# CVEs published 2018-07-27

76 CVEs were published on July 27, 2018: 0 critical, 18 high. Days are UTC.

- [CVE-2016-9578](https://cve.now/CVE-2016-9578.md): A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. (CVSS 7.5, Red Hat spice)
- [CVE-2016-9603](https://cve.now/CVE-2016-9603.md): A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could… (CVSS 5.5, Qemu:)
- [CVE-2017-15118](https://cve.now/CVE-2017-15118.md): A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an… (CVSS 8.3, Qemu)
- [CVE-2016-9577](https://cve.now/CVE-2016-9577.md): A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. (CVSS 7.5, Red Hat spice)
- [CVE-2017-15097](https://cve.now/CVE-2017-15097.md): Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. (CVSS 6.5, Red Hat postgresql init script)
- [CVE-2017-15101](https://cve.now/CVE-2017-15101.md): A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. (CVSS 7.8, liblouis)
- [CVE-2017-2648](https://cve.now/CVE-2017-2648.md): It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle… (CVSS 6.8, jenkins-ssh-slaves-plugin · org.jenkins-ci.plugins:ssh-slav…)
- [CVE-2017-2649](https://cve.now/CVE-2017-2649.md): It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active… (no CVSS, Jenkins project Active Directory Jenkins plugin · org.jenki…)
- [CVE-2017-2650](https://cve.now/CVE-2017-2650.md): It was found that the use of Pipeline: Classpath Step Jenkins plugin enables a bypass of the Script Security sandbox for users with SCM… (no CVSS, Jenkins project Pipeline: Classpath Step Jenkins plugin · c…)
- [CVE-2017-2652](https://cve.now/CVE-2017-2652.md): It was found that there were no permission checks performed in the Distributed Fork plugin before and including 1.5.0 for Jenkins that… (no CVSS, Jenkins project DistFork Jenkins plugin · org.jenkins-ci.pl…)
- [CVE-2017-2663](https://cve.now/CVE-2017-2663.md): It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and… (CVSS 8.2, Red Hat subscription-manager)
- [CVE-2017-2616](https://cve.now/CVE-2017-2616.md): A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. (CVSS 5.5, util-linux)
- [CVE-2017-2618](https://cve.now/CVE-2017-2618.md): A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. (CVSS 5.5, Linux kernel)
- [CVE-2017-2620](https://cve.now/CVE-2017-2620.md): Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. (CVSS 5.5, Qemu:)
- [CVE-2017-2626](https://cve.now/CVE-2017-2626.md): It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. (CVSS 5.2, Xorg libICE)
- [CVE-2017-2629](https://cve.now/CVE-2017-2629.md): curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server's… (CVSS 4.3, curl)
- [CVE-2017-2632](https://cve.now/CVE-2017-2632.md): A logic error in valid\_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a… (CVSS 4.9, Red Hat cfme)
- [CVE-2017-2633](https://cve.now/CVE-2017-2633.md): An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. (CVSS 5.4, Qemu:)
- [CVE-2017-2634](https://cve.now/CVE-2017-2634.md): It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only… (CVSS 7.5, Linux kernel:)
- [CVE-2016-9595](https://cve.now/CVE-2016-9595.md): A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. (CVSS 7.3, Foreman katello-debug)
- [CVE-2017-2579](https://cve.now/CVE-2017-2579.md): An out-of-bounds read vulnerability was found in netpbm before 10.61. (CVSS 3.3, netpbm)
- [CVE-2017-2580](https://cve.now/CVE-2017-2580.md): An out-of-bounds write vulnerability was found in netpbm before 10.61. (CVSS 4.5, netpbm)
- [CVE-2017-2581](https://cve.now/CVE-2017-2581.md): An out-of-bounds write vulnerability was found in netpbm before 10.61. (CVSS 4.5, netpbm)
- [CVE-2017-2586](https://cve.now/CVE-2017-2586.md): A null pointer dereference vulnerability was found in netpbm before 10.61. (CVSS 3.3, netpbm)
- [CVE-2017-2587](https://cve.now/CVE-2017-2587.md): A memory allocation vulnerability was found in netpbm before 10.61. (CVSS 3.3, netpbm)
- [CVE-2017-2590](https://cve.now/CVE-2017-2590.md): A vulnerability was found in ipa before 4.4. (CVSS 8.1, Red Hat ipa)
- [CVE-2017-2614](https://cve.now/CVE-2017-2614.md): When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for the current password… (CVSS 6.8, Red Hat ovirt-engine-extension-aaa-jdbc)
- [CVE-2017-2621](https://cve.now/CVE-2017-2621.md): An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory… (CVSS 5.9, Red Hat openstack-heat)
- [CVE-2017-2623](https://cve.now/CVE-2017-2623.md): It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering. (CVSS 5.3, Project Atomic rpm-ostree,)
- [CVE-2017-2624](https://cve.now/CVE-2017-2624.md): It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. (CVSS 5.9, xorg-x11-server)
- [CVE-2017-2625](https://cve.now/CVE-2017-2625.md): It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. (CVSS 6.5, Xorg libXdmcp)
- [CVE-2017-2630](https://cve.now/CVE-2017-2630.md): A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. (CVSS 5.5, Qemu:)
- [CVE-2017-2640](https://cve.now/CVE-2017-2640.md): An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. (CVSS 7.5, pidgin)
- [CVE-2017-2646](https://cve.now/CVE-2017-2646.md): It was found that when Keycloak before 2.5.5 receives a Logout request with a Extensions in the middle of the request, the… (CVSS 7.5, Red Hat keycloak · org.keycloak:keycloak-core)
- [CVE-2017-2651](https://cve.now/CVE-2017-2651.md): jenkins-mailer-plugin before version 1.20 is vulnerable to an information disclosure while using the feature to send emails to a… (CVSS 3.7, jenkins-mailer-plugin · org.jenkins-ci.plugins:mailer)
- [CVE-2017-2653](https://cve.now/CVE-2017-2653.md): A number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed via GET requests instead of just POST… (CVSS 4.1, Red Hat CloudForms)
- [CVE-2017-2658](https://cve.now/CVE-2017-2658.md): It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization &… (CVSS 2.6, Red Hat BPMS · Red Hat JDV)
- [CVE-2017-2674](https://cve.now/CVE-2017-2674.md): JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central. (CVSS 6.1, Red Hat business-central)
- [CVE-2017-7463](https://cve.now/CVE-2017-7463.md): JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a reflected XSS via artifact upload. (CVSS 6.1, Red Hat business-central)
- [CVE-2018-1056](https://cve.now/CVE-2018-1056.md): An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. (CVSS 3.3, amadvance advancecomp:)
- [CVE-2018-10882](https://cve.now/CVE-2018-10882.md): A flaw was found in the Linux kernel's ext4 filesystem. (CVSS 4.8, \[UNKNOWN\] kernel)
- [CVE-2017-12148](https://cve.now/CVE-2017-12148.md): A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. (CVSS 8.4, Red Hat Ansible Tower)
- [CVE-2017-12173](https://cve.now/CVE-2017-12173.md): It was found that sssd's sysdb\_search\_user\_by\_upn\_res() function before 1.16.0 did not sanitize requests when querying its local cache and… (CVSS 4.3, sssd)
- [CVE-2017-15113](https://cve.now/CVE-2017-15113.md): ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. (CVSS 7.2, Red Hat ovirt-engine)
- [CVE-2017-15119](https://cve.now/CVE-2017-15119.md): The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. (CVSS 5.8, qemu)
- [CVE-2017-12165](https://cve.now/CVE-2017-12165.md): It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause… (CVSS 2.6, Red Hat undertow · io.undertow:undertow-core)
- [CVE-2017-12195](https://cve.now/CVE-2017-12195.md): A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. (CVSS 6.5, Red Hat OpenShift)
- [CVE-2017-15120](https://cve.now/CVE-2017-15120.md): An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference… (CVSS 7.5, PowerDNS pdns-recursor)
- [CVE-2017-15125](https://cve.now/CVE-2017-15125.md): A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for… (CVSS 6.5, Red Hat cloudforms)
- [CVE-2017-2595](https://cve.now/CVE-2017-2595.md): It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via… (CVSS 7.7, \[UNKNOWN\] wildfly)
- [CVE-2017-2670](https://cve.now/CVE-2017-2670.md): It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread… (CVSS 7.5, \[UNKNOWN\] undertow · io.undertow:undertow-core)
- [CVE-2017-7497](https://cve.now/CVE-2017-7497.md): The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. (CVSS 4.1, \[UNKNOWN\] CFME)
- [CVE-2017-2666](https://cve.now/CVE-2017-2666.md): It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. (CVSS 6.5, \[UNKNOWN\] undertow · io.undertow:undertow-core)
- [CVE-2017-7519](https://cve.now/CVE-2017-7519.md): In Ceph, a format string flaw was found in the way libradosstriper parses input from user. (CVSS 2.3, \[UNKNOWN\] ceph)
- [CVE-2018-10862](https://cve.now/CVE-2018-10862.md): WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted… (no CVSS, org.wildfly.core:wildfly-server)
- [CVE-2017-2622](https://cve.now/CVE-2017-2622.md): An accessibility flaw was found in the OpenStack Workflow (mistral) service where a service log directory was improperly made world… (CVSS 5.9, \[UNKNOWN\] openstack-mistral)
- [CVE-2017-2639](https://cve.now/CVE-2017-2639.md): It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA… (CVSS 6.5, \[UNKNOWN\] CloudForms)
- [CVE-2017-7470](https://cve.now/CVE-2017-7470.md): It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect… (CVSS 6.5, \[UNKNOWN\] spacewalk-backend)
- [CVE-2018-6686](https://cve.now/CVE-2018-6686.md): Drive Encryption (MDE) - Authentication Bypass vulnerability (CVSS 7.0, McAfee Drive Encryption)
- [CVE-2017-12151](https://cve.now/CVE-2017-12151.md): A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as… (CVSS 7.4, samba)
- [CVE-2017-7464](https://cve.now/CVE-2017-7464.md): It was found that the JAXP implementation used in JBoss EAP 7.0 for SAX and DOM parsing is vulnerable to certain XXE flaws. (CVSS 8.7, \[UNKNOWN\] JBoss)
- [CVE-2018-14609](https://cve.now/CVE-2018-14609.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14610](https://cve.now/CVE-2018-14610.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14611](https://cve.now/CVE-2018-14611.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14612](https://cve.now/CVE-2018-14612.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14613](https://cve.now/CVE-2018-14613.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14614](https://cve.now/CVE-2018-14614.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14615](https://cve.now/CVE-2018-14615.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14616](https://cve.now/CVE-2018-14616.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14617](https://cve.now/CVE-2018-14617.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14601](https://cve.now/CVE-2018-14601.md): An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2. (no CVSS)
- [CVE-2018-14602](https://cve.now/CVE-2018-14602.md): An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. (no CVSS)
- [CVE-2018-14603](https://cve.now/CVE-2018-14603.md): An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. (no CVSS)
- [CVE-2018-14604](https://cve.now/CVE-2018-14604.md): An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. (no CVSS)
- [CVE-2018-14605](https://cve.now/CVE-2018-14605.md): An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. (no CVSS)
- [CVE-2018-14606](https://cve.now/CVE-2018-14606.md): An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2018-07-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.