CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 104004 | CVE-2017-7184 | Candidate | The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, which allows local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) by leveraging the CAP_NET_ADMIN capability, as demonstrated during a Pwn2Own competition at CanSecWest 2017 for the Ubuntu 16.10 linux-image-* package 4.8.0.41.52. | Assigned (20170319) | None (candidate not yet proposed) | View | |
| 104005 | CVE-2017-7185 | Candidate | Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a multipart/form-data POST request without a MIME boundary string. | Assigned (20170319) | None (candidate not yet proposed) | View | |
| 104006 | CVE-2017-7186 | Candidate | libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup. | Assigned (20170319) | None (candidate not yet proposed) | View | |
| 77239 | CVE-2014-9938 | Candidate | contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution. | Assigned (20170319) | None (candidate not yet proposed) | View | |
| 103997 | CVE-2017-7177 | Candidate | Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching. | Assigned (20170318) | None (candidate not yet proposed) | View |
Page 747 of 20943, showing 5 records out of 104715 total, starting on record 3731, ending on 3735
