# CVEs published 2017-07-08

8 CVEs were published on July 8, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-11108](https://cve.now/CVE-2017-11108.md): tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet da (no CVSS)
- [CVE-2017-11109](https://cve.now/CVE-2017-11109.md): Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a crafted source (aka -S) (no CVSS)
- [CVE-2017-11110](https://cve.now/CVE-2017-11110.md): The ole\_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and applicat (no CVSS)
- [CVE-2017-11111](https://cve.now/CVE-2017-11111.md): In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and applicat (no CVSS)
- [CVE-2017-11112](https://cve.now/CVE-2017-11112.md): In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append\_acs function of tinfo/parse\_entry.c. (no CVSS)
- [CVE-2017-11113](https://cve.now/CVE-2017-11113.md): In ncurses 6.0, there is a NULL Pointer Dereference in the \_nc\_parse\_entry function of tinfo/parse\_entry.c. (no CVSS)
- [CVE-2017-11107](https://cve.now/CVE-2017-11107.md): phpLDAPadmin through 1.2.3 has XSS in htdocs/entry\_chooser.php via the form, element, rdn, or container parameter. (no CVSS)
- [CVE-2017-11104](https://cve.now/CVE-2017-11104.md): Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a val (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-07-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.