# CVEs published 2017-03-24

47 CVEs were published on March 24, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-7261](https://cve.now/CVE-2017-7261.md): The vmw\_surface\_define\_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx\_surface.c in the Linux kernel through 4.10.5 does not check for a zer (no CVSS)
- [CVE-2016-10266](https://cve.now/CVE-2016-10266.md): LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, re (no CVSS)
- [CVE-2016-10267](https://cve.now/CVE-2016-10267.md): LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, re (no CVSS)
- [CVE-2016-10268](https://cve.now/CVE-2016-10268.md): tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or (no CVSS)
- [CVE-2016-10269](https://cve.now/CVE-2016-10269.md): LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remot (no CVSS)
- [CVE-2016-10270](https://cve.now/CVE-2016-10270.md): LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact v (no CVSS)
- [CVE-2016-10271](https://cve.now/CVE-2016-10271.md): tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or (no CVSS)
- [CVE-2016-10272](https://cve.now/CVE-2016-10272.md): LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact vi (no CVSS)
- [CVE-2016-10128](https://cve.now/CVE-2016-10128.md): Buffer overflow in the git\_pkt\_parse\_line function in transports/smart\_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and (no CVSS)
- [CVE-2016-10129](https://cve.now/CVE-2016-10129.md): The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL (no CVSS)
- [CVE-2016-10130](https://cve.now/CVE-2016-10130.md): The http\_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to (no CVSS)
- [CVE-2016-10132](https://cve.now/CVE-2016-10132.md): regexp.c in Artifex Software, Inc. (no CVSS)
- [CVE-2016-10133](https://cve.now/CVE-2016-10133.md): Heap-based buffer overflow in the js\_stackoverflow function in jsrun.c in Artifex Software, Inc. (no CVSS)
- [CVE-2016-10144](https://cve.now/CVE-2016-10144.md): coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check. (no CVSS)
- [CVE-2016-10145](https://cve.now/CVE-2016-10145.md): Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy. (no CVSS)
- [CVE-2016-10146](https://cve.now/CVE-2016-10146.md): Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service (memory cons (no CVSS)
- [CVE-2016-2224](https://cve.now/CVE-2016-2224.md): The \_\_decode\_dotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (infini (no CVSS)
- [CVE-2016-2225](https://cve.now/CVE-2016-2225.md): The \_\_read\_etc\_hosts\_r function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a denial of service (inf (no CVSS)
- [CVE-2016-3178](https://cve.now/CVE-2016-3178.md): The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (out-of-bounds memory (no CVSS)
- [CVE-2016-3179](https://cve.now/CVE-2016-3179.md): The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (invalid free and dae (no CVSS)
- [CVE-2016-6206](https://cve.now/CVE-2016-6206.md): Huawei AR3200 routers with software before V200R007C00SPC600 allow remote attackers to cause a denial of service or execute arbitrary code v (no CVSS)
- [CVE-2016-7797](https://cve.now/CVE-2016-7797.md): Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an (no CVSS)
- [CVE-2017-5334](https://cve.now/CVE-2017-5334.md): Double free vulnerability in the gnutls\_x509\_ext\_import\_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attacker (no CVSS)
- [CVE-2017-5335](https://cve.now/CVE-2017-5335.md): The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a d (no CVSS)
- [CVE-2017-5336](https://cve.now/CVE-2017-5336.md): Stack-based buffer overflow in the cdk\_pk\_get\_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows r (no CVSS)
- [CVE-2017-5337](https://cve.now/CVE-2017-5337.md): Multiple heap-based buffer overflows in the read\_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to (no CVSS)
- [CVE-2017-5506](https://cve.now/CVE-2017-5506.md): Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file. (no CVSS)
- [CVE-2017-5507](https://cve.now/CVE-2017-5507.md): Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service (memor (no CVSS)
- [CVE-2017-5508](https://cve.now/CVE-2017-5508.md): Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to (no CVSS)
- [CVE-2017-5509](https://cve.now/CVE-2017-5509.md): coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write (no CVSS)
- [CVE-2017-5510](https://cve.now/CVE-2017-5510.md): coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write (no CVSS)
- [CVE-2017-5511](https://cve.now/CVE-2017-5511.md): coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based b (no CVSS)
- [CVE-2017-7240](https://cve.now/CVE-2017-7240.md): An issue was discovered on Miele Professional PST10 devices. (no CVSS)
- [CVE-2017-7243](https://cve.now/CVE-2017-7243.md): Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS peer crash) by sending a "Change cipher sp (no CVSS)
- [CVE-2017-7255](https://cve.now/CVE-2017-7255.md): XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content--\>News--\>Add Article" feature via the m1\_title parameter. (no CVSS)
- [CVE-2017-7256](https://cve.now/CVE-2017-7256.md): XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content--\>News--\>Add Article" feature via the m1\_summary parameter. (no CVSS)
- [CVE-2017-7257](https://cve.now/CVE-2017-7257.md): XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content--\>News--\>Add Article" feature via the m1\_content parameter. (no CVSS)
- [CVE-2015-8556](https://cve.now/CVE-2015-8556.md): Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1. (no CVSS)
- [CVE-2015-8678](https://cve.now/CVE-2015-8678.md): The ION driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA- (no CVSS)
- [CVE-2016-10149](https://cve.now/CVE-2016-10149.md): XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML (no CVSS, pysaml2)
- [CVE-2017-5644](https://cve.now/CVE-2017-5644.md): Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted (no CVSS, Apache Software Foundation Apache POI · org.apache.poi:poi)
- [CVE-2017-5869](https://cve.now/CVE-2017-5869.md): Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to u (no CVSS)
- [CVE-2017-6087](https://cve.now/CVE-2017-6087.md): EyesOfNetwork ("EON") 5.0 and earlier allows remote authenticated users to execute arbitrary code via shell metacharacters in the selected\_e (no CVSS)
- [CVE-2017-6369](https://cve.now/CVE-2017-6369.md): Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute c (no CVSS)
- [CVE-2017-5198](https://cve.now/CVE-2017-5198.md): SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/l (no CVSS)
- [CVE-2017-5199](https://cve.now/CVE-2017-5199.md): The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /us (no CVSS)
- [CVE-2017-6507](https://cve.now/CVE-2017-6507.md): An issue was discovered in AppArmor before 2.12. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-03-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.