CVE-2017-14777

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-14789

CVE-2017-14789 is rejected/not used; reference CVE-2018-7502 instead.

CVE-2017-14782

CVE-2017-14782 is rejected/not used and does not represent an active vulnerability entry; use CVE-2018-7502.

CVE-2017-14781

CVE-2017-14781 is rejected/not used; reference CVE-2018-7502 instead.

CVE-2017-14791

CVE-2017-14791 is a reservation duplicate of CVE-2018-7502 and contains no usable detail itself. Connected documents provide concrete details for CVE-2018-7502: Beckhoff TwinCAT kernel drivers (TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, TwinCAT 3.1) fail to validate user-supplied pointer val...

CVE-2017-14790

CVE-2018-7502 is described in connected documents as a vulnerability in Beckhoff TwinCAT where kernel drivers in TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker capable of code execution on the target could exploi...

CVE-2017-14788

CVE-2018-7502 (Beckhoff TwinCAT) involves an untrusted pointer dereference in Beckhoff TwinCAT kernel drivers. The vulnerability affects TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1, where user-supplied pointer values are not properly validated. An attacker who can execute code...

CVE-2017-14786

CVE-2017-14786 is rejected/not used; reference CVE-2018-7502 instead.

CVE-2017-14779

CVE-2017-14779 is a reservation duplicate of CVE-2018-7502; connected records focus on CVE-2018-7502, which affects Beckhoff TwinCAT kernels: untrusted pointer dereference in TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1, allowing code execution with SYSTEM privileges if an atta...

CVE-2017-14787

CVE-2017-14787 is a reservation duplicate and is rejected/not used; reference CVE-2018-7502.

CVE-2017-14776

CVE-2017-14776 is rejected/not used and does not represent an active vulnerability entry; reference CVE-2018-7502.

CVE-2017-14784

This CVE entry is rejected/not used; reference CVE-2018-7502 instead.

CVE-2018-7502

Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges...

CVE-2018-7502

CVE-2018-7502 affects Beckhoff TwinCAT: 3.1 Build 4022.4, 2.11 R3 2259, and 3.1. Root cause is unvalidated user-supplied pointer values in kernel drivers, enabling a code-execution path with LOCAL access and LOW complexity that could yield SYSTEM privileges. Confirmed by multiple sources (NVD/Ten...

Virtuozzo 6 : nss / nss-devel / nss-pkcs11-devel / nss-sysinit / etc (VZLSA-2017-1364)

An update for nss is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Virtuozzo 7 : nss / nss-devel / nss-pkcs11-devel / nss-sysinit / etc (VZLSA-2017-1365)

An update for nss is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Important: nss

Issue Overview: Null pointer dereference when handling empty SSLv2 messages: A null pointer dereference flaw was found in the way NSS handled empty SSLv2 messages. An attacker could use this flaw to crash a server application compiled against the NSS library. CVE-2017-7502 Affected Packages: nss...

Important: Red Hat Security Advisory: Red Hat Container Development Kit 3.0.0 security update

An update is now available for Red Hat Container Development Kit 3.0.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

EulerOS 2.0 SP1 : nss (EulerOS-SA-2017-1108)

According to the version of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A null pointer dereference flaw was found in the way NSS handled empty SSLv2 messages. An attacker could use this flaw to crash a server application...

EulerOS 2.0 SP2 : nss (EulerOS-SA-2017-1109)

According to the version of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A null pointer dereference flaw was found in the way NSS handled empty SSLv2 messages. An attacker could use this flaw to crash a server application...