded...CVE-2016-9600Fix available6.5 Medium
- jasper project jasper, oracle outside in technology, redhat enterprise linux desktop +5 more +7 moreAn out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper...CVE-2016-95835.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac,...CVE-2017-5056Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac,...CVE-2017-5054Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac,...CVE-2017-5053Fix available9.6 Critical
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133...CVE-2017-5052Fix available8.8 High
- mozilla firefox, firefox esr, redhat enterprise linux +5 more +7 moreAn integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix...CVE-2017-5428Fix available9.8 Critical
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreChrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after...CVE-2017-5043Fix available8.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreCast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...CVE-2017-5042Fix available5.7 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreA use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and...CVE-2017-5039Fix available7.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreChrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after...CVE-2017-5038Fix available6.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreA use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and...CVE-2017-5036Fix available7.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreV8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...CVE-2017-5046Fix available4.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreXSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108...CVE-2017-5045Fix available6.1 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreHeap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac,...CVE-2017-5044Fix available6.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreV8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...CVE-2017-5040Fix availableEPSS 27.4%4.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreAn integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux...CVE-2017-5037Fix available7.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreGoogle Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause...CVE-2017-5035Fix available8.1 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreBlink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...CVE-2017-5033Fix available4.3 Medium
- debian linux, google chrome, chromium v8 +3 more +5 moreIncorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux,...CVE-2017-5030In KEVFix availableEPSS 40.6%8.8 High
- debian linux, google chrome, xmlsoft libxslt +3 more +5 moreNokogiri implementation of libxslt lacks integer overflow checksCVE-2017-5029Fix available8.8 High
- pidgin, debian linux, redhat enterprise linux desktop +4 more +6 moreAn out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A...CVE-2017-2640Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory corruption resulting in a potentially exploitable crash during garbage collection of...CVE-2017-5410Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreVideo files loaded video captions cross-origin without checking for the presence of CORS headers...CVE-2017-5408Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUsing SVG filters that don't use the fixed point math implementation on a target iframe, a...CVE-2017-5407Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreCertain response codes in FTP connections can result in the use of uninitialized values for ports...CVE-2017-5405Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free error can occur when manipulating ranges in selections with one node inside a...CVE-2017-5404Public exploitFix availableEPSS 16.9%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free can occur when events are fired for a "FontFace" object after the object has...CVE-2017-5402Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA crash triggerable by web content in which an "ErrorResult" references unassigned memory due to...CVE-2017-5401Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreJIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP...CVE-2017-5400Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...CVE-2017-5398Fix available9.8 Critical
- apache openoffice, debian linux, redhat enterprise linux desktop +5 more +7 moreBy exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could...CVE-2017-3157Fix available5.5 Medium
- qemu, qemu qemu:, redhat enterprise linux desktop +4 more +6 moreAn out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC...CVE-2017-2633Fix available5.4 Medium
- qemu, citrix xenserver, debian linux +8 more +10 moreQuick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is...CVE-2017-2620Fix available5.5 Medium
- debian linux, linux util-linux, redhat enterprise linux desktop +4 more +6 moreA race condition was found in util-linux before 2.32.1 in the way su handled the management of...CVE-2017-2616Fix available5.5 Medium
- icoutils project icoutils, debian linux, redhat enterprise linux desktop +5 more +7 moreAn issue was discovered in icoutils 0.31.1. An out-of-bounds read leading to a buffer overflow...CVE-2017-6011Fix available5.5 Medium
- icoutils project icoutils, debian linux, redhat enterprise linux desktop +5 more +7 moreAn issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extract_icons"...CVE-2017-6010Fix available5.5 Medium
- icoutils project icoutils, debian linux, redhat enterprise linux desktop +5 more +7 moreAn issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the ...CVE-2017-6009Fix available5.5 Medium
- gstreamer, debian linux, redhat enterprise linux desktop +5 more +7 moreThe gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in...CVE-2017-5848Fix available7.5 High
- mariadb, oracle mysql, debian linux +6 more +8 moreCrash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB...CVE-2017-3302Fix available7.5 High
- isc bind, bind 9, debian linux +8 more +10 moreCombination of DNS64 and RPZ Can Lead to CrashCVE-2017-3135Fix availableEPSS 17.1%7.5 High
- debian linux, linux kernel, redhat enterprise linux +5 more +7 moreA flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr...CVE-2017-2618Fix available5.5 Medium
- red hat spice, debian linux, redhat enterprise linux desktop +4 more +6 moreA vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An...CVE-2016-9578Fix available7.5 High
- qemu, citrix xenserver, debian linux +8 more +10 moreQuick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an...CVE-2017-2615Fix available5.5 Medium
- tcpdump, debian linux, redhat enterprise linux desktop +5 more +7 moreThe ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print().CVE-2017-5205Fix available9.8 Critical
- tcpdump, debian linux, redhat enterprise linux desktop +5 more +7 moreThe IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print().CVE-2017-5204Fix available9.8 Critical
- tcpdump, debian linux, redhat enterprise linux desktop +5 more +7 moreThe BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().CVE-2017-5203Fix available9.8 Critical
- tcpdump, debian linux, redhat enterprise linux desktop +5 more +7 moreThe ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print().CVE-2017-5202Fix available9.8 Critical
- libical project libical, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 morelibical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted...CVE-2016-5824Fix available5.5 Medium
- canonical ubuntu linux, debian linux, littlecms little cms color engine +16 more +18 moreThe Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to...CVE-2016-10165Fix available7.1 High
- Show moreLoading…