# CVEs published 2017-09-14

130 CVEs were published on September 14, 2017: 52 critical, 1 high. Days are UTC.

- [CVE-2017-0781](https://cve.now/CVE-2017-0781.md): A remote code execution vulnerability in the Android system (bluetooth). (no CVSS, Google Android)
- [CVE-2017-0782](https://cve.now/CVE-2017-0782.md): A remote code execution vulnerability in the Android system (bluetooth). (no CVSS, Google Android)
- [CVE-2017-0783](https://cve.now/CVE-2017-0783.md): A information disclosure vulnerability in the Android system (bluetooth). (no CVSS, Google Android)
- [CVE-2017-0785](https://cve.now/CVE-2017-0785.md): A information disclosure vulnerability in the Android system (bluetooth). (no CVSS, Google Android)
- [CVE-2017-2809](https://cve.now/CVE-2017-2809.md): An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. (CVSS 7.5, Tomohiro Nakamura ansible-vault · ansible-vault)
- [CVE-2017-13761](https://cve.now/CVE-2017-13761.md): The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated… (no CVSS, fastly/magento2)
- [CVE-2013-7429](https://cve.now/CVE-2013-7429.md): The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to… (no CVSS)
- [CVE-2015-7553](https://cve.now/CVE-2015-7553.md): Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink\_log module is… (no CVSS)
- [CVE-2017-14482](https://cve.now/CVE-2017-14482.md): GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data… (no CVSS)
- [CVE-2017-13067](https://cve.now/CVE-2017-13067.md): QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905… (no CVSS, QNAP QTS Media Libary PRODUCT)
- [CVE-2017-1490](https://cve.now/CVE-2017-1490.md): An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive… (no CVSS, IBM Jazz Reporting Service)
- [CVE-2017-1002000](https://cve.now/CVE-2017-1002000.md): Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file… (no CVSS, jenova12345 mobile-friendly-app-builder-by-easytouch)
- [CVE-2017-1002001](https://cve.now/CVE-2017-1002001.md): Vulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes unlicensed vulnerable CMS software from… (no CVSS, Invedion mobile-app-builder-by-wappress)
- [CVE-2017-1002002](https://cve.now/CVE-2017-1002002.md): Vulnerability in wordpress plugin webapp-builder v2.0, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com/ (no CVSS, Invedion webapp-builder)
- [CVE-2017-1002003](https://cve.now/CVE-2017-1002003.md): Vulnerability in wordpress plugin wp2android-turn-wp-site-into-android-app v1.1.4, The plugin includes unlicensed vulnerable CMS software… (no CVSS, invedion wp2android-turn-wp-site-into-android-app)
- [CVE-2017-1002004](https://cve.now/CVE-2017-1002004.md): Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/download.php user input isn't sanitized via the id variable before… (no CVSS, ITFlux DTracker)
- [CVE-2017-1002005](https://cve.now/CVE-2017-1002005.md): Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/delete.php user input isn't sanitized via the contact\_id variable… (no CVSS, ITFlux DTracker)
- [CVE-2017-1002006](https://cve.now/CVE-2017-1002006.md): Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save\_contact.php doesn't check that the user is authorized before… (no CVSS, ITFlux DTracker)
- [CVE-2017-1002007](https://cve.now/CVE-2017-1002007.md): Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save\_mail.php doesn't check that the user is authorized before… (no CVSS, ITFlux DTracker)
- [CVE-2017-1002008](https://cve.now/CVE-2017-1002008.md): Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located… (no CVSS, William DeAngelis membership-simplified-for-oap-members-only)
- [CVE-2017-1002009](https://cve.now/CVE-2017-1002009.md): Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is… (no CVSS)
- [CVE-2017-1002010](https://cve.now/CVE-2017-1002010.md): Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is… (no CVSS, ontraport Membership Simplified)
- [CVE-2017-1002011](https://cve.now/CVE-2017-1002011.md): Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, There is a stored XSS vulnerability via the $value-\>gallery\_name… (no CVSS, Anblik image-gallery-with-slideshow)
- [CVE-2017-1002012](https://cve.now/CVE-2017-1002012.md): Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/admin\_setting.php the following… (no CVSS, Anblik image-gallery-with-slideshow)
- [CVE-2017-1002013](https://cve.now/CVE-2017-1002013.md): Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection via imgid parameter in… (no CVSS, Anblik image-gallery-with-slideshow)
- [CVE-2017-1002014](https://cve.now/CVE-2017-1002014.md): Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in… (no CVSS, Anblik image-gallery-with-slideshow)
- [CVE-2017-1002015](https://cve.now/CVE-2017-1002015.md): Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in… (no CVSS, Anblik image-gallery-with-slideshow)
- [CVE-2017-1002016](https://cve.now/CVE-2017-1002016.md): Vulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to see if the user is… (no CVSS, daozhao flickr-picture-backup)
- [CVE-2017-1002017](https://cve.now/CVE-2017-1002017.md): Vulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn't sanitize user input to prevent a stored… (no CVSS, Bob Cares gift-certificate-creator)
- [CVE-2017-1002018](https://cve.now/CVE-2017-1002018.md): Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind… (no CVSS, Binny V A eventr)
- [CVE-2017-1002019](https://cve.now/CVE-2017-1002019.md): Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and event\_form.php code do not sanitize input, this allows for blind… (no CVSS, Binny V A eventr)
- [CVE-2017-1002020](https://cve.now/CVE-2017-1002020.md): Vulnerability in wordpress plugin surveys v1.01.8, The code in survey\_form.php does not sanitize the action variable before placing it… (no CVSS, Binny V A surveys)
- [CVE-2017-1002021](https://cve.now/CVE-2017-1002021.md): Vulnerability in wordpress plugin surveys v1.01.8, The code in individual\_responses.php does not sanitize the survey\_id variable before… (no CVSS, Binny V A surveys)
- [CVE-2017-1002022](https://cve.now/CVE-2017-1002022.md): Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it… (no CVSS, Binny V A surveys)
- [CVE-2017-1002023](https://cve.now/CVE-2017-1002023.md): Vulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before making it part of an SQL statement in… (no CVSS, Daisy Themes Easy Team Manager)
- [CVE-2017-1002024](https://cve.now/CVE-2017-1002024.md): Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload\_json.php does not check authentication before allow users to… (no CVSS, Kind Editor)
- [CVE-2017-1002025](https://cve.now/CVE-2017-1002025.md): Vulnerability in wordpress plugin add-edit-delete-listing-for-member-module v1.0, The plugin author does not sanitize user supplied input… (no CVSS, Romal Patel add-edit-delete-listing-for-member-module)
- [CVE-2017-1002026](https://cve.now/CVE-2017-1002026.md): Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function edit\_event\_category does not sanitize user-supplied input… (no CVSS, Event Espresso Event Expresso Free)
- [CVE-2017-1002027](https://cve.now/CVE-2017-1002027.md): Vulnerability in wordpress plugin rk-responsive-contact-form v1.0, The variable $delid isn't sanitized before being passed into an SQL… (no CVSS, rkdevelopers rk-responsive-contact-form)
- [CVE-2017-1002028](https://cve.now/CVE-2017-1002028.md): Vulnerability in wordpress plugin wordpress-gallery-transformation v1.0, SQL injection is in… (no CVSS, Angry Byte wordpress-gallery-transformation)
- [CVE-2017-1002100](https://cve.now/CVE-2017-1002100.md): Default access permissions for Persistent Volumes (PVs) created by the Kubernetes Azure cloud provider in versions 1.6.0 to 1.6.5 are set… (no CVSS, Kubernetes)
- [CVE-2017-1002150](https://cve.now/CVE-2017-1002150.md): python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF protection (no CVSS, Fedora Project Infrastructure Python-Fedora · python-fedora)
- [CVE-2017-1002151](https://cve.now/CVE-2017-1002151.md): Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization (no CVSS, Pagure Project Pagure)
- [CVE-2017-12893](https://cve.now/CVE-2017-12893.md): The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name\_len(). (CVSS 9.8)
- [CVE-2017-12894](https://cve.now/CVE-2017-12894.md): Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup\_bytestring(). (CVSS 9.8)
- [CVE-2017-12895](https://cve.now/CVE-2017-12895.md): The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp\_print(). (CVSS 9.8)
- [CVE-2017-12896](https://cve.now/CVE-2017-12896.md): The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp\_rfc3948\_print(). (CVSS 9.8)
- [CVE-2017-12897](https://cve.now/CVE-2017-12897.md): The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns\_print(). (CVSS 9.8)
- [CVE-2017-12898](https://cve.now/CVE-2017-12898.md): The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp\_reply(). (CVSS 9.8)
- [CVE-2017-12899](https://cve.now/CVE-2017-12899.md): The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet\_print(). (CVSS 9.8)
- [CVE-2017-12900](https://cve.now/CVE-2017-12900.md): Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf(). (no CVSS)
- [CVE-2017-12901](https://cve.now/CVE-2017-12901.md): The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp\_print(). (CVSS 9.8)
- [CVE-2017-12902](https://cve.now/CVE-2017-12902.md): The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions. (CVSS 9.8)
- [CVE-2017-12985](https://cve.now/CVE-2017-12985.md): The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6\_print(). (CVSS 9.8)
- [CVE-2017-12986](https://cve.now/CVE-2017-12986.md): The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6\_print(). (no CVSS)
- [CVE-2017-12987](https://cve.now/CVE-2017-12987.md): The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802\_11.c:parse\_elements(). (no CVSS)
- [CVE-2017-12988](https://cve.now/CVE-2017-12988.md): The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet\_parse(). (no CVSS)
- [CVE-2017-12989](https://cve.now/CVE-2017-12989.md): The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp\_get\_length(). (no CVSS)
- [CVE-2017-12990](https://cve.now/CVE-2017-12990.md): The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions. (CVSS 9.8)
- [CVE-2017-12991](https://cve.now/CVE-2017-12991.md): The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp\_attr\_print(). (no CVSS)
- [CVE-2017-12992](https://cve.now/CVE-2017-12992.md): The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng\_print(). (CVSS 9.8)
- [CVE-2017-12993](https://cve.now/CVE-2017-12993.md): The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions. (CVSS 9.8)
- [CVE-2017-12994](https://cve.now/CVE-2017-12994.md): The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp\_attr\_print(). (CVSS 9.8)
- [CVE-2017-12995](https://cve.now/CVE-2017-12995.md): The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns\_print(). (CVSS 9.8)
- [CVE-2017-12996](https://cve.now/CVE-2017-12996.md): The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2\_print(). (CVSS 9.8)
- [CVE-2017-12997](https://cve.now/CVE-2017-12997.md): The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp\_private\_8021\_print(). (CVSS 9.8)
- [CVE-2017-12998](https://cve.now/CVE-2017-12998.md): The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis\_print\_extd\_ip\_reach(). (no CVSS)
- [CVE-2017-12999](https://cve.now/CVE-2017-12999.md): The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis\_print(). (no CVSS)
- [CVE-2017-13000](https://cve.now/CVE-2017-13000.md): The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802\_15\_4.c:ieee802\_15\_4\_if\_print(). (CVSS 9.8)
- [CVE-2017-13001](https://cve.now/CVE-2017-13001.md): The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs\_printfh(). (CVSS 9.8)
- [CVE-2017-13002](https://cve.now/CVE-2017-13002.md): The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv\_extension(). (CVSS 9.8)
- [CVE-2017-13003](https://cve.now/CVE-2017-13003.md): The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp\_print(). (no CVSS)
- [CVE-2017-13004](https://cve.now/CVE-2017-13004.md): The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper\_parse\_header(). (no CVSS)
- [CVE-2017-13005](https://cve.now/CVE-2017-13005.md): The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid\_map\_enter(). (no CVSS)
- [CVE-2017-13006](https://cve.now/CVE-2017-13006.md): The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions. (CVSS 9.8)
- [CVE-2017-13007](https://cve.now/CVE-2017-13007.md): The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap\_if\_print(). (no CVSS)
- [CVE-2017-13008](https://cve.now/CVE-2017-13008.md): The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802\_11.c:parse\_elements(). (no CVSS)
- [CVE-2017-13009](https://cve.now/CVE-2017-13009.md): The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility\_print(). (no CVSS)
- [CVE-2017-13010](https://cve.now/CVE-2017-13010.md): The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l\_strnstart(). (CVSS 9.8)
- [CVE-2017-13011](https://cve.now/CVE-2017-13011.md): Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str\_internal(). (no CVSS)
- [CVE-2017-13012](https://cve.now/CVE-2017-13012.md): The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp\_print(). (no CVSS)
- [CVE-2017-13013](https://cve.now/CVE-2017-13013.md): The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions. (CVSS 9.8)
- [CVE-2017-13014](https://cve.now/CVE-2017-13014.md): The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb\_prep(), several functions. (CVSS 9.8)
- [CVE-2017-13015](https://cve.now/CVE-2017-13015.md): The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap\_print(). (CVSS 9.8)
- [CVE-2017-13016](https://cve.now/CVE-2017-13016.md): The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis\_print(). (CVSS 9.8)
- [CVE-2017-13017](https://cve.now/CVE-2017-13017.md): The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt\_print(). (CVSS 9.8)
- [CVE-2017-13018](https://cve.now/CVE-2017-13018.md): The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm\_print(). (no CVSS)
- [CVE-2017-13019](https://cve.now/CVE-2017-13019.md): The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm\_print(). (CVSS 9.8)
- [CVE-2017-13020](https://cve.now/CVE-2017-13020.md): The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp\_print(). (CVSS 9.8)
- [CVE-2017-13021](https://cve.now/CVE-2017-13021.md): The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6\_print(). (CVSS 9.8)
- [CVE-2017-13022](https://cve.now/CVE-2017-13022.md): The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip\_printroute(). (CVSS 9.8)
- [CVE-2017-13023](https://cve.now/CVE-2017-13023.md): The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility\_opt\_print(). (no CVSS)
- [CVE-2017-13024](https://cve.now/CVE-2017-13024.md): The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility\_opt\_print(). (CVSS 9.8)
- [CVE-2017-13025](https://cve.now/CVE-2017-13025.md): The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility\_opt\_print(). (CVSS 9.8)
- [CVE-2017-13026](https://cve.now/CVE-2017-13026.md): The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions. (no CVSS)
- [CVE-2017-13027](https://cve.now/CVE-2017-13027.md): The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp\_mgmt\_addr\_tlv\_print(). (CVSS 9.8)
- [CVE-2017-13028](https://cve.now/CVE-2017-13028.md): The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp\_print(). (CVSS 9.8)
- [CVE-2017-13029](https://cve.now/CVE-2017-13029.md): The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print\_ccp\_config\_options(). (no CVSS)
- [CVE-2017-13030](https://cve.now/CVE-2017-13030.md): The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions. (no CVSS)
- [CVE-2017-13031](https://cve.now/CVE-2017-13031.md): The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6\_print(). (CVSS 9.8)
- [CVE-2017-13032](https://cve.now/CVE-2017-13032.md): The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print\_attr\_string(). (no CVSS)
- [CVE-2017-13033](https://cve.now/CVE-2017-13033.md): The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp\_print(). (no CVSS)
- [CVE-2017-13034](https://cve.now/CVE-2017-13034.md): The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm\_print(). (CVSS 9.8)
- [CVE-2017-13035](https://cve.now/CVE-2017-13035.md): The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis\_print\_id(). (CVSS 9.8)
- [CVE-2017-13036](https://cve.now/CVE-2017-13036.md): The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6\_decode\_v3(). (no CVSS)
- [CVE-2017-13037](https://cve.now/CVE-2017-13037.md): The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip\_printts(). (CVSS 9.8)
- [CVE-2017-13038](https://cve.now/CVE-2017-13038.md): The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle\_mlppp(). (CVSS 9.8)
- [CVE-2017-13039](https://cve.now/CVE-2017-13039.md): The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. (no CVSS)
- [CVE-2017-13040](https://cve.now/CVE-2017-13040.md): The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions. (CVSS 9.8)
- [CVE-2017-13041](https://cve.now/CVE-2017-13041.md): The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6\_nodeinfo\_print(). (CVSS 9.8)
- [CVE-2017-13042](https://cve.now/CVE-2017-13042.md): The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6\_print(). (no CVSS)
- [CVE-2017-13043](https://cve.now/CVE-2017-13043.md): The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode\_multicast\_vpn(). (no CVSS)
- [CVE-2017-13044](https://cve.now/CVE-2017-13044.md): The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4\_print(). (no CVSS)
- [CVE-2017-13045](https://cve.now/CVE-2017-13045.md): The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp\_print(). (CVSS 9.8)
- [CVE-2017-13046](https://cve.now/CVE-2017-13046.md): The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp\_attr\_print(). (no CVSS)
- [CVE-2017-13047](https://cve.now/CVE-2017-13047.md): The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis\_print(). (CVSS 9.8)
- [CVE-2017-13048](https://cve.now/CVE-2017-13048.md): The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp\_obj\_print(). (CVSS 9.8)
- [CVE-2017-13049](https://cve.now/CVE-2017-13049.md): The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik\_print(). (no CVSS)
- [CVE-2017-13050](https://cve.now/CVE-2017-13050.md): The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki\_rtr\_pdu\_print(). (CVSS 9.8)
- [CVE-2017-13051](https://cve.now/CVE-2017-13051.md): The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp\_obj\_print(). (no CVSS)
- [CVE-2017-13052](https://cve.now/CVE-2017-13052.md): The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm\_print(). (no CVSS)
- [CVE-2017-13053](https://cve.now/CVE-2017-13053.md): The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode\_rt\_routing\_info(). (CVSS 9.8)
- [CVE-2017-13054](https://cve.now/CVE-2017-13054.md): The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp\_private\_8023\_print(). (CVSS 9.8)
- [CVE-2017-13055](https://cve.now/CVE-2017-13055.md): The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis\_print\_is\_reach\_subtlv(). (CVSS 9.8)
- [CVE-2017-13687](https://cve.now/CVE-2017-13687.md): The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc\_print(). (CVSS 9.8)
- [CVE-2017-13688](https://cve.now/CVE-2017-13688.md): The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr\_print(). (CVSS 9.8)
- [CVE-2017-13689](https://cve.now/CVE-2017-13689.md): The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1\_id\_print(). (CVSS 9.8)
- [CVE-2017-13690](https://cve.now/CVE-2017-13690.md): The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. (no CVSS)
- [CVE-2017-13725](https://cve.now/CVE-2017-13725.md): The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6\_print(). (no CVSS)
- [CVE-2017-13779](https://cve.now/CVE-2017-13779.md): GSTN\_offline\_tool in India Goods and Services Tax Network (GSTN) Offline Utility tool before 1.2 executes winstart-server.vbs from the… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2017-09-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.