|
247761
|
6.5 |
MEDIUM
Local
|
qemu
|
qemu
|
Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via …
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2017-5857
|
2024-11-21 12:28 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247762
|
6.5 |
MEDIUM
Local
|
qemu debian
|
qemu debian_linux
|
Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via Meg…
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2017-5856
|
2024-11-21 12:28 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247763
|
6.5 |
MEDIUM
Local
|
qemu debian
|
qemu debian_linux
|
The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) o…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-5667
|
2024-11-21 12:28 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247764
|
7.4 |
HIGH
Network
|
apache
|
camel
|
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2017-5643
|
2024-11-21 12:28 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247765
|
7.4 |
HIGH
Network
|
debian kitfox
|
debian_linux svg_salamander
|
The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG fil…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2017-5617
|
2024-11-21 12:28 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247766
|
6.5 |
MEDIUM
Local
|
virglrenderer_project
|
virglrenderer
|
The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference…
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-5937
|
2024-11-21 12:28 |
2017-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247767
|
5.5 |
MEDIUM
Local
|
qemu suse
|
qemu linux_enterprise_server linux_enterprise_software_development_kit linux_enterprise_desktop linux_enterprise_server_for_sap
|
Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a …
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2017-5898
|
2024-11-21 12:28 |
2017-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247768
|
5.5 |
MEDIUM
Local
|
fedoraproject netpbm_project
|
fedora netpbm
|
tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted tiff…
|
CWE-125 CWE-787
Out-of-bounds Read Out-of-bounds Write
|
CVE-2017-5849
|
2024-11-21 12:28 |
2017-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247769
|
9.8 |
CRITICAL
Network
|
fatek
|
ethernet_module_configuration_tool_cbe_firmware ethernet_module_configuration_tool_cbeh_firmware ethernet_module_configuration_tool_cm25e_firmware ethernet_module_configuration_tool_cm55e_fi…
|
An issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ether_cfg software configuration tool runs on the following Fatek PLCs: CBEH versions prior to V3.6 Build 170215, CBE ver…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-6023
|
2024-11-21 12:28 |
2017-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247770
|
5.5 |
MEDIUM
Local
|
virglrenderer_project
|
virglrenderer
|
Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-5994
|
2024-11-21 12:28 |
2017-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|