# CVEs published 2017-05-24

17 CVEs were published on May 24, 2017: 0 critical, 7 high. Days are UTC.

- [CVE-2017-9230](https://cve.now/CVE-2017-9230.md): The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initia (CVSS 7.5)
- [CVE-2017-9224](https://cve.now/CVE-2017-9224.md): An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. (no CVSS)
- [CVE-2017-9225](https://cve.now/CVE-2017-9225.md): An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. (no CVSS)
- [CVE-2017-9226](https://cve.now/CVE-2017-9226.md): An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. (no CVSS)
- [CVE-2017-9227](https://cve.now/CVE-2017-9227.md): An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. (no CVSS)
- [CVE-2017-9228](https://cve.now/CVE-2017-9228.md): An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. (no CVSS)
- [CVE-2017-9229](https://cve.now/CVE-2017-9229.md): An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. (no CVSS)
- [CVE-2017-2798](https://cve.now/CVE-2017-2798.md): An exploitable heap corruption vulnerability exists in the GetIndexArray functionality of Antenna House DMC HTMLFilter as used by MarkLogic (CVSS 8.3, Antenna House DMC HTMLFilter)
- [CVE-2017-2799](https://cve.now/CVE-2017-2799.md): An exploitable heap corruption vulnerability exists in the AddSst functionality of Antenna House DMC HTMLFilter as used by MarkLogic 8.0-6. (CVSS 8.3, Antenna House DMC HTMLFilter)
- [CVE-2017-2800](https://cve.now/CVE-2017-2800.md): A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certif (CVSS 8.1, wolfSSL)
- [CVE-2017-2801](https://cve.now/CVE-2017-2801.md): A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead (CVSS 6.5, Randombit Botan)
- [CVE-2017-2817](https://cve.now/CVE-2017-2817.md): A stack buffer overflow vulnerability exists in the ISO parsing functionality of Power Software Ltd PowerISO 6.8. (CVSS 8.8, Power Software PowerISO)
- [CVE-2017-2819](https://cve.now/CVE-2017-2819.md): An exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom Thinkfree Office NEO (CVSS 8.8, Hancom Hangul Word Processor in Thinkfree Office NEO Trial…)
- [CVE-2017-2823](https://cve.now/CVE-2017-2823.md): A use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. (CVSS 8.8, Power Software PowerIso)
- [CVE-2017-2824](https://cve.now/CVE-2017-2824.md): An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. (no CVSS, Zabbix Server)
- [CVE-2017-9216](https://cve.now/CVE-2017-9216.md): libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2\_huffman\_get function i (no CVSS)
- [CVE-2017-9217](https://cve.now/CVE-2017-9217.md): systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty qu (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-05-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.