CVE-2017-12174

It was found that when Artemis and HornetQ are configured with UDP discovery and JGroups discovery a huge byte array is created when receiving an unexpected multicast message. This may result in a heap memory exhaustion, full GC, or OutOfMemoryError...

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". Thi...

airflow-imaging-plugins (>=2.4.2, <=2.4.3), data-tracking (1.7.2) +1 more potentially affected by CVE-2017-12614 via apache-airflow (1.8.2)

apache-airflow PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-imaging-plugins =2.4.2, =0.0.5, =0.0.6 Source cves: CVE-2017-12614 Source advisory: GHSA-RV25-9WGJ-XG75...

airflow-imaging-plugins (>=2.4.2, <=2.4.3), data-tracking (1.7.2) +1 more potentially affected by CVE-2017-12614 via apache-airflow (1.8.2)

apache-airflow PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-imaging-plugins =2.4.2, =0.0.5, =0.0.6 Source cves: CVE-2017-12614 Source advisory: OSV:GHSA-RV25-9WGJ-XG75...

GHSA-7HWC-2CQ4-6X2W Symfony Open Redirect

The security handlers in the Security component in Symfony in 2.7.x before 2.7.48, 2.8.x before 2.8.41, 3.3.x before 3.3.17, 3.4.x before 3.4.11, and 4.0.x before 4.0.11 have an Open redirect vulnerability when security.httputils is inlined by a container. NOTE: this issue exists because of an...

io.fabric8.jube.images.fabric8:tomcat (>=2.0.1, <=2.0.5), io.fabric8.jube.images.fabric8:tomcat-8.0 (>=2.0.6, <=2.2.0) +8 more potentially affected by CVE-2017-5647 via org.apache.tomcat:tomcat (>=8.0.14, <=8.0.32)

org.apache.tomcat:tomcat MAVEN version =8.0.14, =2.0.1, =2.0.6, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m3 Source cves: CVE-2017-5647 Source advisory: OSV:GHSA-3GV7-3H64-78CM...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3), org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.4) +12 more potentially affected by CVE-2017-5647 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.68)

org.apache.tomcat:tomcat MAVEN version =7.0.37, =3.3.1, =3.3.1, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2017-5647 Source advisory: OSV:GHSA-3GV7-3H64-78CM...

org.apache.tomee:apache-tomee (>=7.0.0, <=7.0.3), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.0.3) +6 more potentially affected by CVE-2017-5647 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.11)

org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 Source cves: CVE-2017-5647 Source advisory: OSV:GHSA-3GV7-3H64-78CM...

org.apache.tomee:apache-tomee (>=7.0.0, <=7.0.3), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.0.3) +6 more potentially affected by CVE-2017-5647 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.11)

org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.3 Source cves: CVE-2017-5647 Source advisory: GHSA-3GV7-3H64-78CM...

io.fabric8.runtime:fabric-runtime-container-tomcat-patch (1.1.0.cr3), org.apache.juddi:juddi-tomcat (>=3.3.1, <=3.3.4) +12 more potentially affected by CVE-2017-5647 via org.apache.tomcat:tomcat (>=7.0.37, <=7.0.68)

org.apache.tomcat:tomcat MAVEN version =7.0.37, =3.3.1, =3.3.1, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =1.5.2, =4.5.2, =5.16.3, =5.19.9 Source cves: CVE-2017-5647 Source advisory: GHSA-3GV7-3H64-78CM...

org.apache.tomee:apache-tomee (7.0.4), org.apache.tomee:arquillian-tomee-codi-tests (7.0.4) +8 more potentially affected by CVE-2017-15706 via org.apache.tomcat:tomcat (>=8.5.20, <=8.5.23)

org.apache.tomcat:tomcat MAVEN version =8.5.20, =5.20.1, =5.20.4 Source cves: CVE-2017-15706 Source advisory: GHSA-372Q-33VH-8MPC...

org.apache.tomee:apache-tomee (7.0.4), org.apache.tomee:arquillian-tomee-codi-tests (7.0.4) +8 more potentially affected by CVE-2017-15706 via org.apache.tomcat:tomcat (>=8.5.20, <=8.5.23)

org.apache.tomcat:tomcat MAVEN version =8.5.20, =5.20.1, =5.20.4 Source cves: CVE-2017-15706 Source advisory: OSV:GHSA-372Q-33VH-8MPC...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +204 more potentially affected by CVE-2017-12617 via org.apache.tomcat:tomcat-catalina (>=7.0.0, <=7.0.81)

org.apache.tomcat:tomcat-catalina MAVEN version =7.0.0, =0.1.6, =2.0.0, =1.2.4, =1.0.2, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.3, =1.5, =1.0.0, =1.0.0, =1.1.9 and more Source cves: CVE-2017-12617 Source advisory: GHSA-XJGH-84HX-56C5...

com.cloudera.oryx:oryx-lambda-serving (>=2.3.0, <=2.5.0), com.collaborne.operations:tomcat-remoteip-aws-valve (>=1.0.0, <=1.1.5) +65 more potentially affected by CVE-2017-12617 via org.apache.tomcat:tomcat-catalina (>=8.5.0, <=8.5.21)

org.apache.tomcat:tomcat-catalina MAVEN version =8.5.0, =2.3.0, =1.0.0, =1.0.4, =1.8.2, =2.1, =0.0.4, =1.9.5, =1.2.0, =1.6.1 - io.antmedia:ant-media-server-common 1.6.0 and more Source cves: CVE-2017-12617 Source advisory: GHSA-XJGH-84HX-56C5...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +204 more potentially affected by CVE-2017-12617 via org.apache.tomcat:tomcat-catalina (>=7.0.0, <=7.0.81)

org.apache.tomcat:tomcat-catalina MAVEN version =7.0.0, =0.1.6, =2.0.0, =1.2.4, =1.0.2, =0.1, =0.4, =3.0.0, =1.0.0, =1.2.1, =1.3, =1.5, =1.0.0, =1.0.0, =1.1.9 and more Source cves: CVE-2017-12617 Source advisory: OSV:GHSA-XJGH-84HX-56C5...

com.github.dblock.waffle:waffle-tomcat9 (1.8.1), com.github.psi-probe:psi-probe-tomcat9 (3.0.0.rc2) +17 more potentially affected by CVE-2017-12617 via org.apache.tomcat:tomcat-catalina (>=9.0.0.m1, <=9.0.0.m27)

org.apache.tomcat:tomcat-catalina MAVEN version =9.0.0.m1, =1.8.2, =0.3.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.3.0, =1.0.0, =9.0.0.m1, =9.0.0.m27 and more Source cves: CVE-2017-12617 Source advisory: OSV:GHSA-XJGH-84HX-56C5...

com.cloudera.oryx:oryx-lambda-serving (>=2.3.0, <=2.5.0), com.collaborne.operations:tomcat-remoteip-aws-valve (>=1.0.0, <=1.1.5) +65 more potentially affected by CVE-2017-12617 via org.apache.tomcat:tomcat-catalina (>=8.5.0, <=8.5.21)

org.apache.tomcat:tomcat-catalina MAVEN version =8.5.0, =2.3.0, =1.0.0, =1.0.4, =1.8.2, =2.1, =0.0.4, =1.9.5, =1.2.0, =1.6.1 - io.antmedia:ant-media-server-common 1.6.0 and more Source cves: CVE-2017-12617 Source advisory: OSV:GHSA-XJGH-84HX-56C5...

com.amazonaws:aws-dynamodb-session-tomcat (2.0.4), com.att.nsa:msgrtr (0.0.5) +90 more potentially affected by CVE-2017-12617 via org.apache.tomcat:tomcat-catalina (>=8.0.0-rc1, <=8.0.46)

org.apache.tomcat:tomcat-catalina MAVEN version =8.0.0-rc1, =2.2.0, =0.9.1-beta3, =0.9.1-beta3, =1.7, =1.8.2, =2.1, =1.2, =16, =16.6.2 and more Source cves: CVE-2017-12617 Source advisory: GHSA-XJGH-84HX-56C5...

com.github.dblock.waffle:waffle-tomcat9 (1.8.1), com.github.psi-probe:psi-probe-tomcat9 (3.0.0.rc2) +17 more potentially affected by CVE-2017-12617 via org.apache.tomcat:tomcat-catalina (>=9.0.0.m1, <=9.0.0.m27)

org.apache.tomcat:tomcat-catalina MAVEN version =9.0.0.m1, =1.8.2, =0.3.0, =0.3.1, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.3.0, =1.0.0, =9.0.0.m1, =9.0.0.m27 and more Source cves: CVE-2017-12617 Source advisory: GHSA-XJGH-84HX-56C5...

ChakraCore RCE Vulnerability

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from...