# CVEs published 2017-06-19

38 CVEs were published on June 19, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-1000364](https://cve.now/CVE-2017-1000364.md): An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can b (no CVSS)
- [CVE-2017-1000365](https://cve.now/CVE-2017-1000365.md): The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT\_STACK/RLIM\_INFINITY (1/4 of the (no CVSS)
- [CVE-2017-1000366](https://cve.now/CVE-2017-1000366.md): glibc contains a vulnerability that allows specially crafted LD\_LIBRARY\_PATH values to manipulate the heap/stack, causing them to alias, pot (no CVSS)
- [CVE-2017-1000369](https://cve.now/CVE-2017-1000369.md): Exim supports the use of multiple "-p" command line arguments which are malloc()'ed and never free()'ed, used in conjunction with other issu (no CVSS)
- [CVE-2017-1000370](https://cve.now/CVE-2017-1000370.md): The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed with 1GB of arguments o (no CVSS)
- [CVE-2017-1000371](https://cve.now/CVE-2017-1000371.md): The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT\_STACK is set to RLIM\_INFINITY and 1 Gigabyte of memory (no CVSS)
- [CVE-2017-1000372](https://cve.now/CVE-2017-1000372.md): A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution u (no CVSS)
- [CVE-2017-1000373](https://cve.now/CVE-2017-1000373.md): The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that cause (no CVSS)
- [CVE-2017-1000374](https://cve.now/CVE-2017-1000374.md): A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution us (no CVSS)
- [CVE-2017-1000375](https://cve.now/CVE-2017-1000375.md): NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily ma (no CVSS)
- [CVE-2017-1000376](https://cve.now/CVE-2017-1000376.md): libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. (no CVSS)
- [CVE-2017-1000377](https://cve.now/CVE-2017-1000377.md): An issue was discovered in the size of the default stack guard page on PAX Linux (originally from GRSecurity but shipped by other Linux vend (no CVSS)
- [CVE-2017-1000378](https://cve.now/CVE-2017-1000378.md): The NetBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes (no CVSS)
- [CVE-2017-1000379](https://cve.now/CVE-2017-1000379.md): The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped (no CVSS)
- [CVE-2017-9761](https://cve.now/CVE-2017-9761.md): The find\_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds rea (no CVSS)
- [CVE-2017-9762](https://cve.now/CVE-2017-9762.md): The cmd\_info function in libr/core/cmd\_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and appl (no CVSS)
- [CVE-2017-9763](https://cve.now/CVE-2017-9763.md): The grub\_ext2\_read\_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote (no CVSS)
- [CVE-2017-9759](https://cve.now/CVE-2017-9759.md): SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account. (no CVSS)
- [CVE-2017-9757](https://cve.now/CVE-2017-9757.md): IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell. (no CVSS)
- [CVE-2017-4984](https://cve.now/CVE-2017-4984.md): In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, an unauthenticated remote attacker may (no CVSS, EMC VNX2 versions prior to OE for File 8.1.9.211, EMC VNX1…)
- [CVE-2017-4985](https://cve.now/CVE-2017-4985.md): In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user may potentia (no CVSS, EMC VNX2 versions prior to OE for File 8.1.9.211, EMC VNX1…)
- [CVE-2017-4987](https://cve.now/CVE-2017-4987.md): In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user can load a m (no CVSS, EMC VNX2 versions prior to OE for File 8.1.9.211, EMC VNX1…)
- [CVE-2017-9730](https://cve.now/CVE-2017-9730.md): SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2017-9742](https://cve.now/CVE-2017-9742.md): The score\_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflo (no CVSS)
- [CVE-2017-9743](https://cve.now/CVE-2017-9743.md): The print\_insn\_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffe (no CVSS)
- [CVE-2017-9744](https://cve.now/CVE-2017-9744.md): The sh\_elf\_set\_mach\_from\_flags function in bfd/elf32-sh.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Bi (no CVSS)
- [CVE-2017-9745](https://cve.now/CVE-2017-9745.md): The \_bfd\_vms\_slurp\_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils (no CVSS)
- [CVE-2017-9746](https://cve.now/CVE-2017-9746.md): The disassemble\_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and a (no CVSS)
- [CVE-2017-9747](https://cve.now/CVE-2017-9747.md): The ieee\_archive\_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, mig (no CVSS)
- [CVE-2017-9748](https://cve.now/CVE-2017-9748.md): The ieee\_object\_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, migh (no CVSS)
- [CVE-2017-9749](https://cve.now/CVE-2017-9749.md): The \*regs\* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and applic (no CVSS)
- [CVE-2017-9750](https://cve.now/CVE-2017-9750.md): opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of (no CVSS)
- [CVE-2017-9751](https://cve.now/CVE-2017-9751.md): opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service (buf (no CVSS)
- [CVE-2017-9752](https://cve.now/CVE-2017-9752.md): bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to ca (no CVSS)
- [CVE-2017-9753](https://cve.now/CVE-2017-9753.md): The versados\_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2. (no CVSS)
- [CVE-2017-9754](https://cve.now/CVE-2017-9754.md): The process\_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, do (no CVSS)
- [CVE-2017-9755](https://cve.now/CVE-2017-9755.md): opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a den (no CVSS)
- [CVE-2017-9756](https://cve.now/CVE-2017-9756.md): The aarch64\_ext\_ldst\_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (bu (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-06-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.