# CVEs published 2017-10-14

3 CVEs were published on October 14, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-12629](https://cve.now/CVE-2017-12629.md): Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config A (no CVSS, Apache Solr before 7.1 with Apache Lucene before · org.apac…)
- [CVE-2017-15299](https://cve.now/CVE-2017-15299.md): The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add\_key for a key that already exists but is uninstantiated, which a (no CVSS)
- [CVE-2017-15298](https://cve.now/CVE-2017-15298.md): Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service (memory consumption) via a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-10-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.