NVD脆弱性情報トップ
検索メニュー表示
ベンダー名
プロダクト・サービス名
タイトル
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
公表日降順
更新日降順
表示数

NVD(National Vulnerability Database)で管理されている脆弱性の一覧を検索することが出来ます。
JVN(Japan Vulnerability Note)より先に脆弱性情報が更新される事が多いため、JVNに未記載の脆弱性が更新されている場合があります。

JVN(Japan Vulnerability Note)に関連した脆弱性がある場合は詳細画面で情報を表示します。

CWEで検索する場合は、CWE概要を参照して、CWE番号を確認してください。

  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW

更新日:2026年5月18日4:12

No CVSS レベル
攻撃区分
ベンダー名 プロダクト名 タイトル CWE CVE 更新日 公表日 影響表示 Exploit
PoC
検索
249351 7.5 HIGH
ネットワーク
f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_analytics
big-ip_application_security_manager
big-ip_dns
big-ip_global_t…
On the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 1… CWE-20
不適切な入力確認
CVE-2017-6140 2024-11-21 12:29 2017-12-22 表示 GitHub Exploit DB Packet Storm
249352 7.5 HIGH
ネットワーク
f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_analytics
big-ip_access_policy_manager
big-ip_application_security_manager<…
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profil… CWE-20
不適切な入力確認
CVE-2017-6138 2024-11-21 12:29 2017-12-22 表示 GitHub Exploit DB Packet Storm
249353 5.9 MEDIUM
ネットワーク
f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_analytics
big-ip_access_policy_manager
big-ip_application_security_manager<…
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.0.0 - 12.1.2, undisclosed traffic patterns sent to BIG-IP virtual servers, w… CWE-20
不適切な入力確認
CVE-2017-6136 2024-11-21 12:29 2017-12-22 表示 GitHub Exploit DB Packet Storm
249354 7.5 HIGH
ネットワーク
f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_analytics
big-ip_access_policy_manager
big-ip_application_security_manager<…
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, a slow memory leak as a result of undisclosed IPv4 or IPv6 packets sent to BIG-IP … CWE-772
有効なライフタイム後のリソースの解放の欠如
CVE-2017-6135 2024-11-21 12:29 2017-12-22 表示 GitHub Exploit DB Packet Storm
249355 6.5 MEDIUM
隣接
f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_analytics
big-ip_access_policy_manager
big-ip_application_security_manager<…
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, 12.1.0 - 12.1.2 and 11.5.1 - 11.6.1, an undisclosed sequence of packets, sourced f… CWE-20
不適切な入力確認
CVE-2017-6134 2024-11-21 12:29 2017-12-22 表示 GitHub Exploit DB Packet Storm
249356 7.5 HIGH
ネットワーク
f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_analytics
big-ip_access_policy_manager
big-ip_application_security_manager<…
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 and 11.5.0 - 11.5.4, an undisclosed sequence of… CWE-20
不適切な入力確認
CVE-2017-6132 2024-11-21 12:29 2017-12-22 表示 GitHub Exploit DB Packet Storm
249357 9.8 CRITICAL
ネットワーク
genexis gaps CPEs used by subscribers on the access network receive their individual configuration settings from a central GAPS instance. A CPE identifies itself by the MAC address of its WAN interface and a cert… CWE-200
情報漏えい
CVE-2017-6094 2024-11-21 12:29 2017-12-21 表示 GitHub Exploit DB Packet Storm
249358 7.8 HIGH
ローカル
google android NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorrect bounds check which could enable unauthorized code execution and possibly le… CWE-416
解放済みメモリの使用
CVE-2017-6276 2024-11-21 12:29 2017-12-7 表示 GitHub Exploit DB Packet Storm
249359 7.8 HIGH
ローカル
google android NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to improper usage of the list_for_each kernel macro which could enable unauthorized code executi… CWE-416
解放済みメモリの使用
CVE-2017-6263 2024-11-21 12:29 2017-12-7 表示 GitHub Exploit DB Packet Storm
249360 7.0 HIGH
ローカル
google android NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to a race condition which could enable unauthorized code execution and possibly lead to elevatio… CWE-416
解放済みメモリの使用
CVE-2017-6262 2024-11-21 12:29 2017-12-7 表示 GitHub Exploit DB Packet Storm
249361 9.8 CRITICAL
ネットワーク
google android In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the processing of a downlink supplementary services message, a buffer overflow can o… CWE-119
バッファエラー
CVE-2017-6211 2024-11-21 12:29 2017-12-6 表示 GitHub Exploit DB Packet Storm
249362 5.9 MEDIUM
ネットワーク
f5 linerate
f5_websafe
big-ip_pem
big-ip_link_controller
big-ip_dns
big-ip_asm
big-ip_apm
big-ip_analytics
big-ip_afm
big-ip_ltm
big-ip_application_acceleration_manager
In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel (TMM) may crash when processing fragme… CWE-415
二重解放
CVE-2017-6166 2024-11-21 12:29 2017-11-23 表示 GitHub Exploit DB Packet Storm
249363 7.4 HIGH
ネットワーク
f5 big-ip_ltm
big-ip_application_acceleration_manager
big-ip_afm
big-ip_analytics
big-ip_apm
big-ip_asm
big-ip_link_controller
big-ip_pem
websafe
On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3) a virtual server configured with a Client SSL profile may b… CWE-203
セキュリティ関連の処理に対するレスポンスの違いに起因する情報漏えい
CVE-2017-6168 2024-11-21 12:29 2017-11-18 表示 GitHub Exploit DB Packet Storm
249364 7.8 HIGH
ローカル
linux linux_kernel An elevation of privilege vulnerability exists in the NVIDIA GPU driver (gm20b_clk_throt_set_cdev_state), where an out of bound memory read is used as a function pointer could lead to code execution … CWE-125
境界外読み取り
CVE-2017-6264 2024-11-21 12:29 2017-11-15 表示 GitHub Exploit DB Packet Storm
249365 7.5 HIGH
ネットワーク
google android An information disclosure vulnerability exists in the Thermal Driver, where a missing bounds checking in the thermal driver could allow a read from an arbitrary kernel address. This issue is rated as… CWE-200
情報漏えい
CVE-2017-6275 2024-11-21 12:29 2017-11-15 表示 GitHub Exploit DB Packet Storm
249366 9.8 CRITICAL
ネットワーク
google android An elevation of Privilege vulnerability exists in the Thermal Driver, where a missing bounds checks in the thermal throttle driver can cause an out-of-bounds write in the kernel. This issue is rated … CWE-119
バッファエラー
CVE-2017-6274 2024-11-21 12:29 2017-11-15 表示 GitHub Exploit DB Packet Storm
249367 7.1 HIGH
ローカル
symantec endpoint_protection Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real time protection for the application that … NVD-CWE-noinfo
CVE-2017-6331 2024-11-21 12:29 2017-11-7 表示 GitHub Exploit DB Packet Storm
249368 5.9 MEDIUM
ネットワーク
f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_access_policy_manager
big-ip_application_security_manager
big-ip_link_contr…
In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when a virtual server uses the standard configuration of HTTP/2 … CWE-119
バッファエラー
CVE-2017-6163 2024-11-21 12:29 2017-10-27 表示 GitHub Exploit DB Packet Storm
249369 5.9 MEDIUM
ネットワーク
f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_access_policy_manager
big-ip_application_security_manager
big-ip_link_contr…
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, 11.2.1, in some cases TMM… CWE-119
バッファエラー
CVE-2017-6162 2024-11-21 12:29 2017-10-27 表示 GitHub Exploit DB Packet Storm
249370 5.3 MEDIUM
隣接
f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_access_policy_manager
big-ip_application_security_manager
big-ip_link_contr…
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSy… CWE-400
リソースの枯渇
CVE-2017-6161 2024-11-21 12:29 2017-10-27 表示 GitHub Exploit DB Packet Storm
249371 5.9 MEDIUM
ネットワーク
f5 big-ip_application_acceleration_manager
big-ip_policy_enforcement_manager
In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously crafted HTTP request to cause Traffic Management Microkernel (… NVD-CWE-noinfo
CVE-2017-6160 2024-11-21 12:29 2017-10-27 表示 GitHub Exploit DB Packet Storm
249372 5.9 MEDIUM
ネットワーク
f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_access_policy_manager
big-ip_application_security_manager
big-ip_link_contr…
F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnerable to a denial of service attack when the MPTCP o… NVD-CWE-noinfo
CVE-2017-6159 2024-11-21 12:29 2017-10-27 表示 GitHub Exploit DB Packet Storm
249373 8.1 HIGH
ネットワーク
f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_access_policy_manager
big-ip_application_security_manager
big-ip_link_contr…
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.5.0 - 11.5.4, virtual servers with a configuration … NVD-CWE-noinfo
CVE-2017-6157 2024-11-21 12:29 2017-10-27 表示 GitHub Exploit DB Packet Storm
249374 9.8 CRITICAL
ネットワーク
f5 big-ip_access_policy_manager
big-ip_advanced_firewall_manager
big-ip_analytics
big-ip_application_acceleration_manager
big-ip_application_security_manager
big-ip_domain_name_system
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms o… CWE-532
ログファイルからの情報漏えい
CVE-2017-6165 2024-11-21 12:29 2017-10-21 表示 GitHub Exploit DB Packet Storm
249375 7.3 HIGH
ネットワーク
f5 big-ip_link_controller
big-ip_local_traffic_manager
big-ip_advanced_firewall_manager
big-ip_access_policy_manager
big-ip_policy_enforcement_manager
big-ip_domain_name_system
big-ip_…
iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 includes a service to convert authorization BIGIPAuthCookie cook… CWE-613
不適切なセッション期限
CVE-2017-6145 2024-11-21 12:29 2017-10-21 表示 GitHub Exploit DB Packet Storm
249376 7.4 HIGH
ネットワーク
f5 big-ip_policy_enforcement_manager In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database file via HTTPS, the server's certificate is not verified. Attackers in a privileged network position ma… CWE-295
不正な証明書検証
CVE-2017-6144 2024-11-21 12:29 2017-10-21 表示 GitHub Exploit DB Packet Storm
249377 5.9 MEDIUM
ネットワーク
f5 big-ip_local_traffic_manager
big-ip_advanced_firewall_manager
big-ip_access_policy_manager
big-ip_policy_enforcement_manager
big-ip_application_security_manager
big-ip_application_acce…
In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshake when using a client SSL profile with the Session Ticket op… CWE-20
不適切な入力確認
CVE-2017-6141 2024-11-21 12:29 2017-10-21 表示 GitHub Exploit DB Packet Storm
249378 7.8 HIGH
ローカル
nvidia adsp_firmware NVIDIA ADSP Firmware contains a vulnerability in the ADSP Loader component where there is the potential to write to a memory location that is outside the intended boundary of the buffer, which may le… CWE-119
バッファエラー
CVE-2017-6273 2024-11-21 12:29 2017-10-18 表示 GitHub Exploit DB Packet Storm
249379 8.8 HIGH
ネットワーク
ruckus zonedirector_firmware Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow… CWE-78
OSコマンド・インジェクション
CVE-2017-6223 2024-11-21 12:29 2017-10-14 表示 GitHub Exploit DB Packet Storm
249380 8.8 HIGH
ネットワーク
ruckuswireless zonedirector_firmware
unleashed_firmware
Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2… CWE-78
OSコマンド・インジェクション
CVE-2017-6224 2024-11-21 12:29 2017-10-14 表示 GitHub Exploit DB Packet Storm
249381 8.8 HIGH
ネットワーク
phpcollab phpcollab Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable exte… CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2017-6090 2024-11-21 12:29 2017-10-3 表示 GitHub Exploit DB Packet Storm
249382 9.8 CRITICAL
ネットワーク
phpcollab phpcollab SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) project or id parameters to topics/deletetopics.php; the (2) id parame… CWE-89
SQLインジェクション
CVE-2017-6089 2024-11-21 12:29 2017-10-3 表示 GitHub Exploit DB Packet Storm
249383 7.8 HIGH
ローカル
nvidia gpu_driver NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated … CWE-20
不適切な入力確認
CVE-2017-6277 2024-11-21 12:29 2017-09-23 表示 GitHub Exploit DB Packet Storm
249384 7.8 HIGH
ローカル
nvidia gpu_driver NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which m… CWE-20
不適切な入力確認
CVE-2017-6272 2024-11-21 12:29 2017-09-23 表示 GitHub Exploit DB Packet Storm
249385 5.5 MEDIUM
ローカル
nvidia gpu_driver NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted user input is used as a divisor without validation while proces… CWE-369
ゼロ除算
CVE-2017-6271 2024-11-21 12:29 2017-09-23 表示 GitHub Exploit DB Packet Storm
249386 5.5 MEDIUM
ローカル
nvidia gpu_driver NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted user input is used as a divisor without validation during a cal… CWE-369
ゼロ除算
CVE-2017-6270 2024-11-21 12:29 2017-09-23 表示 GitHub Exploit DB Packet Storm
249387 7.8 HIGH
ローカル
nvidia gpu_driver NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from a user to the driver is used without validatio… CWE-20
不適切な入力確認
CVE-2017-6269 2024-11-21 12:29 2017-09-23 表示 GitHub Exploit DB Packet Storm
249388 7.8 HIGH
ローカル
nvidia gpu_driver NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated … CWE-20
不適切な入力確認
CVE-2017-6268 2024-11-21 12:29 2017-09-23 表示 GitHub Exploit DB Packet Storm
249389 5.5 MEDIUM
ローカル
nvidia gpu_driver NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect initialization of internal objects can cause an infinite loop which may lead to a denial of serv… CWE-665
CWE-835
不適切な初期化
無限ループ
CVE-2017-6267 2024-11-21 12:29 2017-09-23 表示 GitHub Exploit DB Packet Storm
249390 5.5 MEDIUM
ローカル
nvidia gpu_driver NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a denial of service. NVD-CWE-noinfo
CVE-2017-6266 2024-11-21 12:29 2017-09-23 表示 GitHub Exploit DB Packet Storm
249391 9.8 CRITICAL
ネットワーク
sophos astaro_security_gateway_firmware Astaro Security Gateway (aka ASG) 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx. CWE-20
不適切な入力確認
CVE-2017-6315 2024-11-21 12:29 2017-09-20 表示 GitHub Exploit DB Packet Storm
249392 5.9 MEDIUM
ネットワーク
f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_analytics
big-ip_access_policy_manager
big-ip_application_security_manager<…
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of se… NVD-CWE-noinfo
CVE-2017-6147 2024-11-21 12:29 2017-09-19 表示 GitHub Exploit DB Packet Storm
249393 6.5 MEDIUM
ネットワーク
symantec encryption_desktop Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (resource consumption) via crafted web requests." NVD-CWE-noinfo
CVE-2017-6330 2024-11-21 12:29 2017-09-13 表示 GitHub Exploit DB Packet Storm
249394 7.5 HIGH
ネットワーク
libgd
debian
fedoraproject
canonical
libgd
debian_linux
fedora
ubuntu_linux
Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors. CWE-415
二重解放
CVE-2017-6362 2024-11-21 12:29 2017-09-7 表示 GitHub Exploit DB Packet Storm
249395 7.8 HIGH
ローカル
symantec vip_access_for_desktop Symantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading vulnerability. These types of issues occur when an application looks to call a DLL for execution and an attacker… CWE-427
制御されていない検索パスの要素
CVE-2017-6329 2024-11-21 12:29 2017-08-22 表示 GitHub Exploit DB Packet Storm
249396 8.8 HIGH
隣接
google android In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controlled by the user and can lead to a buffer overflow. CWE-120
古典的バッファオーバーフロー
CVE-2017-6421 2024-11-21 12:29 2017-08-17 表示 GitHub Exploit DB Packet Storm
249397 8.8 HIGH
ネットワーク
symantec message_gateway The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of cross site request forgery (also known as one-click attack and is abbreviated as CSRF or XSRF), which is a type of malicious… CWE-352
同一生成元ポリシー違反
CVE-2017-6328 2024-11-21 12:29 2017-08-12 表示 GitHub Exploit DB Packet Storm
249398 5.5 MEDIUM
ローカル
clamav clamav The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE file with WWPack compression. CWE-416
解放済みメモリの使用
CVE-2017-6420 2024-11-21 12:29 2017-08-7 表示 GitHub Exploit DB Packet Storm
249399 7.8 HIGH
ローカル
libmspack_project libmspack mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified oth… CWE-119
バッファエラー
CVE-2017-6419 2024-11-21 12:29 2017-08-7 表示 GitHub Exploit DB Packet Storm
249400 5.5 MEDIUM
ローカル
clamav clamav libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted e-mail message. CWE-125
境界外読み取り
CVE-2017-6418 2024-11-21 12:29 2017-08-7 表示 GitHub Exploit DB Packet Storm