|
255961
|
7.8 |
HIGH
Local
|
redhat suse novell openstack opensuse gnu debian mcafee
|
enterprise_linux_desktop enterprise_linux enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server_eus enterprise_linux_server_tus enterprise_linux_server
|
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-1000366
|
2024-11-21 12:04 |
2017-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255962
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver resulting in local users being able to read information belonging to other users, i…
|
CWE-200
Information Exposure
|
CVE-2017-1000380
|
2024-11-21 12:04 |
2017-06-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255963
|
8.2 |
HIGH
Local
|
sudo_project
|
sudo
|
Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_process_ttyname() function resulting in information disclosure and command executio…
|
CWE-20
Improper Input Validation
|
CVE-2017-1000368
|
2024-11-21 12:04 |
2017-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255964
|
6.4 |
MEDIUM
Local
|
sudo_project
|
sudo
|
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
|
CWE-362
Race Condition
|
CVE-2017-1000367
|
2024-11-21 12:04 |
2017-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255965
|
7.5 |
HIGH
Network
|
opendaylight
|
opendaylight
|
DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions and consumes more CPU resources. Component: OpenDaylight is vulnerable to th…
|
NVD-CWE-noinfo
|
CVE-2017-1000361
|
2024-11-21 12:04 |
2017-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255966
|
5.3 |
MEDIUM
Network
|
opendaylight
|
opendaylight
|
StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Controller launches exceptions in the console. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Ver…
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-1000360
|
2024-11-21 12:04 |
2017-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255967
|
5.3 |
MEDIUM
Network
|
opendaylight
|
opendaylight
|
Java out of memory error and significant increase in resource consumption. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0.
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2017-1000359
|
2024-11-21 12:04 |
2017-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255968
|
6.5 |
MEDIUM
Network
|
opendaylight
|
opendaylight
|
Controller throws an exception and does not allow user to add subsequent flow for a particular switch. Component: OpenDaylight odl-restconf feature contains this flaw. Version: OpenDaylight 4.0 is af…
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-1000358
|
2024-11-21 12:04 |
2017-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255969
|
7.5 |
HIGH
Network
|
opendaylight
|
opendaylight
|
Denial of Service attack when the switch rejects to receive packets from the controller. Component: This vulnerability affects OpenDaylight odl-l2switch-switch, which is the feature responsible for t…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2017-1000357
|
2024-11-21 12:04 |
2017-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255970
|
7.5 |
HIGH
Network
|
wordpress
|
wordpress
|
The register_routes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x before 4.7.2 does not require an integer identifier, which allows …
|
NVD-CWE-noinfo
|
CVE-2017-1001000
|
2024-11-21 12:04 |
2017-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|