CVE-2017-9075

The sctpv6createacceptsk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890...

UBUNTU-CVE-2017-9075

The sctpv6createacceptsk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890...

CVE-2017-9041

GNU Binutils 2.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to MIPS GOT mishandling in the processmipsspecific function in readelf.c...

CVE-2017-9041

GNU Binutils 2.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to MIPS GOT mishandling in the processmipsspecific function in readelf.c...

Heap overflow

GNU Binutils 2.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to MIPS GOT mishandling in the processmipsspecific function in readelf.c...

CVE-2017-9041

GNU Binutils 2.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to MIPS GOT mishandling in the processmipsspecific function in readelf.c...

UBUNTU-CVE-2017-9041

GNU Binutils 2.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to MIPS GOT mishandling in the processmipsspecific function in readelf.c...

CVE-2017-9041

GNU Binutils 2.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to MIPS GOT mishandling in the processmipsspecific function in readelf.c...

CVE-2017-9041

Technical details for CVE-2017-9041 are not publicly provided in the connected documents. The materials reference Binutils 2.28 and MIPS GOT handling but do not specify affected versions beyond 2.28, exploit vectors, or fixes. Monitor for updates.

CVE-2017-9041

GNU Binutils 2.28 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to MIPS GOT mishandling in the processmipsspecific function in readelf.c...

CVE-2017-8925

The omninetopen function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause a denial of service tty exhaustion by leveraging reference count mishandling...

Microsoft Windows - COM Aggregate Marshaler/IRemUnknown2 Type Confusion Privilege Escalation

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1107 Windows: COM Aggregate Marshaler/IRemUnknown2 Type Confusion EoP Platform: Windows 10 10586/14393 not tested 8.1 Update 2 Class: Elevation of Privilege Summary: When accessing an OOP COM object using IRemUnknown2 the local...

DEBIAN-CVE-2017-8925

The omninetopen function in drivers/usb/serial/omninet.c in the Linux kernel before 4.10.4 allows local users to cause a denial of service tty exhaustion by leveraging reference count mishandling...

DEBIAN-CVE-2017-8903

Xen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-213...

Microsoft Windows DNS Server Denial of Service (CVE-2017-0171)

A denial of service vulnerability exists in Windows DNS servers. This vulnerability is due to a mishandling of malformed packets by the DNS servers. An attacker can exploit this vulnerability by sending a malformed packet to a Windows DNS server...

Intel AMT Framework Unauthorized Admin Entry (CVE-2017-5689)

An unauthorized admin entry vulnerability exists within Intel AMT services. The vulnerability exists because of a mishandling of admin password request. A successful attack can give remote access to the administrator account...

Intel Active Management Technology Privilege Escalation Vulnerability (INTEL-SA-00075) - Active Check

Intel systems with Intel Active Management Technology enabled are prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Intel Standard Manageability Privilege Escalation Vulnerability

Intel system with Intel Standard Manageability is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Code injection

GeniXCMS 1.0.2 has XSS triggered by a comment that is mishandled during a publish operation by an administrator, as demonstrated by a malformed P element...

CVE-2017-8780

GeniXCMS 1.0.2 is affected by a cross-site scripting (XSS) vulnerability triggered by a comment mishandled during an administrator publish operation, demonstrated by a malformed P element. Root cause and impact are described across multiple sources (NVD/NVD, Red Hat, GHSA, OSV, CNVD, CNVD). The d...