# CVEs published 2017-10-04

56 CVEs were published on October 4, 2017: 1 critical, 1 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2017-12149](https://cve.now/CVE-2017-12149.md): In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOn (CVSS 9.8, KEV, Red Hat jbossas)
- [CVE-2017-12728](https://cve.now/CVE-2017-12728.md): An Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2.02.0007 and prior. (no CVSS, SpiderControl SCADA Web Server)
- [CVE-2017-13993](https://cve.now/CVE-2017-13993.md): An Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes Management Software, Version 2.4.0 and prior version (no CVSS, i-SENS, Inc. SmartLog Diabetes Management Software)
- [CVE-2017-13995](https://cve.now/CVE-2017-13995.md): An Improper Authentication issue was discovered in iniNet Solutions iniNet Webserver, all versions prior to V2.02.0100. (no CVSS, iniNet Solutions GmbH SCADA Webserver)
- [CVE-2017-14000](https://cve.now/CVE-2017-14000.md): An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11. (no CVSS, Ctek, Inc. SkyRouter)
- [CVE-2017-15015](https://cve.now/CVE-2017-15015.md): ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c. (no CVSS)
- [CVE-2017-15016](https://cve.now/CVE-2017-15016.md): ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c. (no CVSS)
- [CVE-2017-15017](https://cve.now/CVE-2017-15017.md): ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c. (no CVSS)
- [CVE-2017-15018](https://cve.now/CVE-2017-15018.md): LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed file (no CVSS)
- [CVE-2017-15019](https://cve.now/CVE-2017-15019.md): LAME 3.99.5 has a NULL Pointer Dereference in the hip\_decode\_init function within libmp3lame/mpglib\_interface.c via a malformed mpg file, be (no CVSS)
- [CVE-2017-15020](https://cve.now/CVE-2017-15020.md): dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows re (no CVSS)
- [CVE-2017-15021](https://cve.now/CVE-2017-15021.md): bfd\_get\_debug\_link\_info\_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows (no CVSS)
- [CVE-2017-15022](https://cve.now/CVE-2017-15022.md): dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW\_AT\_name dat (no CVSS)
- [CVE-2017-15023](https://cve.now/CVE-2017-15023.md): read\_formatted\_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not p (no CVSS)
- [CVE-2017-15024](https://cve.now/CVE-2017-15024.md): find\_abstract\_instance\_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allow (no CVSS)
- [CVE-2017-15025](https://cve.now/CVE-2017-15025.md): decode\_line\_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote at (no CVSS)
- [CVE-2017-9628](https://cve.now/CVE-2017-9628.md): An Information Exposure issue was discovered in Saia Burgess Controls PCD Controllers with PCD firmware versions prior to 1.28.16 or 1.24.69 (no CVSS, Saia Burgess Controls PCD Controllers)
- [CVE-2017-1000084](https://cve.now/CVE-2017-1000084.md): Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication i (no CVSS, org.jenkins-ci.plugins:parameterized-trigger)
- [CVE-2017-1000085](https://cve.now/CVE-2017-1000085.md): Subversion Plugin connects to a user-specified Subversion repository as part of form validation (e.g. (no CVSS, org.jenkins-ci.plugins:subversion)
- [CVE-2017-1000086](https://cve.now/CVE-2017-1000086.md): The Periodic Backup Plugin did not perform any permission checks, allowing any user with Overall/Read access to change its settings, trigger (no CVSS, org.jenkins-ci.plugins:periodicbackup)
- [CVE-2017-1000087](https://cve.now/CVE-2017-1000087.md): GitHub Branch Source provides a list of applicable credential IDs to allow users configuring a job to select the one they'd like to use. (no CVSS, org.jenkins-ci.plugins:github-branch-source)
- [CVE-2017-1000088](https://cve.now/CVE-2017-1000088.md): The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. (no CVSS, org.jenkins-ci.plugins:sidebar-link)
- [CVE-2017-1000089](https://cve.now/CVE-2017-1000089.md): Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in (no CVSS, org.jenkins-ci.plugins:pipeline-build-step)
- [CVE-2017-1000090](https://cve.now/CVE-2017-1000090.md): Role-based Authorization Strategy Plugin was not requiring requests to its API be sent via POST, thereby opening itself to Cross-Site Reques (no CVSS, org.jenkins-ci.plugins:role-strategy)
- [CVE-2017-1000091](https://cve.now/CVE-2017-1000091.md): GitHub Branch Source Plugin connects to a user-specified GitHub API URL (e.g. (no CVSS, org.jenkins-ci.plugins:github-branch-source)
- [CVE-2017-1000092](https://cve.now/CVE-2017-1000092.md): Git Plugin connects to a user-specified Git repository as part of form validation. (no CVSS, org.jenkins-ci.plugins:git)
- [CVE-2017-1000093](https://cve.now/CVE-2017-1000093.md): Poll SCM Plugin was not requiring requests to its API be sent via POST, thereby opening itself to Cross-Site Request Forgery attacks. (no CVSS, org.jenkins-ci.plugins:pollscm)
- [CVE-2017-1000094](https://cve.now/CVE-2017-1000094.md): Docker Commons Plugin provides a list of applicable credential IDs to allow users configuring a job to select the one they'd like to use to (no CVSS, org.jenkins-ci.plugins:docker-commons)
- [CVE-2017-1000095](https://cve.now/CVE-2017-1000095.md): The default whitelist included the following unsafe entries: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt( (no CVSS, org.jenkins-ci.plugins:script-security)
- [CVE-2017-1000096](https://cve.now/CVE-2017-1000096.md): Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pi (no CVSS, org.jenkins-ci.plugins.workflow:workflow-cps)
- [CVE-2017-1000097](https://cve.now/CVE-2017-1000097.md): On Darwin, user's trust preferences for root certificates were not honored. (no CVSS, stdlib)
- [CVE-2017-1000098](https://cve.now/CVE-2017-1000098.md): The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "m (no CVSS, stdlib)
- [CVE-2017-1000099](https://cve.now/CVE-2017-1000099.md): When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data about the file using HTTP-like headers. (no CVSS)
- [CVE-2017-1000100](https://cve.now/CVE-2017-1000100.md): When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 bytes), the file name (CVSS 6.5)
- [CVE-2017-1000101](https://cve.now/CVE-2017-1000101.md): curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those numbers to do a sequence of (CVSS 6.5)
- [CVE-2017-1000102](https://cve.now/CVE-2017-1000102.md): The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Maliciou (no CVSS, org.jvnet.hudson.plugins:analysis-core)
- [CVE-2017-1000103](https://cve.now/CVE-2017-1000103.md): The custom Details view of the Static Analysis Utilities based DRY Plugin, was vulnerable to a persisted cross-site scripting vulnerability: (no CVSS, org.jvnet.hudson.plugins:dry)
- [CVE-2017-1000104](https://cve.now/CVE-2017-1000104.md): The Config File Provider Plugin is used to centrally manage configuration files that often include secrets, such as passwords. (no CVSS, org.jenkins-ci.plugins:config-file-provider)
- [CVE-2017-1000105](https://cve.now/CVE-2017-1000105.md): The optional Run/Artifacts permission can be enabled by setting a Java system property. (no CVSS, io.jenkins.blueocean:blueocean)
- [CVE-2017-1000106](https://cve.now/CVE-2017-1000106.md): Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches co (no CVSS, io.jenkins.blueocean:blueocean)
- [CVE-2017-1000107](https://cve.now/CVE-2017-1000107.md): Script Security Plugin did not apply sandboxing restrictions to constructor invocations via positional arguments list, super constructor inv (no CVSS, org.jenkins-ci.plugins:script-security)
- [CVE-2017-1000108](https://cve.now/CVE-2017-1000108.md): The Pipeline: Input Step Plugin by default allowed users with Item/Read access to a pipeline to interact with the step to provide input. (no CVSS, org.jenkins-ci.plugins:pipeline-input-step)
- [CVE-2017-1000109](https://cve.now/CVE-2017-1000109.md): The custom Details view of the Static Analysis Utilities based OWASP Dependency-Check Plugin, was vulnerable to a persisted cross-site scrip (no CVSS, org.jenkins-ci.plugins:dependency-check-jenkins-plugin)
- [CVE-2017-1000110](https://cve.now/CVE-2017-1000110.md): Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches co (no CVSS, io.jenkins.blueocean:blueocean)
- [CVE-2017-1000111](https://cve.now/CVE-2017-1000111.md): Linux kernel: heap out-of-bounds in AF\_PACKET sockets. (no CVSS)
- [CVE-2017-1000112](https://cve.now/CVE-2017-1000112.md): Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. (no CVSS)
- [CVE-2017-1000113](https://cve.now/CVE-2017-1000113.md): The Deploy to container Plugin stored passwords unencrypted as part of its configuration. (no CVSS, org.jenkins-ci.plugins:deploy)
- [CVE-2017-1000114](https://cve.now/CVE-2017-1000114.md): The Datadog Plugin stores an API key to access the Datadog service in the global Jenkins configuration. (no CVSS, org.datadog.jenkins.plugins:datadog)
- [CVE-2017-1000115](https://cve.now/CVE-2017-1000115.md): Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to modify files outside the reposito (no CVSS, mercurial)
- [CVE-2017-1000116](https://cve.now/CVE-2017-1000116.md): Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks. (no CVSS, mercurial)
- [CVE-2017-1000117](https://cve.now/CVE-2017-1000117.md): A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any prog (no CVSS)
- [CVE-2017-1000118](https://cve.now/CVE-2017-1000118.md): Akka HTTP versions \<= 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service (no CVSS, com.typesafe.akka:akka-http-core\_2.12 · com.typesafe.akka:a…)
- [CVE-2017-1000119](https://cve.now/CVE-2017-1000119.md): October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other a (no CVSS, october/cms)
- [CVE-2017-1000120](https://cve.now/CVE-2017-1000120.md): \[ERPNext\]\[Frappe Version \<= 7.1.27\] SQL injection vulnerability in frappe.share.get\_users allows remote authenticated users to execute arbit (no CVSS)
- [CVE-2017-1000253](https://cve.now/CVE-2017-1000253.md): Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (CVSS 7.8, KEV)
- [CVE-2017-11122](https://cve.now/CVE-2017-11122.md): On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56, an attacker can trigger an information leak due to insufficient length validation, rela (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-10-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.