CVE-2017-14781

CVE-2017-14781 is rejected/not used; reference CVE-2018-7502 instead.

CVE-2017-14793

Beckhoff TwinCAT: CVE-2018-7502 (linked via duplicate of CVE-2017-14793) affects kernel drivers in TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1. Root cause is lack of proper validation of user-supplied pointer values in kernel drivers, enabling a code-executing attack to obtain...

CVE-2017-14782

CVE-2017-14782 is rejected/not used and does not represent an active vulnerability entry; use CVE-2018-7502.

CVE-2017-14792

CVE-2017-14792 is a reservation duplicate of CVE-2018-7502. Connected documents contain concrete details for CVE-2018-7502: Běckhoff TwinCAT kernels (3.1 Build 4022.4, 2.11 R3 2259, 3.1) fail to validate user-supplied pointer values. The vulnerability can allow an attacker who can execute code on...

CVE-2017-14783

CVE-2017-14783 is a reservation duplicate of CVE-2018-7502. Connected documents provide concrete details for CVE-2018-7502: Beckhoff TwinCAT kernel drivers (TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1) fail to validate user-supplied pointer values, enabling an attacker able to...

CVE-2017-14778

CVE-2017-14778 is rejected/not used; reference CVE-2018-7502 instead.

CVE-2017-14776

CVE-2017-14776 is rejected/not used and does not represent an active vulnerability entry; reference CVE-2018-7502.

CVE-2017-14787

CVE-2017-14787 is a reservation duplicate and is rejected/not used; reference CVE-2018-7502.

CVE-2017-14789

CVE-2017-14789 is rejected/not used; reference CVE-2018-7502 instead.

CVE-2017-14777

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-14791

CVE-2017-14791 is a reservation duplicate of CVE-2018-7502 and contains no usable detail itself. Connected documents provide concrete details for CVE-2018-7502: Beckhoff TwinCAT kernel drivers (TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, TwinCAT 3.1) fail to validate user-supplied pointer val...

CVE-2017-14785

CVE-2017-14785 is a reserved duplicate of CVE-2018-7502; per connected sources, CVE-2018-7502 describes Beckhoff TwinCAT kernel driver vulnerability with an untrusted pointer dereference in specific TwinCAT builds. Affected products include Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259,...

CVE-2018-7502

Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges...

CVE-2018-7502

CVE-2018-7502 affects Beckhoff TwinCAT: 3.1 Build 4022.4, 2.11 R3 2259, and 3.1. Root cause is unvalidated user-supplied pointer values in kernel drivers, enabling a code-execution path with LOCAL access and LOW complexity that could yield SYSTEM privileges. Confirmed by multiple sources (NVD/Ten...

Virtuozzo 7 : nss / nss-devel / nss-pkcs11-devel / nss-sysinit / etc (VZLSA-2017-1365)

An update for nss is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Virtuozzo 6 : nss / nss-devel / nss-pkcs11-devel / nss-sysinit / etc (VZLSA-2017-1364)

An update for nss is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Important: nss

Issue Overview: Null pointer dereference when handling empty SSLv2 messages: A null pointer dereference flaw was found in the way NSS handled empty SSLv2 messages. An attacker could use this flaw to crash a server application compiled against the NSS library. CVE-2017-7502 Affected Packages: nss...

Important: Red Hat Security Advisory: Red Hat Container Development Kit 3.0.0 security update

An update is now available for Red Hat Container Development Kit 3.0.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

EulerOS 2.0 SP2 : nss (EulerOS-SA-2017-1109)

According to the version of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A null pointer dereference flaw was found in the way NSS handled empty SSLv2 messages. An attacker could use this flaw to crash a server application...

EulerOS 2.0 SP1 : nss (EulerOS-SA-2017-1108)

According to the version of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A null pointer dereference flaw was found in the way NSS handled empty SSLv2 messages. An attacker could use this flaw to crash a server application...