# CVEs published 2017-09-14

130 CVEs were published on September 14, 2017: 52 critical, 1 high. Days are UTC.

- [CVE-2017-0781](https://cve.now/CVE-2017-0781.md): A remote code execution vulnerability in the Android system (bluetooth). (no CVSS, Google Android)
- [CVE-2017-0782](https://cve.now/CVE-2017-0782.md): A remote code execution vulnerability in the Android system (bluetooth). (no CVSS, Google Android)
- [CVE-2017-0783](https://cve.now/CVE-2017-0783.md): A information disclosure vulnerability in the Android system (bluetooth). (no CVSS, Google Android)
- [CVE-2017-0785](https://cve.now/CVE-2017-0785.md): A information disclosure vulnerability in the Android system (bluetooth). (no CVSS, Google Android)
- [CVE-2017-2809](https://cve.now/CVE-2017-2809.md): An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. (CVSS 7.5, Tomohiro Nakamura ansible-vault · ansible-vault)
- [CVE-2017-13761](https://cve.now/CVE-2017-13761.md): The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users (no CVSS, fastly/magento2)
- [CVE-2013-7429](https://cve.now/CVE-2013-7429.md): The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url parameter to plugin\_google (no CVSS)
- [CVE-2015-7553](https://cve.now/CVE-2015-7553.md): Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink\_log module is loaded, (no CVSS)
- [CVE-2017-14482](https://cve.now/CVE-2017-14482.md): GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data containing (no CVSS)
- [CVE-2017-13067](https://cve.now/CVE-2017-13067.md): QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905 and (no CVSS, QNAP QTS Media Libary PRODUCT)
- [CVE-2017-1490](https://cve.now/CVE-2017-1490.md): An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive infor (no CVSS, IBM Jazz Reporting Service)
- [CVE-2017-1002000](https://cve.now/CVE-2017-1002000.md): Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file ./mobile-friendly-app-builder-by-easytouch (no CVSS, jenova12345 mobile-friendly-app-builder-by-easytouch)
- [CVE-2017-1002001](https://cve.now/CVE-2017-1002001.md): Vulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes unlicensed vulnerable CMS software from http://w (no CVSS, Invedion mobile-app-builder-by-wappress)
- [CVE-2017-1002002](https://cve.now/CVE-2017-1002002.md): Vulnerability in wordpress plugin webapp-builder v2.0, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com/ (no CVSS, Invedion webapp-builder)
- [CVE-2017-1002003](https://cve.now/CVE-2017-1002003.md): Vulnerability in wordpress plugin wp2android-turn-wp-site-into-android-app v1.1.4, The plugin includes unlicensed vulnerable CMS software fr (no CVSS, invedion wp2android-turn-wp-site-into-android-app)
- [CVE-2017-1002004](https://cve.now/CVE-2017-1002004.md): Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/download.php user input isn't sanitized via the id variable before addin (no CVSS, ITFlux DTracker)
- [CVE-2017-1002005](https://cve.now/CVE-2017-1002005.md): Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/delete.php user input isn't sanitized via the contact\_id variable before (no CVSS, ITFlux DTracker)
- [CVE-2017-1002006](https://cve.now/CVE-2017-1002006.md): Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save\_contact.php doesn't check that the user is authorized before injecti (no CVSS, ITFlux DTracker)
- [CVE-2017-1002007](https://cve.now/CVE-2017-1002007.md): Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save\_mail.php doesn't check that the user is authorized before injecting (no CVSS, ITFlux DTracker)
- [CVE-2017-1002008](https://cve.now/CVE-2017-1002008.md): Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located membership-simplified-for (no CVSS, William DeAngelis membership-simplified-for-oap-members-only)
- [CVE-2017-1002009](https://cve.now/CVE-2017-1002009.md): Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulner (no CVSS)
- [CVE-2017-1002010](https://cve.now/CVE-2017-1002010.md): Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulner (no CVSS, ontraport Membership Simplified)
- [CVE-2017-1002011](https://cve.now/CVE-2017-1002011.md): Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, There is a stored XSS vulnerability via the $value-\>gallery\_name and (no CVSS, Anblik image-gallery-with-slideshow)
- [CVE-2017-1002012](https://cve.now/CVE-2017-1002012.md): Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/admin\_setting.php the following snipp (no CVSS, Anblik image-gallery-with-slideshow)
- [CVE-2017-1002013](https://cve.now/CVE-2017-1002013.md): Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection via imgid parameter in image-gallery-with-slidesh (no CVSS, Anblik image-gallery-with-slideshow)
- [CVE-2017-1002014](https://cve.now/CVE-2017-1002014.md): Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/admin\_setting.php (no CVSS, Anblik image-gallery-with-slideshow)
- [CVE-2017-1002015](https://cve.now/CVE-2017-1002015.md): Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/admin\_setting.php (no CVSS, Anblik image-gallery-with-slideshow)
- [CVE-2017-1002016](https://cve.now/CVE-2017-1002016.md): Vulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to see if the user is au (no CVSS, daozhao flickr-picture-backup)
- [CVE-2017-1002017](https://cve.now/CVE-2017-1002017.md): Vulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn't sanitize user input to prevent a stored XSS (no CVSS, Bob Cares gift-certificate-creator)
- [CVE-2017-1002018](https://cve.now/CVE-2017-1002018.md): Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL (no CVSS, Binny V A eventr)
- [CVE-2017-1002019](https://cve.now/CVE-2017-1002019.md): Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and event\_form.php code do not sanitize input, this allows for blind SQL (no CVSS, Binny V A eventr)
- [CVE-2017-1002020](https://cve.now/CVE-2017-1002020.md): Vulnerability in wordpress plugin surveys v1.01.8, The code in survey\_form.php does not sanitize the action variable before placing it insid (no CVSS, Binny V A surveys)
- [CVE-2017-1002021](https://cve.now/CVE-2017-1002021.md): Vulnerability in wordpress plugin surveys v1.01.8, The code in individual\_responses.php does not sanitize the survey\_id variable before plac (no CVSS, Binny V A surveys)
- [CVE-2017-1002022](https://cve.now/CVE-2017-1002022.md): Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside (no CVSS, Binny V A surveys)
- [CVE-2017-1002023](https://cve.now/CVE-2017-1002023.md): Vulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before making it part of an SQL statement in file (no CVSS, Daisy Themes Easy Team Manager)
- [CVE-2017-1002024](https://cve.now/CVE-2017-1002024.md): Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload\_json.php does not check authentication before allow users to upl (no CVSS, Kind Editor)
- [CVE-2017-1002025](https://cve.now/CVE-2017-1002025.md): Vulnerability in wordpress plugin add-edit-delete-listing-for-member-module v1.0, The plugin author does not sanitize user supplied input vi (no CVSS, Romal Patel add-edit-delete-listing-for-member-module)
- [CVE-2017-1002026](https://cve.now/CVE-2017-1002026.md): Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function edit\_event\_category does not sanitize user-supplied input v (no CVSS, Event Espresso Event Expresso Free)
- [CVE-2017-1002027](https://cve.now/CVE-2017-1002027.md): Vulnerability in wordpress plugin rk-responsive-contact-form v1.0, The variable $delid isn't sanitized before being passed into an SQL query (no CVSS, rkdevelopers rk-responsive-contact-form)
- [CVE-2017-1002028](https://cve.now/CVE-2017-1002028.md): Vulnerability in wordpress plugin wordpress-gallery-transformation v1.0, SQL injection is in ./wordpress-gallery-transformation/gallery.php (no CVSS, Angry Byte wordpress-gallery-transformation)
- [CVE-2017-1002100](https://cve.now/CVE-2017-1002100.md): Default access permissions for Persistent Volumes (PVs) created by the Kubernetes Azure cloud provider in versions 1.6.0 to 1.6.5 are set to (no CVSS, Kubernetes)
- [CVE-2017-1002150](https://cve.now/CVE-2017-1002150.md): python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF protection (no CVSS, Fedora Project Infrastructure Python-Fedora · python-fedora)
- [CVE-2017-1002151](https://cve.now/CVE-2017-1002151.md): Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization (no CVSS, Pagure Project Pagure)
- [CVE-2017-12893](https://cve.now/CVE-2017-12893.md): The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name\_len(). (CVSS 9.8)
- [CVE-2017-12894](https://cve.now/CVE-2017-12894.md): Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in addrtoname.c:lookup\_bytestring(). (CVSS 9.8)
- [CVE-2017-12895](https://cve.now/CVE-2017-12895.md): The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp\_print(). (CVSS 9.8)
- [CVE-2017-12896](https://cve.now/CVE-2017-12896.md): The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:isakmp\_rfc3948\_print(). (CVSS 9.8)
- [CVE-2017-12897](https://cve.now/CVE-2017-12897.md): The ISO CLNS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isoclns\_print(). (CVSS 9.8)
- [CVE-2017-12898](https://cve.now/CVE-2017-12898.md): The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interp\_reply(). (CVSS 9.8)
- [CVE-2017-12899](https://cve.now/CVE-2017-12899.md): The DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet\_print(). (CVSS 9.8)
- [CVE-2017-12900](https://cve.now/CVE-2017-12900.md): Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf(). (no CVSS)
- [CVE-2017-12901](https://cve.now/CVE-2017-12901.md): The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrp\_print(). (CVSS 9.8)
- [CVE-2017-12902](https://cve.now/CVE-2017-12902.md): The Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several functions. (CVSS 9.8)
- [CVE-2017-12985](https://cve.now/CVE-2017-12985.md): The IPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-ip6.c:ip6\_print(). (CVSS 9.8)
- [CVE-2017-12986](https://cve.now/CVE-2017-12986.md): The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6\_print(). (no CVSS)
- [CVE-2017-12987](https://cve.now/CVE-2017-12987.md): The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802\_11.c:parse\_elements(). (no CVSS)
- [CVE-2017-12988](https://cve.now/CVE-2017-12988.md): The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet\_parse(). (no CVSS)
- [CVE-2017-12989](https://cve.now/CVE-2017-12989.md): The RESP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-resp.c:resp\_get\_length(). (no CVSS)
- [CVE-2017-12990](https://cve.now/CVE-2017-12990.md): The ISAKMP parser in tcpdump before 4.9.2 could enter an infinite loop due to bugs in print-isakmp.c, several functions. (CVSS 9.8)
- [CVE-2017-12991](https://cve.now/CVE-2017-12991.md): The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp\_attr\_print(). (no CVSS)
- [CVE-2017-12992](https://cve.now/CVE-2017-12992.md): The RIPng parser in tcpdump before 4.9.2 has a buffer over-read in print-ripng.c:ripng\_print(). (CVSS 9.8)
- [CVE-2017-12993](https://cve.now/CVE-2017-12993.md): The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions. (CVSS 9.8)
- [CVE-2017-12994](https://cve.now/CVE-2017-12994.md): The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp\_attr\_print(). (CVSS 9.8)
- [CVE-2017-12995](https://cve.now/CVE-2017-12995.md): The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns\_print(). (CVSS 9.8)
- [CVE-2017-12996](https://cve.now/CVE-2017-12996.md): The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2\_print(). (CVSS 9.8)
- [CVE-2017-12997](https://cve.now/CVE-2017-12997.md): The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp\_private\_8021\_print(). (CVSS 9.8)
- [CVE-2017-12998](https://cve.now/CVE-2017-12998.md): The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis\_print\_extd\_ip\_reach(). (no CVSS)
- [CVE-2017-12999](https://cve.now/CVE-2017-12999.md): The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis\_print(). (no CVSS)
- [CVE-2017-13000](https://cve.now/CVE-2017-13000.md): The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802\_15\_4.c:ieee802\_15\_4\_if\_print(). (CVSS 9.8)
- [CVE-2017-13001](https://cve.now/CVE-2017-13001.md): The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs\_printfh(). (CVSS 9.8)
- [CVE-2017-13002](https://cve.now/CVE-2017-13002.md): The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv\_extension(). (CVSS 9.8)
- [CVE-2017-13003](https://cve.now/CVE-2017-13003.md): The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp\_print(). (no CVSS)
- [CVE-2017-13004](https://cve.now/CVE-2017-13004.md): The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper\_parse\_header(). (no CVSS)
- [CVE-2017-13005](https://cve.now/CVE-2017-13005.md): The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid\_map\_enter(). (no CVSS)
- [CVE-2017-13006](https://cve.now/CVE-2017-13006.md): The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions. (CVSS 9.8)
- [CVE-2017-13007](https://cve.now/CVE-2017-13007.md): The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap\_if\_print(). (no CVSS)
- [CVE-2017-13008](https://cve.now/CVE-2017-13008.md): The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802\_11.c:parse\_elements(). (no CVSS)
- [CVE-2017-13009](https://cve.now/CVE-2017-13009.md): The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility\_print(). (no CVSS)
- [CVE-2017-13010](https://cve.now/CVE-2017-13010.md): The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l\_strnstart(). (CVSS 9.8)
- [CVE-2017-13011](https://cve.now/CVE-2017-13011.md): Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str\_internal(). (no CVSS)
- [CVE-2017-13012](https://cve.now/CVE-2017-13012.md): The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp\_print(). (no CVSS)
- [CVE-2017-13013](https://cve.now/CVE-2017-13013.md): The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions. (CVSS 9.8)
- [CVE-2017-13014](https://cve.now/CVE-2017-13014.md): The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb\_prep(), several functions. (CVSS 9.8)
- [CVE-2017-13015](https://cve.now/CVE-2017-13015.md): The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap\_print(). (CVSS 9.8)
- [CVE-2017-13016](https://cve.now/CVE-2017-13016.md): The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis\_print(). (CVSS 9.8)
- [CVE-2017-13017](https://cve.now/CVE-2017-13017.md): The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt\_print(). (CVSS 9.8)
- [CVE-2017-13018](https://cve.now/CVE-2017-13018.md): The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm\_print(). (no CVSS)
- [CVE-2017-13019](https://cve.now/CVE-2017-13019.md): The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm\_print(). (CVSS 9.8)
- [CVE-2017-13020](https://cve.now/CVE-2017-13020.md): The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp\_print(). (CVSS 9.8)
- [CVE-2017-13021](https://cve.now/CVE-2017-13021.md): The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6\_print(). (CVSS 9.8)
- [CVE-2017-13022](https://cve.now/CVE-2017-13022.md): The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip\_printroute(). (CVSS 9.8)
- [CVE-2017-13023](https://cve.now/CVE-2017-13023.md): The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility\_opt\_print(). (no CVSS)
- [CVE-2017-13024](https://cve.now/CVE-2017-13024.md): The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility\_opt\_print(). (CVSS 9.8)
- [CVE-2017-13025](https://cve.now/CVE-2017-13025.md): The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility\_opt\_print(). (CVSS 9.8)
- [CVE-2017-13026](https://cve.now/CVE-2017-13026.md): The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions. (no CVSS)
- [CVE-2017-13027](https://cve.now/CVE-2017-13027.md): The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp\_mgmt\_addr\_tlv\_print(). (CVSS 9.8)
- [CVE-2017-13028](https://cve.now/CVE-2017-13028.md): The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp\_print(). (CVSS 9.8)
- [CVE-2017-13029](https://cve.now/CVE-2017-13029.md): The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print\_ccp\_config\_options(). (no CVSS)
- [CVE-2017-13030](https://cve.now/CVE-2017-13030.md): The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions. (no CVSS)
- [CVE-2017-13031](https://cve.now/CVE-2017-13031.md): The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6\_print(). (CVSS 9.8)
- [CVE-2017-13032](https://cve.now/CVE-2017-13032.md): The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print\_attr\_string(). (no CVSS)
- [CVE-2017-13033](https://cve.now/CVE-2017-13033.md): The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp\_print(). (no CVSS)
- [CVE-2017-13034](https://cve.now/CVE-2017-13034.md): The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm\_print(). (CVSS 9.8)
- [CVE-2017-13035](https://cve.now/CVE-2017-13035.md): The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis\_print\_id(). (CVSS 9.8)
- [CVE-2017-13036](https://cve.now/CVE-2017-13036.md): The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6\_decode\_v3(). (no CVSS)
- [CVE-2017-13037](https://cve.now/CVE-2017-13037.md): The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip\_printts(). (CVSS 9.8)
- [CVE-2017-13038](https://cve.now/CVE-2017-13038.md): The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle\_mlppp(). (CVSS 9.8)
- [CVE-2017-13039](https://cve.now/CVE-2017-13039.md): The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. (no CVSS)
- [CVE-2017-13040](https://cve.now/CVE-2017-13040.md): The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions. (CVSS 9.8)
- [CVE-2017-13041](https://cve.now/CVE-2017-13041.md): The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6\_nodeinfo\_print(). (CVSS 9.8)
- [CVE-2017-13042](https://cve.now/CVE-2017-13042.md): The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6\_print(). (no CVSS)
- [CVE-2017-13043](https://cve.now/CVE-2017-13043.md): The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode\_multicast\_vpn(). (no CVSS)
- [CVE-2017-13044](https://cve.now/CVE-2017-13044.md): The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4\_print(). (no CVSS)
- [CVE-2017-13045](https://cve.now/CVE-2017-13045.md): The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp\_print(). (CVSS 9.8)
- [CVE-2017-13046](https://cve.now/CVE-2017-13046.md): The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp\_attr\_print(). (no CVSS)
- [CVE-2017-13047](https://cve.now/CVE-2017-13047.md): The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis\_print(). (CVSS 9.8)
- [CVE-2017-13048](https://cve.now/CVE-2017-13048.md): The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp\_obj\_print(). (CVSS 9.8)
- [CVE-2017-13049](https://cve.now/CVE-2017-13049.md): The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik\_print(). (no CVSS)
- [CVE-2017-13050](https://cve.now/CVE-2017-13050.md): The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki\_rtr\_pdu\_print(). (CVSS 9.8)
- [CVE-2017-13051](https://cve.now/CVE-2017-13051.md): The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp\_obj\_print(). (no CVSS)
- [CVE-2017-13052](https://cve.now/CVE-2017-13052.md): The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm\_print(). (no CVSS)
- [CVE-2017-13053](https://cve.now/CVE-2017-13053.md): The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode\_rt\_routing\_info(). (CVSS 9.8)
- [CVE-2017-13054](https://cve.now/CVE-2017-13054.md): The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp\_private\_8023\_print(). (CVSS 9.8)
- [CVE-2017-13055](https://cve.now/CVE-2017-13055.md): The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis\_print\_is\_reach\_subtlv(). (CVSS 9.8)
- [CVE-2017-13687](https://cve.now/CVE-2017-13687.md): The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc\_print(). (CVSS 9.8)
- [CVE-2017-13688](https://cve.now/CVE-2017-13688.md): The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr\_print(). (CVSS 9.8)
- [CVE-2017-13689](https://cve.now/CVE-2017-13689.md): The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1\_id\_print(). (CVSS 9.8)
- [CVE-2017-13690](https://cve.now/CVE-2017-13690.md): The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. (no CVSS)
- [CVE-2017-13725](https://cve.now/CVE-2017-13725.md): The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6\_print(). (no CVSS)
- [CVE-2017-13779](https://cve.now/CVE-2017-13779.md): GSTN\_offline\_tool in India Goods and Services Tax Network (GSTN) Offline Utility tool before 1.2 executes winstart-server.vbs from the "C:\\G (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-09-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.