UBUNTU-CVE-2017-13753

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9396. Reason: This candidate is a duplicate of CVE-2016-9396. Notes: All CVE users should reference CVE-2016-9396 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usag...

CVE-2017-13753

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9396. Reason: This candidate is a duplicate of CVE-2016-9396. Notes: All CVE users should reference CVE-2016-9396 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2017-13753

JasPer (JPEG-2000 codec) is affected by two documented CVEs: CVE-2016-9396 (reachable assertion in JPC_NOMINALGAIN) and CVE-2017-1000050 (NULL pointer exception in jp2_encode). Multiple vendor advisories confirm affected products and fixes, e.g., Red Hat/CentOS (CESA RHSA-2018:3253) and IBM Power...

CVE-2017-1000162

CVE-2017-1000162 is rejected and not used; reference CVE-2017-12474/12475/12476.

CVE-2017-1000216

CVE-2017-1000216 is a reservation duplicate of CVE-2017-11104 and should reference CVE-2017-11104. The active vulnerability is CVE-2017-11104 in Knot DNS: versions 2.4.x prior to 2.4.5 and 2.5.x prior to 2.5.2 contain a TSIG authentication bypass due to an improper TSIG validity period check. Exp...

CVE-2017-1000205

CVE-2017-1000205 is rejected; reference CVE-2017-9091 instead.

CVE-2017-1000123

CVE-2017-1000123 is a reservation duplicate of CVE-2017-12425. Connected records provide concrete details for CVE-2017-12425: a denial-of-service vulnerability in Varnish (Varnish Cache) caused by a faulty if statement in varnishd that can trigger an assertion when processing invalid client reque...

CVE-2017-1000165

CVE-2017-1000165 is a rejected/duplicate entry and should reference CVE-2017-11366.

CVE-2017-1000202

CVE-2017-1000202 is a reserved/duplicate entry; refer to CVE-2017-12933.

CVE-2017-1000183

CVE-2017-1000183 is rejected/not used per the description.

CVE-2017-1000177

CVE-2017-1000177 is a reservation/duplicate of CVE-2017-11097. The connected records describe the underlying issue as: SWFTools 0.9.2 processes a crafted SWF file in swfc, causing a NULL pointer dereference in dict_lookup() in lib/q.c. This is the same vulnerability tracked under CVE-2017-11097; ...

CVE-2017-12880

PyJWT CVE-2017-12880 concerns symmetric/asymmetric key confusion when handling PKCS1 PEM public keys. Connected advisories note the issue is fixed in PyJWT updates (openSUSE/SUSE advisories) and that CVE-2017-12880 is referenced alongside CVE-2017-11424 (duplicate). The available documents do not...

CVE-2017-9411

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9100. Reason: This candidate is a duplicate of CVE-2015-9100. Notes: All CVE users should reference CVE-2015-9100 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2017-9410

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9101. Reason: This candidate is a duplicate of CVE-2015-9101. Notes: All CVE users should reference CVE-2015-9101 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

ALPINE-CVE-2017-9411

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9100. Reason: This candidate is a duplicate of CVE-2015-9100. Notes: All CVE users should reference CVE-2015-9100 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

UBUNTU-CVE-2017-9410

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9101. Reason: This candidate is a duplicate of CVE-2015-9101. Notes: All CVE users should reference CVE-2015-9101 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usag...

CVE-2017-9411

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9100. Reason: This candidate is a duplicate of CVE-2015-9100. Notes: All CVE users should reference CVE-2015-9100 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

ALPINE-CVE-2017-9410

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9101. Reason: This candidate is a duplicate of CVE-2015-9101. Notes: All CVE users should reference CVE-2015-9101 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

UBUNTU-CVE-2017-9411

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9100. Reason: This candidate is a duplicate of CVE-2015-9100. Notes: All CVE users should reference CVE-2015-9100 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usag...

CVE-2017-9410

CVE-2017-9410 concerns LAME, affecting the libmp3lame code path. The vulnerability is described as a heap-based buffer over-read in fill_buffer_resample (libmp3lame/util.c) related to lame_encode_buffer_sample_t in libmp3lame/lame.c. Public disclosures in connected docs indicate this CVE is tied ...