# CVEs published 2017-06-25

10 CVEs were published on June 25, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2015-9099](https://cve.now/CVE-2015-9099.md): The lame\_init\_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid read an (no CVSS)
- [CVE-2015-9100](https://cve.now/CVE-2015-9100.md): The fill\_buffer\_resample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (NULL pointe (no CVSS)
- [CVE-2015-9101](https://cve.now/CVE-2015-9101.md): The fill\_buffer\_resample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4 and 3.99.5 al (no CVSS)
- [CVE-2017-9869](https://cve.now/CVE-2017-9869.md): The II\_step\_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cau (no CVSS)
- [CVE-2017-9870](https://cve.now/CVE-2017-9870.md): The III\_i\_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to ca (no CVSS)
- [CVE-2017-9871](https://cve.now/CVE-2017-9871.md): The III\_i\_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to ca (no CVSS)
- [CVE-2017-9872](https://cve.now/CVE-2017-9872.md): The III\_dequantize\_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attack (no CVSS)
- [CVE-2017-9868](https://cve.now/CVE-2017-9868.md): In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT to (no CVSS)
- [CVE-2017-9865](https://cve.now/CVE-2017-9865.md): The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service (stack-based bu (no CVSS)
- [CVE-2017-9840](https://cve.now/CVE-2017-9840.md): Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution (no CVSS, dolibarr/dolibarr)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-06-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.