# CVEs published 2017-07-16

13 CVEs were published on July 16, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-11344](https://cve.now/CVE-2017-11344.md): Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT\_AC1900P, RT-AC68U, (no CVSS)
- [CVE-2017-11345](https://cve.now/CVE-2017-11345.md): Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT\_AC1900P, RT-AC68U, (no CVSS)
- [CVE-2017-11346](https://cve.now/CVE-2017-11346.md): Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of (no CVSS)
- [CVE-2017-11347](https://cve.now/CVE-2017-11347.md): Authenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated attacker to generate a PHP script with the conten (no CVSS)
- [CVE-2017-11343](https://cve.now/CVE-2017-11343.md): Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to an algorithmic compl (no CVSS)
- [CVE-2017-11335](https://cve.now/CVE-2017-11335.md): There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which causes a more than one hun (no CVSS)
- [CVE-2017-11336](https://cve.now/CVE-2017-11336.md): There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. (no CVSS)
- [CVE-2017-11337](https://cve.now/CVE-2017-11337.md): There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. (no CVSS)
- [CVE-2017-11338](https://cve.now/CVE-2017-11338.md): There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. (no CVSS)
- [CVE-2017-11339](https://cve.now/CVE-2017-11339.md): There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. (no CVSS)
- [CVE-2017-11340](https://cve.now/CVE-2017-11340.md): There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call. (no CVSS)
- [CVE-2017-11341](https://cve.now/CVE-2017-11341.md): There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. (no CVSS)
- [CVE-2017-11342](https://cve.now/CVE-2017-11342.md): There is an illegal address access in ast.cpp of LibSass 3.4.5. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-07-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.