# CVEs published 2017-04-09 26 CVEs were published on April 9, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-7592](https://cve.now/CVE-2017-7592.md): The putagreytile function in tif\_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers t (no CVSS) - [CVE-2017-7593](https://cve.now/CVE-2017-7593.md): tif\_read.c in LibTIFF 4.0.7 does not ensure that tif\_rawdata is properly initialized, which might allow remote attackers to obtain sensitive (no CVSS) - [CVE-2017-7594](https://cve.now/CVE-2017-7594.md): The OJPEGReadHeaderInfoSecTablesDcTable function in tif\_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memor (no CVSS) - [CVE-2017-7595](https://cve.now/CVE-2017-7595.md): The JPEGSetupEncode function in tiff\_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and (no CVSS) - [CVE-2017-7596](https://cve.now/CVE-2017-7596.md): LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers (no CVSS) - [CVE-2017-7597](https://cve.now/CVE-2017-7597.md): tif\_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow (no CVSS) - [CVE-2017-7598](https://cve.now/CVE-2017-7598.md): tif\_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a (no CVSS) - [CVE-2017-7599](https://cve.now/CVE-2017-7599.md): LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers (no CVSS) - [CVE-2017-7600](https://cve.now/CVE-2017-7600.md): LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote at (no CVSS) - [CVE-2017-7601](https://cve.now/CVE-2017-7601.md): LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a (no CVSS) - [CVE-2017-7602](https://cve.now/CVE-2017-7602.md): LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly (no CVSS) - [CVE-2017-7603](https://cve.now/CVE-2017-7603.md): au\_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a signed integer overflow, which might allow remote attackers to cause a denial of (no CVSS) - [CVE-2017-7604](https://cve.now/CVE-2017-7604.md): au\_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a left-shift undefined behavior issue, which might allow remote attackers to cause (no CVSS) - [CVE-2017-7605](https://cve.now/CVE-2017-7605.md): aacplusenc.c in HE-AAC+ Codec (aka libaacplus) 2.0.2 has an assertion failure, which might allow remote attackers to cause a denial of servi (no CVSS) - [CVE-2017-7606](https://cve.now/CVE-2017-7606.md): coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which (no CVSS) - [CVE-2017-7607](https://cve.now/CVE-2017-7607.md): The handle\_gnu\_hash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-rea (no CVSS) - [CVE-2017-7608](https://cve.now/CVE-2017-7608.md): The ebl\_object\_note\_type\_name function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap- (no CVSS) - [CVE-2017-7609](https://cve.now/CVE-2017-7609.md): elf\_compress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a denial of service ( (no CVSS) - [CVE-2017-7610](https://cve.now/CVE-2017-7610.md): The check\_group function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read an (no CVSS) - [CVE-2017-7611](https://cve.now/CVE-2017-7611.md): The check\_symtab\_shndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over- (no CVSS) - [CVE-2017-7612](https://cve.now/CVE-2017-7612.md): The check\_sysv\_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-rea (no CVSS) - [CVE-2017-7613](https://cve.now/CVE-2017-7613.md): elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote attackers to cause a de (no CVSS) - [CVE-2017-7614](https://cve.now/CVE-2017-7614.md): elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null po (no CVSS) - [CVE-2017-7589](https://cve.now/CVE-2017-7589.md): In OpenIDM through 4.0.0 before 4.5.0, the info endpoint may leak sensitive information upon a request by the "anonymous" user, as demonstra (no CVSS) - [CVE-2017-7590](https://cve.now/CVE-2017-7590.md): OpenIDM through 4.0.0 and 4.5.0 is vulnerable to persistent cross-site scripting (XSS) attacks within the Admin UI, as demonstrated by a cra (no CVSS) - [CVE-2017-7591](https://cve.now/CVE-2017-7591.md): OpenIDM through 4.0.0 and 4.5.0 is vulnerable to reflected cross-site scripting (XSS) attacks within the Admin UI, as demonstrated by the \_s (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-04-09 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.