# CVEs published 2017-01-28

45 CVEs were published on January 28, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-5608](https://cve.now/CVE-2017-5608.md): Cross-site scripting (XSS) vulnerability in the image upload function in Piwigo before 2.8.6 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2017-5609](https://cve.now/CVE-2017-5609.md): SQL injection vulnerability in include/functions\_entries.inc.php in Serendipity 2.0.5 allows remote authenticated users to execute arbitrary (no CVSS)
- [CVE-2016-9553](https://cve.now/CVE-2016-9553.md): The Sophos Web Appliance (version 4.2.1.3) is vulnerable to two Remote Command Injection vulnerabilities affecting its web administrative in (no CVSS)
- [CVE-2016-9554](https://cve.now/CVE-2016-9554.md): The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in i (no CVSS)
- [CVE-2016-7922](https://cve.now/CVE-2016-7922.md): The AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah\_print(). (no CVSS)
- [CVE-2016-7923](https://cve.now/CVE-2016-7923.md): The ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp\_print(). (no CVSS)
- [CVE-2016-7924](https://cve.now/CVE-2016-7924.md): The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam\_print(). (no CVSS)
- [CVE-2016-7925](https://cve.now/CVE-2016-7925.md): The compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c:sl\_if\_print(). (no CVSS)
- [CVE-2016-7926](https://cve.now/CVE-2016-7926.md): The Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c:ethertype\_print(). (no CVSS)
- [CVE-2016-7927](https://cve.now/CVE-2016-7927.md): The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802\_11.c:ieee802\_11\_radio\_print(). (no CVSS)
- [CVE-2016-7928](https://cve.now/CVE-2016-7928.md): The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp\_print(). (no CVSS)
- [CVE-2016-7929](https://cve.now/CVE-2016-7929.md): The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper\_parse\_header(). (no CVSS)
- [CVE-2016-7930](https://cve.now/CVE-2016-7930.md): The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc\_print(). (no CVSS)
- [CVE-2016-7931](https://cve.now/CVE-2016-7931.md): The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls\_print(). (no CVSS)
- [CVE-2016-7932](https://cve.now/CVE-2016-7932.md): The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2\_check\_checksum(). (no CVSS)
- [CVE-2016-7933](https://cve.now/CVE-2016-7933.md): The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp\_hdlc\_if\_print(). (no CVSS)
- [CVE-2016-7934](https://cve.now/CVE-2016-7934.md): The RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcp\_print(). (no CVSS)
- [CVE-2016-7935](https://cve.now/CVE-2016-7935.md): The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp\_print(). (no CVSS)
- [CVE-2016-7936](https://cve.now/CVE-2016-7936.md): The UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp\_print(). (no CVSS)
- [CVE-2016-7937](https://cve.now/CVE-2016-7937.md): The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat\_print(). (no CVSS)
- [CVE-2016-7938](https://cve.now/CVE-2016-7938.md): The ZeroMQ parser in tcpdump before 4.9.0 has an integer overflow in print-zeromq.c:zmtp1\_print\_frame(). (no CVSS)
- [CVE-2016-7939](https://cve.now/CVE-2016-7939.md): The GRE parser in tcpdump before 4.9.0 has a buffer overflow in print-gre.c, multiple functions. (no CVSS)
- [CVE-2016-7940](https://cve.now/CVE-2016-7940.md): The STP parser in tcpdump before 4.9.0 has a buffer overflow in print-stp.c, multiple functions. (no CVSS)
- [CVE-2016-7973](https://cve.now/CVE-2016-7973.md): The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions. (no CVSS)
- [CVE-2016-7974](https://cve.now/CVE-2016-7974.md): The IP parser in tcpdump before 4.9.0 has a buffer overflow in print-ip.c, multiple functions. (no CVSS)
- [CVE-2016-7975](https://cve.now/CVE-2016-7975.md): The TCP parser in tcpdump before 4.9.0 has a buffer overflow in print-tcp.c:tcp\_print(). (no CVSS)
- [CVE-2016-7983](https://cve.now/CVE-2016-7983.md): The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp\_print(). (no CVSS)
- [CVE-2016-7984](https://cve.now/CVE-2016-7984.md): The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftp\_print(). (no CVSS)
- [CVE-2016-7985](https://cve.now/CVE-2016-7985.md): The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calm\_fast\_print(). (no CVSS)
- [CVE-2016-7986](https://cve.now/CVE-2016-7986.md): The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions. (no CVSS)
- [CVE-2016-7992](https://cve.now/CVE-2016-7992.md): The Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-cip.c:cip\_if\_print(). (no CVSS)
- [CVE-2016-7993](https://cve.now/CVE-2016-7993.md): A bug in util-print.c:relts\_print() in tcpdump before 4.9.0 could cause a buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IG (no CVSS)
- [CVE-2016-8574](https://cve.now/CVE-2016-8574.md): The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15\_print(). (no CVSS)
- [CVE-2016-8575](https://cve.now/CVE-2016-8575.md): The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933\_print(), a different vulnerability than CVE-2017-5482. (no CVSS)
- [CVE-2017-5202](https://cve.now/CVE-2017-5202.md): The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp\_print(). (no CVSS)
- [CVE-2017-5203](https://cve.now/CVE-2017-5203.md): The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp\_print(). (no CVSS)
- [CVE-2017-5204](https://cve.now/CVE-2017-5204.md): The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6\_print(). (no CVSS)
- [CVE-2017-5205](https://cve.now/CVE-2017-5205.md): The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2\_e\_print(). (no CVSS)
- [CVE-2017-5341](https://cve.now/CVE-2017-5341.md): The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv\_print(). (no CVSS)
- [CVE-2017-5342](https://cve.now/CVE-2017-5342.md): In tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in pr (no CVSS)
- [CVE-2017-5482](https://cve.now/CVE-2017-5482.md): The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933\_print(), a different vulnerability than CVE-2016-8575. (no CVSS)
- [CVE-2017-5483](https://cve.now/CVE-2017-5483.md): The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1\_parse(). (no CVSS)
- [CVE-2017-5484](https://cve.now/CVE-2017-5484.md): The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig\_print(). (no CVSS)
- [CVE-2017-5485](https://cve.now/CVE-2017-5485.md): The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup\_nsap(). (no CVSS)
- [CVE-2017-5486](https://cve.now/CVE-2017-5486.md): The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp\_print(). (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-01-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.