# CVEs published 2017-04-19

23 CVEs were published on April 19, 2017: 0 critical, 1 high. Days are UTC.

- [CVE-2017-7979](https://cve.now/CVE-2017-7979.md): The cookie feature in the packet action API implementation in net/sched/act\_api.c in the Linux kernel 4.11.x through 4.11-rc7 mishandles the (no CVSS)
- [CVE-2017-7978](https://cve.now/CVE-2017-7978.md): Samsung Android devices with L(5.0/5.1), M(6.0), and N(7.x) software allow attackers to obtain sensitive information by reading a world-read (no CVSS)
- [CVE-2013-7463](https://cve.now/CVE-2013-7463.md): The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows (no CVSS, aescrypt)
- [CVE-2017-7976](https://cve.now/CVE-2017-7976.md): Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2\_image\_compose function in jbig2\_imag (no CVSS)
- [CVE-2017-7964](https://cve.now/CVE-2017-7964.md): Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to (no CVSS)
- [CVE-2017-7975](https://cve.now/CVE-2017-7975.md): Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2\_build\_huffman\_table f (no CVSS)
- [CVE-2017-7960](https://cve.now/CVE-2017-7960.md): The cr\_input\_new\_from\_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-ba (no CVSS)
- [CVE-2017-7961](https://cve.now/CVE-2017-7961.md): The cr\_tknzr\_parse\_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" (CVSS 7.8)
- [CVE-2017-7962](https://cve.now/CVE-2017-7962.md): The iwgif\_read\_image function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2017-7963](https://cve.now/CVE-2017-7963.md): The GNU Multiple Precision Arithmetic Library (GMP) interfaces for PHP through 7.1.4 allow attackers to cause a denial of service (memory co (no CVSS)
- [CVE-2014-9907](https://cve.now/CVE-2014-9907.md): coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file. (no CVSS)
- [CVE-2016-5410](https://cve.now/CVE-2016-5410.md): firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPasst (no CVSS)
- [CVE-2016-7515](https://cve.now/CVE-2016-7515.md): The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via vecto (no CVSS)
- [CVE-2016-7519](https://cve.now/CVE-2016-7519.md): The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a cra (no CVSS)
- [CVE-2016-7522](https://cve.now/CVE-2016-7522.md): The ReadPSDImage function in MagickCore/locale.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) vi (no CVSS)
- [CVE-2016-7528](https://cve.now/CVE-2016-7528.md): The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a c (no CVSS)
- [CVE-2016-7529](https://cve.now/CVE-2016-7529.md): coders/xcf.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted XCF file. (no CVSS)
- [CVE-2016-7531](https://cve.now/CVE-2016-7531.md): MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PDB file. (no CVSS)
- [CVE-2016-7533](https://cve.now/CVE-2016-7533.md): The ReadWPGImage function in coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a cra (no CVSS)
- [CVE-2016-7537](https://cve.now/CVE-2016-7537.md): MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted PDB file. (no CVSS)
- [CVE-2017-7849](https://cve.now/CVE-2017-7849.md): Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local denial of service condition due to insecure permissions when running in Ag (no CVSS)
- [CVE-2017-7850](https://cve.now/CVE-2017-7850.md): Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local privilege escalation issue due to insecure permissions when running in Age (no CVSS)
- [CVE-2017-7948](https://cve.now/CVE-2017-7948.md): Integer overflow in the mark\_curve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-04-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.