CVE-2017-15561

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-14393

CVE-2017-14393 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-2771

CVE-2017-2771 is rejected and not used.

CVE-2017-15556

CVE-2017-15556 is rejected/not used per initial description; does not represent an active vulnerability entry.

CVE-2017-2769

This CVE-2017-2769 entry is rejected and does not represent an active vulnerability.

CVE-2017-4956

CVE-2017-4956 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-15541

CVE-2017-15541 is rejected/not used as stated in the Initial Description.

CVE-2017-2774

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-4958

CVE-2017-4958 is rejected and not used; it does not represent an active vulnerability entry.

CVE-2017-15545

CVE-2017-15545 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-8009

CVE-2017-8009 entry is rejected and not used; it does not represent an active vulnerability entry.

CVE-2017-15542

CVE-2017-15542 is rejected and not used per the initial description.

CVE-2017-1000446

This CVE-2017-1000446 entry is rejected/not used; reference CVE-2017-15954 instead.

CVE-2017-1000384

CVE-2017-1000384 is a reservation duplicate of CVE-2017-16355. The connected sources describe a vulnerability in Phusion Passenger (notably the agent/Core/SpawningKit/Spawner.h path) that allows an arbitrary file read by a local user through symlinking the REVISION file to a target file and query...

CVE-2017-17457

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

ALPINE-CVE-2017-17456

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14245. Reason: This candidate is a duplicate of CVE-2017-14245. Notes: All CVE users should reference CVE-2017-14245 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2017-17456

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14245. Reason: This candidate is a duplicate of CVE-2017-14245. Notes: All CVE users should reference CVE-2017-14245 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2017-17457

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Design/Logic Flaw

Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service DoS attack on a CXF web service provider. Both JAX-WS and JAX-RS services are vulnerable to this attack...

CVE-2016-8234

CVE-2016-8234 is rejected; this entry is not used and does not represent an active vulnerability.