# CVEs published 2017-07-02

11 CVEs were published on July 2, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-10794](https://cve.now/CVE-2017-10794.md): When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer ove (no CVSS)
- [CVE-2017-10796](https://cve.now/CVE-2017-10796.md): On TP-Link NC250 devices with firmware through 1.2.1 build 170515, anyone can view video and audio without authentication via an rtsp://admi (no CVSS)
- [CVE-2017-8797](https://cve.now/CVE-2017-8797.md): The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO o (no CVSS)
- [CVE-2017-8893](https://cve.now/CVE-2017-8893.md): AeroAdmin 4.1 uses a function to copy data between two pointers where the size of the data copied is taken directly from a network packet. (no CVSS)
- [CVE-2017-8894](https://cve.now/CVE-2017-8894.md): AeroAdmin 4.1 uses an insecure protocol (HTTP) to perform software updates. (no CVSS)
- [CVE-2017-0377](https://cve.now/CVE-2017-0377.md): Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's family), which might allow (no CVSS, Tor)
- [CVE-2017-10706](https://cve.now/CVE-2017-10706.md): When Antiy Antivirus Engine before 5.0.0.05171547 scans a special ZIP archive, it crashes with a stack-based buffer overflow because a fixed (no CVSS)
- [CVE-2017-10795](https://cve.now/CVE-2017-10795.md): Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to (no CVSS, intelliants/subrion)
- [CVE-2017-10790](https://cve.now/CVE-2017-10790.md): The \_asn1\_check\_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that (no CVSS)
- [CVE-2017-10791](https://cve.now/CVE-2017-10791.md): There is an Integer overflow in the hash\_int function of the libpspp library in GNU PSPP before 0.11.0. (no CVSS)
- [CVE-2017-10792](https://cve.now/CVE-2017-10792.md): There is a NULL Pointer Dereference in the function ll\_insert() of the libpspp library in GNU PSPP before 0.11.0. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-07-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.