# CVEs published 2017-11-04 17 CVEs were published on November 4, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-16540](https://cve.now/CVE-2017-16540.md): OpenEMR before 5.0.0 Patch 5 allows unauthenticated remote database copying because setup.php exposes functionality for cloning an existing (no CVSS) - [CVE-2017-16541](https://cve.now/CVE-2017-16541.md): Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP addres (no CVSS) - [CVE-2017-16539](https://cve.now/CVE-2017-16539.md): The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attacke (CVSS 5.9, github.com/moby/moby) - [CVE-2017-16525](https://cve.now/CVE-2017-16525.md): The usb\_serial\_console\_disconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a d (no CVSS) - [CVE-2017-16526](https://cve.now/CVE-2017-16526.md): drivers/uwb/uwbd.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (general protection fault and system cr (no CVSS) - [CVE-2017-16527](https://cve.now/CVE-2017-16527.md): sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (snd\_usb\_mixer\_interrupt use-after-free (no CVSS) - [CVE-2017-16528](https://cve.now/CVE-2017-16528.md): sound/core/seq\_device.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service (snd\_rawmidi\_dev\_seq\_free use-afte (no CVSS) - [CVE-2017-16529](https://cve.now/CVE-2017-16529.md): The snd\_usb\_create\_streams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (o (no CVSS) - [CVE-2017-16530](https://cve.now/CVE-2017-16530.md): The uas driver in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system crash) or po (no CVSS) - [CVE-2017-16531](https://cve.now/CVE-2017-16531.md): drivers/usb/core/config.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service (out-of-bounds read and system c (no CVSS) - [CVE-2017-16532](https://cve.now/CVE-2017-16532.md): The get\_endpoints function in drivers/usb/misc/usbtest.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (no CVSS) - [CVE-2017-16533](https://cve.now/CVE-2017-16533.md): The usbhid\_parse function in drivers/hid/usbhid/hid-core.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service (no CVSS) - [CVE-2017-16534](https://cve.now/CVE-2017-16534.md): The cdc\_parse\_cdc\_header function in drivers/usb/core/message.c in the Linux kernel before 4.13.6 allows local users to cause a denial of se (no CVSS) - [CVE-2017-16535](https://cve.now/CVE-2017-16535.md): The usb\_get\_bos\_descriptor function in drivers/usb/core/config.c in the Linux kernel before 4.13.10 allows local users to cause a denial of (no CVSS) - [CVE-2017-16536](https://cve.now/CVE-2017-16536.md): The cx231xx\_usb\_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows local users to cause (no CVSS) - [CVE-2017-16537](https://cve.now/CVE-2017-16537.md): The imon\_probe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL (no CVSS) - [CVE-2017-16538](https://cve.now/CVE-2017-16538.md): drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (general protecti (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-11-04 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.